$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa File: bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa (raw, json) Hash identifier: GGGO1pGeX5n09S1c/Zk0yuBCZAdlFdlW8XzeznfTvd8= Subject key identifier: F7:06:34:5E:B6:51:28:D7:DF:ED:D7:B1:AD:A8:C5:1F:9C:1E:91:25 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584B4BAC72ACCD3F43BCE1692740 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 135074 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:72:ac:cd:3f:43:bc:e1:69:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=5e7fd540-6c92-4907-89a7-d64c2e1303ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:81:ab:ae:df:22:01:0d:d6:d5:49:ca:7b:44: 2a:60:cb:fa:ed:e1:64:29:fd:0d:eb:27:2a:05:97: d7:85:3d:83:0f:8f:58:55:a3:34:ab:2d:3c:00:d0: 22:6f:37:a4:8f:17:40:a7:64:78:78:96:ee:83:83: d7:94:8b:cb:7e:2c:ab:8e:2f:7e:49:d1:c8:5e:e9: d4:f9:4e:d6:e4:95:74:88:ab:ab:99:1d:31:2f:24: 80:d8:9e:0d:85:a8:5f:26:39:21:97:02:02:9d:80: 22:50:a9:fb:c2:7e:65:a0:84:bb:86:ea:dc:60:f4: 12:bb:25:2f:88:32:32:20:2d:f2:6c:c3:1f:0c:e2: a3:79:56:ba:23:66:e0:f9:a6:02:1e:7b:05:9e:72: 18:1c:5e:67:51:91:6b:21:14:03:b7:0a:65:03:f0: 1c:77:b6:85:8a:29:9c:43:c8:37:2c:cf:7c:57:9c: 69:85:c9:53:df:3e:1e:18:71:15:e3:40:92:62:b8: 65:e9:d5:fa:4c:8a:ca:6d:6c:67:c1:ad:59:55:c3: 5c:8f:0a:24:ca:29:91:3f:13:53:6b:f4:66:87:69: f9:0e:89:49:aa:e5:14:8b:8f:83:80:2a:53:d5:b2: 56:70:92:86:59:e4:fc:23:d1:c0:06:41:0e:9c:7d: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:06:34:5E:B6:51:28:D7:DF:ED:D7:B1:AD:A8:C5:1F:9C:1E:91:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:42:cb:8f:34:01:28:3d:7d:a2:a3:97:04:e3:ce:01:3b:af: 4f:ca:d8:01:e7:ab:05:35:28:92:ca:d6:10:68:c9:6f:9a:ab: dc:42:92:52:ad:f0:7c:c7:a0:48:54:b8:a4:7f:28:62:2a:8e: f4:05:bc:41:d1:c9:8b:1e:7d:90:72:15:23:de:ed:b3:ef:98: a7:56:ac:8d:1d:d4:87:05:b1:46:d0:6a:50:ed:a1:49:33:1c: 0e:41:2b:d7:28:97:2b:d0:a7:40:01:8b:e9:be:34:e6:f5:82: 93:54:6e:b6:d5:24:9b:b7:02:ea:bc:24:b9:e1:6a:58:48:30: 3f:9a:3f:37:2d:2d:ca:48:b8:1b:4f:12:aa:93:a0:51:b1:6b: f4:1e:8f:2a:65:0e:43:58:07:4e:e2:af:11:53:fa:ce:28:14: a2:90:15:44:b4:bc:ba:fb:a2:86:87:47:7e:d8:db:42:ed:f1: 78:2d:31:80:c9:fb:4c:94:38:0d:5b:51:0f:9d:20:49:c1:4f: 27:f5:63:53:23:99:31:8f:ce:cd:ef:2e:18:09:15:2e:b4:e1: 82:80:0c:0c:26:b1:4a:ec:66:91:8d:8d:5a:8f:bf:24:a2:7c: 8c:c8:99:07:5e:e4:55:a3:30:43:74:3e:fe:21:84:82:29:d2: 95:a5:34:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrHKszT9DvOFpJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk NWU3ZmQ1NDAtNmM5Mi00OTA3LTg5YTctZDY0YzJlMTMwM2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oGrrt8iAQ3W1UnKe0QqYMv67eFkKf0N6ycq BZfXhT2DD49YVaM0qy08ANAibzekjxdAp2R4eJbug4PXlIvLfiyrji9+SdHIXunU +U7W5JV0iKurmR0xLySA2J4NhahfJjkhlwICnYAiUKn7wn5loIS7hurcYPQSuyUv iDIyIC3ybMMfDOKjeVa6I2bg+aYCHnsFnnIYHF5nUZFrIRQDtwplA/Acd7aFiimc Q8g3LM98V5xphclT3z4eGHEV40CSYrhl6dX6TIrKbWxnwa1ZVcNcjwokyimRPxNT a/Rmh2n5DolJquUUi4+DgCpT1bJWcJKGWeT8I9HABkEOnH3mIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcGNF62USjX3+3Xsa2oxR+cHpElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvYmZlMWIxMmQtOWNiZi0z YmQzLWEzNTctOGJlZDVmM2UzOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVCy480ASg9faKjlwTjzgE7r0/K2AHnqwU1KJLK1hBoyW+aq9xCklKt 8HzHoEhUuKR/KGIqjvQFvEHRyYsefZByFSPe7bPvmKdWrI0d1IcFsUbQalDtoUkz HA5BK9colyvQp0ABi+m+NOb1gpNUbrbVJJu3Auq8JLnhalhIMD+aPzctLcpIuBtP EqqToFGxa/QejyplDkNYB07irxFT+s4oFKKQFUS0vLr7ooaHR37Y20Lt8XgtMYDJ +0yUOA1bUQ+dIEnBTyf1Y1MjmTGPzs3vLhgJFS604YKADAwmsUrsZpGNjVqPvySi fIzImQde5FWjMEN0Pv4hhIIp0pWlNG0= -----END CERTIFICATE-----Generated at Tue Oct 28 16:17:16 2025 by rpki-client