$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa File: 597f4a4b-40a9-3c25-9e38-fe485186c510.roa (raw, json) Hash identifier: uAJFvPfhHD8eT2/rNyF6bE5qQ6yZcHCbWcYzEWKWGEY= Subject key identifier: A8:05:6B:0E:29:6C:A7:D3:97:47:5E:3A:DE:89:39:9D:92:69:4D:54 Certificate issuer: /CN=324596f5-1cf7-4d92-9c68-ecfb27205d68 Certificate serial: 010D0C9F4328584BA9327261D101126801E60DA0 Authority key identifier: A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 400115 IP address blocks: 23.130.152.0/23 maxlen: 23 23.130.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:72:61:d1:01:12:68:01:e6:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324596f5-1cf7-4d92-9c68-ecfb27205d68 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=104bb7c7-a58f-4024-83fc-aa0eb6100a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d2:50:5d:e6:1d:9d:a0:16:1b:85:34:81:91: 15:a4:bc:39:a3:36:40:aa:23:ce:c7:7c:33:e0:46: 48:46:4f:51:8d:e7:16:fe:86:3d:c4:bb:86:51:2c: a4:5c:43:b1:0d:c4:c7:4d:63:c2:f0:ca:f5:ed:d6: dc:4a:10:55:bf:c7:b9:d4:e5:8e:5b:21:9e:30:4a: 13:b9:ad:c1:00:35:b9:89:e3:24:d6:ec:f7:c7:fa: 19:de:80:7d:e1:58:bd:53:20:55:dc:88:b6:d6:9d: 96:a4:47:2a:de:69:28:d0:9c:1d:63:3b:e5:4a:47: 52:17:82:68:bc:8f:a7:d8:47:ce:07:72:58:01:8d: 4c:9b:7b:f6:24:f3:76:2a:11:21:d8:8b:2c:ca:c4: 0f:e5:f0:28:91:b6:94:fe:ad:99:e7:ad:75:5e:f4: a0:23:49:db:8e:a3:6a:eb:8c:09:a9:d3:52:c8:a3: b5:e3:b2:79:34:4a:44:94:14:11:19:8f:6e:0c:59: 85:72:1a:fb:cf:75:37:bb:61:5a:40:7f:4d:2f:03: da:24:41:98:41:6e:0e:ae:63:80:ec:10:32:bf:8c: 3c:e4:46:53:3a:0a:fa:21:94:c7:78:24:dc:03:d7: af:e6:c5:46:04:65:ab:03:50:f7:24:72:a0:1a:22: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:05:6B:0E:29:6C:A7:D3:97:47:5E:3A:DE:89:39:9D:92:69:4D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl X509v3 Authority Key Identifier: keyid:A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer sbgp-ipAddrBlock: critical IPv4: 23.130.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:81:9d:1d:fb:7c:d5:3c:b6:4d:d6:b8:ab:88:0b:18:ce:74: a6:57:f6:70:f0:d8:16:91:ac:53:d2:a9:f8:31:34:72:d0:04: ce:ef:37:62:d0:a9:33:8a:3b:23:cc:35:7e:c5:31:6c:68:be: 8c:ed:2b:98:cf:d1:f1:f3:66:16:fc:f3:91:c2:4b:d3:ad:02: 2c:c8:39:fe:16:57:60:ec:18:7d:61:01:e6:e5:c8:8d:78:69: 74:b9:76:d0:dc:9e:96:f5:c0:05:f8:2f:aa:75:ec:ec:92:11: e4:b5:18:7f:e6:c4:a6:88:a7:26:e6:70:94:57:fd:42:fc:ba: 40:04:f4:11:f5:16:18:7b:3c:87:7c:02:81:b4:cf:5b:b0:a6: bd:6d:ac:ee:d8:c0:23:38:e0:60:8a:c1:3c:1d:f0:f5:d1:17: 7a:bc:64:27:15:47:22:d3:68:b4:5a:dd:a5:86:f1:ff:48:0e: 0e:6c:3a:ec:b9:dd:0c:66:f7:d0:2f:29:0e:d5:78:2d:14:6c: d6:bb:60:f7:b9:e8:21:9c:8a:c2:00:45:6b:9d:c3:fa:bc:fb: 06:21:89:5b:df:c8:85:ce:da:8f:d2:88:d8:c9:a9:1e:c7:8d: 11:e2:f1:7f:6d:b1:57:d2:29:2a:0d:1a:40:57:b7:b2:50:49: 19:cd:7d:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnJh0QESaAHmDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0NTk2ZjUtMWNmNy00ZDkyLTljNjgtZWNmYjI3MjA1 ZDY4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MTA0YmI3YzctYTU4Zi00MDI0LTgzZmMtYWEwZWI2MTAwYTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstJQXeYdnaAWG4U0gZEVpLw5ozZAqiPOx3wz 4EZIRk9RjecW/oY9xLuGUSykXEOxDcTHTWPC8Mr17dbcShBVv8e51OWOWyGeMEoT ua3BADW5ieMk1uz3x/oZ3oB94Vi9UyBV3Ii21p2WpEcq3mko0JwdYzvlSkdSF4Jo vI+n2EfOB3JYAY1Mm3v2JPN2KhEh2IssysQP5fAokbaU/q2Z5611XvSgI0nbjqNq 64wJqdNSyKO147J5NEpElBQRGY9uDFmFchr7z3U3u2FaQH9NLwPaJEGYQW4OrmOA 7BAyv4w85EZTOgr6IZTHeCTcA9ev5sVGBGWrA1D3JHKgGiI+0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgFaw4pbKfTl0deOt6JOZ2SaU1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMjQ1 OTZmNS0xY2Y3LTRkOTItOWM2OC1lY2ZiMjcyMDVkNjgvNTk3ZjRhNGItNDBhOS0z YzI1LTllMzgtZmU0ODUxODZjNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzI0NTk2ZjUtMWNmNy00ZDkyLTlj NjgtZWNmYjI3MjA1ZDY4LzMyNDU5NmY1LTFjZjctNGQ5Mi05YzY4LWVjZmIyNzIw NWQ2OC5jcmwwHwYDVR0jBBgwFoAUp/JaOlC4h4UXkcCaMyIpOOzlI5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zMjQ1OTZmNS0xY2Y3LTRkOTItOWM2OC1lY2Zi MjcyMDVkNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4KYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiBnR37fNU8tk3WuKuICxjOdKZX9nDw2BaRrFPSqfgxNHLQBM7vN2LQ qTOKOyPMNX7FMWxovoztK5jP0fHzZhb885HCS9OtAizIOf4WV2DsGH1hAeblyI14 aXS5dtDcnpb1wAX4L6p17OySEeS1GH/mxKaIpybmcJRX/UL8ukAE9BH1Fhh7PId8 AoG0z1uwpr1trO7YwCM44GCKwTwd8PXRF3q8ZCcVRyLTaLRa3aWG8f9IDg5sOuy5 3Qxm99AvKQ7VeC0UbNa7YPe56CGcisIARWudw/q8+wYhiVvfyIXO2o/SiNjJqR7H jRHi8X9tsVfSKSoNGkBXt7JQSRnNfYQ= -----END CERTIFICATE-----Generated at Wed Nov 5 19:45:27 2025 by rpki-client