$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/09e2133c-1127-3043-97b2-bbb32a41b3c4.roa File: 09e2133c-1127-3043-97b2-bbb32a41b3c4.roa (raw, json) Hash identifier: cUFPqAzBvuO9N06JRaLks10NLZ+aEibGPTZWgbFsTW0= Subject key identifier: AA:E1:97:85:9C:20:D5:AF:07:38:63:D3:76:09:4E:4A:50:9C:AF:6D Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Certificate serial: 010D0C9F4328584B8EACCBD35DA528A4ABC1CFA0 Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/09e2133c-1127-3043-97b2-bbb32a41b3c4.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 397131 IP address blocks: 23.160.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:cb:d3:5d:a5:28:a4:ab:c1:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=2089d917-f61c-4caa-9880-cc4300b7100c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:3d:50:4d:44:88:57:26:9c:f6:46:69:2f: a2:f3:87:fb:3d:f3:83:04:02:15:4e:6c:42:ef:d3: ca:74:0b:e9:b4:be:ff:ec:6c:cf:09:4f:f8:f9:6a: e3:61:c8:e4:c1:3a:cf:cf:2b:99:e8:ba:ea:a2:22: d7:76:2d:20:05:39:1d:3f:20:88:61:2f:9b:ad:53: 67:67:68:f9:c6:84:5f:a0:7d:95:7c:b4:71:6c:b5: e4:c8:88:d7:47:da:59:4a:a2:30:36:cf:ef:f7:35: c9:f6:26:d7:dc:42:5e:e9:12:d0:30:d6:8f:2b:e0: 25:78:69:f4:b0:f9:82:08:bf:72:01:42:ff:e1:e0: bd:47:9c:b9:96:52:d0:5f:bf:5d:51:16:75:1d:1b: 73:c0:08:9a:17:ae:07:3c:03:e4:5b:b9:59:03:db: 57:68:4a:6a:70:e9:b3:c9:c8:04:be:e5:f4:47:44: 89:9a:f4:ae:2e:78:f7:8f:63:bc:65:8a:13:51:d6: 5c:f1:42:d9:62:02:29:51:87:3a:69:7b:c1:e0:19: 42:7a:21:25:7a:b5:db:b4:b0:0b:c0:31:c2:0e:44: bd:e7:b0:67:4d:76:0f:64:cc:ba:5c:1c:b9:95:1c: 02:48:f2:af:f2:ec:a8:fe:39:8c:9d:97:68:f6:af: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E1:97:85:9C:20:D5:AF:07:38:63:D3:76:09:4E:4A:50:9C:AF:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/09e2133c-1127-3043-97b2-bbb32a41b3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl X509v3 Authority Key Identifier: keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer sbgp-ipAddrBlock: critical IPv4: 23.160.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:51:7a:b7:9e:df:17:87:13:5b:69:34:88:e5:99:3b:d0:99: 07:90:02:c3:63:f3:3f:4f:a5:b6:31:79:6c:0f:b0:78:25:5e: 1c:62:30:98:3e:46:06:9c:23:50:9f:7c:28:de:00:b9:57:dd: 5a:cf:47:54:2c:7e:c2:eb:0a:df:4a:c8:d9:58:5d:f1:d2:ec: 3f:eb:bb:2e:61:e4:57:6e:f6:5b:b9:41:12:b2:93:15:94:50: 08:16:22:9e:12:a2:b8:09:2a:22:95:0e:b5:1e:ec:e4:91:94: 8f:d9:32:20:d8:0e:71:c8:42:37:aa:15:c0:e2:77:d5:74:06: dd:8f:bf:04:44:ac:3f:be:1c:f2:a5:64:32:d8:bc:7d:d0:c5: 5c:63:b2:bf:fe:48:ba:3c:00:6d:ff:a9:8d:b0:44:f9:ac:6b: c4:89:bc:fc:d3:ef:71:2d:70:3e:2a:51:0a:00:89:67:b0:3d: cd:27:64:7b:ac:8e:d9:22:b2:5a:3e:fe:b1:1f:fd:94:53:74: 53:a8:9e:5e:68:a4:96:e4:e1:6b:41:05:ab:df:f8:4d:7c:67: b7:5d:a8:6c:ca:38:36:aa:44:3f:ab:b9:6f:f9:19:74:ca:be: 3c:12:c8:44:cc:c5:85:70:c4:96:61:c1:73:cb:7b:07:9e:7b: 91:be:27:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMvTXaUopKvBz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz ZTQxMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjA4OWQ5MTctZjYxYy00Y2FhLTk4ODAtY2M0MzAwYjcxMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC49UE1EiFcmnPZGaS+i84f7PfODBAIVTmxC 79PKdAvptL7/7GzPCU/4+WrjYcjkwTrPzyuZ6LrqoiLXdi0gBTkdPyCIYS+brVNn Z2j5xoRfoH2VfLRxbLXkyIjXR9pZSqIwNs/v9zXJ9ibX3EJe6RLQMNaPK+AleGn0 sPmCCL9yAUL/4eC9R5y5llLQX79dURZ1HRtzwAiaF64HPAPkW7lZA9tXaEpqcOmz ycgEvuX0R0SJmvSuLnj3j2O8ZYoTUdZc8ULZYgIpUYc6aXvB4BlCeiElerXbtLAL wDHCDkS957BnTXYPZMy6XBy5lRwCSPKv8uyo/jmMnZdo9q9xhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrhl4WcINWvBzhj03YJTkpQnK9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvMDllMjEzM2MtMTEyNy0z MDQzLTk3YjItYmJiMzJhNDFiM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0 NGY1YTNlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtReree3xeHE1tpNIjlmTvQmQeQAsNj8z9PpbYxeWwPsHglXhxiMJg+ RgacI1CffCjeALlX3VrPR1QsfsLrCt9KyNlYXfHS7D/ruy5h5Fdu9lu5QRKykxWU UAgWIp4SorgJKiKVDrUe7OSRlI/ZMiDYDnHIQjeqFcDid9V0Bt2PvwRErD++HPKl ZDLYvH3QxVxjsr/+SLo8AG3/qY2wRPmsa8SJvPzT73EtcD4qUQoAiWewPc0nZHus jtkislo+/rEf/ZRTdFOonl5opJbk4WtBBavf+E18Z7ddqGzKODaqRD+ruW/5GXTK vjwSyETMxYVwxJZhwXPLeweee5G+J3E= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:33 2025 by rpki-client