$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/23bdd38f-d3f4-35ce-8447-57cc5c058cef.roa File: 23bdd38f-d3f4-35ce-8447-57cc5c058cef.roa (raw, json) Hash identifier: HIPjggsFA2YP4dltf0AHAHQ9gLpUrkUsDHSLV15sXAU= Subject key identifier: 7A:DA:2B:D3:34:E7:74:38:5B:80:9B:7E:F1:48:AF:25:BA:45:C1:29 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6C75253B125CE4B64A6380 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/23bdd38f-d3f4-35ce-8447-57cc5c058cef.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 174 IP address blocks: 170.130.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:75:25:3b:12:5c:e4:b6:4a:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=11317dc2-c993-49ec-b7c9-22d1bd3c6481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:0c:51:03:d7:e7:aa:7c:28:fe:dd:07:88: 68:9c:46:6d:2a:ab:df:f4:e4:94:42:45:fd:72:1e: 0b:d0:83:44:07:52:b1:88:d6:d1:5e:1b:10:aa:6a: 55:18:a5:2d:b9:f9:ac:ad:84:9a:dd:ec:f9:dd:b2: b0:44:03:40:0e:26:73:f6:1a:96:46:cf:84:93:5f: a2:82:49:74:96:b0:8e:f1:55:83:b2:65:5e:51:82: 87:c0:80:8b:c3:24:f0:e9:f2:79:e7:63:d6:f8:00: 7e:ad:bc:bb:a2:98:96:36:e0:02:25:c1:f4:91:3c: 3e:69:8e:56:58:9f:ea:d5:b5:94:3b:7d:2d:f3:74: 15:79:e2:50:d7:44:b3:cb:29:61:26:fe:37:e6:73: 7a:2e:c8:72:60:64:98:73:a2:6a:02:9d:85:7f:9a: a1:66:88:5e:a0:91:ed:da:b5:df:98:55:8c:6f:25: 7d:6b:d8:16:2e:61:ac:2b:6c:87:36:4b:0e:6f:28: 75:39:a6:cb:f8:23:76:0c:4f:d3:28:73:d9:26:6e: 70:29:b7:9e:6b:7d:ae:3a:f4:a7:90:c0:06:16:10: a4:d1:0c:a2:cb:32:9f:91:01:a1:1a:4e:21:99:23: 09:35:64:ca:49:3b:85:20:89:bc:65:a6:e3:5a:b9: cd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DA:2B:D3:34:E7:74:38:5B:80:9B:7E:F1:48:AF:25:BA:45:C1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/23bdd38f-d3f4-35ce-8447-57cc5c058cef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:69:9b:29:89:40:ef:8f:b3:b5:85:d3:f0:8c:92:ad:35:f2: 11:cf:73:c3:15:f7:9e:aa:3c:78:29:e7:0a:fa:af:e4:09:be: d0:e9:af:ba:da:5a:39:cd:cd:5f:e5:26:f8:81:17:4e:73:a4: 36:a2:c8:01:a2:71:dc:be:7d:83:8b:85:79:41:99:db:ba:f9: a2:6c:ec:6b:8d:bd:37:fe:14:b5:aa:e6:22:90:77:bd:54:75: 7c:6a:69:75:35:56:7f:39:36:ed:dc:14:0e:dd:2f:ee:8b:6b: ba:ee:21:b0:92:8b:62:5e:7a:90:ac:25:2e:dc:4f:b7:5f:27: a5:e2:f0:6a:e4:61:3d:1d:8e:c1:d8:2a:99:74:37:94:0c:34: 3f:c2:1c:34:97:cb:49:1c:e7:6d:c6:8e:43:45:2b:cd:23:6d: ca:3f:e9:e4:b8:8e:7f:68:83:70:b1:b5:9c:b4:03:be:32:7d: f4:5c:e1:a4:f2:cc:b8:9c:c6:3b:80:92:ce:ac:a0:50:b6:da: 1d:9e:88:9c:ca:93:82:fc:5b:69:e5:d7:19:17:57:d1:ec:37: c1:23:22:c6:5d:a5:18:31:c8:5e:32:35:fc:a6:d2:df:25:05: 38:fc:cc:ec:b5:d3:df:d5:5b:5d:4e:55:7d:c8:74:0d:45:68: 16:23:d9:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHUlOxJc5LZKY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MTEzMTdkYzItYzk5My00OWVjLWI3YzktMjJkMWJkM2M2NDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKIMUQPX56p8KP7dB4honEZtKqvf9OSUQkX9 ch4L0INEB1KxiNbRXhsQqmpVGKUtufmsrYSa3ez53bKwRANADiZz9hqWRs+Ek1+i gkl0lrCO8VWDsmVeUYKHwICLwyTw6fJ552PW+AB+rby7opiWNuACJcH0kTw+aY5W WJ/q1bWUO30t83QVeeJQ10SzyylhJv435nN6LshyYGSYc6JqAp2Ff5qhZoheoJHt 2rXfmFWMbyV9a9gWLmGsK2yHNksObyh1OabL+CN2DE/TKHPZJm5wKbeea32uOvSn kMAGFhCk0QyiyzKfkQGhGk4hmSMJNWTKSTuFIIm8ZabjWrnNxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHraK9M053Q4W4CbfvFIryW6RcEpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMjNiZGQzOGYtZDNmNC0z NWNlLTg0NDctNTdjYzVjMDU4Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqoInMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVpmymJQO+Ps7WF0/CMkq018hHPc8MV956qPHgp5wr6r+QJvtDpr7ra WjnNzV/lJviBF05zpDaiyAGicdy+fYOLhXlBmdu6+aJs7GuNvTf+FLWq5iKQd71U dXxqaXU1Vn85Nu3cFA7dL+6La7ruIbCSi2JeepCsJS7cT7dfJ6Xi8GrkYT0djsHY Kpl0N5QMND/CHDSXy0kc523GjkNFK80jbco/6eS4jn9og3CxtZy0A74yffRc4aTy zLicxjuAks6soFC22h2eiJzKk4L8W2nl1xkXV9HsN8EjIsZdpRgxyF4yNfym0t8l BTj8zOy109/VW11OVX3IdA1FaBYj2WQ= -----END CERTIFICATE-----Generated at Wed Oct 8 15:42:56 2025 by rpki-client