$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa File: 3a59a8dd-9438-357b-9270-804aa380967c.roa (raw, json) Hash identifier: 0YB9HGlVKiXzgqnIDqzqs16YJfWxeAPWjLSIc6LASUs= Subject key identifier: 83:CE:F2:78:8D:17:F2:5E:24:16:16:83:BC:DD:D2:A3:EA:6D:0D:EF Certificate issuer: /CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Certificate serial: 010D0C9F4328584B89177CB3085304D2FF205E80 Authority key identifier: 9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 395549 IP address blocks: 23.129.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7c:b3:08:53:04:d2:ff:20:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=cc45393c-70b2-4ec7-8ca3-6e55b2443c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:d3:10:55:e3:6c:79:a0:cb:68:8f:19:95: c2:11:01:a9:89:4e:a1:fb:39:bf:95:2a:56:01:91: 41:9e:04:24:42:6c:78:cc:98:8b:1d:ab:58:06:02: 51:78:8e:e0:18:a6:ff:49:18:34:86:dd:d5:73:d7: 32:96:ad:e4:03:f0:21:da:d1:52:89:de:22:f1:f4: 2b:ce:e9:5c:63:e1:77:b8:64:a0:2e:e0:19:87:71: 08:65:0a:00:1e:de:b7:e4:7c:0a:41:b1:7b:60:e1: a8:fe:56:d6:ef:9a:dd:aa:0a:85:1c:45:1d:5b:13: 04:3c:a6:a2:65:7e:72:79:4b:b3:e8:90:18:41:13: 45:33:e0:c7:34:a2:a3:f4:01:09:d3:a7:9b:64:95: db:01:79:6b:c0:82:9c:a9:6d:bd:ff:b5:2c:8b:62: 3c:c1:a3:d5:a0:b7:b3:47:ab:d7:32:b5:f2:c5:a0: a3:89:6d:6d:66:09:76:9f:f8:26:41:b5:1d:d4:0d: e7:fd:ea:09:c9:c1:6f:da:6f:30:f9:65:8c:54:08: 20:60:85:03:f3:ff:76:bb:e3:de:84:6a:f8:9d:2a: 9e:af:70:e2:c9:03:c8:58:ca:09:43:50:f0:a7:a5: de:ec:b8:37:99:a3:a5:e2:5c:62:94:a8:ce:3c:05: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CE:F2:78:8D:17:F2:5E:24:16:16:83:BC:DD:D2:A3:EA:6D:0D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl X509v3 Authority Key Identifier: keyid:9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer sbgp-ipAddrBlock: critical IPv4: 23.129.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4d:e9:7d:fc:fe:7f:29:29:c9:c0:52:df:3b:b7:d5:30:3d: 8b:dd:8a:12:67:7d:6c:49:8c:40:a2:8c:c0:5b:4c:ba:15:b5: 38:7b:7f:8c:d7:ff:c1:b9:8b:a5:7c:e4:2e:5e:02:5d:c8:32: b4:a6:ce:29:ac:84:37:0a:44:06:59:79:a0:70:9c:92:3d:34: ff:6a:ee:1d:7e:4c:da:56:fa:cf:40:13:6c:88:c9:96:4d:aa: fe:71:5e:f7:71:c5:aa:1a:b8:9d:94:8e:e4:49:01:dd:b8:05: 41:30:1c:f4:e7:1e:ca:93:e5:a3:6d:36:7a:9f:76:d7:1e:99: 06:c0:7f:fd:6d:ea:e0:1e:f2:70:2d:fb:28:f7:5a:e6:60:09: a8:f5:de:29:30:f2:78:f4:c3:af:71:53:b2:a5:c2:d7:7f:70: f7:04:14:40:bd:9d:42:f8:ff:a1:88:3a:0a:4f:94:8a:f5:ec: 53:9e:59:b0:7d:3e:5a:95:5d:bc:f9:8d:30:99:47:ce:47:f8: ee:25:57:3e:24:96:48:69:32:a1:49:ee:af:73:ff:4b:50:e9: e1:17:d0:97:e6:75:a4:4f:69:e5:e8:fc:72:ab:7e:c1:f4:77: f9:ea:35:38:c1:82:46:c9:bf:02:92:45:43:fd:3a:46:8e:48: 2a:a2:cf:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3yzCFME0v8gXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZjViMDQtOTk4Yy00ZThhLWJmM2UtZmQ5YWI5NmEy ZDI4MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk Y2M0NTM5M2MtNzBiMi00ZWM3LThjYTMtNmU1NWIyNDQzYzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5rTEFXjbHmgy2iPGZXCEQGpiU6h+zm/lSpW AZFBngQkQmx4zJiLHatYBgJReI7gGKb/SRg0ht3Vc9cylq3kA/Ah2tFSid4i8fQr zulcY+F3uGSgLuAZh3EIZQoAHt635HwKQbF7YOGo/lbW75rdqgqFHEUdWxMEPKai ZX5yeUuz6JAYQRNFM+DHNKKj9AEJ06ebZJXbAXlrwIKcqW29/7Usi2I8waPVoLez R6vXMrXyxaCjiW1tZgl2n/gmQbUd1A3n/eoJycFv2m8w+WWMVAggYIUD8/92u+Pe hGr4nSqer3DiyQPIWMoJQ1Dwp6Xe7Lg3maOl4lxilKjOPAWaHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPO8niNF/JeJBYWg7zd0qPqbQ3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTdm NWIwNC05OThjLTRlOGEtYmYzZS1mZDlhYjk2YTJkMjgvM2E1OWE4ZGQtOTQzOC0z NTdiLTkyNzAtODA0YWEzODA5NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk3ZjViMDQtOTk4Yy00ZThhLWJm M2UtZmQ5YWI5NmEyZDI4Lzk5N2Y1YjA0LTk5OGMtNGU4YS1iZjNlLWZkOWFiOTZh MmQyOC5jcmwwHwYDVR0jBBgwFoAUmxMtCHZIK14G6wbEdyIg8AnNPtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTdmNWIwNC05OThjLTRlOGEtYmYzZS1mZDlh Yjk2YTJkMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClN6X38/n8pKcnAUt87t9UwPYvdihJnfWxJjECijMBbTLoVtTh7f4zX /8G5i6V85C5eAl3IMrSmzimshDcKRAZZeaBwnJI9NP9q7h1+TNpW+s9AE2yIyZZN qv5xXvdxxaoauJ2UjuRJAd24BUEwHPTnHsqT5aNtNnqfdtcemQbAf/1t6uAe8nAt +yj3WuZgCaj13ikw8nj0w69xU7Klwtd/cPcEFEC9nUL4/6GIOgpPlIr17FOeWbB9 PlqVXbz5jTCZR85H+O4lVz4klkhpMqFJ7q9z/0tQ6eEX0JfmdaRPaeXo/HKrfsH0 d/nqNTjBgkbJvwKSRUP9OkaOSCqizwY= -----END CERTIFICATE-----Generated at Wed Nov 5 18:21:20 2025 by rpki-client