$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa File: 2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa (raw, json) Hash identifier: ukoi+25v3b0wgi3oE2PY+pw8dU24KMMkMpbsuiMsrjI= Subject key identifier: 67:4B:D1:7B:92:ED:A5:0F:92:34:B5:D5:1B:0D:5E:BC:10:6E:29:0F Certificate issuer: /CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Certificate serial: 010D0C9F4328584B95A786576C68F932859272A0 Authority key identifier: 59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 203062 IP address blocks: 23.138.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:86:57:6c:68:f9:32:85:92:72:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe238c2-2a2c-4f20-9f85-52fb8a42c304 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=891cfecb-3484-4e3f-96cf-810ff5372a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:7c:9e:ea:50:b9:c1:41:b3:ad:9b:64:7d: 3e:45:c9:73:7b:34:09:69:e0:a5:82:3b:6c:a6:58: c3:fe:5e:e8:1b:0c:13:ef:a8:93:00:5e:48:02:80: 25:dd:3d:e3:00:de:4b:b9:6d:46:3e:6b:55:14:1b: 9f:fa:79:4a:ef:11:75:cf:16:34:46:b8:e3:a1:8f: a4:b6:f6:55:fe:ed:e3:27:08:1f:76:7f:41:5c:b2: 57:6e:1a:ed:a7:ba:82:19:f9:d5:3e:e4:8c:8a:ec: cb:6d:54:d3:89:ca:09:bc:fe:bd:70:a6:4f:0a:5b: ee:cc:46:3d:b3:6e:ba:d2:61:2c:2c:40:35:91:de: e4:a8:23:f4:2e:e9:b7:47:f7:47:be:df:d2:81:6c: 35:18:5e:ea:c8:59:94:bb:19:25:87:89:85:1b:dc: 01:06:17:7b:d6:be:a1:06:cc:19:c7:53:9a:84:1d: 75:5a:07:51:51:88:46:43:c6:cf:ca:ee:64:c1:41: bc:a0:82:54:97:55:14:5b:a4:58:94:d1:da:06:2c: ca:5f:48:fe:53:d9:52:ef:e6:44:f7:82:bc:9d:03: 3b:b1:53:60:cc:d6:e8:eb:89:fe:8d:d8:2c:0c:f4: f0:67:d4:7e:3f:ab:30:79:9c:da:84:61:d6:80:f6: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4B:D1:7B:92:ED:A5:0F:92:34:B5:D5:1B:0D:5E:BC:10:6E:29:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/2b7d78f8-8948-39c2-ac84-3b976d73fb80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.crl X509v3 Authority Key Identifier: keyid:59:9A:CC:25:E2:65:32:75:63:E8:D1:D7:A3:E5:A3:B1:BF:FE:A0:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1fe238c2-2a2c-4f20-9f85-52fb8a42c304.cer sbgp-ipAddrBlock: critical IPv4: 23.138.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:ad:fc:2e:f0:3b:ef:38:ac:a4:c5:9f:f2:c4:8d:b3:1c:c0: 6d:01:51:58:9b:2f:89:73:29:c9:63:f4:3d:d2:99:29:a0:07: c9:41:e5:2d:e8:34:ed:c4:9c:36:0f:a1:35:b9:7e:3e:91:48: a1:1a:71:bb:6f:8d:33:21:8e:bd:0c:8a:5c:ba:cd:7d:ab:10: 09:ac:58:f1:dd:d6:99:37:53:b0:d8:aa:d1:9f:33:1d:c2:93: 46:21:22:09:b9:7f:aa:d2:5b:8d:8d:a1:f6:26:ed:83:83:a1: 31:9f:11:4a:fe:3c:5d:57:fe:d1:3e:3f:59:9b:b2:e0:21:d5: 6d:09:c4:c0:ff:90:dc:42:f1:c6:c3:c7:08:c0:dd:c7:f0:c5: d4:98:d2:d0:59:a8:fa:2b:df:4a:31:8b:09:d0:f6:3a:fb:62: d6:de:27:e1:dd:b3:26:cf:86:d3:83:77:3b:ca:84:d8:e2:fe: cf:69:e4:9d:54:67:87:b5:77:b4:3e:ec:c8:d5:eb:5f:a4:f7: fe:7d:6e:de:31:0c:fe:31:cb:2d:0d:fa:5c:6c:31:f6:d9:e2: 7f:00:5c:f4:32:4c:6e:79:f8:6f:dc:ce:70:aa:e0:c5:29:33: e7:c9:08:e2:da:a3:40:b2:88:cb:93:0b:c5:d3:0e:88:57:ed: 4a:53:66:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4ZXbGj5MoWScqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlMjM4YzItMmEyYy00ZjIwLTlmODUtNTJmYjhhNDJj MzA0MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODkxY2ZlY2ItMzQ4NC00ZTNmLTk2Y2YtODEwZmY1MzcyYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomB8nupQucFBs62bZH0+RclzezQJaeClgjts pljD/l7oGwwT76iTAF5IAoAl3T3jAN5LuW1GPmtVFBuf+nlK7xF1zxY0RrjjoY+k tvZV/u3jJwgfdn9BXLJXbhrtp7qCGfnVPuSMiuzLbVTTicoJvP69cKZPClvuzEY9 s2660mEsLEA1kd7kqCP0Lum3R/dHvt/SgWw1GF7qyFmUuxklh4mFG9wBBhd71r6h BswZx1OahB11WgdRUYhGQ8bPyu5kwUG8oIJUl1UUW6RYlNHaBizKX0j+U9lS7+ZE 94K8nQM7sVNgzNbo64n+jdgsDPTwZ9R+P6sweZzahGHWgPa16QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdL0XuS7aUPkjS11RsNXrwQbikPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUy MzhjMi0yYTJjLTRmMjAtOWY4NS01MmZiOGE0MmMzMDQvMmI3ZDc4ZjgtODk0OC0z OWMyLWFjODQtM2I5NzZkNzNmYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWZlMjM4YzItMmEyYy00ZjIwLTlm ODUtNTJmYjhhNDJjMzA0LzFmZTIzOGMyLTJhMmMtNGYyMC05Zjg1LTUyZmI4YTQy YzMwNC5jcmwwHwYDVR0jBBgwFoAUWZrMJeJlMnVj6NHXo+Wjsb/+oFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZmUyMzhjMi0yYTJjLTRmMjAtOWY4NS01MmZi OGE0MmMzMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4rMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWt/C7wO+84rKTFn/LEjbMcwG0BUVibL4lzKclj9D3SmSmgB8lB5S3o NO3EnDYPoTW5fj6RSKEacbtvjTMhjr0Mily6zX2rEAmsWPHd1pk3U7DYqtGfMx3C k0YhIgm5f6rSW42NofYm7YODoTGfEUr+PF1X/tE+P1mbsuAh1W0JxMD/kNxC8cbD xwjA3cfwxdSY0tBZqPor30oxiwnQ9jr7YtbeJ+HdsybPhtODdzvKhNji/s9p5J1U Z4e1d7Q+7MjV61+k9/59bt4xDP4xyy0N+lxsMfbZ4n8AXPQyTG55+G/cznCq4MUp M+fJCOLao0CyiMuTC8XTDohX7UpTZsE= -----END CERTIFICATE-----Generated at Fri Oct 24 11:09:10 2025 by rpki-client