$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/a21c57bb-ff5e-38f0-8d1c-595476707220.roa File: a21c57bb-ff5e-38f0-8d1c-595476707220.roa (raw, json) Hash identifier: NsmoSkDa3ftmcUOMRjhUAgw8o76RBL493UmxonZOWU8= Subject key identifier: 23:D5:7C:BD:4B:B0:15:6D:9C:D8:BD:31:4E:76:E4:17:56:EF:54:01 Certificate issuer: /CN=0dbbe9e5-6fcf-4701-8305-bd19ac481b9e Certificate serial: 010D0C9F4328584BBB7598B7A7D9B1B11F9478A0 Authority key identifier: 29:47:C6:13:66:F5:EB:98:3A:1F:B6:92:70:CB:89:12:47:4B:25:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/a21c57bb-ff5e-38f0-8d1c-595476707220.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 401351 IP address blocks: 23.190.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:98:b7:a7:d9:b1:b1:1f:94:78:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dbbe9e5-6fcf-4701-8305-bd19ac481b9e Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=965a22a3-1332-43b8-aa97-ba236fded505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:93:94:f5:99:d0:f1:33:c7:16:f2:13:e0:d1: 25:9b:13:80:2b:8a:81:15:03:4d:f9:c9:a8:1e:29: 79:7c:5d:d7:1c:19:86:80:99:1a:4b:03:99:b8:93: 47:e3:72:40:7b:f9:94:05:a1:2c:13:0b:ad:31:20: 66:a6:0b:b0:5a:2c:32:39:da:36:7e:49:ed:1d:84: 43:51:0a:ee:6a:9f:d5:2e:be:68:5e:5f:66:6b:b8: d2:1f:09:c2:3e:95:6b:ea:98:8b:07:5c:59:5a:c9: 7f:3a:e9:e6:66:3b:25:e9:4a:79:b8:41:7a:66:cf: 2f:dc:56:be:76:f1:34:72:cd:ea:b6:8b:13:a1:a7: cc:9b:24:25:7b:d8:99:42:56:c9:2d:11:19:c0:17: f2:60:d2:8c:12:3e:fc:c1:f6:4b:c0:94:65:4c:8b: 15:85:a8:be:c4:2d:a8:25:71:d9:bf:84:e1:4c:19: 37:b8:1d:aa:47:25:56:c8:47:53:95:93:e7:9a:01: 38:7d:41:1e:a5:66:2d:59:aa:73:51:5a:64:9a:0d: c0:51:ef:da:54:1c:2d:69:76:a2:c4:96:d1:8d:18: 7e:81:6b:d7:9e:6d:4c:d5:e4:ed:29:c7:e6:64:29: 52:4b:2e:9b:ac:24:a8:47:45:b7:39:f2:f3:1b:1a: 01:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D5:7C:BD:4B:B0:15:6D:9C:D8:BD:31:4E:76:E4:17:56:EF:54:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/a21c57bb-ff5e-38f0-8d1c-595476707220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.crl X509v3 Authority Key Identifier: keyid:29:47:C6:13:66:F5:EB:98:3A:1F:B6:92:70:CB:89:12:47:4B:25:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0dbbe9e5-6fcf-4701-8305-bd19ac481b9e.cer sbgp-ipAddrBlock: critical IPv4: 23.190.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6f:47:4b:62:de:c8:57:52:14:b6:64:5c:96:fc:68:65:5f: ba:3a:c8:89:fc:0b:84:a2:d2:cc:0e:59:84:6c:bb:ee:53:1e: fb:d8:b1:a2:56:22:37:4c:b6:41:44:2c:4d:46:f5:7a:02:b5: b2:70:4b:5b:33:99:de:75:db:df:f2:ef:78:44:33:f8:ed:6f: 9d:71:2a:60:1d:0f:b8:dd:69:67:37:e9:e5:fc:51:e6:a6:76: fd:d1:e1:64:db:42:f7:0b:82:02:55:6d:15:35:34:15:fd:d5: e3:e1:0b:4f:1b:b8:f9:4c:d5:3f:66:99:ab:83:f4:bc:10:9c: 79:16:21:79:86:6f:a6:f9:7f:df:ef:c1:2c:ec:ee:c0:39:18: 2e:a7:d1:a9:1c:8b:bf:04:cb:2b:04:73:f2:9c:77:b7:84:07: 39:30:71:30:12:91:bd:a6:87:6c:74:76:b7:a7:0d:3c:7e:58: 10:43:ca:50:5a:9d:d6:0f:3f:3f:d9:7e:e7:b1:6c:6b:e0:b5: b8:de:43:27:21:8c:6d:bb:5f:7e:00:ad:38:9c:a1:b0:f1:6b: a9:a5:38:87:3b:9b:9f:c1:ee:8f:b4:fb:30:9d:d0:5b:9b:4f: ba:0e:cf:cf:9b:e6:d9:a4:db:92:02:01:c0:ab:d0:d8:28:79: 82:78:73:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZi3p9mxsR+UeKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRiYmU5ZTUtNmZjZi00NzAxLTgzMDUtYmQxOWFjNDgx YjllMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk OTY1YTIyYTMtMTMzMi00M2I4LWFhOTctYmEyMzZmZGVkNTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5OU9ZnQ8TPHFvIT4NElmxOAK4qBFQNN+cmo Hil5fF3XHBmGgJkaSwOZuJNH43JAe/mUBaEsEwutMSBmpguwWiwyOdo2fkntHYRD UQruap/VLr5oXl9ma7jSHwnCPpVr6piLB1xZWsl/OunmZjsl6Up5uEF6Zs8v3Fa+ dvE0cs3qtosToafMmyQle9iZQlbJLREZwBfyYNKMEj78wfZLwJRlTIsVhai+xC2o JXHZv4ThTBk3uB2qRyVWyEdTlZPnmgE4fUEepWYtWapzUVpkmg3AUe/aVBwtaXai xJbRjRh+gWvXnm1M1eTtKcfmZClSSy6brCSoR0W3OfLzGxoBXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPVfL1LsBVtnNi9MU525BdW71QBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZGJi ZTllNS02ZmNmLTQ3MDEtODMwNS1iZDE5YWM0ODFiOWUvYTIxYzU3YmItZmY1ZS0z OGYwLThkMWMtNTk1NDc2NzA3MjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGRiYmU5ZTUtNmZjZi00NzAxLTgz MDUtYmQxOWFjNDgxYjllLzBkYmJlOWU1LTZmY2YtNDcwMS04MzA1LWJkMTlhYzQ4 MWI5ZS5jcmwwHwYDVR0jBBgwFoAUKUfGE2b165g6H7aScMuJEkdLJfMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZGJiZTllNS02ZmNmLTQ3MDEtODMwNS1iZDE5 YWM0ODFiOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF76IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBvR0ti3shXUhS2ZFyW/GhlX7o6yIn8C4Si0swOWYRsu+5THvvYsaJW IjdMtkFELE1G9XoCtbJwS1szmd5129/y73hEM/jtb51xKmAdD7jdaWc36eX8Ueam dv3R4WTbQvcLggJVbRU1NBX91ePhC08buPlM1T9mmauD9LwQnHkWIXmGb6b5f9/v wSzs7sA5GC6n0akci78EyysEc/Kcd7eEBzkwcTASkb2mh2x0drenDTx+WBBDylBa ndYPPz/ZfuexbGvgtbjeQychjG27X34ArTicobDxa6mlOIc7m5/B7o+0+zCd0Fub T7oOz8+b5tmk25ICAcCr0NgoeYJ4c98= -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:19 2025 by rpki-client