$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/a76dc321-3c7b-30f3-8250-9517751a9a51.roa File: a76dc321-3c7b-30f3-8250-9517751a9a51.roa (raw, json) Hash identifier: U/FBckR+SIXRgyDSY0way8yIKmOz2d28ZotdWz1mEqE= Subject key identifier: B4:4B:FB:1D:53:1B:F7:DA:11:22:92:B9:04:B9:0B:FC:2B:FD:AC:02 Certificate issuer: /CN=d7396eb8-1550-4d28-9285-c71c97fd087d Certificate serial: 010D0C9F4328584B44B1C3ACB9DD235FE3DF6F80 Authority key identifier: FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/a76dc321-3c7b-30f3-8250-9517751a9a51.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 399861 IP address blocks: 23.130.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c3:ac:b9:dd:23:5f:e3:df:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7396eb8-1550-4d28-9285-c71c97fd087d Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=8f6bd620-b79d-4255-9afc-0f178a77c00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:a5:6a:7c:3e:d0:3b:6e:f1:5c:28:82:79: 70:22:f8:0b:e0:fa:9e:06:de:f1:b2:6f:fb:9d:fc: 14:0d:f6:d2:ba:fe:0b:fb:21:f0:a7:34:a6:e6:d0: 88:76:12:b4:c4:5b:6d:45:bb:cf:e0:48:bf:57:77: e2:92:97:02:03:a4:9c:bc:dd:0e:3e:ac:80:c3:34: 3a:ef:24:43:80:db:f6:a4:c7:a9:18:41:fa:66:4d: 12:41:e3:89:1c:66:5c:0a:f0:d9:61:30:c3:7c:f5: 6f:ff:b6:6b:23:99:6a:17:2c:26:17:66:15:8c:b2: 58:c5:07:54:8e:86:e4:c0:e4:80:45:50:2b:ab:31: f2:67:fc:32:05:90:1f:c4:17:d6:14:9c:26:5e:ef: aa:f6:d4:64:73:ef:b4:42:0b:31:70:6f:76:e9:ad: 75:42:57:1b:fd:a5:d0:85:6e:52:03:f4:d1:25:a7: 3e:e8:27:a1:12:66:bb:c1:c5:94:8b:e3:a5:76:7b: 93:4f:27:b8:4b:04:87:9a:7c:4c:b2:cd:27:b4:eb: b4:bb:5c:02:52:b2:1c:2e:b4:39:d4:6a:94:11:30: 8a:fd:4c:5b:f0:3a:c7:bd:f9:f5:76:c3:23:11:f8: 57:c5:ce:4e:b7:e6:af:27:07:2f:a3:ff:a5:17:95: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4B:FB:1D:53:1B:F7:DA:11:22:92:B9:04:B9:0B:FC:2B:FD:AC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/a76dc321-3c7b-30f3-8250-9517751a9a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl X509v3 Authority Key Identifier: keyid:FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:91:a4:71:b8:1e:3b:bc:53:aa:c3:99:72:a9:54:0e:ae:1a: ef:a2:d3:bd:0b:16:ea:23:4d:11:64:60:f5:4c:11:f0:13:15: bc:0c:56:c9:06:9a:5c:af:1b:0a:c9:06:1c:ce:88:bc:98:e4: c6:b7:59:4e:33:43:5e:98:29:97:b1:b7:29:f9:96:1f:ca:e6: bc:cd:e7:dc:c9:f6:ae:d9:9d:6c:08:86:17:86:a5:f4:86:6d: c9:50:80:8e:17:ed:39:df:05:5d:6c:61:55:ff:28:13:64:b0: 94:28:26:43:d7:c2:2a:09:7c:78:3f:0c:f5:db:7b:51:35:ba: 2d:77:ad:43:f0:91:3f:17:1d:fd:5e:99:af:b5:ff:76:ae:b8: 96:4a:e0:75:4a:20:1e:cd:a3:44:a4:3d:cc:fd:10:79:de:95: 29:13:3c:26:06:2c:6a:09:d6:a9:fc:e1:64:d0:ec:d9:d4:e9: ce:2a:eb:8f:c2:b3:d1:cd:b9:ac:72:3f:c7:e3:45:25:20:ac: 8d:2c:e6:b6:77:85:58:76:3a:87:da:de:30:fd:7c:b4:0c:b9: 9f:7f:77:fe:82:43:ce:d5:ca:c4:99:45:dc:6d:8c:36:50:2e: 6c:06:e8:c9:b3:6a:7c:5d:32:2c:4e:b1:c3:fe:12:1f:cd:0c: a2:b7:a2:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscOsud0jX+Pfb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDczOTZlYjgtMTU1MC00ZDI4LTkyODUtYzcxYzk3ZmQw ODdkMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk OGY2YmQ2MjAtYjc5ZC00MjU1LTlhZmMtMGYxNzhhNzdjMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLqlanw+0Dtu8VwognlwIvgL4PqeBt7xsm/7 nfwUDfbSuv4L+yHwpzSm5tCIdhK0xFttRbvP4Ei/V3fikpcCA6ScvN0OPqyAwzQ6 7yRDgNv2pMepGEH6Zk0SQeOJHGZcCvDZYTDDfPVv/7ZrI5lqFywmF2YVjLJYxQdU jobkwOSARVArqzHyZ/wyBZAfxBfWFJwmXu+q9tRkc++0QgsxcG926a11Qlcb/aXQ hW5SA/TRJac+6CehEma7wcWUi+OldnuTTye4SwSHmnxMss0ntOu0u1wCUrIcLrQ5 1GqUETCK/Uxb8DrHvfn1dsMjEfhXxc5Ot+avJwcvo/+lF5UMnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRL+x1TG/faESKSuQS5C/wr/awCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5 NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFjOTdmZDA4N2QvYTc2ZGMzMjEtM2M3Yi0z MGYzLTgyNTAtOTUxNzc1MWE5YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDczOTZlYjgtMTU1MC00ZDI4LTky ODUtYzcxYzk3ZmQwODdkL2Q3Mzk2ZWI4LTE1NTAtNGQyOC05Mjg1LWM3MWM5N2Zk MDg3ZC5jcmwwHwYDVR0jBBgwFoAU/fXEy1utd3VckcIWxmi9xeQPFkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFj OTdmZDA4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4L8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGRpHG4Hju8U6rDmXKpVA6uGu+i070LFuojTRFkYPVMEfATFbwMVskG mlyvGwrJBhzOiLyY5Ma3WU4zQ16YKZextyn5lh/K5rzN59zJ9q7ZnWwIhheGpfSG bclQgI4X7TnfBV1sYVX/KBNksJQoJkPXwioJfHg/DPXbe1E1ui13rUPwkT8XHf1e ma+1/3auuJZK4HVKIB7No0SkPcz9EHnelSkTPCYGLGoJ1qn84WTQ7NnU6c4q64/C s9HNuaxyP8fjRSUgrI0s5rZ3hVh2Oofa3jD9fLQMuZ9/d/6CQ87VysSZRdxtjDZQ LmwG6MmzanxdMixOscP+Eh/NDKK3ojI= -----END CERTIFICATE-----Generated at Fri Oct 10 17:52:10 2025 by rpki-client