$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa File: 870afd69-134e-3a16-b55c-fb7fad5a4868.roa (raw, json) Hash identifier: +PYWm9c8XdxHXx97iuNX6dfk79tQOc2ZDXLXrl2231Y= Subject key identifier: 03:8E:DD:62:06:4C:2A:15:B2:69:E8:75:68:28:8F:F7:3B:49:21:C6 Certificate issuer: /CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3 Certificate serial: 010D0C9F4328584B821E2267340279E1C3DD6E00 Authority key identifier: 32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 401155 IP address blocks: 23.142.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:22:67:34:02:79:e1:c3:dd:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=5651864e-c119-4612-a40b-4c9657d2d1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:d9:10:b7:d4:4f:55:b3:d7:4e:e7:d6:be: f3:95:b4:52:0b:79:3d:58:4b:21:58:44:2d:f5:c6: f9:69:8c:cb:06:9f:46:45:ed:bc:c8:5a:c8:0a:51: e9:f3:c4:52:2e:ea:60:a7:b1:75:c0:8a:86:6e:61: 64:a4:ad:8e:f6:c8:ff:e1:b9:d0:ce:84:fa:24:dd: 56:14:e4:48:5b:61:cd:7b:f6:6c:d0:44:7c:81:d0: 2e:e6:f5:74:d4:08:9d:14:06:30:6f:4b:03:b1:cf: 5c:33:45:c6:b4:83:18:58:2d:a5:41:79:d3:0b:16: 54:48:19:c6:f7:77:36:f0:1a:74:46:2e:a4:f6:bb: 48:da:6f:60:6e:78:3c:54:bc:01:aa:fa:ef:e0:ca: 18:25:ef:16:c7:6c:8f:0d:c5:a3:e2:5e:4c:a2:0b: 0e:84:fd:be:4d:58:58:35:b7:52:7d:0f:b7:10:47: 70:33:6a:60:40:9c:02:5f:26:97:a5:3b:ab:27:33: 35:17:78:65:4c:8e:f3:f3:9b:db:19:4d:25:a7:5f: 24:3c:07:7f:05:0c:82:4e:d3:22:e6:a9:5a:cb:f6: ba:b3:4f:c7:9a:6c:36:8b:28:ca:be:47:40:a5:a4: c8:c3:69:09:52:76:a1:b7:54:95:36:50:db:46:c3: 8f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8E:DD:62:06:4C:2A:15:B2:69:E8:75:68:28:8F:F7:3B:49:21:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl X509v3 Authority Key Identifier: keyid:32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer sbgp-ipAddrBlock: critical IPv4: 23.142.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:20:3d:94:d6:87:3b:f2:87:88:20:cf:6f:df:bf:4b:ae:66: 9a:4f:69:65:b4:6c:70:09:08:bb:1d:45:99:3f:b9:76:0f:53: 4e:f5:ad:30:71:af:44:82:53:1a:51:76:b7:96:87:4b:4e:0c: ac:82:d2:c8:fc:96:d0:9d:6e:8e:59:76:45:47:cf:1f:f5:e3: a7:ad:37:63:9f:cb:4a:2c:3a:60:e2:81:95:c3:20:14:ba:69: cb:d5:c8:e8:de:7b:a4:d5:23:cb:da:07:1f:b5:cb:5c:df:4c: 12:48:bc:be:69:48:7e:8d:c2:91:3d:c5:3f:f9:0d:45:67:ff: 37:f9:e9:dd:f2:ab:ff:22:bc:15:fa:13:c5:a6:a6:9b:c1:eb: b3:b9:44:dd:ae:32:d7:89:12:05:81:39:82:11:48:67:b4:ff: ee:84:ae:b7:af:1c:1d:da:ee:e3:bb:61:63:5c:d7:ba:c7:c7: d0:8e:80:44:f3:4c:07:9d:2c:d9:98:9f:f6:e2:dd:a5:a4:7f: 67:4d:a7:53:35:7c:6d:f7:d6:ed:0d:0f:f2:94:f8:32:62:aa: 6f:a1:6e:96:2b:b4:e5:9b:7e:a3:f3:f2:bd:82:6f:36:7e:5e: 3a:04:4f:5c:10:c2:ca:0f:b6:84:0c:2b:40:b2:d0:d9:61:0b: d3:a2:a3:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHiJnNAJ54cPdbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFiYmFiYzMtY2FmZC00NmMwLWI5MGUtZTQ0ZDA2MWJh MmEzMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NTY1MTg2NGUtYzExOS00NjEyLWE0MGItNGM5NjU3ZDJkMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbrZELfUT1Wz107n1r7zlbRSC3k9WEshWEQt 9cb5aYzLBp9GRe28yFrIClHp88RSLupgp7F1wIqGbmFkpK2O9sj/4bnQzoT6JN1W FORIW2HNe/Zs0ER8gdAu5vV01AidFAYwb0sDsc9cM0XGtIMYWC2lQXnTCxZUSBnG 93c28Bp0Ri6k9rtI2m9gbng8VLwBqvrv4MoYJe8Wx2yPDcWj4l5MogsOhP2+TVhY NbdSfQ+3EEdwM2pgQJwCXyaXpTurJzM1F3hlTI7z85vbGU0lp18kPAd/BQyCTtMi 5qlay/a6s0/Hmmw2iyjKvkdApaTIw2kJUnaht1SVNlDbRsOPsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOO3WIGTCoVsmnodWgoj/c7SSHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYWJi YWJjMy1jYWZkLTQ2YzAtYjkwZS1lNDRkMDYxYmEyYTMvODcwYWZkNjktMTM0ZS0z YTE2LWI1NWMtZmI3ZmFkNWE0ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWFiYmFiYzMtY2FmZC00NmMwLWI5 MGUtZTQ0ZDA2MWJhMmEzL2FhYmJhYmMzLWNhZmQtNDZjMC1iOTBlLWU0NGQwNjFi YTJhMy5jcmwwHwYDVR0jBBgwFoAUMseXHUARmqMQfXxmaA8Rv3DMD6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hYWJiYWJjMy1jYWZkLTQ2YzAtYjkwZS1lNDRk MDYxYmEyYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF458MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGggPZTWhzvyh4ggz2/fv0uuZppPaWW0bHAJCLsdRZk/uXYPU071rTBx r0SCUxpRdreWh0tODKyC0sj8ltCdbo5ZdkVHzx/146etN2Ofy0osOmDigZXDIBS6 acvVyOjee6TVI8vaBx+1y1zfTBJIvL5pSH6NwpE9xT/5DUVn/zf56d3yq/8ivBX6 E8WmppvB67O5RN2uMteJEgWBOYIRSGe0/+6ErrevHB3a7uO7YWNc17rHx9COgETz TAedLNmYn/bi3aWkf2dNp1M1fG331u0ND/KU+DJiqm+hbpYrtOWbfqPz8r2CbzZ+ XjoET1wQwsoPtoQMK0Cy0NlhC9Oio2w= -----END CERTIFICATE-----Generated at Tue Oct 21 04:37:36 2025 by rpki-client