$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/b6306e0b-692d-3d91-95be-0462ce3e2584.roa File: b6306e0b-692d-3d91-95be-0462ce3e2584.roa (raw, json) Hash identifier: NfiYac/tjGXEdwhYu2N1Sd5M9o692J+2oGwcLTsHk9U= Subject key identifier: D9:4E:0C:6E:F6:09:05:1B:D4:81:FA:FB:89:44:9E:72:49:A5:40:3C Certificate issuer: /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Certificate serial: 010D0C9F4328584B1D9C253790D40449B47F8700 Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/b6306e0b-692d-3d91-95be-0462ce3e2584.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 397376 IP address blocks: 23.176.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:25:37:90:d4:04:49:b4:7f:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=e84a7225-41b0-4651-aeae-674847e3d9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:8b:b8:3b:28:ea:6e:83:23:f6:f7:11:cc: df:07:7c:80:3c:c3:aa:14:1d:26:da:b0:3e:19:85: 80:d9:95:ce:93:9a:5e:b8:dc:7e:f6:f2:4a:57:16: 09:ea:d2:fd:20:93:1d:11:4f:05:66:36:1c:ab:da: eb:ed:67:a7:9b:43:0f:20:ba:0b:c7:73:14:0f:50: ce:47:a8:3d:7d:17:5c:d5:07:10:68:a5:fe:ec:fc: ea:f0:69:b3:ee:3d:23:a6:b0:77:a1:ef:c9:d9:e3: 4a:01:70:35:e2:a1:12:a1:d1:12:b6:ce:05:bf:c7: 85:0a:04:c3:7b:d9:55:18:ed:17:b6:a8:a0:05:18: bb:9d:7e:39:04:32:79:7c:6a:b6:d6:9b:b9:0b:63: 84:f1:84:d5:d3:35:d8:e8:9e:2e:11:64:35:30:23: 01:25:8f:57:ed:c0:8b:71:8b:9e:2a:17:2a:8f:dc: ee:64:df:f1:34:1a:e7:c1:11:fd:32:3c:99:fa:4d: 52:ac:46:9b:9c:88:00:7d:8f:19:69:3f:17:65:8f: a3:60:58:41:7f:65:97:b1:88:ab:22:03:8c:45:96: 5c:5d:cf:b7:4f:95:a2:11:e1:74:2d:ea:27:8f:fe: a8:39:9a:cf:16:c4:8c:ab:74:a0:76:44:df:ad:07: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4E:0C:6E:F6:09:05:1B:D4:81:FA:FB:89:44:9E:72:49:A5:40:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/b6306e0b-692d-3d91-95be-0462ce3e2584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl X509v3 Authority Key Identifier: keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer sbgp-ipAddrBlock: critical IPv4: 23.176.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3b:61:d5:c4:14:5b:a7:8a:e4:cb:1e:1c:ef:29:ab:4e:20: 13:4b:f8:a3:c1:de:61:ab:dc:08:d6:ef:94:42:a0:5f:fc:94: 68:56:9e:80:5a:f9:1f:85:c3:6d:01:0a:a3:47:22:f8:79:67: ca:32:0c:78:8e:6a:71:e4:87:0d:a6:e4:04:3c:bb:7d:2c:6f: 96:df:a5:ff:cd:98:70:cb:b3:45:7e:ea:52:a1:47:a1:be:6f: a7:c6:21:5c:19:74:a8:df:da:0d:61:ce:f5:d2:61:94:f1:50: f3:39:81:d6:c1:e0:3f:b6:68:e4:f9:92:e8:85:d5:f3:97:7d: 21:b2:79:fa:25:4c:07:b8:2e:20:4a:8d:29:14:14:ea:e9:76: 43:23:36:83:ed:05:21:73:18:a4:11:1b:3b:6e:f6:69:2c:b3: 39:cf:3d:34:28:a4:db:cb:23:1e:7b:d6:95:14:c1:41:3b:14: de:d2:09:01:fd:b6:b1:f2:9c:70:06:60:0e:d4:53:58:88:c1: b7:0a:15:dc:71:06:eb:89:e4:d5:db:e4:c5:e4:3c:8d:16:6f: 4f:52:a7:b3:fd:1c:2a:db:28:94:11:67:b2:26:c0:bf:5d:03: 1b:60:8a:46:0e:9e:35:15:22:7c:66:ef:86:3d:7f:83:96:f2: 1e:23:c9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCU3kNQESbR/hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNmMDY4MjktMjVhOS00M2M1LThhMjEtMzg1OTlhMWZi MjNmMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTg0YTcyMjUtNDFiMC00NjUxLWFlYWUtNjc0ODQ3ZTNkOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSCLuDso6m6DI/b3EczfB3yAPMOqFB0m2rA+ GYWA2ZXOk5peuNx+9vJKVxYJ6tL9IJMdEU8FZjYcq9rr7Wenm0MPILoLx3MUD1DO R6g9fRdc1QcQaKX+7Pzq8Gmz7j0jprB3oe/J2eNKAXA14qESodESts4Fv8eFCgTD e9lVGO0XtqigBRi7nX45BDJ5fGq21pu5C2OE8YTV0zXY6J4uEWQ1MCMBJY9X7cCL cYueKhcqj9zuZN/xNBrnwRH9MjyZ+k1SrEabnIgAfY8ZaT8XZY+jYFhBf2WXsYir IgOMRZZcXc+3T5WiEeF0Leonj/6oOZrPFsSMq3SgdkTfrQeu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlODG72CQUb1IH6+4lEnnJJpUA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81Y2Yw NjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5OWExZmIyM2YvYjYzMDZlMGItNjkyZC0z ZDkxLTk1YmUtMDQ2MmNlM2UyNTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWNmMDY4MjktMjVhOS00M2M1LThh MjEtMzg1OTlhMWZiMjNmLzVjZjA2ODI5LTI1YTktNDNjNS04YTIxLTM4NTk5YTFm YjIzZi5jcmwwHwYDVR0jBBgwFoAUH9np46Ez8Srh0OVGuPMg26EbbcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81Y2YwNjgyOS0yNWE5LTQzYzUtOGEyMS0zODU5 OWExZmIyM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7DgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc7YdXEFFuniuTLHhzvKatOIBNL+KPB3mGr3AjW75RCoF/8lGhWnoBa +R+Fw20BCqNHIvh5Z8oyDHiOanHkhw2m5AQ8u30sb5bfpf/NmHDLs0V+6lKhR6G+ b6fGIVwZdKjf2g1hzvXSYZTxUPM5gdbB4D+2aOT5kuiF1fOXfSGyefolTAe4LiBK jSkUFOrpdkMjNoPtBSFzGKQRGztu9mkssznPPTQopNvLIx571pUUwUE7FN7SCQH9 trHynHAGYA7UU1iIwbcKFdxxBuuJ5NXb5MXkPI0Wb09Sp7P9HCrbKJQRZ7ImwL9d AxtgikYOnjUVInxm74Y9f4OW8h4jyfI= -----END CERTIFICATE-----Generated at Mon Nov 3 21:46:07 2025 by rpki-client