$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa File: bb4950a9-bd81-3a51-8643-92fc7dc93849.roa (raw, json) Hash identifier: 2jPlICQV+VNPhpEZAfMm9a8nvQkdPgOBikdWmErDn34= Subject key identifier: 54:18:EE:FD:24:A7:B3:0B:59:40:47:B0:27:51:8B:27:33:DD:0A:A5 Certificate issuer: /CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Certificate serial: 010D0C9F4328584B8F633A7A62CC2C04586CFE80 Authority key identifier: BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa Signing time: Sat 18 Oct 2025 07:08:14 +0000 ROA not before: Sat 18 Oct 2025 07:08:14 +0000 ROA not after: Fri 16 Jan 2026 08:08:14 +0000 asID: 152918 IP address blocks: 23.147.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8f:63:3a:7a:62:cc:2c:04:58:6c:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8830c9a2-abcf-4537-b6e9-c0937a5bb56e Validity Not Before: Oct 18 07:08:14 2025 GMT Not After : Jan 16 08:08:14 2026 GMT Subject: CN=27fcedb7-9c59-43cb-a988-e835ecdf9854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:d0:8d:e2:0e:99:8b:b6:cd:10:69:bc:52: 37:13:1d:f2:66:32:ba:29:28:e0:85:2f:5f:c1:bf: d6:13:f6:81:62:c6:da:15:43:f0:d4:6f:84:3d:66: e1:a0:f2:83:d9:ed:0c:ae:0b:82:60:d6:15:70:87: 01:c5:d2:90:9d:70:50:50:56:7a:0d:f0:2e:c3:2b: 30:e7:c8:f1:a8:e7:42:f1:92:18:2d:b7:33:68:48: d6:f9:5a:3d:9c:cf:da:3a:62:28:49:dd:88:e2:08: 0a:f4:f3:a5:92:07:2e:3b:73:b0:59:19:0d:83:a0: 79:d4:0c:57:39:62:d2:ac:73:06:55:df:67:85:0f: 19:df:10:90:c8:f3:c6:9e:3d:c5:ec:de:b7:7b:38: 5b:3a:51:8e:52:ce:96:4c:4b:78:68:b4:4f:93:e2: 41:91:c5:be:e6:73:f3:8c:e8:73:3a:cf:09:9a:8f: a0:f8:66:88:70:95:26:7f:9f:1e:cb:cf:0a:8f:4e: 90:fd:43:cc:99:2e:6b:f7:fd:44:96:5d:03:fa:5c: c6:4a:a4:48:fc:d7:c9:04:a8:73:17:a4:cf:a3:92: 53:f5:1f:ff:ca:ef:d7:d0:48:b1:18:64:f9:79:18: 9e:06:e1:1a:18:63:f7:ac:8d:2a:7f:96:d1:b1:d7: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:18:EE:FD:24:A7:B3:0B:59:40:47:B0:27:51:8B:27:33:DD:0A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/bb4950a9-bd81-3a51-8643-92fc7dc93849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.crl X509v3 Authority Key Identifier: keyid:BE:3C:C8:C5:74:B7:69:08:5B:47:79:C9:2B:12:32:AF:0B:EF:D4:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8830c9a2-abcf-4537-b6e9-c0937a5bb56e.cer sbgp-ipAddrBlock: critical IPv4: 23.147.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5d:37:1a:b6:94:37:c5:4f:08:67:29:f7:60:8e:2f:5b:75: ee:d6:b8:52:7b:ef:5e:9e:f9:f9:2f:54:e0:91:68:a9:7a:a8: 72:c0:25:ed:03:25:75:1d:7b:50:ad:b3:8c:9b:29:ff:b6:76: d5:8f:5d:3a:90:14:d4:b4:e5:b2:81:18:8b:8d:83:e0:1c:2b: d8:ea:80:18:1a:9f:7c:60:56:a9:e4:04:a8:fe:78:86:56:b1: 26:a8:7b:48:e6:5a:dd:71:0c:6e:c1:c0:65:8e:5e:7d:23:09: 62:e2:2c:8b:64:fa:c0:54:c3:5a:e3:d1:f2:34:54:2d:78:95: 2c:a2:7e:39:c8:f5:9d:0c:5b:4b:5c:4e:04:d9:7b:34:8f:d5: e8:4e:af:cd:02:8b:09:e8:49:a3:ef:1a:e9:a1:0f:28:11:40: 1e:eb:80:7b:30:5a:fc:32:65:dd:b2:15:3d:9d:30:b9:8d:2a: 33:76:33:63:ec:02:5c:1d:cb:48:96:3f:d5:1c:d9:d7:fd:2c: 48:2b:77:c8:f4:64:f6:b0:9a:af:6b:7c:16:72:99:a0:48:d6: e9:f5:e4:23:8d:dc:11:aa:c5:c4:58:4b:2e:e4:ef:2b:f7:c0: 23:1e:ca:50:3c:8e:ba:9c:fa:59:6e:bc:e0:61:28:55:31:9d: a1:71:26:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuPYzp6YswsBFhs/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzMGM5YTItYWJjZi00NTM3LWI2ZTktYzA5MzdhNWJi NTZlMB4XDTI1MTAxODA3MDgxNFoXDTI2MDExNjA4MDgxNFowLzEtMCsGA1UEAxMk MjdmY2VkYjctOWM1OS00M2NiLWE5ODgtZTgzNWVjZGY5ODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPjQjeIOmYu2zRBpvFI3Ex3yZjK6KSjghS9f wb/WE/aBYsbaFUPw1G+EPWbhoPKD2e0MrguCYNYVcIcBxdKQnXBQUFZ6DfAuwysw 58jxqOdC8ZIYLbczaEjW+Vo9nM/aOmIoSd2I4ggK9POlkgcuO3OwWRkNg6B51AxX OWLSrHMGVd9nhQ8Z3xCQyPPGnj3F7N63ezhbOlGOUs6WTEt4aLRPk+JBkcW+5nPz jOhzOs8Jmo+g+GaIcJUmf58ey88Kj06Q/UPMmS5r9/1Ell0D+lzGSqRI/NfJBKhz F6TPo5JT9R//yu/X0EixGGT5eRieBuEaGGP3rI0qf5bRsdc9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQY7v0kp7MLWUBHsCdRiycz3QqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMw YzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkzN2E1YmI1NmUvYmI0OTUwYTktYmQ4MS0z YTUxLTg2NDMtOTJmYzdkYzkzODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODgzMGM5YTItYWJjZi00NTM3LWI2 ZTktYzA5MzdhNWJiNTZlLzg4MzBjOWEyLWFiY2YtNDUzNy1iNmU5LWMwOTM3YTVi YjU2ZS5jcmwwHwYDVR0jBBgwFoAUvjzIxXS3aQhbR3nJKxIyrwvv1HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84ODMwYzlhMi1hYmNmLTQ1MzctYjZlOS1jMDkz N2E1YmI1NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpdNxq2lDfFTwhnKfdgji9bde7WuFJ7716e+fkvVOCRaKl6qHLAJe0D JXUde1Cts4ybKf+2dtWPXTqQFNS05bKBGIuNg+AcK9jqgBgan3xgVqnkBKj+eIZW sSaoe0jmWt1xDG7BwGWOXn0jCWLiLItk+sBUw1rj0fI0VC14lSyifjnI9Z0MW0tc TgTZezSP1ehOr80CiwnoSaPvGumhDygRQB7rgHswWvwyZd2yFT2dMLmNKjN2M2Ps Alwdy0iWP9Uc2df9LEgrd8j0ZPawmq9rfBZymaBI1un15CON3BGqxcRYSy7k7yv3 wCMeylA8jrqc+lluvOBhKFUxnaFxJr8= -----END CERTIFICATE-----Generated at Mon Oct 20 01:34:36 2025 by rpki-client