$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa File: 72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa (raw, json) Hash identifier: v0rNmvFTXCoJY3vE+89JkhFLP/3xCmUpr1Y9vyR3e38= Subject key identifier: C7:D0:AB:59:94:88:0B:AC:CE:56:6E:04:07:AB:FB:E0:B7:78:CB:A5 Certificate issuer: /CN=25cf742f-4f64-4e51-b004-d972a8dd5948 Certificate serial: 010D0C9F4328584B864CB2486B6774A9F7C97780 Authority key identifier: 07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 23.129.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b2:48:6b:67:74:a9:f7:c9:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25cf742f-4f64-4e51-b004-d972a8dd5948 Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=83fce1f1-7578-4afa-b33e-30a587c9a767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:12:0f:8e:da:84:24:db:3f:11:a6:90:42:f1: 6b:d9:92:20:76:5c:65:a9:bb:a8:38:0d:bb:f8:54: 8e:13:9f:10:8a:cc:5f:e1:e9:a6:3d:78:9f:06:3b: 8c:4f:6c:87:e7:3a:b8:c1:8a:50:d4:c9:fe:02:42: b5:36:65:72:63:6e:44:31:5e:10:8a:73:5c:f1:d1: 0f:19:08:fd:88:eb:2f:f1:27:ab:95:ef:f3:f5:68: d8:6e:2c:d5:81:16:b0:52:cb:2f:d4:8e:56:37:97: 7a:da:fc:c5:bb:92:51:cd:c1:a8:20:b3:aa:49:c7: 21:06:37:e3:06:95:98:7c:6d:18:03:6b:9c:c2:f9: 7a:3d:a4:97:58:cf:6c:7c:3a:12:3b:a2:75:46:12: 26:f6:27:ec:6f:94:f1:2a:cb:3c:4a:91:8b:7a:41: 9a:47:d0:54:cf:fc:48:c5:35:e5:d2:83:4a:30:04: 50:dc:73:22:39:cd:04:f5:0f:2d:c4:aa:84:77:b1: 23:59:aa:63:0e:d0:2a:c7:82:67:fa:4f:d3:f3:62: 74:a0:25:f6:92:18:9d:66:47:01:2a:67:ac:35:0b: e4:d1:fc:0a:41:54:d0:7e:45:4e:e9:ed:2b:ca:a5: 8e:48:96:9b:da:a7:11:1f:e5:7d:32:67:0b:89:68: b2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D0:AB:59:94:88:0B:AC:CE:56:6E:04:07:AB:FB:E0:B7:78:CB:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/72f2e5b3-8f4d-32aa-82b3-20a7ed3787c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948/25cf742f-4f64-4e51-b004-d972a8dd5948.crl X509v3 Authority Key Identifier: keyid:07:A1:5E:98:21:95:76:BD:38:FA:D2:3A:0E:71:8E:7B:19:0C:AF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25cf742f-4f64-4e51-b004-d972a8dd5948.cer sbgp-ipAddrBlock: critical IPv4: 23.129.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a2:9c:7d:c3:ac:a3:80:6e:65:81:68:20:b8:a1:1e:1c:43: 3a:dd:e0:53:48:0f:77:e8:bb:70:c1:da:0d:e0:13:04:cc:32: 20:93:b5:b0:67:d1:ce:34:df:9d:6d:78:39:1f:f9:d2:1e:64: 0f:28:8c:e6:84:75:16:51:26:1b:20:e1:5b:ee:2c:db:03:21: 9e:a9:a6:eb:38:8a:14:b1:a3:7c:27:04:3c:21:de:71:b1:bc: 19:a2:7b:8c:9d:b4:c5:01:ba:9a:4d:2d:6e:f5:f3:b8:5f:39: c3:c9:75:8a:09:c3:df:a3:85:73:55:a4:79:97:87:ca:db:3e: ac:09:e8:40:c7:45:20:dc:98:e6:26:12:cb:ca:92:b2:56:87: 97:63:92:a1:fd:93:67:93:4c:eb:1a:b6:2e:2f:4b:f0:aa:3e: 03:38:5f:93:72:98:e8:dc:1a:ab:04:ea:86:a8:2f:1c:e4:34: 51:95:e0:f7:17:82:ff:ee:d5:29:c8:e6:96:e7:e7:f1:b3:89: 03:53:53:3a:45:36:40:d0:43:25:17:bc:aa:07:96:06:b4:c6: 36:f9:20:f1:ce:b7:33:04:72:f3:9b:dc:ae:a9:9e:ce:05:0b: 31:14:b6:78:8e:7e:9f:8a:d9:b1:b4:1b:fc:cb:05:b4:48:63: f4:35:5b:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuGTLJIa2d0qffJd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVjZjc0MmYtNGY2NC00ZTUxLWIwMDQtZDk3MmE4ZGQ1 OTQ4MB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk ODNmY2UxZjEtNzU3OC00YWZhLWIzM2UtMzBhNTg3YzlhNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihIPjtqEJNs/EaaQQvFr2ZIgdlxlqbuoOA27 +FSOE58Qisxf4emmPXifBjuMT2yH5zq4wYpQ1Mn+AkK1NmVyY25EMV4QinNc8dEP GQj9iOsv8Serle/z9WjYbizVgRawUssv1I5WN5d62vzFu5JRzcGoILOqScchBjfj BpWYfG0YA2ucwvl6PaSXWM9sfDoSO6J1RhIm9ifsb5TxKss8SpGLekGaR9BUz/xI xTXl0oNKMARQ3HMiOc0E9Q8txKqEd7EjWapjDtAqx4Jn+k/T82J0oCX2khidZkcB KmesNQvk0fwKQVTQfkVO6e0ryqWOSJab2qcRH+V9MmcLiWiytQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfQq1mUiAuszlZuBAer++C3eMulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNWNm NzQyZi00ZjY0LTRlNTEtYjAwNC1kOTcyYThkZDU5NDgvNzJmMmU1YjMtOGY0ZC0z MmFhLTgyYjMtMjBhN2VkMzc4N2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjVjZjc0MmYtNGY2NC00ZTUxLWIw MDQtZDk3MmE4ZGQ1OTQ4LzI1Y2Y3NDJmLTRmNjQtNGU1MS1iMDA0LWQ5NzJhOGRk NTk0OC5jcmwwHwYDVR0jBBgwFoAUB6FemCGVdr04+tI6DnGOexkMr2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNWNmNzQyZi00ZjY0LTRlNTEtYjAwNC1kOTcy YThkZDU5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4E8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuinH3DrKOAbmWBaCC4oR4cQzrd4FNID3fou3DB2g3gEwTMMiCTtbBn 0c40351teDkf+dIeZA8ojOaEdRZRJhsg4VvuLNsDIZ6ppus4ihSxo3wnBDwh3nGx vBmie4ydtMUBuppNLW7187hfOcPJdYoJw9+jhXNVpHmXh8rbPqwJ6EDHRSDcmOYm EsvKkrJWh5djkqH9k2eTTOsati4vS/CqPgM4X5NymOjcGqsE6oaoLxzkNFGV4PcX gv/u1SnI5pbn5/GziQNTUzpFNkDQQyUXvKoHlga0xjb5IPHOtzMEcvOb3K6pns4F CzEUtniOfp+K2bG0G/zLBbRIY/Q1W+0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:12 2025 by rpki-client