$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/0568bb30-a161-338f-b039-d3ae2bde0cf1.roa File: 0568bb30-a161-338f-b039-d3ae2bde0cf1.roa (raw, json) Hash identifier: Z4mX2trHn4eEdZVa5sX0ZCJ63AFtzyob/1BIGiwZ13E= Subject key identifier: 1B:69:57:8D:62:14:BE:D0:37:08:E7:82:D3:B4:45:64:AD:7E:DC:5D Certificate issuer: /CN=210656ce-d9a2-443d-996e-405a0c9439dc Certificate serial: 010D0C9F4328584B583C874A678C128E77046880 Authority key identifier: 63:25:A3:D9:CD:1E:0F:E1:D5:3E:F5:3C:D5:1E:63:7E:1A:E6:33:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/0568bb30-a161-338f-b039-d3ae2bde0cf1.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 63023 IP address blocks: 23.150.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/210656ce-d9a2-443d-996e-405a0c9439dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/210656ce-d9a2-443d-996e-405a0c9439dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:87:4a:67:8c:12:8e:77:04:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210656ce-d9a2-443d-996e-405a0c9439dc Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ec8941c2-8c1b-4258-b141-4452f9fd3653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:95:4a:7e:e3:68:49:56:ab:4f:8f:67:a2: fc:33:3a:7f:6f:86:aa:ab:c9:2b:9b:69:e5:0a:b3: 18:d7:20:45:cb:23:c1:22:a7:7a:6a:d2:15:38:aa: 19:4c:af:72:b5:28:40:f6:1d:dc:82:7b:cf:71:f4: c4:2a:f8:71:1e:ce:e7:85:f6:b7:81:da:1e:0e:07: 86:59:48:c4:16:00:11:c9:86:5b:d8:01:86:06:e1: 51:61:12:8b:b6:00:fc:fb:c0:0f:f7:55:f5:41:c0: 8e:96:ee:c7:7b:d9:42:38:18:67:82:76:39:97:2d: 14:54:5e:b1:2e:d2:a8:70:2a:e9:99:bb:3a:34:d3: d3:c2:05:df:65:7b:0f:18:1f:87:7c:d7:2b:8a:ee: de:8d:3d:86:97:be:5e:6e:ce:e6:44:e2:c3:4b:ae: b1:e3:39:85:d3:81:a2:84:6c:b5:8e:4d:d4:2c:b8: 33:c4:56:11:52:b8:59:49:80:39:5a:6a:8c:7a:fd: a7:46:27:1c:b8:4a:70:0e:a5:fc:10:ac:86:ab:69: 89:d8:59:8f:fd:98:06:40:7d:d5:40:a3:96:b9:92: 78:35:74:f6:21:0a:ef:99:7b:22:40:cc:fa:6a:a3: dd:32:dc:af:14:19:3a:e1:61:42:01:e0:b0:85:53: 7a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:69:57:8D:62:14:BE:D0:37:08:E7:82:D3:B4:45:64:AD:7E:DC:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/0568bb30-a161-338f-b039-d3ae2bde0cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc/210656ce-d9a2-443d-996e-405a0c9439dc.crl X509v3 Authority Key Identifier: keyid:63:25:A3:D9:CD:1E:0F:E1:D5:3E:F5:3C:D5:1E:63:7E:1A:E6:33:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/210656ce-d9a2-443d-996e-405a0c9439dc.cer sbgp-ipAddrBlock: critical IPv4: 23.150.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:45:26:bb:c3:bb:03:ae:1b:0d:8f:40:fc:73:c4:91:0e:4e: 4b:de:2b:e4:74:28:6a:a6:4a:4a:c5:e3:ea:ec:e7:1e:f0:e1: c6:8a:c3:1a:96:77:f0:06:51:74:91:45:8a:13:25:16:3d:b2: 77:03:05:ed:ab:2f:8e:07:b7:49:f5:65:f4:3a:0e:f4:d8:ed: d1:1d:ae:98:91:ad:59:5d:88:95:ef:b9:0f:ac:24:e4:50:59: 63:cd:c2:5a:a0:6c:56:9c:14:e3:c7:54:52:bb:71:f4:5d:bd: 58:b1:b6:e1:72:a9:79:34:40:9b:f3:c9:44:30:e1:c8:fa:d7: e7:b6:50:85:a8:55:54:d0:ab:f3:a6:1a:68:83:56:57:0c:fb: e4:31:39:7d:45:d2:2e:ee:7f:ed:0e:7b:9e:f6:1e:f6:25:8a: a5:60:69:e0:30:52:97:f5:8e:d6:fa:48:2c:f1:61:80:6a:2d: 6d:4e:91:c7:49:c8:f2:ec:81:62:3e:05:81:dd:06:84:ee:28: 10:f6:f5:8c:1e:1e:40:c9:ef:c7:11:41:02:79:2f:2b:4d:16: 49:7c:22:2a:36:2f:48:9a:72:f4:15:89:f7:69:ad:f4:d0:5e: 78:cd:37:c4:03:32:72:00:97:b4:44:29:d3:f2:5f:10:4b:a4: b6:23:5e:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIdKZ4wSjncEaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEwNjU2Y2UtZDlhMi00NDNkLTk5NmUtNDA1YTBjOTQz OWRjMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWM4OTQxYzItOGMxYi00MjU4LWIxNDEtNDQ1MmY5ZmQzNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyReVSn7jaElWq0+PZ6L8Mzp/b4aqq8krm2nl CrMY1yBFyyPBIqd6atIVOKoZTK9ytShA9h3cgnvPcfTEKvhxHs7nhfa3gdoeDgeG WUjEFgARyYZb2AGGBuFRYRKLtgD8+8AP91X1QcCOlu7He9lCOBhngnY5ly0UVF6x LtKocCrpmbs6NNPTwgXfZXsPGB+HfNcriu7ejT2Gl75ebs7mROLDS66x4zmF04Gi hGy1jk3ULLgzxFYRUrhZSYA5WmqMev2nRiccuEpwDqX8EKyGq2mJ2FmP/ZgGQH3V QKOWuZJ4NXT2IQrvmXsiQMz6aqPdMtyvFBk64WFCAeCwhVN6twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtpV41iFL7QNwjngtO0RWStftxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTA2 NTZjZS1kOWEyLTQ0M2QtOTk2ZS00MDVhMGM5NDM5ZGMvMDU2OGJiMzAtYTE2MS0z MzhmLWIwMzktZDNhZTJiZGUwY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjEwNjU2Y2UtZDlhMi00NDNkLTk5 NmUtNDA1YTBjOTQzOWRjLzIxMDY1NmNlLWQ5YTItNDQzZC05OTZlLTQwNWEwYzk0 MzlkYy5jcmwwHwYDVR0jBBgwFoAUYyWj2c0eD+HVPvU81R5jfhrmM7QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTA2NTZjZS1kOWEyLTQ0M2QtOTk2ZS00MDVh MGM5NDM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5aYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBFJrvDuwOuGw2PQPxzxJEOTkveK+R0KGqmSkrF4+rs5x7w4caKwxqW d/AGUXSRRYoTJRY9sncDBe2rL44Ht0n1ZfQ6DvTY7dEdrpiRrVldiJXvuQ+sJORQ WWPNwlqgbFacFOPHVFK7cfRdvVixtuFyqXk0QJvzyUQw4cj61+e2UIWoVVTQq/Om GmiDVlcM++QxOX1F0i7uf+0Oe572HvYliqVgaeAwUpf1jtb6SCzxYYBqLW1OkcdJ yPLsgWI+BYHdBoTuKBD29YweHkDJ78cRQQJ5LytNFkl8Iio2L0iacvQVifdprfTQ XnjNN8QDMnIAl7REKdPyXxBLpLYjXqI= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:37 2025 by rpki-client