$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa File: a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa (raw, json) Hash identifier: Zg2PtF4f/o1BwHqKgdu56RnEyTFJRtXAYRu5dPw+Sgw= Subject key identifier: 49:27:0B:C5:10:43:9D:0B:4F:70:BA:E4:A8:46:88:19:57:10:7E:3F Certificate issuer: /CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Certificate serial: 010D0C9F4328584B047C14B11834A0F2C9CAFC60 Authority key identifier: EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 23.165.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:14:b1:18:34:a0:f2:c9:ca:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7b9b28-7934-454a-8b2f-246d8889fdbd Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=0f51aa25-37bb-4b66-affa-98da54bca39d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4d:7e:ca:b7:6f:e2:e2:b9:e4:1e:a5:1a:0e: df:75:42:19:30:e6:bb:db:ca:2c:e6:6b:10:e6:ef: ec:7e:57:8a:0e:ac:52:bf:90:ab:df:e1:bc:31:99: 53:1a:21:fe:af:02:3f:97:a0:72:39:e8:c7:c9:c4: 0e:a1:d6:8c:91:d2:54:e9:c4:69:41:50:0c:e8:8a: 3b:c4:bb:07:7d:91:51:d0:ea:8d:5c:1d:8e:e9:22: 52:50:7d:eb:ba:c0:89:b9:67:96:9b:17:ca:23:48: 26:d8:b6:b1:75:2e:f5:72:0b:d8:45:ed:b3:fc:6e: 89:5e:c8:c0:91:d4:ce:71:e8:b3:1f:8e:73:76:da: d0:bd:db:8d:c1:68:a4:80:03:17:59:c2:2f:66:18: 9d:33:da:72:d4:30:0d:13:43:e0:f3:4f:81:c1:09: 2d:b2:ed:80:64:41:9c:9a:7b:56:31:81:92:e1:47: 71:bd:8f:81:d4:37:c6:f1:d5:2b:81:46:5a:92:e8: 6a:3a:a4:75:90:82:f9:0e:24:e7:3a:d6:3a:f9:ce: c4:90:7e:34:42:1d:59:81:7a:f7:d5:2c:75:72:c5: d3:88:6a:ee:2d:28:44:d7:19:ae:fa:0e:25:56:9c: 57:c6:a1:5b:f8:d0:84:19:2a:f2:b2:ed:a5:a3:b3: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:27:0B:C5:10:43:9D:0B:4F:70:BA:E4:A8:46:88:19:57:10:7E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/a9270aef-9b4e-3df7-aa5b-0b12831a0972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd/1e7b9b28-7934-454a-8b2f-246d8889fdbd.crl X509v3 Authority Key Identifier: keyid:EC:24:DB:21:E5:BE:9B:6B:BA:26:4A:F3:C2:66:4E:76:CE:DD:9B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1e7b9b28-7934-454a-8b2f-246d8889fdbd.cer sbgp-ipAddrBlock: critical IPv4: 23.165.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:0b:6d:29:71:15:8a:08:44:ff:3f:ff:bd:09:e0:54:f7:6a: a1:cb:09:c7:d6:41:57:21:85:34:e9:c6:01:3b:79:93:73:72: fb:52:83:ee:44:93:6d:18:a5:0c:89:17:87:77:2e:0e:58:93: 9c:79:17:11:76:2f:13:79:f2:2e:e5:26:58:cf:ae:17:57:4f: 7b:e0:79:80:58:0d:22:b3:19:b4:36:62:e3:b8:e8:e0:ce:d4: 1a:e8:89:2a:07:f4:52:15:73:1f:66:3c:eb:b0:4c:b5:cc:6f: 80:e5:6a:1d:13:b5:ef:41:df:ca:f9:1c:f0:10:46:d1:fe:9d: 2e:60:e1:6e:af:1e:3a:fe:22:ff:6a:01:e7:7f:f7:0d:01:bc: 1b:b6:52:fd:1b:45:c9:dd:a8:f2:83:77:13:d7:a4:9f:a0:17: 08:04:19:a5:13:98:b5:40:17:1c:3a:b5:aa:b6:13:e6:ad:42: 4f:e7:55:72:a2:3d:dc:f7:2f:a8:09:5c:ad:b4:be:01:26:e8: 57:10:18:a5:3f:c5:dd:1c:cf:da:c8:e0:e7:d2:05:95:6d:1d: b1:e1:02:89:e9:e9:12:a1:78:98:ad:3c:9f:08:af:a4:2d:3b: cf:d4:03:10:3e:6d:e7:57:7e:b8:df:d5:a2:d3:b1:19:67:28: e2:07:a7:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBSxGDSg8snK/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YjliMjgtNzkzNC00NTRhLThiMmYtMjQ2ZDg4ODlm ZGJkMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MGY1MWFhMjUtMzdiYi00YjY2LWFmZmEtOThkYTU0YmNhMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU1+yrdv4uK55B6lGg7fdUIZMOa728os5msQ 5u/sfleKDqxSv5Cr3+G8MZlTGiH+rwI/l6ByOejHycQOodaMkdJU6cRpQVAM6Io7 xLsHfZFR0OqNXB2O6SJSUH3rusCJuWeWmxfKI0gm2LaxdS71cgvYRe2z/G6JXsjA kdTOceizH45zdtrQvduNwWikgAMXWcIvZhidM9py1DANE0Pg80+BwQktsu2AZEGc mntWMYGS4UdxvY+B1DfG8dUrgUZakuhqOqR1kIL5DiTnOtY6+c7EkH40Qh1ZgXr3 1Sx1csXTiGruLShE1xmu+g4lVpxXxqFb+NCEGSrysu2lo7NurwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEknC8UQQ50LT3C65KhGiBlXEH4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdi OWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZkODg4OWZkYmQvYTkyNzBhZWYtOWI0ZS0z ZGY3LWFhNWItMGIxMjgzMWEwOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWU3YjliMjgtNzkzNC00NTRhLThi MmYtMjQ2ZDg4ODlmZGJkLzFlN2I5YjI4LTc5MzQtNDU0YS04YjJmLTI0NmQ4ODg5 ZmRiZC5jcmwwHwYDVR0jBBgwFoAU7CTbIeW+m2u6JkrzwmZOds7dmxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZTdiOWIyOC03OTM0LTQ1NGEtOGIyZi0yNDZk ODg4OWZkYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABALbSlxFYoIRP8//70J4FT3aqHLCcfWQVchhTTpxgE7eZNzcvtSg+5E k20YpQyJF4d3Lg5Yk5x5FxF2LxN58i7lJljPrhdXT3vgeYBYDSKzGbQ2YuO46ODO 1BroiSoH9FIVcx9mPOuwTLXMb4Dlah0Tte9B38r5HPAQRtH+nS5g4W6vHjr+Iv9q Aed/9w0BvBu2Uv0bRcndqPKDdxPXpJ+gFwgEGaUTmLVAFxw6taq2E+atQk/nVXKi Pdz3L6gJXK20vgEm6FcQGKU/xd0cz9rI4OfSBZVtHbHhAonp6RKheJitPJ8Ir6Qt O8/UAxA+bedXfrjf1aLTsRlnKOIHp6Q= -----END CERTIFICATE-----Generated at Wed Oct 8 23:39:10 2025 by rpki-client