$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa File: c247b3ff-276b-3115-bfe5-d2984aaf0719.roa (raw, json) Hash identifier: 5JQ90Sat/ORHg+K1G/EmPSlANTBe3j1e3a9L5LMnIbc= Subject key identifier: 51:B3:D8:EB:4B:51:D1:DD:F4:92:AC:69:EA:B9:22:13:7E:6E:0C:4E Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584B2A2C3A022508EC0B84689480 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 32595 IP address blocks: 23.172.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3a:02:25:08:ec:0b:84:68:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=d836e157-ee9a-4fa8-9667-fb44cc5fb888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cd:70:5f:90:0f:48:d4:7f:c9:8a:f9:e2:6c: 74:24:e9:fc:9f:b5:ef:26:14:5a:7e:f9:d0:32:38: 4b:d7:66:32:e5:99:ad:68:8c:d7:81:38:c5:55:31: 62:be:fe:7a:76:e2:4b:07:77:e3:b5:a2:6b:1b:83: 76:d2:e1:09:8a:75:33:df:47:e9:9b:31:78:e6:24: d4:8d:6d:c9:1e:c1:2d:04:aa:c9:f0:d7:2c:19:73: 7f:6b:fc:c7:c1:79:28:39:05:79:03:3b:2c:72:ad: d2:c8:42:08:75:89:84:fd:8c:c8:ab:56:62:b3:8e: cb:34:08:25:3b:1f:16:c3:80:54:49:73:6b:5d:df: c5:73:c3:35:c8:c9:99:16:61:c8:a0:aa:62:e0:01: 0e:80:2b:a3:fa:f9:85:3e:aa:4c:ab:9b:d8:6b:d9: bd:15:4f:3a:69:3d:c1:3a:ab:8c:1e:1e:40:c6:7a: 2c:39:85:2c:b2:6f:98:01:12:29:57:be:5a:c2:a3: 4c:03:e5:1e:ec:98:b7:89:56:36:17:7a:e6:fb:63: b9:53:9e:cd:b9:fc:3a:cf:ff:c7:c6:b0:27:56:09: 84:e1:50:0e:3a:bf:16:7f:ae:53:55:68:c1:75:97: bb:7d:78:83:18:78:10:e6:63:16:ce:cf:2b:3e:aa: c3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B3:D8:EB:4B:51:D1:DD:F4:92:AC:69:EA:B9:22:13:7E:6E:0C:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:69:0f:b7:eb:f1:d0:2b:18:42:6b:b1:77:9c:4d:ae:fb:50: c0:b2:e3:88:36:f6:e3:0a:24:c4:28:b4:88:06:80:78:f6:1f: e8:98:18:80:c7:d2:ea:49:5a:5d:f8:c2:a9:d2:c4:22:f0:e5: 83:25:09:86:ca:3a:ff:90:b9:2d:a1:ff:a4:e6:ab:28:65:45: 0d:b4:83:cf:08:74:a1:22:59:50:50:ca:a3:9d:22:04:b1:b4: 86:a7:b1:7b:1c:38:95:14:85:f7:d8:f7:dc:99:ed:78:f4:56: 55:d4:79:3b:71:70:45:6c:5e:ac:75:87:58:d8:16:00:af:a9: 13:ce:a0:9c:36:df:da:48:cb:98:a0:6c:2e:a5:42:e4:ad:19: fc:18:5e:c4:38:22:92:2e:cc:2b:01:fb:37:c0:14:67:4b:eb: ab:9f:f7:7d:8c:e2:e2:d1:9f:31:d4:7e:14:b1:d4:e8:93:c2: d7:88:eb:d5:00:48:99:38:06:e9:a4:37:1b:45:0b:2d:c5:b6: a0:2f:7b:f7:67:0d:6d:51:fa:01:a9:72:df:92:82:1f:34:35: 49:d9:74:f3:e8:cd:b8:06:60:4c:74:42:11:15:23:51:1a:d2: a0:b9:85:19:b5:9a:16:52:d8:c9:da:ac:2a:11:07:ac:a0:5e: d3:24:be:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDoCJQjsC4RolIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDgzNmUxNTctZWU5YS00ZmE4LTk2NjctZmI0NGNjNWZiODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM1wX5APSNR/yYr54mx0JOn8n7XvJhRafvnQ MjhL12Yy5ZmtaIzXgTjFVTFivv56duJLB3fjtaJrG4N20uEJinUz30fpmzF45iTU jW3JHsEtBKrJ8NcsGXN/a/zHwXkoOQV5Azsscq3SyEIIdYmE/YzIq1Zis47LNAgl Ox8Ww4BUSXNrXd/Fc8M1yMmZFmHIoKpi4AEOgCuj+vmFPqpMq5vYa9m9FU86aT3B OquMHh5AxnosOYUssm+YARIpV75awqNMA+Ue7Ji3iVY2F3rm+2O5U57Nufw6z//H xrAnVgmE4VAOOr8Wf65TVWjBdZe7fXiDGHgQ5mMWzs8rPqrDGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGz2OtLUdHd9JKsaeq5IhN+bgxOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvYzI0N2IzZmYtMjc2Yi0z MTE1LWJmZTUtZDI5ODRhYWYwNzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBpD7fr8dArGEJrsXecTa77UMCy44g29uMKJMQotIgGgHj2H+iYGIDH 0upJWl34wqnSxCLw5YMlCYbKOv+QuS2h/6TmqyhlRQ20g88IdKEiWVBQyqOdIgSx tIansXscOJUUhffY99yZ7Xj0VlXUeTtxcEVsXqx1h1jYFgCvqRPOoJw239pIy5ig bC6lQuStGfwYXsQ4IpIuzCsB+zfAFGdL66uf932M4uLRnzHUfhSx1OiTwteI69UA SJk4BumkNxtFCy3FtqAve/dnDW1R+gGpct+Sgh80NUnZdPPozbgGYEx0QhEVI1Ea 0qC5hRm1mhZS2MnarCoRB6ygXtMkvns= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:06 2025 by rpki-client