$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa File: 4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa (raw, json) Hash identifier: 7EX9DFzpWMriMQ2mYmTc5553qWMlFZboXrAf+wkVjWY= Subject key identifier: B2:A9:6D:F2:E7:51:CA:05:A0:C5:DE:F6:E6:29:55:40:8F:72:A7:78 Certificate issuer: /CN=1d7e3237-b117-456b-b736-2b3c2300bcfe Certificate serial: 010D0C9F4328584B583C850312FC93B1D7F4AAB0 Authority key identifier: 15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 395033 IP address blocks: 23.129.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:85:03:12:fc:93:b1:d7:f4:aa:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d7e3237-b117-456b-b736-2b3c2300bcfe Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=07b08bab-0968-4667-849f-1561b6833f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:94:03:7c:be:e3:f0:0b:22:c5:4a:60:59:6c: 82:3c:e2:a4:b5:f1:8d:8d:b6:20:1f:ec:ff:50:9f: d9:fc:fc:99:9f:c0:fa:be:3c:2d:ac:19:94:24:16: 05:c1:06:f0:4f:62:39:32:0a:94:01:fe:63:13:2a: 15:e8:ea:4c:39:e9:92:74:29:a8:40:e6:f7:05:f4: e0:a7:5e:64:19:cc:f9:b8:cc:ce:ad:32:59:41:d8: ae:1b:85:62:a6:7d:3d:cb:32:a4:bf:3a:b4:ae:73: 88:19:70:d3:b7:31:32:8d:9f:dd:f9:b1:67:b6:e5: 1a:95:dd:19:57:ad:f9:53:92:67:bf:9c:1c:b4:a3: e9:d5:dd:d0:99:e1:94:e0:8c:58:7c:3d:36:9f:d8: e4:45:34:c1:dd:69:55:83:66:eb:12:b5:ff:bd:ea: e5:ae:02:19:b7:74:25:27:7c:7b:80:68:1a:e4:34: e4:f3:ff:cc:c4:fa:2c:0b:c3:97:87:48:ef:8a:b6: e1:70:c0:43:5e:50:c8:8d:d9:f5:ed:8e:17:87:4c: 32:4c:ec:87:79:8d:61:91:22:95:e6:a9:1f:fa:ca: dc:0a:f4:23:d8:dd:4d:69:c9:c5:5c:a5:5c:da:f9: 41:85:de:6d:8f:7f:9f:fe:45:b7:04:b7:9c:37:ea: 3a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A9:6D:F2:E7:51:CA:05:A0:C5:DE:F6:E6:29:55:40:8F:72:A7:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl X509v3 Authority Key Identifier: keyid:15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer sbgp-ipAddrBlock: critical IPv4: 23.129.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1a:f2:43:c8:27:09:d7:22:cd:bd:91:fd:31:41:3c:77:f3: bb:87:6e:02:89:fd:f0:36:a2:37:9e:06:ae:58:9b:35:d0:96: 1d:58:14:9e:11:e4:22:65:d3:58:7a:f0:20:8a:ba:d7:ff:b2: d8:65:63:59:3a:c6:12:19:e6:60:d0:e2:ff:74:72:aa:3e:55: c7:38:e7:c5:93:7f:69:c6:f4:4c:e5:a7:aa:fb:0f:46:d6:c0: 2a:98:6a:83:6a:9b:7a:b8:54:64:2b:f6:7e:c6:a7:15:67:70: 13:a6:8c:2f:7c:78:6f:31:99:57:31:0a:c9:d3:21:14:df:d1: 71:41:0f:25:00:c4:e6:cb:87:75:b0:4c:6c:55:5c:c4:05:5b: 47:de:7b:55:90:20:7c:d1:f4:e3:e5:f7:e8:49:d2:6f:63:b0: f7:89:94:9f:ca:91:33:6e:f7:51:9b:73:31:9f:98:4a:ec:69: 1b:54:6d:5c:18:f5:b9:ca:01:3a:e2:1c:1d:41:8c:d2:ae:d8: 67:89:d3:c6:d2:5e:78:27:2b:70:e4:65:41:ae:04:8d:ca:d9: 39:19:fc:21:52:32:e7:0c:66:79:a0:b8:8c:15:d8:3d:45:68: 1c:a4:26:65:f3:90:25:3f:e4:3a:68:32:06:e8:d3:9f:5a:6c: aa:0d:d1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIUDEvyTsdf0qrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3ZTMyMzctYjExNy00NTZiLWI3MzYtMmIzYzIzMDBi Y2ZlMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDdiMDhiYWItMDk2OC00NjY3LTg0OWYtMTU2MWI2ODMzZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJQDfL7j8AsixUpgWWyCPOKktfGNjbYgH+z/ UJ/Z/PyZn8D6vjwtrBmUJBYFwQbwT2I5MgqUAf5jEyoV6OpMOemSdCmoQOb3BfTg p15kGcz5uMzOrTJZQdiuG4Vipn09yzKkvzq0rnOIGXDTtzEyjZ/d+bFntuUald0Z V635U5Jnv5wctKPp1d3QmeGU4IxYfD02n9jkRTTB3WlVg2brErX/verlrgIZt3Ql J3x7gGga5DTk8//MxPosC8OXh0jvirbhcMBDXlDIjdn17Y4Xh0wyTOyHeY1hkSKV 5qkf+srcCvQj2N1NacnFXKVc2vlBhd5tj3+f/kW3BLecN+o6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKpbfLnUcoFoMXe9uYpVUCPcqd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdl MzIzNy1iMTE3LTQ1NmItYjczNi0yYjNjMjMwMGJjZmUvNGYwM2E5YzQtOTM1MC0z ZjkzLWIxZjYtNmIxYjFmOGJkODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ3ZTMyMzctYjExNy00NTZiLWI3 MzYtMmIzYzIzMDBiY2ZlLzFkN2UzMjM3LWIxMTctNDU2Yi1iNzM2LTJiM2MyMzAw YmNmZS5jcmwwHwYDVR0jBBgwFoAUFbuRDXZjPw9pAEsQoGEs2yZxcxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdlMzIzNy1iMTE3LTQ1NmItYjczNi0yYjNj MjMwMGJjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUa8kPIJwnXIs29kf0xQTx387uHbgKJ/fA2ojeeBq5YmzXQlh1YFJ4R 5CJl01h68CCKutf/sthlY1k6xhIZ5mDQ4v90cqo+Vcc458WTf2nG9Ezlp6r7D0bW wCqYaoNqm3q4VGQr9n7GpxVncBOmjC98eG8xmVcxCsnTIRTf0XFBDyUAxObLh3Ww TGxVXMQFW0fee1WQIHzR9OPl9+hJ0m9jsPeJlJ/KkTNu91GbczGfmErsaRtUbVwY 9bnKATriHB1BjNKu2GeJ08bSXngnK3DkZUGuBI3K2TkZ/CFSMucMZnmguIwV2D1F aBykJmXzkCU/5DpoMgbo059abKoN0W0= -----END CERTIFICATE-----Generated at Wed Nov 5 01:39:52 2025 by rpki-client