$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa File: 2e628c5f-b9c8-354e-8ca8-2be946b33257.roa (raw, json) Hash identifier: xeZ64r4IWdgDnmhH2NM1RoJ8whWsT36XpFWBmIp2hPE= Subject key identifier: 7A:D7:16:1E:96:64:F5:07:8E:13:DB:84:83:38:41:1B:A0:C7:36:BA Certificate issuer: /CN=d04d2126-a09e-46a8-b6c3-1c3c12a6342f Certificate serial: 010D0C9F4328584B3AEC3F56E951954A797A8080 Authority key identifier: 0C:1B:AA:14:E9:9B:10:4F:A2:BF:22:A9:1B:30:7D:AA:A8:E2:9B:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 13850 IP address blocks: 23.132.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:3f:56:e9:51:95:4a:79:7a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04d2126-a09e-46a8-b6c3-1c3c12a6342f Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=cb87ddcc-1f30-41cd-902e-9b85219564e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:cf:49:6b:1c:70:96:c3:3e:d6:f6:43:7b: 53:da:e3:29:9b:af:ef:a4:a4:d9:ee:52:c0:e5:69: 21:aa:62:75:0e:de:00:f7:3d:77:c6:d0:8e:72:36: 7b:fa:37:af:c5:be:b8:65:3e:6a:d0:17:7d:a9:7c: c8:a7:76:21:77:82:b5:22:b7:47:75:b2:2f:98:db: a2:d5:9e:83:c7:1b:0b:79:4b:7c:95:27:c0:7d:33: 82:36:a6:53:25:40:27:a7:91:37:b1:93:72:22:15: ab:33:dd:67:6d:68:90:9f:06:8d:e2:b6:5b:a4:37: f5:41:c2:ea:cb:75:57:2f:72:de:4d:1f:17:08:d2: aa:06:7c:de:6f:7e:76:3c:81:39:80:0c:e8:07:04: 60:f3:84:01:0b:43:84:4e:24:4f:6a:74:70:27:70: 0e:0f:d7:91:2b:9c:35:36:44:df:c8:01:c0:45:dc: 8b:49:9e:0e:a4:cc:38:b2:f4:e4:50:dd:4b:fb:85: 17:78:aa:e3:13:80:81:3c:36:ca:3e:45:b6:42:72: 5b:ea:41:45:70:09:bf:f1:c4:c3:f0:04:c2:5f:dd: 78:e4:c5:8d:b6:01:24:2b:b6:66:82:0f:f2:f7:84: 2d:d3:33:a6:5e:c5:37:41:81:60:b8:23:ce:93:e0: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D7:16:1E:96:64:F5:07:8E:13:DB:84:83:38:41:1B:A0:C7:36:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/2e628c5f-b9c8-354e-8ca8-2be946b33257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.crl X509v3 Authority Key Identifier: keyid:0C:1B:AA:14:E9:9B:10:4F:A2:BF:22:A9:1B:30:7D:AA:A8:E2:9B:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d04d2126-a09e-46a8-b6c3-1c3c12a6342f.cer sbgp-ipAddrBlock: critical IPv4: 23.132.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4b:a2:1e:d2:f4:ad:bf:27:62:a0:d1:e2:7e:4f:53:50:d0: 0e:d9:c4:a6:3d:8a:47:42:34:20:ce:58:eb:04:64:c2:fb:ce: d6:70:6d:04:b3:5d:9c:68:d0:94:cb:ed:b3:c5:f7:a7:8e:33: 11:02:32:5c:34:a1:7c:ac:6e:c0:f5:ed:5c:fa:23:19:8c:a0: ad:71:b8:82:4b:96:e7:92:14:ee:e4:b9:68:2b:31:90:8b:36: 52:0b:d3:06:b8:e8:16:c8:7e:66:15:57:b3:c2:c5:52:23:ff: e5:ca:c6:4f:9d:a4:3b:87:81:48:aa:c3:9b:fa:d9:dd:3f:b6: 33:6f:6c:21:77:2b:b9:13:94:8b:df:5d:a5:1d:40:07:e5:d8: de:cb:59:be:66:54:87:3c:14:08:be:80:f7:49:9e:e4:73:08: 3d:68:a5:1c:a7:43:7a:d5:5a:78:64:dc:8c:ac:31:f9:cb:c1: 78:e8:75:86:65:f7:77:f6:2b:40:5a:15:b7:74:c5:67:7a:83: 42:80:a8:43:fe:5d:f1:d1:00:9a:94:a1:2f:1c:42:45:ab:40: 9d:ea:50:03:e4:ca:82:f8:c1:f5:be:41:8c:2d:23:74:39:1d: 62:73:cb:67:39:66:83:99:2f:74:6f:11:a5:df:d6:03:09:d9: cd:7c:74:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67D9W6VGVSnl6gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA0ZDIxMjYtYTA5ZS00NmE4LWI2YzMtMWMzYzEyYTYz NDJmMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk Y2I4N2RkY2MtMWYzMC00MWNkLTkwMmUtOWI4NTIxOTU2NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOzPSWsccJbDPtb2Q3tT2uMpm6/vpKTZ7lLA 5WkhqmJ1Dt4A9z13xtCOcjZ7+jevxb64ZT5q0Bd9qXzIp3Yhd4K1IrdHdbIvmNui 1Z6DxxsLeUt8lSfAfTOCNqZTJUAnp5E3sZNyIhWrM91nbWiQnwaN4rZbpDf1QcLq y3VXL3LeTR8XCNKqBnzeb352PIE5gAzoBwRg84QBC0OETiRPanRwJ3AOD9eRK5w1 NkTfyAHARdyLSZ4OpMw4svTkUN1L+4UXeKrjE4CBPDbKPkW2QnJb6kFFcAm/8cTD 8ATCX9145MWNtgEkK7Zmgg/y94Qt0zOmXsU3QYFguCPOk+CWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrXFh6WZPUHjhPbhIM4QRugxza6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDRk MjEyNi1hMDllLTQ2YTgtYjZjMy0xYzNjMTJhNjM0MmYvMmU2MjhjNWYtYjljOC0z NTRlLThjYTgtMmJlOTQ2YjMzMjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDA0ZDIxMjYtYTA5ZS00NmE4LWI2 YzMtMWMzYzEyYTYzNDJmL2QwNGQyMTI2LWEwOWUtNDZhOC1iNmMzLTFjM2MxMmE2 MzQyZi5jcmwwHwYDVR0jBBgwFoAUDBuqFOmbEE+ivyKpGzB9qqjimwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDRkMjEyNi1hMDllLTQ2YTgtYjZjMy0xYzNj MTJhNjM0MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4QYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBLoh7S9K2/J2Kg0eJ+T1NQ0A7ZxKY9ikdCNCDOWOsEZML7ztZwbQSz XZxo0JTL7bPF96eOMxECMlw0oXysbsD17Vz6IxmMoK1xuIJLlueSFO7kuWgrMZCL NlIL0wa46BbIfmYVV7PCxVIj/+XKxk+dpDuHgUiqw5v62d0/tjNvbCF3K7kTlIvf XaUdQAfl2N7LWb5mVIc8FAi+gPdJnuRzCD1opRynQ3rVWnhk3IysMfnLwXjodYZl 93f2K0BaFbd0xWd6g0KAqEP+XfHRAJqUoS8cQkWrQJ3qUAPkyoL4wfW+QYwtI3Q5 HWJzy2c5ZoOZL3RvEaXf1gMJ2c18dPE= -----END CERTIFICATE-----Generated at Tue Oct 21 02:23:00 2025 by rpki-client