$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/84a559b4-5151-3bad-87e2-a5a403a1b775.roa File: 84a559b4-5151-3bad-87e2-a5a403a1b775.roa (raw, json) Hash identifier: hruylP+hOUUwWPxyjlK+r9AJDuS2FD6haA3rO2sSbIg= Subject key identifier: 14:69:00:8A:5D:C8:0C:AE:3C:6C:26:95:78:82:AB:18:B4:D2:BC:2D Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B8512A23418B215200A370280 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/84a559b4-5151-3bad-87e2-a5a403a1b775.roa Signing time: Tue 14 Oct 2025 14:27:45 +0000 ROA not before: Tue 14 Oct 2025 14:27:45 +0000 ROA not after: Mon 12 Jan 2026 15:27:45 +0000 asID: 23473 IP address blocks: 173.230.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:12:a2:34:18:b2:15:20:0a:37:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 14 14:27:45 2025 GMT Not After : Jan 12 15:27:45 2026 GMT Subject: CN=f77b7fb9-4810-4b2b-9e34-8ed40a471f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:71:09:4e:8d:45:a7:b2:23:c8:0c:b4:88: 16:7e:79:5c:f7:55:b8:73:81:7d:23:ac:ec:a6:a7: 7a:8d:41:e1:e5:62:53:df:b6:b7:0c:6c:e3:36:96: 7b:4f:2a:2a:84:1d:f9:a4:6f:41:fe:cc:60:8b:f0: b5:37:2d:01:6f:3c:6e:ed:ab:33:c5:72:3a:af:22: 21:b7:6e:a9:72:42:17:60:8a:0a:7e:45:42:f7:bb: bd:59:3d:40:4f:cc:bb:46:96:27:bb:ae:98:0b:45: 8f:e3:d7:12:5e:d4:b0:d5:5e:1a:f0:01:b7:37:b2: d3:9f:14:a4:c8:c2:86:e3:65:db:fa:18:7c:de:31: 78:ce:1a:35:bb:77:6e:7c:bb:7a:e7:36:e0:8d:4c: e6:cb:02:40:1b:f6:4e:53:d1:87:07:23:47:90:15: 01:4b:d9:fb:7b:06:b7:96:fd:dd:e3:e2:e4:70:f4: 92:ab:0a:33:e9:45:48:50:90:bd:1b:36:36:12:59: 14:49:45:7b:9a:c0:70:55:a4:f6:84:c6:71:1c:5a: 5b:f2:9a:52:cf:c4:59:30:29:0d:bd:9e:88:90:b5: b8:37:55:5d:f5:f0:11:ca:eb:e4:f9:d9:53:fc:d8: 3c:bb:b3:7e:df:f0:36:f1:84:5c:e7:dd:68:57:f3: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:69:00:8A:5D:C8:0C:AE:3C:6C:26:95:78:82:AB:18:B4:D2:BC:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/84a559b4-5151-3bad-87e2-a5a403a1b775.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:52:15:f5:7d:27:97:04:69:64:a5:4a:92:40:0b:61:7b:09: 77:3b:2b:07:12:7e:95:0b:5e:02:f8:14:b6:f5:10:b7:cc:78: 61:90:82:86:39:bc:c1:8c:e4:f6:26:b3:23:89:7c:43:70:96: 35:c2:94:90:a1:b4:c2:ad:f5:b8:6a:f5:fc:6f:3d:1a:93:b7: 73:2d:33:1a:df:50:ec:d0:05:bc:9e:a4:97:d8:9d:72:8e:fd: 93:8f:f7:96:22:31:ad:ee:d4:65:15:0d:50:b6:06:50:dc:77: c2:1e:bd:4e:44:37:a1:90:9f:53:fd:e7:c4:87:c0:48:42:ee: 33:99:4e:bb:bc:c7:7a:c1:63:52:fe:93:36:9a:ac:79:cc:53: b0:8f:a1:5d:a5:c5:49:13:85:d7:4a:74:ef:8e:a1:38:2e:19: 60:8d:bd:77:c0:61:80:84:7e:fb:84:fe:47:a8:18:bc:84:9e: 2c:b4:e0:3b:76:d2:3a:bf:3b:c9:0f:50:38:8e:d5:26:2a:9e: 90:f3:5d:9b:d3:1e:9a:d9:36:41:58:2b:00:5c:de:9e:ed:fb: 0e:0a:bd:b0:d9:fc:86:56:8d:5c:71:99:b2:7b:2c:9e:c7:ef: 47:83:79:ca:8e:d3:54:65:51:27:53:ac:0c:f3:28:5f:52:9d: 31:cf:08:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFEqI0GLIVIAo3AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNDE0Mjc0NVoXDTI2MDExMjE1Mjc0NVowLzEtMCsGA1UEAxMk Zjc3YjdmYjktNDgxMC00YjJiLTllMzQtOGVkNDBhNDcxZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRpxCU6NRaeyI8gMtIgWfnlc91W4c4F9I6zs pqd6jUHh5WJT37a3DGzjNpZ7TyoqhB35pG9B/sxgi/C1Ny0Bbzxu7aszxXI6ryIh t26pckIXYIoKfkVC97u9WT1AT8y7RpYnu66YC0WP49cSXtSw1V4a8AG3N7LTnxSk yMKG42Xb+hh83jF4zho1u3dufLt65zbgjUzmywJAG/ZOU9GHByNHkBUBS9n7ewa3 lv3d4+LkcPSSqwoz6UVIUJC9GzY2ElkUSUV7msBwVaT2hMZxHFpb8ppSz8RZMCkN vZ6IkLW4N1Vd9fARyuvk+dlT/Ng8u7N+3/A28YRc591oV/NTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRpAIpdyAyuPGwmlXiCqxi00rwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODRhNTU5YjQtNTE1MS0z YmFkLTg3ZTItYTVhNDAzYTFiNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBSFfV9J5cEaWSlSpJAC2F7CXc7KwcSfpULXgL4FLb1ELfMeGGQgoY5 vMGM5PYmsyOJfENwljXClJChtMKt9bhq9fxvPRqTt3MtMxrfUOzQBbyepJfYnXKO /ZOP95YiMa3u1GUVDVC2BlDcd8IevU5EN6GQn1P958SHwEhC7jOZTru8x3rBY1L+ kzaarHnMU7CPoV2lxUkThddKdO+OoTguGWCNvXfAYYCEfvuE/keoGLyEniy04Dt2 0jq/O8kPUDiO1SYqnpDzXZvTHprZNkFYKwBc3p7t+w4KvbDZ/IZWjVxxmbJ7LJ7H 70eDecqO01RlUSdTrAzzKF9SnTHPCIM= -----END CERTIFICATE-----Generated at Mon Oct 20 20:50:19 2025 by rpki-client