$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa File: bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (raw, json) Hash identifier: tC0gnHTk6d6wyH5swRKIPaMxb/BorYw+j2sA3jH6/1c= Subject key identifier: 58:DF:36:98:17:BA:83:D7:F1:60:16:B2:09:25:9A:F0:25:82:C9:4A Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584BBE403D871C683EB7C3171300 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 26904 IP address blocks: 23.247.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3d:87:1c:68:3e:b7:c3:17:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=da0415d7-abe1-4ee4-b2d6-cdc19bd472e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:01:48:12:ef:c1:5e:69:b8:2e:69:61:94:8c: 05:5c:ff:d2:9b:cf:77:35:e1:14:c8:8a:11:5a:58: c3:11:da:1c:16:d8:77:22:69:55:54:7c:4d:bb:cd: 63:a8:36:0b:b9:af:b3:2d:35:2e:35:b2:60:07:c0: e6:b9:30:a9:26:e4:54:b1:d6:5a:f7:c7:3c:05:66: 4f:c7:1c:16:1f:0e:2c:c3:3e:03:2a:3b:37:c0:0c: 8c:d8:05:27:f7:04:99:99:3c:ed:7e:4b:49:7b:a5: e7:6e:2f:64:9e:ad:68:34:8a:39:e1:3e:b6:30:ef: 1a:9e:8c:b2:b7:16:90:01:42:1d:32:ce:9b:d7:fb: 16:50:d4:44:73:fb:dd:a4:bd:e3:f3:c8:bb:19:a7: 21:fe:3c:88:e9:4e:db:d2:ff:43:46:7c:eb:25:b4: 15:8e:40:5d:99:46:c1:ac:8b:09:0b:bc:55:74:e8: c4:49:0e:d1:6e:be:e6:2a:00:44:0e:f5:67:cb:f7: 4e:bf:d8:ca:5b:d9:40:eb:23:2f:ee:fa:26:aa:4c: 55:c2:8c:65:11:02:67:e5:29:1a:a3:1f:d5:35:0f: 6f:32:c3:fd:d4:74:c7:0e:99:cc:56:15:85:6a:07: ab:28:14:98:a5:69:58:0e:5f:2b:ef:ad:da:08:2c: c4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DF:36:98:17:BA:83:D7:F1:60:16:B2:09:25:9A:F0:25:82:C9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:cb:7c:38:67:e1:af:4a:94:f4:ad:1e:ed:48:ec:2c:f8:6c: 6d:f8:aa:94:77:cd:da:e8:4f:fc:07:38:73:09:13:7d:61:3c: e3:16:fa:21:95:6b:48:a1:05:c1:db:de:7a:cc:3b:83:62:c6: eb:d9:ed:fd:b0:bd:28:ed:1d:e9:e7:37:f0:81:32:9e:54:cd: c2:65:8d:15:40:fa:a8:3f:fc:6e:d1:de:33:32:3a:32:e9:0b: 2b:c1:41:e5:23:ae:ee:39:a2:b0:8c:c8:f5:cf:b7:25:18:5a: 55:b1:58:4f:2a:79:c0:89:21:92:9a:97:60:df:28:55:6f:d2: 2d:92:8a:3c:8c:e0:ef:b2:50:fc:6d:73:d3:24:26:6e:70:07: 07:b1:54:1b:ed:bc:5a:44:01:de:f7:e6:67:08:45:b8:35:82: 9a:d6:d4:fa:e5:9c:89:c0:0a:62:63:f3:1a:5d:c9:0b:ec:44: 02:a2:e3:3b:9e:d9:02:28:22:ee:f5:49:bd:98:77:ab:01:40: 62:51:70:e4:7d:89:20:6c:00:8a:13:c5:51:9b:75:75:95:42: 46:e8:b4:eb:9c:1c:de:5f:f8:95:7a:79:4f:2e:d2:43:7c:ce: aa:b3:40:3c:cf:3e:2b:1c:41:58:7a:62:6a:7c:4e:11:4d:5b: 77:67:a2:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QD2HHGg+t8MXEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZGEwNDE1ZDctYWJlMS00ZWU0LWIyZDYtY2RjMTliZDQ3MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQFIEu/BXmm4LmlhlIwFXP/Sm893NeEUyIoR WljDEdocFth3ImlVVHxNu81jqDYLua+zLTUuNbJgB8DmuTCpJuRUsdZa98c8BWZP xxwWHw4swz4DKjs3wAyM2AUn9wSZmTztfktJe6Xnbi9knq1oNIo54T62MO8anoyy txaQAUIdMs6b1/sWUNREc/vdpL3j88i7Gach/jyI6U7b0v9DRnzrJbQVjkBdmUbB rIsJC7xVdOjESQ7Rbr7mKgBEDvVny/dOv9jKW9lA6yMv7vomqkxVwoxlEQJn5Ska ox/VNQ9vMsP91HTHDpnMVhWFagerKBSYpWlYDl8r763aCCzE9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjfNpgXuoPX8WAWsgklmvAlgslKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvYmY5MjRkYmQtMzRiYy0z YzczLTk5MTEtZTZlOTMzNDA1ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbLfDhn4a9KlPStHu1I7Cz4bG34qpR3zdroT/wHOHMJE31hPOMW+iGV a0ihBcHb3nrMO4NixuvZ7f2wvSjtHennN/CBMp5UzcJljRVA+qg//G7R3jMyOjLp CyvBQeUjru45orCMyPXPtyUYWlWxWE8qecCJIZKal2DfKFVv0i2SijyM4O+yUPxt c9MkJm5wBwexVBvtvFpEAd735mcIRbg1gprW1PrlnInACmJj8xpdyQvsRAKi4zue 2QIoIu71Sb2Yd6sBQGJRcOR9iSBsAIoTxVGbdXWVQkbotOucHN5f+JV6eU8u0kN8 zqqzQDzPPiscQVh6Ymp8ThFNW3dnotM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:52:28 2025 by rpki-client