$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/23cb2d8b-103e-3b76-beb0-ac242c4cfa70.roa File: 23cb2d8b-103e-3b76-beb0-ac242c4cfa70.roa (raw, json) Hash identifier: QRNIqYu+j3SnMCCrEK37WBQ2cblRaLbmgjhIuIo6f0g= Subject key identifier: 46:0F:75:A4:12:A7:B0:42:E0:3D:E9:A0:19:60:4A:79:60:73:5F:3C Certificate issuer: /CN=b2217366-9374-418e-b500-d6b2bd2b5759 Certificate serial: 010D0C9F4328584B87B21E5AB045EBFD2C5F7180 Authority key identifier: 74:6D:5A:4D:AB:84:6A:9C:42:A8:1F:D5:51:B3:89:64:91:E0:5C:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/23cb2d8b-103e-3b76-beb0-ac242c4cfa70.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 7029 IP address blocks: 23.187.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1e:5a:b0:45:eb:fd:2c:5f:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2217366-9374-418e-b500-d6b2bd2b5759 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=96db3e57-ddb2-40a3-82ba-d892deb974f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:49:01:cc:fc:f8:c6:0f:63:6e:1d:bc:2d:16: 70:dc:da:46:d5:4b:d9:95:03:c0:cc:fb:2f:b2:33: 47:88:d3:da:7f:55:06:39:ef:85:50:ce:f8:cc:d1: 50:d8:77:05:64:e1:ce:43:1b:be:00:c4:dd:e9:54: 5f:e3:af:f3:33:14:5a:f1:f2:b5:32:49:5c:be:fa: 14:25:cb:a8:c6:52:c1:e9:26:70:98:49:2a:88:15: c6:a5:da:c3:38:7e:72:ee:8d:62:b6:ba:ae:f6:79: 34:d4:96:b0:cb:b5:b1:49:15:e3:c3:17:3b:83:c2: f5:2b:5a:3c:9e:47:f2:5b:62:53:35:2e:52:e0:74: be:c9:9b:e2:c6:6d:a0:b1:34:84:4e:3c:c2:c3:53: a8:92:a4:9c:1f:cb:c0:28:cd:6f:4a:01:2d:a1:6c: 81:78:b8:e8:2b:63:b8:6d:c1:76:f0:56:45:1e:9e: 29:98:75:ae:b1:02:40:98:de:fb:cd:9a:d2:10:92: dd:51:3d:6d:38:81:91:c4:16:04:df:6b:2a:ed:57: 00:c9:72:92:0f:b3:8e:31:ca:0f:98:8e:07:31:48: b2:89:62:f6:14:c5:e5:05:8a:e3:7c:94:d7:ec:f1: ef:82:b8:ac:51:4f:02:4c:66:c9:99:3e:9c:c9:cf: 97:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0F:75:A4:12:A7:B0:42:E0:3D:E9:A0:19:60:4A:79:60:73:5F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/23cb2d8b-103e-3b76-beb0-ac242c4cfa70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759/b2217366-9374-418e-b500-d6b2bd2b5759.crl X509v3 Authority Key Identifier: keyid:74:6D:5A:4D:AB:84:6A:9C:42:A8:1F:D5:51:B3:89:64:91:E0:5C:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b2217366-9374-418e-b500-d6b2bd2b5759.cer sbgp-ipAddrBlock: critical IPv4: 23.187.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:fc:9f:ac:dc:70:c4:75:13:6b:26:42:c7:27:1e:67:62:d8: c9:bf:f2:d4:9e:54:af:0f:a2:25:d5:ee:3c:fb:03:c3:f4:5c: dc:2e:b4:49:14:f9:96:b2:ea:73:31:3c:61:f5:d2:d5:0d:80: 0e:43:bd:ec:c0:4d:95:14:15:ee:03:b4:19:fb:0f:b3:52:d4: a4:b6:b0:09:4b:a8:fe:57:c5:3d:15:70:86:bc:fe:ce:88:00: 2d:13:f5:11:fa:95:cd:c0:ec:70:c9:8f:09:d7:10:55:ce:ce: ea:aa:84:f7:4c:a4:5c:ac:d1:fa:4b:06:c1:0e:4a:e0:22:47: 20:6d:e5:cf:0b:92:39:79:56:21:4a:ed:5c:6c:a0:95:9a:2b: c9:f9:fb:92:48:01:a7:fd:e3:23:85:06:f1:a5:33:f1:a4:b4: 74:2b:84:bb:45:20:c4:66:65:90:4c:76:25:df:c8:6a:50:38: 46:fd:65:94:24:cc:28:93:47:3f:70:22:ad:69:cf:31:aa:ea: 97:94:c4:46:68:37:e4:d9:63:cd:de:b5:5b:1d:19:86:ff:cc: 3c:37:a0:ea:88:dc:2a:14:1f:fc:dc:a9:42:0e:ae:5c:c3:1a: eb:3c:65:66:b1:de:26:96:a3:d4:63:64:ac:1f:df:2a:22:3b: 58:61:16:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsh5asEXr/SxfcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIyMTczNjYtOTM3NC00MThlLWI1MDAtZDZiMmJkMmI1 NzU5MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk OTZkYjNlNTctZGRiMi00MGEzLTgyYmEtZDg5MmRlYjk3NGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUkBzPz4xg9jbh28LRZw3NpG1UvZlQPAzPsv sjNHiNPaf1UGOe+FUM74zNFQ2HcFZOHOQxu+AMTd6VRf46/zMxRa8fK1MklcvvoU JcuoxlLB6SZwmEkqiBXGpdrDOH5y7o1itrqu9nk01Jawy7WxSRXjwxc7g8L1K1o8 nkfyW2JTNS5S4HS+yZvixm2gsTSETjzCw1OokqScH8vAKM1vSgEtoWyBeLjoK2O4 bcF28FZFHp4pmHWusQJAmN77zZrSEJLdUT1tOIGRxBYE32sq7VcAyXKSD7OOMcoP mI4HMUiyiWL2FMXlBYrjfJTX7PHvgrisUU8CTGbJmT6cyc+X5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYPdaQSp7BC4D3poBlgSnlgc188MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iMjIx NzM2Ni05Mzc0LTQxOGUtYjUwMC1kNmIyYmQyYjU3NTkvMjNjYjJkOGItMTAzZS0z Yjc2LWJlYjAtYWMyNDJjNGNmYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjIyMTczNjYtOTM3NC00MThlLWI1 MDAtZDZiMmJkMmI1NzU5L2IyMjE3MzY2LTkzNzQtNDE4ZS1iNTAwLWQ2YjJiZDJi NTc1OS5jcmwwHwYDVR0jBBgwFoAUdG1aTauEapxCqB/VUbOJZJHgXDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iMjIxNzM2Ni05Mzc0LTQxOGUtYjUwMC1kNmIy YmQyYjU3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7tYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFr8n6zccMR1E2smQscnHmdi2Mm/8tSeVK8PoiXV7jz7A8P0XNwutEkU +Zay6nMxPGH10tUNgA5DvezATZUUFe4DtBn7D7NS1KS2sAlLqP5XxT0VcIa8/s6I AC0T9RH6lc3A7HDJjwnXEFXOzuqqhPdMpFys0fpLBsEOSuAiRyBt5c8Lkjl5ViFK 7VxsoJWaK8n5+5JIAaf94yOFBvGlM/GktHQrhLtFIMRmZZBMdiXfyGpQOEb9ZZQk zCiTRz9wIq1pzzGq6peUxEZoN+TZY83etVsdGYb/zDw3oOqI3CoUH/zcqUIOrlzD Gus8ZWax3iaWo9RjZKwf3yoiO1hhFoo= -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:11 2025 by rpki-client