$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/1c82f9e4-a21e-3b28-8fc1-5bd55ec8c903.roa File: 1c82f9e4-a21e-3b28-8fc1-5bd55ec8c903.roa (raw, json) Hash identifier: HQI4cQ1tRMD++l1kt4pThnm416nyUYYMNkpl9KfFYbU= Subject key identifier: C4:06:0B:44:88:D6:A8:87:CD:23:90:57:39:2E:A1:1E:D1:1C:DE:57 Certificate issuer: /CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306 Certificate serial: 010D0C9F4328584B4BAC5417C70255CA0461A7A0 Authority key identifier: 63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/1c82f9e4-a21e-3b28-8fc1-5bd55ec8c903.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 46850 IP address blocks: 23.137.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:54:17:c7:02:55:ca:04:61:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=f32385fb-519e-481b-a0ee-5f94aed86dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:4c:88:c9:4b:5c:fd:0b:bd:78:13:13:71: 6f:15:57:f5:28:af:70:33:5d:ac:48:fc:1f:47:49: 96:2b:e4:11:fa:9f:2c:0d:a9:24:ec:39:ba:69:71: fe:d0:6c:a3:a2:23:15:82:a8:2e:fe:45:9f:71:4e: 15:8e:c2:a0:4a:7f:ae:5b:a7:a8:e0:2b:cf:9c:01: 8d:da:c8:ec:04:96:fb:2f:5f:07:c8:f1:f6:e4:7c: 8c:ba:fe:e7:30:2b:18:53:f8:6a:9a:e8:9f:ca:ee: 0b:45:7b:9c:95:38:4d:d6:bb:30:07:04:40:67:df: ea:76:dd:88:a7:ae:f0:f3:32:50:41:8c:4e:25:45: 77:37:36:b0:5d:46:dd:4e:9b:ad:6b:e8:aa:d8:82: c4:34:98:6b:e5:22:ba:53:e6:2c:5c:a9:c2:1f:f9: 6f:a4:ef:6c:99:4b:55:a1:fa:60:23:32:71:52:0c: 5c:d5:77:50:71:21:2d:af:25:a9:1e:e1:45:29:af: a6:e6:fc:6f:ad:f3:09:9e:49:70:15:96:37:dc:18: 7f:41:69:69:43:16:a9:5a:be:76:27:d9:5d:5f:e6: ca:94:c9:a9:47:a8:87:d0:2c:79:d7:21:95:13:8b: 50:65:49:7c:b1:20:1b:50:48:97:19:21:83:39:0c: 01:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:0B:44:88:D6:A8:87:CD:23:90:57:39:2E:A1:1E:D1:1C:DE:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/1c82f9e4-a21e-3b28-8fc1-5bd55ec8c903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl X509v3 Authority Key Identifier: keyid:63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer sbgp-ipAddrBlock: critical IPv4: 23.137.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:73:d3:07:14:26:b6:64:ac:73:61:ee:12:ad:72:04:d2:8d: bb:6d:f4:de:c4:ca:61:d8:86:fb:97:ca:52:3b:56:03:44:84: 3d:05:14:a3:0c:93:48:8b:6e:cb:c3:4a:94:d1:3b:2d:0f:ba: 9e:e7:5e:24:20:b6:29:1f:5b:22:2e:8b:9b:b0:4f:f0:d0:5c: 53:0f:53:48:65:a5:19:46:cb:28:12:a2:0f:ea:59:57:ce:e4: ef:6c:4e:d7:15:12:b6:03:12:9a:8b:52:7d:b7:71:36:d5:57: fc:16:94:ee:72:0b:b7:cc:c3:e6:eb:28:f1:4e:df:1a:82:8e: 4d:5a:96:28:ae:d4:d5:34:07:9e:2d:29:a9:34:bd:9c:1d:cc: 16:b0:d1:3c:83:ea:46:e7:82:91:c5:ce:73:6f:69:71:4e:36: 6b:12:24:71:40:96:bf:fb:d9:8d:50:28:2a:91:da:48:36:92: 8f:5a:0a:89:3c:8a:59:f1:21:7c:70:ae:95:38:8f:12:5a:cc: 57:75:62:da:09:ce:89:fe:e9:3b:f8:0e:dd:9a:8f:d1:44:10: 59:f7:e1:97:c9:d1:5c:ca:f6:c6:18:3c:da:d6:f5:ea:39:44: 56:ac:e3:26:61:ba:45:63:d2:ef:e0:ca:ea:b5:a0:db:d1:45: 08:1d:89:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrFQXxwJVygRhp6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IwYmJkN2UtY2VjZi00ZjEyLTkwMDktMDQ4YzBjZmJm MzA2MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZjMyMzg1ZmItNTE5ZS00ODFiLWEwZWUtNWY5NGFlZDg2ZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9FMiMlLXP0LvXgTE3FvFVf1KK9wM12sSPwf R0mWK+QR+p8sDakk7Dm6aXH+0GyjoiMVgqgu/kWfcU4VjsKgSn+uW6eo4CvPnAGN 2sjsBJb7L18HyPH25HyMuv7nMCsYU/hqmuifyu4LRXuclThN1rswBwRAZ9/qdt2I p67w8zJQQYxOJUV3NzawXUbdTputa+iq2ILENJhr5SK6U+YsXKnCH/lvpO9smUtV ofpgIzJxUgxc1XdQcSEtryWpHuFFKa+m5vxvrfMJnklwFZY33Bh/QWlpQxapWr52 J9ldX+bKlMmpR6iH0Cx51yGVE4tQZUl8sSAbUEiXGSGDOQwBMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQGC0SI1qiHzSOQVzkuoR7RHN5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBi YmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhjMGNmYmYzMDYvMWM4MmY5ZTQtYTIxZS0z YjI4LThmYzEtNWJkNTVlYzhjOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2IwYmJkN2UtY2VjZi00ZjEyLTkw MDktMDQ4YzBjZmJmMzA2LzNiMGJiZDdlLWNlY2YtNGYxMi05MDA5LTA0OGMwY2Zi ZjMwNi5jcmwwHwYDVR0jBBgwFoAUY9+yo6uZoJShuuid+Uf9EijBrBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBiYmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhj MGNmYmYzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpz0wcUJrZkrHNh7hKtcgTSjbtt9N7EymHYhvuXylI7VgNEhD0FFKMM k0iLbsvDSpTROy0Pup7nXiQgtikfWyIui5uwT/DQXFMPU0hlpRlGyygSog/qWVfO 5O9sTtcVErYDEpqLUn23cTbVV/wWlO5yC7fMw+brKPFO3xqCjk1aliiu1NU0B54t Kak0vZwdzBaw0TyD6kbngpHFznNvaXFONmsSJHFAlr/72Y1QKCqR2kg2ko9aCok8 ilnxIXxwrpU4jxJazFd1YtoJzon+6Tv4Dt2aj9FEEFn34ZfJ0VzK9sYYPNrW9eo5 RFas4yZhukVj0u/gyuq1oNvRRQgdiSI= -----END CERTIFICATE-----Generated at Thu Oct 9 03:37:29 2025 by rpki-client