$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/30d4d2e6-6d50-3a3a-b7ad-b723ecfc8bc2.roa File: 30d4d2e6-6d50-3a3a-b7ad-b723ecfc8bc2.roa (raw, json) Hash identifier: tBv1OBXpadJfMBA/jpWcZ5vZ4p0d6jrQwpqKQP+noVE= Subject key identifier: 00:CB:8F:5E:20:96:AA:2A:96:A2:E1:84:1A:BF:67:56:3B:39:08:46 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B85068925EEC558B24EECB8C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/30d4d2e6-6d50-3a3a-b7ad-b723ecfc8bc2.roa Signing time: Tue 14 Oct 2025 14:03:23 +0000 ROA not before: Tue 14 Oct 2025 14:03:23 +0000 ROA not after: Mon 12 Jan 2026 15:03:23 +0000 asID: 23473 IP address blocks: 173.230.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:06:89:25:ee:c5:58:b2:4e:ec:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 14 14:03:23 2025 GMT Not After : Jan 12 15:03:23 2026 GMT Subject: CN=c6861bca-ffa8-4ed0-9c03-207c9ac2f908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3a:90:3a:df:b3:fa:8a:f5:b3:37:da:21:7c: 1d:89:6b:20:b8:45:2c:1b:c5:eb:57:d4:6f:81:7c: 1f:aa:2c:c3:3a:8c:b5:2b:5d:02:f6:5c:74:b2:c6: aa:a3:ac:90:40:66:01:58:16:70:a9:96:b9:ce:d7: 1d:77:ac:a0:bf:38:cb:f1:81:b3:12:4c:43:b9:5b: e1:69:e8:c4:7c:3e:e2:16:0f:fa:22:49:d3:5f:5e: 77:b9:3e:82:44:3b:df:2e:72:9d:1b:5a:61:c1:0a: 97:40:b2:56:91:44:21:da:7b:eb:19:22:47:62:85: dd:7c:9d:b4:f9:1b:d6:2c:c3:c6:4d:8f:30:18:5d: b6:9f:52:1d:4c:3f:0d:cf:fe:76:58:e9:be:04:7e: 76:f3:bb:20:01:0d:d7:8f:fa:da:65:ff:9d:1a:32: 4f:9f:4e:a7:fb:7d:9b:6b:d5:a6:e7:4f:be:ae:f8: 93:2e:aa:15:6f:77:a5:fc:e3:bb:fa:e5:f8:b1:46: 30:2b:c0:00:9a:77:34:f3:e2:c7:83:40:22:44:cb: 07:41:62:f5:60:80:37:70:9c:06:f1:5b:ca:3f:2b: e4:2a:49:13:3d:3b:c8:28:be:8e:53:46:bf:fc:5d: e4:92:01:cc:63:d0:a0:88:a4:11:e5:03:b4:ec:4a: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CB:8F:5E:20:96:AA:2A:96:A2:E1:84:1A:BF:67:56:3B:39:08:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/30d4d2e6-6d50-3a3a-b7ad-b723ecfc8bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e2:6e:4e:01:f2:e2:73:5a:83:29:94:51:7a:34:af:be:52: f3:71:c5:51:fd:04:00:6f:63:ec:c0:35:c9:62:d2:f7:78:f5: 15:d6:24:eb:18:5e:9d:e7:50:fe:19:7f:d6:44:48:6f:37:d3: 0b:c1:2c:2e:62:f8:82:11:ab:3d:f9:ce:93:b3:7d:21:e0:ac: 95:ed:da:1e:76:2c:c6:2e:e5:cf:4b:e0:04:07:68:94:39:7e: 1a:4a:24:52:20:a8:73:a1:6d:09:51:f6:b0:aa:89:0a:c1:f9: ec:61:7b:0f:da:5d:39:37:f9:53:5d:9f:5d:a4:92:8a:e7:76: 73:37:27:2d:38:c2:5b:ee:bf:08:32:af:57:3c:0a:5e:59:2d: 7c:f1:ab:9b:f8:d9:c1:e4:7a:d2:ea:94:35:f9:e4:fb:ee:3e: ac:2d:29:89:ac:71:df:1f:7e:ab:4b:8e:19:fe:20:93:97:1f: 7d:84:83:6f:7e:98:64:57:0e:e3:a6:dc:43:52:ad:d3:5f:6e: 7b:27:c0:7e:7f:b8:ed:d0:9d:be:17:4a:23:79:ba:cf:2d:ef: fe:b4:c3:7b:47:44:15:97:81:68:95:6c:d5:b8:d2:9d:00:ff: 5d:b6:78:86:e0:ef:a8:a7:5c:42:17:23:c1:83:57:dc:6b:1f: fb:3c:73:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFBokl7sVYsk7suMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNDE0MDMyM1oXDTI2MDExMjE1MDMyM1owLzEtMCsGA1UEAxMk YzY4NjFiY2EtZmZhOC00ZWQwLTljMDMtMjA3YzlhYzJmOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTqQOt+z+or1szfaIXwdiWsguEUsG8XrV9Rv gXwfqizDOoy1K10C9lx0ssaqo6yQQGYBWBZwqZa5ztcdd6ygvzjL8YGzEkxDuVvh aejEfD7iFg/6IknTX153uT6CRDvfLnKdG1phwQqXQLJWkUQh2nvrGSJHYoXdfJ20 +RvWLMPGTY8wGF22n1IdTD8Nz/52WOm+BH5287sgAQ3Xj/raZf+dGjJPn06n+32b a9Wm50++rviTLqoVb3el/OO7+uX4sUYwK8AAmnc08+LHg0AiRMsHQWL1YIA3cJwG 8VvKPyvkKkkTPTvIKL6OU0a//F3kkgHMY9CgiKQR5QO07Epj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADLj14glqoqlqLhhBq/Z1Y7OQhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzBkNGQyZTYtNmQ1MC0z YTNhLWI3YWQtYjcyM2VjZmM4YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDibk4B8uJzWoMplFF6NK++UvNxxVH9BABvY+zANcli0vd49RXWJOsY Xp3nUP4Zf9ZESG830wvBLC5i+IIRqz35zpOzfSHgrJXt2h52LMYu5c9L4AQHaJQ5 fhpKJFIgqHOhbQlR9rCqiQrB+exhew/aXTk3+VNdn12kkorndnM3Jy04wlvuvwgy r1c8Cl5ZLXzxq5v42cHketLqlDX55PvuPqwtKYmscd8ffqtLjhn+IJOXH32Eg29+ mGRXDuOm3ENSrdNfbnsnwH5/uO3Qnb4XSiN5us8t7/60w3tHRBWXgWiVbNW40p0A /122eIbg76inXEIXI8GDV9xrH/s8c1U= -----END CERTIFICATE-----Generated at Mon Oct 20 10:21:45 2025 by rpki-client