$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa File: 1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa (raw, json) Hash identifier: pLIdX6QmH2xZJ61Fg+BVAqTrIgIwXZvdAWPTdM7QI2w= Subject key identifier: 20:5F:DA:AC:02:5D:CA:6E:B4:F3:6E:92:02:92:A0:0C:18:BA:17:37 Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584B44B1C3FB541CD79179292480 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 399861 IP address blocks: 23.130.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c3:fb:54:1c:d7:91:79:29:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=4a56bfdc-5fc9-4e95-973e-aa6bc7067bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:7f:8e:80:f3:8c:7f:0d:34:10:35:f3:f8: 3c:88:6b:21:21:33:3d:e9:26:f2:da:fb:cf:14:dc: a0:19:b0:f2:5d:92:8a:eb:de:e5:6a:ee:8a:71:f8: 9a:4d:cc:9d:2e:cd:6c:38:82:08:ca:e9:0a:61:62: f0:c4:eb:bd:89:29:64:e8:10:44:22:b0:1d:3b:d1: af:39:fd:5c:e7:7c:1c:4c:5c:71:26:de:51:d1:e2: da:a4:9e:71:ec:cd:9e:e9:c3:85:4e:60:f7:aa:5e: 0e:e7:88:00:5e:41:a4:4d:9d:05:23:32:a3:7b:79: ab:5e:fa:da:ef:ac:c4:85:f1:99:b1:aa:03:78:ce: 27:6a:ef:e2:69:8c:69:fd:f7:aa:70:cb:c3:d5:ad: 3d:e7:08:2c:60:24:2b:e7:36:70:f7:8c:64:8b:bb: 2b:c5:52:30:94:79:a8:f8:28:71:38:ce:11:55:0c: 69:2f:c8:c8:86:79:43:47:ef:56:20:c9:20:cc:61: 33:1e:48:57:06:4f:03:fd:88:20:b7:7a:ab:93:a8: 5b:0d:35:87:02:30:da:c7:87:90:e9:82:54:19:21: 96:eb:a5:6e:7a:ed:15:84:34:a6:c0:74:bd:d2:1f: 01:e7:57:11:c1:a6:ee:2c:58:25:f8:02:70:da:b3: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:DA:AC:02:5D:CA:6E:B4:F3:6E:92:02:92:A0:0C:18:BA:17:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d2:08:38:56:8b:11:6e:ce:d8:bb:72:b5:3b:99:35:eb:9e: 1d:63:ca:80:3a:85:34:b4:66:93:80:f1:5c:61:9a:d3:f1:99: 7e:2b:a3:28:d7:d6:2e:58:49:77:7e:70:fa:19:93:b6:02:f1: b8:0a:26:ac:a9:00:cd:4b:b3:07:ed:f9:f7:1e:78:15:a0:e3: 0f:e6:8b:2c:6d:73:43:50:9b:48:d5:e4:87:25:ad:10:a9:34: 64:14:8d:d4:38:93:f2:da:c6:eb:cd:e1:13:06:ec:84:f8:4b: a8:9a:a6:8d:69:fc:30:3d:7a:6c:3c:3e:a8:59:78:0d:61:95: 6c:68:5c:eb:2b:39:0d:66:11:79:37:5d:dc:2f:74:38:41:3d: ac:25:93:32:db:b1:78:74:ba:21:51:da:77:ad:ba:cd:1e:b5: 82:ae:9e:cb:1e:2d:58:50:af:d6:eb:fb:c9:f6:c3:d2:76:09: 41:db:ff:38:07:ca:d1:28:52:c4:93:bc:55:e7:f4:4d:e3:b9: 0c:fc:e2:03:93:68:3d:f8:de:52:7f:6a:35:cc:e0:32:bd:21: 0b:2f:a1:e8:65:c1:72:04:65:b8:4d:ba:3a:1d:a1:c4:4f:55: ee:9f:4f:92:df:5e:48:2a:69:68:82:0d:03:ac:ee:f6:dc:7e: b1:3a:56:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscP7VBzXkXkpJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk NGE1NmJmZGMtNWZjOS00ZTk1LTk3M2UtYWE2YmM3MDY3YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA449/joDzjH8NNBA18/g8iGshITM96Sby2vvP FNygGbDyXZKK697lau6KcfiaTcydLs1sOIIIyukKYWLwxOu9iSlk6BBEIrAdO9Gv Of1c53wcTFxxJt5R0eLapJ5x7M2e6cOFTmD3ql4O54gAXkGkTZ0FIzKje3mrXvra 76zEhfGZsaoDeM4nau/iaYxp/feqcMvD1a095wgsYCQr5zZw94xki7srxVIwlHmo +ChxOM4RVQxpL8jIhnlDR+9WIMkgzGEzHkhXBk8D/Yggt3qrk6hbDTWHAjDax4eQ 6YJUGSGW66Vueu0VhDSmwHS90h8B51cRwabuLFgl+AJw2rOfPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBf2qwCXcputPNukgKSoAwYuhc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvMWJiMTUyOWYtN2Y0NC0z MDRjLWFmNGUtYjBjM2Q4ZDBlZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4LsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLSCDhWixFuzti7crU7mTXrnh1jyoA6hTS0ZpOA8VxhmtPxmX4royjX 1i5YSXd+cPoZk7YC8bgKJqypAM1Lswft+fceeBWg4w/miyxtc0NQm0jV5IclrRCp NGQUjdQ4k/LaxuvN4RMG7IT4S6iapo1p/DA9emw8PqhZeA1hlWxoXOsrOQ1mEXk3 XdwvdDhBPawlkzLbsXh0uiFR2netus0etYKunsseLVhQr9br+8n2w9J2CUHb/zgH ytEoUsSTvFXn9E3juQz84gOTaD343lJ/ajXM4DK9IQsvoehlwXIEZbhNujodocRP Ve6fT5LfXkgqaWiCDQOs7vbcfrE6VvI= -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:41 2025 by rpki-client