$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/81245cee-cdb6-3240-b06f-beea9153778f.roa File: 81245cee-cdb6-3240-b06f-beea9153778f.roa (raw, json) Hash identifier: vMXIy23J/A0QCHKu2XV8cZ6Dde8wSOtVVMhpVoTkPSo= Subject key identifier: F7:A7:60:16:4F:A1:5C:68:78:57:68:96:E6:7B:D2:35:71:EA:D8:E2 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584B110C0A052498FF1AF1B64C40 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/81245cee-cdb6-3240-b06f-beea9153778f.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 12083 IP address blocks: 23.28.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0a:05:24:98:ff:1a:f1:b6:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=53ba56c3-a0be-4208-a6ad-e98456556b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:89:73:fa:c4:b1:4f:95:bc:e6:6f:61:5b: 5c:e1:f5:78:f7:74:1e:f9:35:18:8d:13:77:35:0b: 83:45:67:4c:19:d5:9f:58:c1:6b:0b:83:93:b8:e7: 0b:0c:e1:22:cb:b9:21:fe:dc:0a:b6:fe:b3:1b:82: 51:1b:f0:8f:f8:48:ea:3e:3a:98:06:2e:31:1e:20: dc:83:2b:8c:94:38:00:7c:0d:43:cc:c1:af:4d:82: 7b:e0:80:e4:7a:da:67:3d:4b:92:26:ad:cb:e2:10: 41:b5:de:4d:87:98:72:a7:97:4b:a4:b5:a4:fe:64: 9d:62:e3:c6:cf:22:36:85:13:23:f5:86:d3:d6:1b: 01:89:90:66:53:d6:99:7c:2b:8c:4c:45:dd:f9:fb: c9:f2:35:85:b1:c0:a3:79:9d:a0:4a:10:cc:9e:b0: 80:dd:7c:97:a7:fc:f4:61:07:bb:76:9f:41:d5:26: 59:62:cb:a8:8f:fa:78:92:aa:e9:71:25:8f:9d:d0: a0:f0:00:bc:80:0a:24:37:64:2e:7b:62:dd:d9:53: 6c:84:7e:f2:b9:08:2e:3d:11:af:b3:59:97:7a:81: 31:f5:18:f8:7f:a0:e2:45:98:90:08:87:eb:e9:16: f6:1c:01:d0:86:15:97:d7:5a:ee:30:64:18:6e:bc: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A7:60:16:4F:A1:5C:68:78:57:68:96:E6:7B:D2:35:71:EA:D8:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/81245cee-cdb6-3240-b06f-beea9153778f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 23.28.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:25:5d:18:5b:22:18:71:1b:9a:aa:77:83:ee:89:ef:aa:41: 62:24:ef:9a:0b:90:80:cd:73:44:a9:5c:aa:2b:1a:b3:74:0d: 2e:d0:8e:d1:03:57:c2:a2:04:7a:e3:a0:5f:1a:6a:53:f7:05: 80:19:80:3b:85:99:84:19:57:01:fc:c4:68:36:f9:63:a5:d9: 4a:dd:61:1d:bf:d4:40:5f:39:b7:d5:1b:45:4d:ae:11:e7:e8: 3f:f2:11:34:0b:e4:a2:3d:34:5b:6a:81:55:8d:87:39:96:35: 79:a2:4c:b3:31:49:c7:28:93:27:86:5c:a3:5a:9f:79:34:84: b9:3d:f9:b8:41:44:57:f4:7f:9c:95:ef:8f:ac:e6:59:81:af: 74:55:12:f0:53:cb:4d:14:de:bd:fa:eb:f9:bb:69:80:18:91: e2:9b:46:58:28:a4:86:31:91:4c:4b:89:12:6c:f3:0b:57:15: 86:87:36:16:4c:f1:d1:13:28:11:e3:42:61:44:60:06:e0:69: 73:83:89:ed:62:d0:1c:0d:73:dd:81:4d:7d:bd:34:d5:ff:bf: fc:40:b1:1c:b5:1c:d8:d8:b2:be:f9:52:51:4d:8f:c4:3b:d3: b7:ef:27:e4:0c:1c:6a:98:72:e2:f8:93:9c:5a:0b:ca:96:02: 70:f5:70:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAoFJJj/GvG2TEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk NTNiYTU2YzMtYTBiZS00MjA4LWE2YWQtZTk4NDU2NTU2YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2mJc/rEsU+VvOZvYVtc4fV493Qe+TUYjRN3 NQuDRWdMGdWfWMFrC4OTuOcLDOEiy7kh/twKtv6zG4JRG/CP+EjqPjqYBi4xHiDc gyuMlDgAfA1DzMGvTYJ74IDketpnPUuSJq3L4hBBtd5Nh5hyp5dLpLWk/mSdYuPG zyI2hRMj9YbT1hsBiZBmU9aZfCuMTEXd+fvJ8jWFscCjeZ2gShDMnrCA3XyXp/z0 YQe7dp9B1SZZYsuoj/p4kqrpcSWPndCg8AC8gAokN2Que2Ld2VNshH7yuQguPRGv s1mXeoEx9Rj4f6DiRZiQCIfr6Rb2HAHQhhWX11ruMGQYbrx6xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPenYBZPoVxoeFdoluZ70jVx6tjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvODEyNDVjZWUtY2RiNi0z MjQwLWIwNmYtYmVlYTkxNTM3NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFxxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABElXRhbIhhxG5qqd4Puie+qQWIk75oLkIDNc0SpXKorGrN0DS7QjtED V8KiBHrjoF8aalP3BYAZgDuFmYQZVwH8xGg2+WOl2UrdYR2/1EBfObfVG0VNrhHn 6D/yETQL5KI9NFtqgVWNhzmWNXmiTLMxSccokyeGXKNan3k0hLk9+bhBRFf0f5yV 74+s5lmBr3RVEvBTy00U3r366/m7aYAYkeKbRlgopIYxkUxLiRJs8wtXFYaHNhZM 8dETKBHjQmFEYAbgaXODie1i0BwNc92BTX29NNX/v/xAsRy1HNjYsr75UlFNj8Q7 07fvJ+QMHGqYcuL4k5xaC8qWAnD1cBE= -----END CERTIFICATE-----Generated at Sat Oct 11 15:53:26 2025 by rpki-client