$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb7919c4-4075-3e9c-948c-24fc5c66d4a2.roa File: cb7919c4-4075-3e9c-948c-24fc5c66d4a2.roa (raw, json) Hash identifier: 8T/8zO7yLsIwbx4C550myO6YEG/QB0FTJUMMAhRpqtU= Subject key identifier: 77:36:CF:AF:D7:57:44:08:BB:06:0E:63:EA:08:5F:18:C5:1C:EC:04 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584B85119A67D3F7E14EDE4CDBD0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb7919c4-4075-3e9c-948c-24fc5c66d4a2.roa Signing time: Tue 14 Oct 2025 14:25:41 +0000 ROA not before: Tue 14 Oct 2025 14:25:41 +0000 ROA not after: Mon 12 Jan 2026 15:25:41 +0000 asID: 23473 IP address blocks: 173.230.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:11:9a:67:d3:f7:e1:4e:de:4c:db:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Oct 14 14:25:41 2025 GMT Not After : Jan 12 15:25:41 2026 GMT Subject: CN=1fb9cfb0-ee72-4833-bd60-ac44964d6a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7b:0b:9b:95:72:b8:61:89:d3:38:73:5f:85: 54:a6:a4:1e:d4:8c:da:60:40:f7:21:5e:90:77:13: 55:96:2b:84:d4:0f:16:a9:b2:45:af:e1:a6:3e:77: 93:ff:fe:7a:8b:6a:00:b1:58:5a:06:55:c1:f7:53: 5b:ac:e1:ba:5e:a1:4b:9d:5d:94:e9:0a:ec:48:96: 30:d9:d1:1f:b3:cf:c9:a7:4e:b8:c1:66:6d:2a:8a: dc:d9:19:65:c1:79:8a:05:63:6e:ff:ec:ec:19:a2: bf:f9:98:86:ea:91:34:e3:39:83:bc:85:13:b6:da: 91:7c:26:d5:05:95:9a:72:c0:5e:01:17:5a:dd:68: 1e:e8:a1:35:7c:96:2c:b8:dc:4e:7d:44:5e:04:74: 47:29:9f:a1:81:41:28:c3:4f:62:e8:87:b8:74:d5: 82:4b:a0:a0:25:65:86:b0:f5:04:a7:74:b5:c2:37: f6:1d:8c:52:79:fa:7c:56:de:37:e9:b0:51:83:11: a2:26:59:e4:f8:73:d0:bb:10:9e:5d:fc:c4:c1:0c: 96:a3:c0:ec:9e:94:3b:7c:93:d2:b8:0c:dc:0d:55: 4d:75:e0:87:0a:43:fa:18:05:7f:fb:74:19:02:71: f8:b3:4b:b9:6c:38:66:d3:16:8b:c5:05:e0:09:eb: 15:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:CF:AF:D7:57:44:08:BB:06:0E:63:EA:08:5F:18:C5:1C:EC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb7919c4-4075-3e9c-948c-24fc5c66d4a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 173.230.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ad:dd:40:ed:24:1b:08:41:52:9a:8e:73:d7:16:b6:4b:cb: f0:b6:97:98:68:d3:c4:1d:6c:0c:24:d5:42:9a:24:5d:8e:f7: 3b:18:4d:a8:33:89:c1:92:5d:22:c2:50:b3:55:a1:9e:04:2a: a2:8d:bf:b7:8c:bf:96:3a:39:ab:4b:65:0b:a4:46:50:56:0c: ab:12:7b:3b:69:9b:52:12:03:77:12:12:4e:be:78:96:23:af: a8:c7:14:0c:5f:4a:e0:9c:52:bf:c8:2a:94:9c:91:17:89:b3: c7:29:7b:69:6e:f3:5b:d7:2d:3e:be:9f:3e:f0:ce:74:51:5e: 63:b4:4f:1b:29:74:ab:ea:f2:db:77:25:89:b4:2c:07:1e:9d: b5:76:7a:7b:7d:72:60:ad:24:fd:4f:10:db:97:96:e1:79:4b: a7:a9:de:4c:dd:5d:e1:fc:df:88:a5:e0:89:f4:35:8e:45:a4: a7:2a:e0:12:87:9f:2e:32:dd:bc:45:85:3e:19:94:55:a9:21: 97:63:ad:bd:2b:4a:43:43:b3:0f:bc:34:90:14:f6:80:a4:6a: c0:73:9d:a5:c2:88:47:3c:6f:b4:4c:87:4e:5d:90:87:41:5d: 6b:8f:cb:c9:91:54:3f:81:40:73:ac:9c:bc:78:7d:78:89:55: d5:08:eb:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFEZpn0/fhTt5M29AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTAxNDE0MjU0MVoXDTI2MDExMjE1MjU0MVowLzEtMCsGA1UEAxMk MWZiOWNmYjAtZWU3Mi00ODMzLWJkNjAtYWM0NDk2NGQ2YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63sLm5VyuGGJ0zhzX4VUpqQe1IzaYED3IV6Q dxNVliuE1A8WqbJFr+GmPneT//56i2oAsVhaBlXB91NbrOG6XqFLnV2U6QrsSJYw 2dEfs8/Jp064wWZtKorc2RllwXmKBWNu/+zsGaK/+ZiG6pE04zmDvIUTttqRfCbV BZWacsBeARda3Wge6KE1fJYsuNxOfUReBHRHKZ+hgUEow09i6Ie4dNWCS6CgJWWG sPUEp3S1wjf2HYxSefp8Vt436bBRgxGiJlnk+HPQuxCeXfzEwQyWo8DsnpQ7fJPS uAzcDVVNdeCHCkP6GAV/+3QZAnH4s0u5bDhm0xaLxQXgCesVFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc2z6/XV0QIuwYOY+oIXxjFHOwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2I3OTE5YzQtNDA3NS0z ZTljLTk0OGMtMjRmYzVjNjZkNGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOt3UDtJBsIQVKajnPXFrZLy/C2l5ho08QdbAwk1UKaJF2O9zsYTagz icGSXSLCULNVoZ4EKqKNv7eMv5Y6OatLZQukRlBWDKsSeztpm1ISA3cSEk6+eJYj r6jHFAxfSuCcUr/IKpSckReJs8cpe2lu81vXLT6+nz7wznRRXmO0TxspdKvq8tt3 JYm0LAcenbV2ent9cmCtJP1PENuXluF5S6ep3kzdXeH834il4In0NY5FpKcq4BKH ny4y3bxFhT4ZlFWpIZdjrb0rSkNDsw+8NJAU9oCkasBznaXCiEc8b7RMh05dkIdB XWuPy8mRVD+BQHOsnLx4fXiJVdUI67M= -----END CERTIFICATE-----Generated at Mon Oct 20 13:18:50 2025 by rpki-client