$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6b8a4b46-999d-3924-9651-2afb3e65732e.roa File: 6b8a4b46-999d-3924-9651-2afb3e65732e.roa (raw, json) Hash identifier: 4sHaccbeLqTPyPfBXFyfJMAkW75aUcoairI22Jym1RQ= Subject key identifier: B5:2E:7F:75:80:3F:B8:18:46:B9:E4:38:B5:B3:89:35:A2:64:41:B8 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584B823FBD110B5D53282EF8FA00 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6b8a4b46-999d-3924-9651-2afb3e65732e.roa Signing time: Mon 13 Oct 2025 14:11:13 +0000 ROA not before: Mon 13 Oct 2025 14:11:13 +0000 ROA not after: Sun 11 Jan 2026 15:11:13 +0000 asID: 21433 IP address blocks: 170.251.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:3f:bd:11:0b:5d:53:28:2e:f8:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Oct 13 14:11:13 2025 GMT Not After : Jan 11 15:11:13 2026 GMT Subject: CN=575b7b5c-3761-488e-ab71-ab4f04a72109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:89:a9:e4:7f:11:50:67:1a:65:8d:30:d5: fe:38:3c:cd:ea:1f:e7:31:0d:e2:b7:50:93:15:04: 0a:3f:41:77:66:a0:b6:66:e5:37:79:b3:98:06:2e: 7f:ed:00:d5:b3:39:c5:16:17:48:97:9d:22:9d:d5: f1:85:38:92:ab:2a:d2:76:19:78:3f:e8:4f:48:8c: 56:a1:8b:62:30:08:9f:78:d0:64:2b:fb:6a:e4:a2: 9e:8f:3c:56:0e:14:80:f6:84:68:90:7f:a7:45:d1: 3b:cb:10:bd:75:b6:b1:64:43:be:38:77:1b:25:61: 6b:a5:bc:16:f5:0a:26:6b:aa:1e:18:75:5d:fa:58: 03:45:13:a7:e5:59:97:e4:e8:b0:4b:be:bf:8d:27: cc:33:2c:99:0b:64:4c:96:5b:f6:7b:c1:66:71:53: 04:39:af:59:b0:6f:7b:b6:a6:e9:3d:11:ed:5f:54: d9:ab:7d:1a:14:08:ca:3f:63:2b:25:9a:f2:23:02: 54:87:cb:dc:8c:8c:c4:b4:2c:41:04:9a:3a:4b:fd: 58:9e:b7:98:6e:fe:40:d5:c8:e5:3f:2d:66:af:0c: 6c:f1:ce:b1:b0:b3:88:2f:54:64:2f:35:51:8a:b1: c9:a0:90:31:08:e3:26:b4:4f:aa:cd:1a:5b:ba:09: 38:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2E:7F:75:80:3F:B8:18:46:B9:E4:38:B5:B3:89:35:A2:64:41:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/6b8a4b46-999d-3924-9651-2afb3e65732e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.251.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:eb:b8:2a:d6:6c:e3:cb:ee:ec:7c:20:ad:21:a5:87:65:ab: d0:88:f1:92:5c:43:b7:96:ac:12:24:c4:c7:c2:3f:84:27:18: 76:81:71:d3:76:42:70:75:b0:8e:5d:2c:db:e5:65:56:23:92: e9:cc:44:68:2c:1d:b0:5a:81:a1:2d:c4:56:b1:e4:10:cf:1c: be:9e:49:bd:9a:e2:d7:99:5f:bb:3f:6e:ae:0c:fc:73:ba:22: 9c:41:ae:38:91:b1:f5:78:2c:a3:9b:15:14:ca:01:2b:c2:bf: 59:07:3c:f9:71:6a:52:b3:41:64:90:72:1f:7a:c0:c7:ee:17: 9c:fe:a1:0a:38:84:52:31:1a:55:f4:23:37:2d:85:71:43:98: c4:68:18:18:46:7b:6f:d7:bd:f0:2b:1b:c0:7e:14:80:cd:f1: 79:50:43:da:d1:c0:12:3e:3b:49:ae:1d:ed:e8:7a:f3:8d:84: e3:24:73:82:1b:f0:fb:dd:87:c1:6a:cb:4e:4c:69:48:3e:e3: 25:78:66:20:05:32:10:c1:44:ac:39:c5:c3:6f:d7:6c:56:bb: c9:a6:c3:5f:17:1a:c6:3c:8e:bb:40:6e:f4:8e:3e:a5:4c:df: c4:50:6a:e2:b1:be:6d:ee:d3:e0:e9:36:4f:b2:bd:2d:0a:8a: 96:18:ec:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCP70RC11TKC74+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI1MTAxMzE0MTExM1oXDTI2MDExMTE1MTExM1owLzEtMCsGA1UEAxMk NTc1YjdiNWMtMzc2MS00ODhlLWFiNzEtYWI0ZjA0YTcyMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUuJqeR/EVBnGmWNMNX+ODzN6h/nMQ3it1CT FQQKP0F3ZqC2ZuU3ebOYBi5/7QDVsznFFhdIl50indXxhTiSqyrSdhl4P+hPSIxW oYtiMAifeNBkK/tq5KKejzxWDhSA9oRokH+nRdE7yxC9dbaxZEO+OHcbJWFrpbwW 9Qoma6oeGHVd+lgDRROn5VmX5OiwS76/jSfMMyyZC2RMllv2e8FmcVMEOa9ZsG97 tqbpPRHtX1TZq30aFAjKP2MrJZryIwJUh8vcjIzEtCxBBJo6S/1YnreYbv5A1cjl Py1mrwxs8c6xsLOIL1RkLzVRirHJoJAxCOMmtE+qzRpbugk4wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUuf3WAP7gYRrnkOLWziTWiZEG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNmI4YTRiNDYtOTk5ZC0z OTI0LTk2NTEtMmFmYjNlNjU3MzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbruCrWbOPL7ux8IK0hpYdlq9CI8ZJcQ7eWrBIkxMfCP4QnGHaBcdN2 QnB1sI5dLNvlZVYjkunMRGgsHbBagaEtxFax5BDPHL6eSb2a4teZX7s/bq4M/HO6 IpxBrjiRsfV4LKObFRTKASvCv1kHPPlxalKzQWSQch96wMfuF5z+oQo4hFIxGlX0 IzcthXFDmMRoGBhGe2/XvfArG8B+FIDN8XlQQ9rRwBI+O0muHe3oevONhOMkc4Ib 8Pvdh8Fqy05MaUg+4yV4ZiAFMhDBRKw5xcNv12xWu8mmw18XGsY8jrtAbvSOPqVM 38RQauKxvm3u0+DpNk+yvS0KipYY7E0= -----END CERTIFICATE-----Generated at Mon Oct 20 22:52:32 2025 by rpki-client