$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa File: e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa (raw, json) Hash identifier: JWstryRmCSs981NObD87LNhi5dXejm/RKsfv5+QfYbc= Subject key identifier: 32:09:A6:18:90:E7:5B:83:34:22:E1:8F:54:09:E2:3A:33:F9:08:1C Certificate issuer: /CN=897be676-f6c1-4efc-8bef-a425edb4f479 Certificate serial: 010D0C9F4328584B83820E750E072F1F80C85800 Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 7018 IP address blocks: 23.129.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:0e:75:0e:07:2f:1f:80:c8:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=74f8d9cf-a35e-487e-81f1-12f5b2f3a128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:78:5d:79:dd:85:d8:44:ee:da:20:1d:51: 79:a4:c0:c8:79:53:7c:b5:82:29:75:0a:66:5c:06: 7d:47:e0:d4:48:bc:11:1a:8b:9c:0d:7b:a6:ae:63: df:95:47:4b:ec:fc:38:d3:29:d6:66:fc:51:ac:b7: 94:e7:a9:30:06:8f:51:7b:9c:a3:40:b8:dd:49:50: ca:34:1a:c8:47:11:f6:91:c5:34:fb:c5:2e:0c:ac: 19:f5:27:85:cd:5f:7a:2b:64:3f:0a:ed:e4:e4:f9: be:ef:c4:89:9e:35:02:fc:4a:55:55:f3:0f:99:8c: e5:a5:aa:b7:41:14:9f:3a:67:b5:a6:8e:c3:e5:6e: 4b:bc:0a:99:22:33:3f:97:41:d6:5f:f5:e7:4c:41: 3a:15:49:4f:10:36:7f:3f:95:b4:07:67:c8:63:0c: 0e:9b:27:59:d2:f4:a8:3b:6e:f2:65:bd:79:83:a5: 27:d0:17:72:12:ef:bb:4f:74:58:42:ef:42:42:f8: 3b:41:22:6c:d1:a6:41:2f:0a:5d:77:54:66:80:4f: 79:a5:52:10:82:77:17:1f:76:49:83:46:24:a7:9e: f7:5c:34:96:71:bb:ac:cf:45:89:13:2f:99:a4:ee: 60:ab:68:97:83:26:dc:2d:14:e6:e9:e0:04:67:14: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:09:A6:18:90:E7:5B:83:34:22:E1:8F:54:09:E2:3A:33:F9:08:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl X509v3 Authority Key Identifier: keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer sbgp-ipAddrBlock: critical IPv4: 23.129.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2b:c0:85:2a:3c:a2:4c:87:d9:d7:2b:98:cf:8f:24:1c:38: c3:d4:bf:b0:f3:c6:da:7c:ef:05:05:9d:4c:47:b0:2c:4d:de: be:9b:4a:b9:4a:84:12:96:00:2c:03:7f:39:30:b0:b9:c4:09: 74:31:4f:0d:78:d0:3b:f8:c8:53:3a:0d:e2:e4:cc:f1:8c:db: 6c:d8:2a:c5:54:7c:f8:9b:af:24:8d:f0:8c:a1:00:7a:68:78: ff:1a:4f:4f:ac:81:a1:2c:87:9d:ce:e7:b4:cd:88:d7:31:fe: de:c4:8a:1e:ff:68:a1:af:e6:40:eb:41:c6:1c:35:04:6f:31: a1:11:c3:4f:c0:38:9e:b0:92:85:04:4a:5c:db:c1:e1:8f:39: b4:2d:f4:f1:86:f3:8a:c4:1e:d4:77:6c:45:c2:33:b5:d5:8b: 9d:79:98:61:35:4f:fb:b1:9a:30:70:f6:8b:52:5a:c0:15:d0: 8d:aa:8d:d1:20:39:9f:9f:82:d2:48:20:c3:02:38:44:8d:3a: 39:03:76:0d:2c:c5:f9:55:21:a6:b8:7a:be:ba:cd:dd:6d:6b: 7c:17:77:db:51:d8:74:47:7a:23:2e:33:cd:c9:aa:0d:d9:9e: c9:fb:b1:2a:d2:5d:17:eb:40:81:a7:ae:05:b5:8e:f2:c2:08: 1f:fa:b9:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDgg51DgcvH4DIWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk3YmU2NzYtZjZjMS00ZWZjLThiZWYtYTQyNWVkYjRm NDc5MB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk NzRmOGQ5Y2YtYTM1ZS00ODdlLTgxZjEtMTJmNWIyZjNhMTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsJ4XXndhdhE7togHVF5pMDIeVN8tYIpdQpm XAZ9R+DUSLwRGoucDXumrmPflUdL7Pw40ynWZvxRrLeU56kwBo9Re5yjQLjdSVDK NBrIRxH2kcU0+8UuDKwZ9SeFzV96K2Q/Cu3k5Pm+78SJnjUC/EpVVfMPmYzlpaq3 QRSfOme1po7D5W5LvAqZIjM/l0HWX/XnTEE6FUlPEDZ/P5W0B2fIYwwOmydZ0vSo O27yZb15g6Un0BdyEu+7T3RYQu9CQvg7QSJs0aZBLwpdd1RmgE95pVIQgncXH3ZJ g0Ykp573XDSWcbusz0WJEy+ZpO5gq2iXgybcLRTm6eAEZxTNDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIJphiQ51uDNCLhj1QJ4joz+QgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OTdi ZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1ZWRiNGY0NzkvZTNmOGJkYTctMmVlYi0z ZGNkLTgyNDItM2E0OTdmNDc4YjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODk3YmU2NzYtZjZjMS00ZWZjLThi ZWYtYTQyNWVkYjRmNDc5Lzg5N2JlNjc2LWY2YzEtNGVmYy04YmVmLWE0MjVlZGI0 ZjQ3OS5jcmwwHwYDVR0jBBgwFoAUyLo9e/15omcGXuvwTgOpZHeRROQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OTdiZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1 ZWRiNGY0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIrwIUqPKJMh9nXK5jPjyQcOMPUv7Dzxtp87wUFnUxHsCxN3r6bSrlK hBKWACwDfzkwsLnECXQxTw140Dv4yFM6DeLkzPGM22zYKsVUfPibrySN8IyhAHpo eP8aT0+sgaEsh53O57TNiNcx/t7Eih7/aKGv5kDrQcYcNQRvMaERw0/AOJ6wkoUE SlzbweGPObQt9PGG84rEHtR3bEXCM7XVi515mGE1T/uxmjBw9otSWsAV0I2qjdEg OZ+fgtJIIMMCOESNOjkDdg0sxflVIaa4er66zd1ta3wXd9tR2HRHeiMuM83Jqg3Z nsn7sSrSXRfrQIGnrgW1jvLCCB/6uU4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:51:50 2025 by rpki-client