$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/bd2c377d-233f-30b0-9132-864a8aaf6c9e.roa File: bd2c377d-233f-30b0-9132-864a8aaf6c9e.roa (raw, json) Hash identifier: mdT6TmeqMsHDw8dgYjAPbWbb6NvvtFCsI9R3otNwXPk= Subject key identifier: 9B:CB:07:1D:E8:D2:E0:6C:AF:73:77:00:B9:9F:18:56:0B:C9:2C:9F Certificate issuer: /CN=0591b5c7-e4bf-4dcf-902b-b6fd12c339af Certificate serial: 010D0C9F4328584B4FDC80FAC3DD9574E95349C0 Authority key identifier: 61:E3:D3:75:35:7B:B7:0B:F6:20:1A:82:2C:94:32:85:66:02:85:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/bd2c377d-233f-30b0-9132-864a8aaf6c9e.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 8095 IP address blocks: 23.179.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:80:fa:c3:dd:95:74:e9:53:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0591b5c7-e4bf-4dcf-902b-b6fd12c339af Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=8534ff8e-263a-44b8-a9d0-c00fbe2d3b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:81:13:c9:7c:12:b9:9e:47:38:c6:15:d2:47: 56:86:6c:14:6f:c8:61:82:60:65:a6:28:49:b2:d3: 84:24:3f:bc:ea:d3:fc:dd:0d:e9:97:4f:24:8c:38: 40:87:2a:97:50:46:fb:d8:ba:b5:6f:38:6d:72:a7: a1:a4:4f:d0:5c:3f:a3:80:01:cf:35:dc:85:b2:81: b6:c9:28:14:ea:a7:d9:aa:b3:01:04:e3:e6:5d:60: f2:30:51:0e:27:08:9c:ff:d7:11:60:5e:ac:74:4e: e5:f1:da:66:c1:b0:2d:e6:a3:c7:8e:57:12:60:6d: ba:4d:1e:0f:a9:9d:04:88:a3:f6:4d:3e:ac:e4:b1: 69:ea:ac:6a:c3:18:68:e0:94:10:e5:b9:05:f1:f6: 9a:45:8c:f2:3e:36:68:c4:6d:8c:23:f2:8d:82:dd: 72:66:d2:51:dc:e6:ec:ee:24:d3:9b:fa:b7:f3:38: 3a:da:fb:01:96:42:9b:bd:d6:3f:32:bd:18:9b:77: d4:3d:78:9f:3e:97:43:74:bb:8f:31:fb:04:32:86: c6:57:fc:80:8e:b6:40:5a:a8:a9:f6:e9:f5:a6:ba: 78:13:2b:6b:dc:49:f9:da:34:dc:9f:41:c6:ba:29: f2:d8:f7:a8:e9:49:ff:af:9a:39:db:a5:82:4b:7e: 2d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CB:07:1D:E8:D2:E0:6C:AF:73:77:00:B9:9F:18:56:0B:C9:2C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/bd2c377d-233f-30b0-9132-864a8aaf6c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.crl X509v3 Authority Key Identifier: keyid:61:E3:D3:75:35:7B:B7:0B:F6:20:1A:82:2C:94:32:85:66:02:85:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0591b5c7-e4bf-4dcf-902b-b6fd12c339af.cer sbgp-ipAddrBlock: critical IPv4: 23.179.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:45:9b:8d:8b:77:c3:ed:0b:f3:0f:1c:21:38:42:85:3b:fe: e5:a4:ed:ef:2e:fa:e7:bc:cf:af:09:b4:3f:07:8c:28:cd:8b: ff:cc:4b:17:d0:0e:d0:ed:58:f1:84:10:98:5e:82:35:64:b7: 7d:6c:f4:c5:d7:55:db:71:5c:28:14:a0:a1:ce:aa:5d:96:b5: 03:db:32:b3:33:be:d6:3b:d9:c7:08:52:b2:bb:a8:8f:5c:b8: 50:e8:4d:84:c0:9c:97:6b:c6:a4:e0:00:5d:38:dd:f7:f4:fa: f8:ea:fa:83:40:36:2a:94:19:60:75:dd:5d:6d:d6:2a:d7:cf: fc:87:ab:c2:aa:07:cc:b2:b4:82:70:d3:8b:da:38:dc:9c:69: 76:d3:d3:73:db:f6:1e:b8:a4:6e:4e:e9:ec:f1:23:52:f1:7c: 62:bc:b1:22:0f:83:7b:ad:9d:ae:41:a2:9e:3f:34:9c:6d:1f: cc:20:28:25:11:70:98:96:09:19:45:01:d1:3b:87:cf:9d:a2: fa:fd:fa:42:cb:bb:69:3e:40:dd:86:71:00:5c:e5:c8:7c:4f: 7b:e3:77:6c:d6:c7:19:64:e8:ca:ce:5d:4e:37:8e:03:bf:36: 1c:a0:a4:5d:0c:38:af:7f:3e:47:5c:8f:24:ce:5d:d6:eb:14: 3c:8f:55:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3ID6w92VdOlTScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU5MWI1YzctZTRiZi00ZGNmLTkwMmItYjZmZDEyYzMz OWFmMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ODUzNGZmOGUtMjYzYS00NGI4LWE5ZDAtYzAwZmJlMmQzYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoETyXwSuZ5HOMYV0kdWhmwUb8hhgmBlpihJ stOEJD+86tP83Q3pl08kjDhAhyqXUEb72Lq1bzhtcqehpE/QXD+jgAHPNdyFsoG2 ySgU6qfZqrMBBOPmXWDyMFEOJwic/9cRYF6sdE7l8dpmwbAt5qPHjlcSYG26TR4P qZ0EiKP2TT6s5LFp6qxqwxho4JQQ5bkF8faaRYzyPjZoxG2MI/KNgt1yZtJR3Obs 7iTTm/q38zg62vsBlkKbvdY/Mr0Ym3fUPXifPpdDdLuPMfsEMobGV/yAjrZAWqip 9un1prp4Eytr3En52jTcn0HGuiny2Peo6Un/r5o526WCS34tDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvLBx3o0uBsr3N3ALmfGFYLySyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wNTkx YjVjNy1lNGJmLTRkY2YtOTAyYi1iNmZkMTJjMzM5YWYvYmQyYzM3N2QtMjMzZi0z MGIwLTkxMzItODY0YThhYWY2YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMDU5MWI1YzctZTRiZi00ZGNmLTkw MmItYjZmZDEyYzMzOWFmLzA1OTFiNWM3LWU0YmYtNGRjZi05MDJiLWI2ZmQxMmMz MzlhZi5jcmwwHwYDVR0jBBgwFoAUYePTdTV7twv2IBqCLJQyhWYChV8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wNTkxYjVjNy1lNGJmLTRkY2YtOTAyYi1iNmZk MTJjMzM5YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7NIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhFm42Ld8PtC/MPHCE4QoU7/uWk7e8u+ue8z68JtD8HjCjNi//MSxfQ DtDtWPGEEJhegjVkt31s9MXXVdtxXCgUoKHOql2WtQPbMrMzvtY72ccIUrK7qI9c uFDoTYTAnJdrxqTgAF043ff0+vjq+oNANiqUGWB13V1t1irXz/yHq8KqB8yytIJw 04vaONycaXbT03Pb9h64pG5O6ezxI1LxfGK8sSIPg3utna5Bop4/NJxtH8wgKCUR cJiWCRlFAdE7h8+dovr9+kLLu2k+QN2GcQBc5ch8T3vjd2zWxxlk6MrOXU43jgO/ NhygpF0MOK9/PkdcjyTOXdbrFDyPVbk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:03 2025 by rpki-client