$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/1245f871-ebb3-3540-bbf3-87aec2004349.roa File: 1245f871-ebb3-3540-bbf3-87aec2004349.roa (raw, json) Hash identifier: 4uEqUYwzzBHrEAVWJUBUy+Y2fleMt1I/wSZF6E6SJyo= Subject key identifier: 67:51:52:34:CD:62:38:9F:55:38:4C:64:DD:B0:92:B7:BF:18:A4:0E Certificate issuer: /CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Certificate serial: 010D0C9F4328584B41E70A1E4DAA3F07A2874380 Authority key identifier: AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/1245f871-ebb3-3540-bbf3-87aec2004349.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 7819 IP address blocks: 23.150.192.0/24 maxlen: 24 2604:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0a:1e:4d:aa:3f:07:a2:87:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=9839b91b-73c0-4b0b-bb81-f1c6f3e78609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:fd:2b:42:ca:0d:66:c0:6a:9c:fe:cc:71: 08:34:35:ec:11:73:b3:ad:72:a4:a8:25:52:fd:3f: 79:76:f2:e2:9f:fa:b9:c6:a6:4b:5e:86:48:4d:c1: 9a:75:b7:cf:a0:45:8b:bf:f0:9d:a4:92:52:a6:30: c2:9e:08:d0:45:0f:73:64:43:62:96:e3:c4:06:90: d5:7c:51:c3:fa:2b:9c:6f:52:ed:2c:17:8c:75:f0: da:00:48:80:d3:a9:e7:e6:f1:4f:99:3b:ef:c8:ba: ed:22:7c:51:cf:90:da:e5:80:24:ef:8f:c3:41:b2: 86:cb:a4:09:97:61:a8:35:65:9b:67:63:bf:7f:be: c5:f5:98:67:c8:5c:be:d8:8a:89:9d:c5:4f:e0:f2: 29:2a:4b:2d:f0:c7:f9:4b:f1:5f:ae:b2:9f:67:60: 94:ba:bc:68:59:34:33:dc:15:6f:95:79:8f:2e:e3: 42:d0:9f:62:fe:32:f2:17:b2:1c:52:1e:66:b4:e1: e5:c8:fc:32:3a:b4:38:25:d6:db:f7:40:20:5c:13: 29:11:14:99:02:08:55:82:33:b2:46:ad:af:d4:fd: bb:4f:d9:e9:78:f3:a4:1c:86:19:80:18:1b:08:59: 06:db:a5:c4:24:e1:a4:ba:89:1a:d4:6e:d3:10:36: cf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:51:52:34:CD:62:38:9F:55:38:4C:64:DD:B0:92:B7:BF:18:A4:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/1245f871-ebb3-3540-bbf3-87aec2004349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl X509v3 Authority Key Identifier: keyid:AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer sbgp-ipAddrBlock: critical IPv4: 23.150.192.0/24 IPv6: 2604:70c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:17:b9:9c:df:aa:fa:d9:22:d0:3d:72:55:09:5e:4d:71:59: 98:61:b7:03:5b:14:3e:25:7f:fb:a0:01:7f:77:b6:d8:7d:f1: a5:f4:f1:6c:50:03:5f:a2:e0:3f:73:71:b7:4e:38:c3:c4:65: c0:74:d6:d5:d3:ee:ef:77:00:21:88:93:38:93:0d:b9:47:4c: be:0b:a2:fa:4c:5c:e8:83:6f:47:2d:81:7d:b0:f7:fa:f4:6f: 40:64:cb:a6:30:3f:42:f8:04:84:55:a4:82:d7:9b:07:6a:35: 4f:99:b6:12:70:19:15:60:0e:1f:f7:7c:80:2e:86:72:20:c8: c6:58:bd:32:52:34:79:5d:ab:f3:5b:db:c8:21:4c:00:69:67: 9d:fa:1c:5b:e9:65:41:e9:34:ab:67:da:2a:49:25:0a:95:2c: 7b:bd:4c:ec:dc:4d:76:da:8f:38:c0:82:d3:80:ec:5d:d6:59: 1f:68:a1:48:43:c5:4a:5e:9c:a8:1c:65:00:bb:73:8a:1f:e1: fd:4f:e0:c6:81:22:89:26:8b:1d:c9:ff:de:df:37:4c:3f:c7: f9:f6:91:e9:b3:9c:93:58:1d:d5:f0:58:1e:c6:dd:eb:30:af: b1:62:d6:39:84:24:78:63:dd:2f:bd:d6:2e:da:d4:e1:91:12: af:e2:70:89 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtB5woeTao/B6KHQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjZWM3N2ItM2Q1YS00ODk2LWI5ZWQtYjViNDdiMWJi YWRiMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk OTgzOWI5MWItNzNjMC00YjBiLWJiODEtZjFjNmYzZTc4NjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLH9K0LKDWbAapz+zHEINDXsEXOzrXKkqCVS /T95dvLin/q5xqZLXoZITcGadbfPoEWLv/CdpJJSpjDCngjQRQ9zZENiluPEBpDV fFHD+iucb1LtLBeMdfDaAEiA06nn5vFPmTvvyLrtInxRz5Da5YAk74/DQbKGy6QJ l2GoNWWbZ2O/f77F9ZhnyFy+2IqJncVP4PIpKkst8Mf5S/FfrrKfZ2CUurxoWTQz 3BVvlXmPLuNC0J9i/jLyF7IcUh5mtOHlyPwyOrQ4Jdbb90AgXBMpERSZAghVgjOy Rq2v1P27T9npePOkHIYZgBgbCFkG26XEJOGkuoka1G7TEDbP7wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFGdRUjTNYjifVThMZN2wkre/GKQOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmNl Yzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0N2IxYmJhZGIvMTI0NWY4NzEtZWJiMy0z NTQwLWJiZjMtODdhZWMyMDA0MzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjZWM3N2ItM2Q1YS00ODk2LWI5 ZWQtYjViNDdiMWJiYWRiL2FmY2VjNzdiLTNkNWEtNDg5Ni1iOWVkLWI1YjQ3YjFi YmFkYi5jcmwwHwYDVR0jBBgwFoAUr1xSMdWXONfwyewybIHwh/P+XfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmNlYzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0 N2IxYmJhZGIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5bAMA0E AgACMAcDBQAmBHDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFIXuZzfqvrZItA9clUJXk1xWZhhtwNbFD4l f/ugAX93tth98aX08WxQA1+i4D9zcbdOOMPEZcB01tXT7u93ACGIkziTDblHTL4L ovpMXOiDb0ctgX2w9/r0b0Bky6YwP0L4BIRVpILXmwdqNU+ZthJwGRVgDh/3fIAu hnIgyMZYvTJSNHldq/Nb28ghTABpZ536HFvpZUHpNKtn2ipJJQqVLHu9TOzcTXba jzjAgtOA7F3WWR9ooUhDxUpenKgcZQC7c4of4f1P4MaBIokmix3J/97fN0w/x/n2 kemznJNYHdXwWB7G3eswr7Fi1jmEJHhj3S+91i7a1OGREq/icIk= -----END CERTIFICATE-----Generated at Fri Oct 10 17:36:55 2025 by rpki-client