$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/233d6b1a-ed28-3854-b560-c782b1a2744f.roa File: 233d6b1a-ed28-3854-b560-c782b1a2744f.roa (raw, json) Hash identifier: 1EBX46tSk1jK260J3jf5kjLx3Wh2qJ1bVWs3LD4HiF0= Subject key identifier: 1B:7C:F9:ED:29:93:D6:20:EC:EC:05:B5:23:03:4D:58:0C:2D:E4:55 Certificate issuer: /CN=897be676-f6c1-4efc-8bef-a425edb4f479 Certificate serial: 010D0C9F4328584B047C2396CD106EAA8D982400 Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/233d6b1a-ed28-3854-b560-c782b1a2744f.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 5065 IP address blocks: 23.129.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:23:96:cd:10:6e:aa:8d:98:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=603bbe4c-36d3-444f-a39d-702c5c4d5ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:04:70:54:51:24:0d:60:ad:32:3a:bd:fa: 09:29:f8:50:67:c1:d9:a7:84:66:fd:32:b6:90:26: 37:ee:e1:c0:7f:e2:da:3f:1c:b4:d8:0d:24:7c:22: ec:c9:9d:ec:bc:3c:45:21:be:fb:1a:71:be:97:1d: 24:c2:db:92:2d:3a:f0:cc:51:e8:7f:6e:e0:a3:e4: c6:2b:50:b8:8a:7b:15:04:50:20:10:8a:92:27:64: 27:35:2a:d1:3c:cc:54:71:89:3a:ca:b1:d8:21:77: f0:4f:0e:81:89:a1:36:52:f9:b4:0f:6f:1c:b2:f3: 39:65:eb:a2:01:a0:c4:26:7c:8a:70:aa:3e:55:22: 7c:31:67:4e:44:6b:ab:6d:b5:e0:21:a7:87:19:83: 20:bb:79:bb:f3:e5:56:54:71:8c:6c:6d:57:42:a3: e8:d7:65:a3:d9:cc:8d:55:37:c4:9b:12:c8:cf:01: c4:a9:fc:0a:73:71:47:30:d8:1e:bf:c3:54:7a:18: ea:51:56:64:16:b0:3b:0b:ce:5d:3f:6f:7c:24:45: 09:a1:64:44:b2:5d:fe:3e:03:e4:61:cb:49:b8:c4: 74:81:5d:43:3f:67:72:5e:a5:1b:45:18:3e:7c:f6: 1f:01:ac:58:8d:62:e3:5e:c9:cc:b1:dd:01:65:30: b8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7C:F9:ED:29:93:D6:20:EC:EC:05:B5:23:03:4D:58:0C:2D:E4:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/233d6b1a-ed28-3854-b560-c782b1a2744f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl X509v3 Authority Key Identifier: keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer sbgp-ipAddrBlock: critical IPv4: 23.129.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5c:8e:59:6a:1e:e8:96:81:57:9d:cd:00:3c:4c:5a:ca:9c: e1:7b:6a:88:d4:e3:45:50:d2:f8:71:d2:f7:b8:aa:54:2d:d2: c5:59:b6:bc:d1:b5:2d:60:70:57:fd:ae:8f:8c:cb:0d:43:aa: 5b:67:75:83:3b:47:05:22:c1:e8:60:49:25:be:14:3a:d2:07: 78:f6:e8:26:98:ae:2d:07:86:22:3b:d4:2d:2a:e1:ff:b1:ec: 14:40:6a:b6:9a:3c:7a:94:0c:7c:23:e6:0d:b9:38:25:c8:08: b3:6e:d5:52:0e:02:20:4c:14:c7:19:82:00:4f:8a:b3:cd:50: 66:5d:42:81:84:01:a8:f1:55:f0:3f:b0:0b:5f:c7:f9:13:12: a0:aa:86:22:ea:e8:be:f4:40:1c:4e:54:24:48:00:fe:04:91: c0:9f:c9:48:56:03:9d:e8:05:cb:8d:8f:0b:b8:8e:a5:9b:a9: 91:39:9a:30:79:91:05:e8:56:a2:3c:16:00:a5:97:8e:a0:f5: 21:63:31:8f:a6:cf:d2:14:39:99:7d:9e:57:99:d8:87:ed:59: da:53:52:31:26:ed:2d:e9:a4:90:96:11:ff:c8:12:68:59:16: 42:8b:f9:6a:9e:1d:84:6d:e2:4c:cc:92:29:5e:a5:4a:ef:cb: a0:0e:83:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfCOWzRBuqo2YJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk3YmU2NzYtZjZjMS00ZWZjLThiZWYtYTQyNWVkYjRm NDc5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjAzYmJlNGMtMzZkMy00NDRmLWEzOWQtNzAyYzVjNGQ1ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoisEcFRRJA1grTI6vfoJKfhQZ8HZp4Rm/TK2 kCY37uHAf+LaPxy02A0kfCLsyZ3svDxFIb77GnG+lx0kwtuSLTrwzFHof27go+TG K1C4insVBFAgEIqSJ2QnNSrRPMxUcYk6yrHYIXfwTw6BiaE2Uvm0D28csvM5Zeui AaDEJnyKcKo+VSJ8MWdORGurbbXgIaeHGYMgu3m78+VWVHGMbG1XQqPo12Wj2cyN VTfEmxLIzwHEqfwKc3FHMNgev8NUehjqUVZkFrA7C85dP298JEUJoWREsl3+PgPk YctJuMR0gV1DP2dyXqUbRRg+fPYfAaxYjWLjXsnMsd0BZTC4BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt8+e0pk9Yg7OwFtSMDTVgMLeRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84OTdi ZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1ZWRiNGY0NzkvMjMzZDZiMWEtZWQyOC0z ODU0LWI1NjAtYzc4MmIxYTI3NDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODk3YmU2NzYtZjZjMS00ZWZjLThi ZWYtYTQyNWVkYjRmNDc5Lzg5N2JlNjc2LWY2YzEtNGVmYy04YmVmLWE0MjVlZGI0 ZjQ3OS5jcmwwHwYDVR0jBBgwFoAUyLo9e/15omcGXuvwTgOpZHeRROQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84OTdiZTY3Ni1mNmMxLTRlZmMtOGJlZi1hNDI1 ZWRiNGY0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARcjllqHuiWgVedzQA8TFrKnOF7aojU40VQ0vhx0ve4qlQt0sVZtrzR tS1gcFf9ro+Myw1DqltndYM7RwUiwehgSSW+FDrSB3j26CaYri0HhiI71C0q4f+x 7BRAaraaPHqUDHwj5g25OCXICLNu1VIOAiBMFMcZggBPirPNUGZdQoGEAajxVfA/ sAtfx/kTEqCqhiLq6L70QBxOVCRIAP4EkcCfyUhWA53oBcuNjwu4jqWbqZE5mjB5 kQXoVqI8FgCll46g9SFjMY+mz9IUOZl9nleZ2IftWdpTUjEm7S3ppJCWEf/IEmhZ FkKL+WqeHYRt4kzMkilepUrvy6AOg6Y= -----END CERTIFICATE-----Generated at Fri Oct 10 22:06:52 2025 by rpki-client