$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa File: 089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa (raw, json) Hash identifier: e9qVzAgnBbYnsJVRiM1aiGAjVmpcrsR4FcJIXeEb5uA= Subject key identifier: E0:6A:FD:EB:6B:DC:3D:B0:AA:F3:34:3B:28:09:CB:1B:E8:6C:BC:45 Certificate issuer: /CN=0be8264a-e514-463e-8183-9b3e83f9438d Certificate serial: 010D0C9F4328584AEE8968AE81480C0427E3F500 Authority key identifier: EA:36:C0:3A:42:78:09:A6:73:76:62:12:55:20:CE:23:38:29:78:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa Signing time: Thu 21 Aug 2025 16:20:01 +0000 ROA not before: Thu 21 Aug 2025 16:20:01 +0000 ROA not after: Wed 19 Nov 2025 17:20:01 +0000 asID: 400333 IP address blocks: 23.130.120.0/24 maxlen: 24 23.130.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:89:68:ae:81:48:0c:04:27:e3:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be8264a-e514-463e-8183-9b3e83f9438d Validity Not Before: Aug 21 16:20:01 2025 GMT Not After : Nov 19 17:20:01 2025 GMT Subject: CN=274f190f-4771-4221-888f-1b5b8206026e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4d:21:ab:56:fa:85:f2:80:f1:1a:f9:31:30: 31:2c:b6:3c:01:65:8d:03:81:f7:2d:04:2e:14:36: 88:f0:34:00:ca:5b:ff:b4:d1:6d:52:d4:c3:32:81: 9e:b1:20:2c:b0:ca:ed:19:62:2c:0c:13:2f:0a:7a: 19:34:43:c5:47:c8:59:e4:76:1e:79:00:cb:ab:a3: ef:c0:f4:41:04:cf:71:82:d0:5e:1a:41:84:9a:45: 20:9a:74:7f:aa:b1:58:48:af:1f:22:9e:77:3d:1c: 72:62:08:31:1f:6a:f7:27:04:bf:3b:69:36:b1:2f: 28:34:d0:1f:b9:dd:b1:c0:31:72:1b:f9:23:2e:27: 41:c0:06:43:67:5f:be:14:1e:9e:0d:86:80:0e:9f: 46:bc:34:cd:c7:bd:d6:5a:2b:8f:e3:78:34:bc:54: 21:f7:60:1e:fc:8f:15:8d:ba:41:6d:c4:32:c8:66: 80:16:a9:9d:dc:88:12:ef:80:ad:23:36:f7:e7:23: 00:01:74:92:cd:2c:21:87:74:5d:d9:47:f2:42:77: 3d:20:65:bb:4f:7a:5c:40:ec:76:e7:ed:3a:25:c5: 8c:bc:a6:17:c4:1b:33:3e:dd:8e:61:8d:b2:ae:83: 9c:d8:af:cc:99:ba:8c:ba:f2:e1:bf:b9:74:80:22: 76:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6A:FD:EB:6B:DC:3D:B0:AA:F3:34:3B:28:09:CB:1B:E8:6C:BC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/089d5c01-cfcf-37d2-9dfa-f966a06817c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d/0be8264a-e514-463e-8183-9b3e83f9438d.crl X509v3 Authority Key Identifier: keyid:EA:36:C0:3A:42:78:09:A6:73:76:62:12:55:20:CE:23:38:29:78:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0be8264a-e514-463e-8183-9b3e83f9438d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:14:91:42:81:43:99:f8:02:b7:0a:68:4f:e6:d6:fc:1e:82: 23:6f:07:f5:7d:b7:fe:4e:32:24:d2:f2:2d:bb:ab:e2:b0:03: 3f:31:87:33:16:71:6f:1d:a7:18:ae:d1:d9:b3:e4:f1:af:c3: 5f:f0:96:fa:c6:fd:94:7f:0c:22:98:d4:61:0f:a6:58:a5:58: 4c:bd:e9:ef:2f:6f:c2:6e:a8:a2:9e:11:16:09:a0:ee:69:00: 4e:ff:57:1e:70:1d:f0:94:d3:3e:c3:86:15:6e:ca:42:67:e3: cc:f5:81:0a:29:00:c1:7f:ed:13:d3:e2:ee:c4:cc:36:a2:ad: 94:de:4e:6f:f4:ac:95:20:c3:cf:fb:96:5e:ea:70:01:2e:f6: c2:15:64:08:9b:43:00:77:e3:f9:33:c6:b6:99:6f:8a:63:d0: 7e:a4:d0:12:1e:a6:0d:57:f6:c3:ff:dc:9d:58:60:e3:5e:96: 06:9a:80:4d:24:30:48:1e:d9:26:0c:cd:22:33:98:28:6a:de: ba:f6:9b:23:4b:8b:de:10:0d:5f:e6:e8:69:90:80:b4:7f:b0: 0e:1e:41:0d:39:09:8b:95:c0:91:27:a5:bc:4b:48:b0:53:c0: d2:59:22:5b:73:62:e1:17:7d:3d:ae:b3:ae:9a:a5:e4:08:2d: a0:3f:35:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruiWiugUgMBCfj9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGJlODI2NGEtZTUxNC00NjNlLTgxODMtOWIzZTgzZjk0 MzhkMB4XDTI1MDgyMTE2MjAwMVoXDTI1MTExOTE3MjAwMVowLzEtMCsGA1UEAxMk Mjc0ZjE5MGYtNDc3MS00MjIxLTg4OGYtMWI1YjgyMDYwMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp00hq1b6hfKA8Rr5MTAxLLY8AWWNA4H3LQQu FDaI8DQAylv/tNFtUtTDMoGesSAssMrtGWIsDBMvCnoZNEPFR8hZ5HYeeQDLq6Pv wPRBBM9xgtBeGkGEmkUgmnR/qrFYSK8fIp53PRxyYggxH2r3JwS/O2k2sS8oNNAf ud2xwDFyG/kjLidBwAZDZ1++FB6eDYaADp9GvDTNx73WWiuP43g0vFQh92Ae/I8V jbpBbcQyyGaAFqmd3IgS74CtIzb35yMAAXSSzSwhh3Rd2UfyQnc9IGW7T3pcQOx2 5+06JcWMvKYXxBszPt2OYY2yroOc2K/MmbqMuvLhv7l0gCJ2yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBq/etr3D2wqvM0OygJyxvobLxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYmU4 MjY0YS1lNTE0LTQ2M2UtODE4My05YjNlODNmOTQzOGQvMDg5ZDVjMDEtY2ZjZi0z N2QyLTlkZmEtZjk2NmEwNjgxN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGJlODI2NGEtZTUxNC00NjNlLTgx ODMtOWIzZTgzZjk0MzhkLzBiZTgyNjRhLWU1MTQtNDYzZS04MTgzLTliM2U4M2Y5 NDM4ZC5jcmwwHwYDVR0jBBgwFoAU6jbAOkJ4CaZzdmISVSDOIzgpeA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYmU4MjY0YS1lNTE0LTQ2M2UtODE4My05YjNl ODNmOTQzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4J4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsUkUKBQ5n4ArcKaE/m1vwegiNvB/V9t/5OMiTS8i27q+KwAz8xhzMW cW8dpxiu0dmz5PGvw1/wlvrG/ZR/DCKY1GEPplilWEy96e8vb8JuqKKeERYJoO5p AE7/Vx5wHfCU0z7DhhVuykJn48z1gQopAMF/7RPT4u7EzDairZTeTm/0rJUgw8/7 ll7qcAEu9sIVZAibQwB34/kzxraZb4pj0H6k0BIepg1X9sP/3J1YYONelgaagE0k MEge2SYMzSIzmChq3rr2myNLi94QDV/m6GmQgLR/sA4eQQ05CYuVwJEnpbxLSLBT wNJZIltzYuEXfT2us66apeQILaA/NQk= -----END CERTIFICATE-----Generated at Sun Aug 24 09:13:50 2025 by rpki-client