$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa File: 07cd9fc5-1051-39bc-bd56-dadd655c312e.roa (raw, json) Hash identifier: O7PhFsc+kQ9wJAHyTAAIvrx3uDk6/dq2frlexECW3t4= Subject key identifier: 99:45:16:3A:4F:32:EB:1D:E7:FD:A9:59:44:CE:7D:81:58:2A:AE:6A Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584B758C94187300C1B945512000 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 400226 IP address blocks: 23.128.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:94:18:73:00:c1:b9:45:51:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=94bd1d0e-5bed-4a7e-bd47-72cce680df3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:59:67:d7:c0:94:1d:df:67:b7:bd:31:c9:43: ab:93:4d:49:2b:51:89:c0:4a:7f:58:e8:7a:d2:f3: 31:d1:b6:b8:ab:6b:5e:3c:2b:65:37:a4:b4:eb:22: 05:bf:2c:cd:c2:c6:c9:6d:15:f7:19:f5:be:fc:42: 85:a4:78:3b:62:9e:91:36:81:e0:1a:e3:de:78:e7: 53:61:80:c9:3d:65:85:2d:89:60:f5:e7:a6:2e:43: 02:24:e9:7b:12:9c:c5:2b:66:02:4c:8d:de:2e:31: 95:e6:ee:42:4b:10:bf:83:2b:68:45:5d:b2:4b:e7: 57:34:ce:f4:12:bc:91:01:8a:8f:33:fd:f9:59:ff: 22:f5:63:f6:bc:0f:10:e2:ce:96:09:0e:3b:b1:45: e3:bd:15:79:96:3e:8e:9d:51:31:2c:6e:ed:20:3b: db:1e:c5:2d:b7:37:33:ad:0a:af:94:7e:46:a8:89: 02:7c:91:cc:69:f2:76:e3:50:3f:0a:e4:3f:1e:80: c9:48:25:04:ea:a1:e8:ac:b3:c5:82:a4:10:2f:fb: 50:87:a5:38:07:01:f0:7a:c1:30:00:b0:d8:85:c7: 2f:de:cd:5e:02:10:2e:a5:89:49:6c:23:fa:be:64: ab:71:38:63:99:77:c0:46:55:88:5a:d9:45:3c:cb: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:45:16:3A:4F:32:EB:1D:E7:FD:A9:59:44:CE:7D:81:58:2A:AE:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:95:59:44:79:9e:ed:a4:79:1d:80:71:25:3f:b6:de:f0:40: 42:0c:24:5d:e0:51:cf:41:d8:49:37:11:5e:d5:5e:54:bc:17: 32:76:17:d9:fa:43:69:88:27:46:7f:01:27:b4:f3:cd:7d:66: a9:91:d9:a8:2c:a5:fa:1c:25:a2:30:fd:9b:45:69:bc:db:a7: d7:30:d8:47:11:79:c1:4d:2d:54:0b:30:bf:b9:83:1b:d3:cd: f6:00:cf:30:c3:d7:de:91:8c:00:b5:4b:8c:ed:2b:ca:1e:ea: 60:1c:4c:60:d6:c9:5b:d6:e4:f7:43:73:c6:42:ac:48:58:2e: 26:f2:88:a7:ac:02:09:d0:ae:a0:cc:1a:df:40:d0:9b:52:51: d5:4d:67:b3:a1:44:57:0d:e5:b8:c9:0f:13:89:9e:25:dc:d3: 4e:87:1c:b1:1c:ae:1e:e6:92:a3:ac:88:5a:3a:b9:3c:73:9f: b5:76:7d:0d:0e:2b:aa:0f:c6:49:0c:58:15:e0:d1:8c:22:76: 6b:1f:ce:35:93:c3:93:eb:61:7c:0e:a6:01:b4:15:ed:d3:71: d0:aa:57:36:e0:bc:8b:17:2a:1a:61:c5:e9:9f:0d:9d:f2:21: 85:3a:6a:e5:2a:c9:e3:3a:0c:93:9d:a1:d7:ad:c8:5c:5c:57: ae:3a:0d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJQYcwDBuUVRIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk OTRiZDFkMGUtNWJlZC00YTdlLWJkNDctNzJjY2U2ODBkZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51ln18CUHd9nt70xyUOrk01JK1GJwEp/WOh6 0vMx0ba4q2tePCtlN6S06yIFvyzNwsbJbRX3GfW+/EKFpHg7Yp6RNoHgGuPeeOdT YYDJPWWFLYlg9eemLkMCJOl7EpzFK2YCTI3eLjGV5u5CSxC/gytoRV2yS+dXNM70 EryRAYqPM/35Wf8i9WP2vA8Q4s6WCQ47sUXjvRV5lj6OnVExLG7tIDvbHsUttzcz rQqvlH5GqIkCfJHMafJ241A/CuQ/HoDJSCUE6qHorLPFgqQQL/tQh6U4BwHwesEw ALDYhccv3s1eAhAupYlJbCP6vmSrcThjmXfARlWIWtlFPMs2/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlFFjpPMusd5/2pWUTOfYFYKq5qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMDdjZDlmYzUtMTA1MS0z OWJjLWJkNTYtZGFkZDY1NWMzMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmVWUR5nu2keR2AcSU/tt7wQEIMJF3gUc9B2Ek3EV7VXlS8FzJ2F9n6 Q2mIJ0Z/ASe08819ZqmR2agspfocJaIw/ZtFabzbp9cw2EcRecFNLVQLML+5gxvT zfYAzzDD196RjAC1S4ztK8oe6mAcTGDWyVvW5PdDc8ZCrEhYLibyiKesAgnQrqDM Gt9A0JtSUdVNZ7OhRFcN5bjJDxOJniXc006HHLEcrh7mkqOsiFo6uTxzn7V2fQ0O K6oPxkkMWBXg0YwidmsfzjWTw5PrYXwOpgG0Fe3TcdCqVzbgvIsXKhphxemfDZ3y IYU6auUqyeM6DJOdodetyFxcV646DeQ= -----END CERTIFICATE-----Generated at Fri Oct 10 20:03:33 2025 by rpki-client