$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa File: 5b544329-5f81-3c9e-8a03-9130ec07b101.roa (raw, json) Hash identifier: tyrY3OfisRUoOOdBuX5DApFRHcDA9ne0z2hnFMbor2w= Subject key identifier: 1A:38:0A:61:3D:95:5D:D6:D1:2B:97:35:BF:55:91:0D:73:74:99:7A Certificate issuer: /CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Certificate serial: 010D0C9F4328584B85B9A284C5821515B3266B00 Authority key identifier: 4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa Signing time: Tue 14 Oct 2025 20:04:14 +0000 ROA not before: Tue 14 Oct 2025 20:04:14 +0000 ROA not after: Mon 12 Jan 2026 21:04:14 +0000 asID: 401449 IP address blocks: 23.128.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:b9:a2:84:c5:82:15:15:b3:26:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d2e159b-7f9d-4fde-83eb-ff2852b127f7 Validity Not Before: Oct 14 20:04:14 2025 GMT Not After : Jan 12 21:04:14 2026 GMT Subject: CN=8fd58ed3-860c-44ed-aa6e-4375c01f7c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:d6:ce:43:36:03:b2:65:3d:3c:b0:6a:c3: d5:b1:90:d2:9e:50:d4:fa:1b:e4:b2:ef:72:0c:cb: 80:38:c8:fb:83:50:8e:86:62:80:18:62:c4:de:4d: 51:e6:4a:7f:19:3b:b6:3f:98:2c:29:7e:22:a5:32: b6:53:fc:48:bb:a0:19:fb:b3:2c:a2:86:99:c9:fc: 28:69:9f:d6:e5:a5:2b:72:56:35:43:f4:a0:0b:9c: 67:79:a9:93:1b:06:b7:f5:dc:75:41:b1:9e:1f:8d: 15:60:99:98:cb:fe:aa:d1:36:51:9a:f9:db:2f:d2: da:dd:29:70:f1:90:5e:3b:91:78:36:54:ad:96:3e: 08:6b:47:70:e6:36:23:e3:53:cc:7c:8d:59:83:eb: 7c:be:fa:7a:cd:44:34:38:5e:1c:29:14:06:9b:7e: 20:3a:c9:80:d4:1b:0d:46:76:08:b0:cc:49:15:6e: 18:be:b5:cd:2a:cd:6d:f0:50:6f:f8:82:be:28:e9: 54:64:3e:bd:6e:8a:b9:1f:bc:78:9f:46:0b:6b:cc: c3:c8:f7:4f:24:b4:9f:32:45:a2:12:9a:7c:b7:9a: 29:5a:17:72:53:24:3d:b2:aa:8a:74:60:5a:dc:60: d3:2e:ba:5c:ec:0c:01:69:d9:e3:f6:dc:bc:3d:34: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:38:0A:61:3D:95:5D:D6:D1:2B:97:35:BF:55:91:0D:73:74:99:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/5b544329-5f81-3c9e-8a03-9130ec07b101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.crl X509v3 Authority Key Identifier: keyid:4A:82:75:D7:A7:7C:40:CB:AA:EE:BD:86:14:01:53:AC:A1:C7:5D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d2e159b-7f9d-4fde-83eb-ff2852b127f7.cer sbgp-ipAddrBlock: critical IPv4: 23.128.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:1c:a3:98:12:7a:4d:ac:1d:56:65:5b:81:4a:10:9d:94:da: 80:65:5f:d3:69:ef:87:cb:3e:de:a0:61:7e:54:e4:4e:8c:2a: 12:21:6d:e0:0d:f0:48:1a:d1:43:74:d8:f1:35:05:43:cf:a0: 3c:24:ce:e6:e2:57:6a:75:e4:e7:73:dd:9c:4c:93:44:7b:24: c7:ef:0c:07:f4:8a:4f:42:9b:ef:4b:1c:4d:d5:7a:b0:f1:0c: 06:b4:ff:05:e3:45:e8:08:20:a2:87:1f:f9:02:34:73:2e:5b: d3:b7:31:69:c3:e2:1f:77:6e:c4:0a:87:47:21:3f:ec:0d:53: d0:a6:52:44:e2:34:b3:05:77:f8:6c:18:d7:02:3d:65:9c:1d: 5b:04:59:7e:34:d6:97:0a:1a:10:36:d9:a0:83:18:6a:80:2f: ad:6e:bf:4e:7b:f5:ff:83:1d:a1:fd:97:b1:f6:28:eb:e5:da: b4:c6:63:cb:51:99:e3:e9:ef:88:a1:dc:c3:dd:a4:3e:69:91: 9f:52:28:69:bc:2f:5e:db:23:ae:c2:e5:69:fc:a4:c0:e5:4d: 42:ee:b5:82:7f:5d:0d:33:e4:12:95:54:4e:c6:c9:3b:55:b4: 01:04:2f:03:cc:bd:65:fa:eb:06:b3:90:49:4b:e8:49:5b:82: 1f:25:6c:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFuaKExYIVFbMmawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQyZTE1OWItN2Y5ZC00ZmRlLTgzZWItZmYyODUyYjEy N2Y3MB4XDTI1MTAxNDIwMDQxNFoXDTI2MDExMjIxMDQxNFowLzEtMCsGA1UEAxMk OGZkNThlZDMtODYwYy00NGVkLWFhNmUtNDM3NWMwMWY3YzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GnWzkM2A7JlPTywasPVsZDSnlDU+hvksu9y DMuAOMj7g1COhmKAGGLE3k1R5kp/GTu2P5gsKX4ipTK2U/xIu6AZ+7MsooaZyfwo aZ/W5aUrclY1Q/SgC5xneamTGwa39dx1QbGeH40VYJmYy/6q0TZRmvnbL9La3Slw 8ZBeO5F4NlStlj4Ia0dw5jYj41PMfI1Zg+t8vvp6zUQ0OF4cKRQGm34gOsmA1BsN RnYIsMxJFW4YvrXNKs1t8FBv+IK+KOlUZD69boq5H7x4n0YLa8zDyPdPJLSfMkWi Epp8t5opWhdyUyQ9sqqKdGBa3GDTLrpc7AwBadnj9ty8PTQ91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo4CmE9lV3W0SuXNb9VkQ1zdJl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJl MTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4NTJiMTI3ZjcvNWI1NDQzMjktNWY4MS0z YzllLThhMDMtOTEzMGVjMDdiMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQyZTE1OWItN2Y5ZC00ZmRlLTgz ZWItZmYyODUyYjEyN2Y3LzZkMmUxNTliLTdmOWQtNGZkZS04M2ViLWZmMjg1MmIx MjdmNy5jcmwwHwYDVR0jBBgwFoAUSoJ116d8QMuq7r2GFAFTrKHHXcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDJlMTU5Yi03ZjlkLTRmZGUtODNlYi1mZjI4 NTJiMTI3ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAco5gSek2sHVZlW4FKEJ2U2oBlX9Np74fLPt6gYX5U5E6MKhIhbeAN 8Ega0UN02PE1BUPPoDwkzubiV2p15Odz3ZxMk0R7JMfvDAf0ik9Cm+9LHE3VerDx DAa0/wXjRegIIKKHH/kCNHMuW9O3MWnD4h93bsQKh0chP+wNU9CmUkTiNLMFd/hs GNcCPWWcHVsEWX401pcKGhA22aCDGGqAL61uv0579f+DHaH9l7H2KOvl2rTGY8tR mePp74ih3MPdpD5pkZ9SKGm8L17bI67C5Wn8pMDlTULutYJ/XQ0z5BKVVE7GyTtV tAEELwPMvWX66wazkElL6Elbgh8lbBg= -----END CERTIFICATE-----Generated at Mon Oct 20 18:41:52 2025 by rpki-client