$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/afb8aa3a-0adf-3797-8eb8-4a004287ddbb.roa File: afb8aa3a-0adf-3797-8eb8-4a004287ddbb.roa (raw, json) Hash identifier: VdIkL+TBwFJNJywbKHAvs1U9mADMHpodpIsjSuSmsbg= Subject key identifier: 51:47:B7:6B:F4:42:41:6F:03:A9:70:78:37:33:73:25:8E:15:85:86 Certificate issuer: /CN=a54e265f-d361-4245-843e-1e7cf61c9644 Certificate serial: 010D0C9F4328584B2A2C4CC26B52A4C03F543F30 Authority key identifier: CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/afb8aa3a-0adf-3797-8eb8-4a004287ddbb.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 401474 IP address blocks: 23.132.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4c:c2:6b:52:a4:c0:3f:54:3f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a54e265f-d361-4245-843e-1e7cf61c9644 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=20d55845-66f0-4f3f-8b48-9a71c72401e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:21:96:82:ee:cb:1d:df:5f:95:5a:27:7c:36: 09:bd:ce:49:56:2f:66:59:86:ec:69:7c:49:60:ee: 80:62:86:45:67:27:18:23:1e:f1:4a:67:6a:1a:50: 3e:83:25:b5:7b:21:6e:4c:2d:f2:a0:0f:a6:aa:a0: 01:ed:40:96:d9:9d:f6:82:b2:34:a5:b3:c1:4d:29: 4e:3b:b6:f3:56:3b:54:a3:05:bf:87:c4:66:e5:1e: 0c:8f:25:77:a9:b9:55:b2:2a:ad:8e:7e:07:3f:1f: 33:db:ec:8d:64:ab:91:9f:73:22:0a:7f:fe:22:1f: a6:34:10:29:83:7d:f9:19:8d:d6:b1:f8:4d:94:fb: e2:f1:f9:88:d6:99:f2:26:1f:6f:cd:03:c0:a6:f6: 60:9f:5f:0f:57:b8:db:40:f1:2f:87:89:05:58:a6: 64:9b:a0:58:ca:86:eb:0c:a7:8b:7e:57:52:42:b5: e3:a4:56:10:91:99:69:f5:a1:e6:4a:e2:55:f5:9a: e3:cc:5b:ab:e4:d0:16:94:ce:39:2a:1d:ce:5b:62: d7:90:d0:a8:1d:26:83:6d:be:62:b6:8f:fb:cb:fe: 4f:b9:d4:f2:2c:f0:60:66:0d:b7:7d:4e:12:80:30: a9:11:40:f8:44:85:3b:96:0b:97:41:d3:82:17:8f: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:47:B7:6B:F4:42:41:6F:03:A9:70:78:37:33:73:25:8E:15:85:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/afb8aa3a-0adf-3797-8eb8-4a004287ddbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl X509v3 Authority Key Identifier: keyid:CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer sbgp-ipAddrBlock: critical IPv4: 23.132.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b5:ad:68:06:6b:6d:2f:d1:cc:9d:b1:7d:db:ef:b5:c1:6e: 62:0b:0b:07:55:5c:fb:ca:0f:89:7a:42:bb:14:a4:2d:84:19: ae:2e:1c:4b:72:b9:b3:e9:2c:6b:b2:99:a7:1d:79:97:ef:9d: cc:a0:8e:f0:f2:1b:90:0c:0e:a1:37:d8:7f:5b:e7:ff:6d:ee: 54:3c:40:85:57:3b:85:19:d2:19:27:7f:a2:90:62:07:c3:23: f9:a7:2d:6c:46:1d:20:f6:cf:be:e3:03:05:fd:c1:67:56:8f: 33:3f:60:12:dd:d2:44:34:5d:e2:e2:7b:25:7f:34:64:be:f5: a4:68:27:44:82:f2:cc:5d:63:f1:8d:ef:a0:ed:c4:e0:72:cc: 28:9e:10:a1:a6:b1:d8:68:32:62:d6:03:b3:a3:6e:e9:ea:d4: 8f:94:77:43:7f:1d:5e:8f:70:97:e9:5f:52:5d:c6:84:84:2c: 9e:1b:3e:8e:4b:66:a1:51:50:2c:8c:3e:a2:e2:0a:ea:d3:1e: 86:34:ac:c3:22:76:8f:cd:f3:cf:56:df:98:6b:bb:8a:70:f9: 4e:2b:90:fc:22:be:dd:a2:c7:6f:fd:2d:61:c0:07:dd:92:3a: b6:2e:19:e5:5e:f1:d0:34:c6:67:8a:23:44:d1:68:d3:c6:27: 1f:eb:c0:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEzCa1KkwD9UPzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0ZTI2NWYtZDM2MS00MjQ1LTg0M2UtMWU3Y2Y2MWM5 NjQ0MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk MjBkNTU4NDUtNjZmMC00ZjNmLThiNDgtOWE3MWM3MjQwMWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CGWgu7LHd9flVonfDYJvc5JVi9mWYbsaXxJ YO6AYoZFZycYIx7xSmdqGlA+gyW1eyFuTC3yoA+mqqAB7UCW2Z32grI0pbPBTSlO O7bzVjtUowW/h8Rm5R4MjyV3qblVsiqtjn4HPx8z2+yNZKuRn3MiCn/+Ih+mNBAp g335GY3WsfhNlPvi8fmI1pnyJh9vzQPApvZgn18PV7jbQPEvh4kFWKZkm6BYyobr DKeLfldSQrXjpFYQkZlp9aHmSuJV9ZrjzFur5NAWlM45Kh3OW2LXkNCoHSaDbb5i to/7y/5PudTyLPBgZg23fU4SgDCpEUD4RIU7lguXQdOCF4/DtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFHt2v0QkFvA6lweDczcyWOFYWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNTRl MjY1Zi1kMzYxLTQyNDUtODQzZS0xZTdjZjYxYzk2NDQvYWZiOGFhM2EtMGFkZi0z Nzk3LThlYjgtNGEwMDQyODdkZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTU0ZTI2NWYtZDM2MS00MjQ1LTg0 M2UtMWU3Y2Y2MWM5NjQ0L2E1NGUyNjVmLWQzNjEtNDI0NS04NDNlLTFlN2NmNjFj OTY0NC5jcmwwHwYDVR0jBBgwFoAUzM/ruBaC+8/GDeSWV0BhayV2UUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNTRlMjY1Zi1kMzYxLTQyNDUtODQzZS0xZTdj ZjYxYzk2NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+1rWgGa20v0cydsX3b77XBbmILCwdVXPvKD4l6QrsUpC2EGa4uHEty ubPpLGuymacdeZfvncygjvDyG5AMDqE32H9b5/9t7lQ8QIVXO4UZ0hknf6KQYgfD I/mnLWxGHSD2z77jAwX9wWdWjzM/YBLd0kQ0XeLieyV/NGS+9aRoJ0SC8sxdY/GN 76DtxOByzCieEKGmsdhoMmLWA7Ojbunq1I+Ud0N/HV6PcJfpX1JdxoSELJ4bPo5L ZqFRUCyMPqLiCurTHoY0rMMido/N889W35hru4pw+U4rkPwivt2ix2/9LWHAB92S OrYuGeVe8dA0xmeKI0TRaNPGJx/rwEk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:14 2025 by rpki-client