$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/481ae520-6967-3ac1-8b79-c8677bf7adfa.roa File: 481ae520-6967-3ac1-8b79-c8677bf7adfa.roa (raw, json) Hash identifier: 3QMN6AODvkRURWAhy5UpJV8PkIi0YuXK5KpADW2UkdA= Subject key identifier: 58:49:22:55:C8:F3:73:A0:15:6F:A8:BD:5D:ED:65:E5:85:5D:70:22 Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584B52CE048824A39A70F3F4EF60 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/481ae520-6967-3ac1-8b79-c8677bf7adfa.roa Signing time: Fri 26 Sep 2025 14:19:05 +0000 ROA not before: Fri 26 Sep 2025 14:19:05 +0000 ROA not after: Thu 25 Dec 2025 15:19:05 +0000 asID: 401502 IP address blocks: 23.130.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:ce:04:88:24:a3:9a:70:f3:f4:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Sep 26 14:19:05 2025 GMT Not After : Dec 25 15:19:05 2025 GMT Subject: CN=603e101d-01ec-4274-81af-adc8fbe56fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:2d:7c:19:88:78:51:4d:1a:85:86:21:16: 2d:95:1d:c7:9f:34:ef:2d:93:19:89:00:e9:0a:1e: a0:49:78:b7:22:22:58:21:07:c1:ca:39:96:5f:5c: d0:24:59:49:18:10:6e:0a:b3:fc:1b:d6:a8:cb:f0: 32:0a:31:d7:d0:12:ec:99:4d:40:14:41:f7:43:f5: 87:d6:98:01:f9:ec:db:54:79:67:aa:2f:14:c8:13: c2:56:04:1e:84:ab:3a:eb:58:b7:28:2b:b4:f0:10: 3d:5b:ca:b3:80:07:fa:f5:cb:04:dd:e7:27:93:4f: a3:c0:ea:c6:c0:71:49:75:2d:16:88:15:89:fe:6d: e2:d1:6c:ca:2a:89:c4:2e:cf:98:74:1a:1e:ab:d5: 27:d0:ad:2e:7c:4d:3f:7f:a6:1e:a8:64:f6:e3:f1: d9:8f:f7:b3:91:27:bd:70:c1:75:28:dd:67:f3:ae: 0d:97:12:ae:b3:d3:98:07:be:65:fc:f6:42:01:87: b7:27:58:30:4e:ea:08:af:0e:20:f9:38:05:9d:5d: ad:e7:d4:64:30:a3:ba:69:e7:6f:9a:ce:a1:ae:6f: 82:ff:be:fa:e3:84:59:55:23:3c:e2:00:bc:41:e5: 2d:28:b3:ce:33:3a:dd:37:44:f3:90:b5:03:3b:41: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:49:22:55:C8:F3:73:A0:15:6F:A8:BD:5D:ED:65:E5:85:5D:70:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/481ae520-6967-3ac1-8b79-c8677bf7adfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ce:4b:96:2b:9a:20:e7:0a:61:ec:cf:93:93:22:96:a4:f1: 6d:90:3b:81:9e:81:ec:75:d9:33:d9:e5:e3:8a:13:c8:4d:8d: 4d:33:e8:a7:77:a3:fc:6b:55:1f:b9:51:f5:95:bf:98:af:a9: 45:06:7d:db:e5:4f:71:36:29:78:35:84:66:0d:45:79:1d:fa: 96:ac:ff:d5:22:73:3f:ad:dd:9f:e1:99:aa:36:42:6d:9c:b7: d8:d8:a3:12:d6:e1:36:6e:44:95:3c:07:c0:c0:0c:54:2b:5b: 5c:6e:58:81:dc:b9:d8:ae:69:b4:51:59:90:a0:bb:c9:9d:99: db:5f:3c:4f:98:fd:ec:73:9b:52:8d:5e:2d:b2:8a:09:86:74: 78:7d:b6:c3:34:72:eb:ba:22:49:2e:6d:44:6d:3e:24:45:b1: 58:f8:a6:c6:8c:0f:33:da:84:08:07:56:c5:c4:05:e3:d1:90: 47:23:f4:33:c8:0d:0d:fe:55:78:98:55:4a:cd:80:71:4d:4a: 6d:87:48:e3:9c:55:e0:4b:c5:50:39:d7:25:9c:69:43:4e:ac: 5c:29:70:51:01:8e:ce:09:14:6b:9e:b6:5c:20:ba:8a:ac:cd: 80:5b:ef:06:57:8e:64:97:29:1d:80:ef:73:da:33:02:49:fd: e0:13:bf:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSzgSIJKOacPP072AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI1MDkyNjE0MTkwNVoXDTI1MTIyNTE1MTkwNVowLzEtMCsGA1UEAxMk NjAzZTEwMWQtMDFlYy00Mjc0LTgxYWYtYWRjOGZiZTU2ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAYtfBmIeFFNGoWGIRYtlR3HnzTvLZMZiQDp Ch6gSXi3IiJYIQfByjmWX1zQJFlJGBBuCrP8G9aoy/AyCjHX0BLsmU1AFEH3Q/WH 1pgB+ezbVHlnqi8UyBPCVgQehKs661i3KCu08BA9W8qzgAf69csE3ecnk0+jwOrG wHFJdS0WiBWJ/m3i0WzKKonELs+YdBoeq9Un0K0ufE0/f6YeqGT24/HZj/ezkSe9 cMF1KN1n864NlxKus9OYB75l/PZCAYe3J1gwTuoIrw4g+TgFnV2t59RkMKO6aedv ms6hrm+C/77644RZVSM84gC8QeUtKLPOMzrdN0TzkLUDO0GcXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhJIlXI83OgFW+ovV3tZeWFXXAiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvNDgxYWU1MjAtNjk2Ny0z YWMxLThiNzktYzg2NzdiZjdhZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInOS5YrmiDnCmHsz5OTIpak8W2QO4Gegex12TPZ5eOKE8hNjU0z6Kd3 o/xrVR+5UfWVv5ivqUUGfdvlT3E2KXg1hGYNRXkd+pas/9Uicz+t3Z/hmao2Qm2c t9jYoxLW4TZuRJU8B8DADFQrW1xuWIHcudiuabRRWZCgu8mdmdtfPE+Y/exzm1KN Xi2yigmGdHh9tsM0cuu6IkkubURtPiRFsVj4psaMDzPahAgHVsXEBePRkEcj9DPI DQ3+VXiYVUrNgHFNSm2HSOOcVeBLxVA51yWcaUNOrFwpcFEBjs4JFGuetlwguoqs zYBb7wZXjmSXKR2A73PaMwJJ/eATv3s= -----END CERTIFICATE-----Generated at Tue Oct 21 16:23:04 2025 by rpki-client