$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa File: 944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa (raw, json) Hash identifier: cZP63Uuzt7zB7fkJV8aHAyZQWSQmhSUJed0Md/c4qk0= Subject key identifier: 3B:BB:98:CE:5F:DB:94:A9:9B:7D:B9:97:D1:59:B3:B6:A2:0D:7B:AB Certificate issuer: /CN=d189c13c-82f8-4a93-80ac-c659e448dd77 Certificate serial: 010D0C9F4328584B13D6C85400A3B1C54A9E3450 Authority key identifier: 34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 401400 IP address blocks: 23.128.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c8:54:00:a3:b1:c5:4a:9e:34:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d189c13c-82f8-4a93-80ac-c659e448dd77 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=4f79253f-bb83-42b2-a752-95a72a9ec1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:af:08:0c:39:be:01:ca:bc:2d:03:88:fb: a5:f1:10:0e:d9:80:95:2c:cd:e5:2b:50:b7:d5:53: c3:71:b7:f8:85:94:bb:91:a2:72:f9:8f:c4:9f:eb: de:d5:5d:da:5f:31:4f:65:c8:ca:12:6c:92:39:0a: 0a:fa:98:0d:66:2c:6d:5f:4b:11:b9:b6:1e:88:c7: 72:7c:db:2b:79:3c:7b:da:39:d7:4b:27:54:aa:11: 5a:b9:00:ab:d9:7e:ca:fb:48:4f:07:05:db:6b:cd: 20:37:15:dd:f0:9e:93:b5:0a:a4:eb:57:00:c7:02: 3f:6c:82:7b:84:d2:f2:fd:d7:94:fc:c6:0c:a9:9b: 26:db:5a:be:ad:d0:0b:04:ec:33:c4:1e:cb:3f:bf: d0:36:61:c7:ef:b6:c1:50:29:a7:aa:9f:82:fe:85: f8:66:17:f5:70:82:3f:3c:50:23:f1:dd:c4:e9:d5: 73:42:6c:e6:cb:92:13:ea:6a:b5:da:20:98:f6:3b: ef:46:22:3b:dc:6a:dd:0f:6a:55:d7:40:f2:39:27: 3e:10:be:c8:c7:61:62:64:d7:e0:f8:7c:53:65:36: 9c:1c:9e:79:98:21:db:52:10:06:e6:a5:7d:fc:6f: b7:02:44:4a:89:0b:7c:65:45:d3:32:69:5e:2f:7d: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BB:98:CE:5F:DB:94:A9:9B:7D:B9:97:D1:59:B3:B6:A2:0D:7B:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl X509v3 Authority Key Identifier: keyid:34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer sbgp-ipAddrBlock: critical IPv4: 23.128.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:cc:95:af:a2:63:21:93:71:3c:c0:19:a1:d1:6f:c9:93:e9: 5b:5a:cb:fc:54:96:fb:41:5f:fb:cb:e5:c7:43:ce:5b:97:45: 76:27:72:a8:d7:ab:82:eb:c7:bb:2b:ca:ca:5b:3b:f8:0f:b7: 68:65:b6:06:6e:a7:c6:61:b1:83:8f:01:ca:14:08:b0:01:ac: 24:83:d9:b1:54:90:57:c5:c2:b0:cc:ec:db:d1:92:83:cf:8c: 92:ed:e8:49:a5:11:ad:e0:1e:3d:64:f1:85:cd:80:f3:de:ff: bc:d5:9d:29:06:3d:b8:68:5d:5a:a2:f5:16:bc:cb:6e:c2:25: 97:a7:62:27:bb:a5:07:e3:ac:25:ed:ee:9a:78:05:96:1a:9e: 99:a0:4d:6c:3a:8b:f2:de:a0:c1:f0:d4:aa:ce:66:0f:6f:14: cf:e6:41:d4:73:78:cd:48:38:a2:39:0c:5a:26:8b:d4:b1:35: 7c:56:0f:00:59:d0:0d:9d:f0:40:47:ec:63:79:3a:e1:2d:e1: 74:30:a0:b6:91:00:e5:d3:59:6f:4a:0b:46:a1:5a:9d:4f:3d: 31:5f:31:c8:5d:e6:f0:89:1b:f9:97:4e:00:91:a3:7d:d9:88: bf:8e:3a:44:4d:48:c2:d1:bc:db:ab:ea:91:33:d1:f5:88:6b: fd:c9:44:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1shUAKOxxUqeNFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4OWMxM2MtODJmOC00YTkzLTgwYWMtYzY1OWU0NDhk ZDc3MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NGY3OTI1M2YtYmI4My00MmIyLWE3NTItOTVhNzJhOWVjMWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpuvCAw5vgHKvC0DiPul8RAO2YCVLM3lK1C3 1VPDcbf4hZS7kaJy+Y/En+ve1V3aXzFPZcjKEmySOQoK+pgNZixtX0sRubYeiMdy fNsreTx72jnXSydUqhFauQCr2X7K+0hPBwXba80gNxXd8J6TtQqk61cAxwI/bIJ7 hNLy/deU/MYMqZsm21q+rdALBOwzxB7LP7/QNmHH77bBUCmnqp+C/oX4Zhf1cII/ PFAj8d3E6dVzQmzmy5IT6mq12iCY9jvvRiI73GrdD2pV10DyOSc+EL7Ix2FiZNfg +HxTZTacHJ55mCHbUhAG5qV9/G+3AkRKiQt8ZUXTMmleL31jfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu7mM5f25Spm325l9FZs7aiDXurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5 YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5ZTQ0OGRkNzcvOTQ0YWYwOTItOWRhZC0z NmUzLWE2YjUtNWVhMjVlMjVjYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4OWMxM2MtODJmOC00YTkzLTgw YWMtYzY1OWU0NDhkZDc3L2QxODljMTNjLTgyZjgtNGE5My04MGFjLWM2NTllNDQ4 ZGQ3Ny5jcmwwHwYDVR0jBBgwFoAUNHebP4O34C4ygPYlixA/2j3VvUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5 ZTQ0OGRkNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfMla+iYyGTcTzAGaHRb8mT6Vtay/xUlvtBX/vL5cdDzluXRXYncqjX q4Lrx7sryspbO/gPt2hltgZup8ZhsYOPAcoUCLABrCSD2bFUkFfFwrDM7NvRkoPP jJLt6EmlEa3gHj1k8YXNgPPe/7zVnSkGPbhoXVqi9Ra8y27CJZenYie7pQfjrCXt 7pp4BZYanpmgTWw6i/LeoMHw1KrOZg9vFM/mQdRzeM1IOKI5DFomi9SxNXxWDwBZ 0A2d8EBH7GN5OuEt4XQwoLaRAOXTWW9KC0ahWp1PPTFfMchd5vCJG/mXTgCRo33Z iL+OOkRNSMLRvNur6pEz0fWIa/3JRAY= -----END CERTIFICATE-----Generated at Mon Oct 20 11:06:07 2025 by rpki-client