$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa File: e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa (raw, json) Hash identifier: 6JLvHszkbWygqpGa4dBEVqLljFbv2bnaPWpUjKSJEGk= Subject key identifier: FA:8A:A7:A6:BC:E1:05:E3:94:75:74:59:46:4E:57:66:4A:13:78:FE Certificate issuer: /CN=74abbfb2-e5dc-4531-8f8b-856399f8fa45 Certificate serial: 010D0C9F4328584B89177E16AA28573B2C9A2600 Authority key identifier: 08:12:D1:FE:DD:1B:0E:26:9D:4C:D4:93:35:35:92:84:7B:F8:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 23.188.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:7e:16:aa:28:57:3b:2c:9a:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74abbfb2-e5dc-4531-8f8b-856399f8fa45 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=097c526d-bdec-4744-84b4-09393ab4df9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:99:57:91:c0:a2:17:0b:17:55:10:a4:29: 1e:ec:64:ab:c8:1c:89:1e:10:5c:0b:cb:b7:0f:37: 3f:4a:7f:c2:82:92:81:03:fb:b2:5c:77:ff:e2:34: 29:a2:3b:38:71:de:45:ad:ed:ae:7d:a8:4e:c3:a5: 9b:a8:3c:50:6f:ea:f7:02:51:07:4e:23:94:79:98: ed:6f:93:07:a5:a8:77:0c:31:c1:06:38:29:cb:bd: af:82:d1:0d:ff:63:e6:d8:22:92:e1:3e:3e:a6:08: 99:c9:47:bb:a2:0a:d4:83:80:72:13:f0:29:de:32: 0f:0d:d8:48:05:65:58:d7:bf:5d:cd:a8:e9:93:b8: 7d:00:78:07:9d:50:e9:f8:be:69:ec:19:9a:bd:f3: 46:bb:4e:94:9d:84:11:11:d6:ed:d7:22:2e:f5:2f: a5:97:be:f9:49:59:bf:8a:d8:8f:a0:d2:8f:56:2d: 25:f9:cf:b5:b0:0a:a3:ad:ae:64:17:a4:a4:01:f6: ee:08:9e:d7:af:d1:cf:15:d7:94:e6:61:c3:24:15: 48:2a:74:da:78:db:77:ab:e3:25:2d:c8:75:95:47: a6:0b:e4:9e:61:d1:28:e9:ff:19:50:40:b2:0e:44: e8:f8:61:e2:23:31:3d:9f:4d:f4:1b:71:a4:18:ea: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8A:A7:A6:BC:E1:05:E3:94:75:74:59:46:4E:57:66:4A:13:78:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/e9ce6a0e-b1fa-3987-b9ad-d71957d18743.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45/74abbfb2-e5dc-4531-8f8b-856399f8fa45.crl X509v3 Authority Key Identifier: keyid:08:12:D1:FE:DD:1B:0E:26:9D:4C:D4:93:35:35:92:84:7B:F8:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/74abbfb2-e5dc-4531-8f8b-856399f8fa45.cer sbgp-ipAddrBlock: critical IPv4: 23.188.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2e:73:5e:5a:5f:15:fb:98:44:4e:09:a1:71:42:2b:9b:b6: 8a:e0:0f:0e:3c:ee:71:8e:bd:44:56:71:bc:89:f7:97:5c:4d: 08:c2:a7:c7:47:5e:e3:79:3a:4e:a0:9b:6e:fa:48:21:ba:65: 51:4d:30:df:87:14:74:4f:ee:b6:0c:b3:b8:be:01:4a:2d:92: b6:c1:3f:60:3d:74:87:f6:0f:6a:65:d9:05:aa:f6:8f:53:77: c6:5b:84:2c:78:c8:bf:cb:72:53:c3:5d:9a:14:35:70:99:cd: d7:91:73:8d:4a:49:8a:6b:a7:08:e5:bb:d1:6a:0c:54:29:6b: 3b:f6:dd:8b:9d:70:8d:ca:31:e3:5f:8f:1c:1c:6f:3f:a5:61: 7c:e2:b7:5c:60:bf:97:3d:fa:2f:10:c4:86:30:81:fc:9a:25: 31:c6:5f:d4:59:13:9d:39:8e:d4:ce:5f:da:c0:b8:d2:07:a8: b0:77:18:05:a4:53:f0:55:cf:00:98:d1:a6:c8:65:d4:90:ff: e2:de:b5:75:4c:20:ac:0a:f5:e7:a2:08:b3:e2:d4:9f:dc:3c: 6f:4e:8a:3f:93:74:19:41:b5:d3:35:11:5e:bb:1d:5c:59:41: 4b:76:51:31:45:2b:f2:6a:e5:cd:2a:87:34:68:ab:f1:ff:5c: 24:4b:fe:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF34WqihXOyyaJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhYmJmYjItZTVkYy00NTMxLThmOGItODU2Mzk5Zjhm YTQ1MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MDk3YzUyNmQtYmRlYy00NzQ0LTg0YjQtMDkzOTNhYjRkZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE+ZV5HAohcLF1UQpCke7GSryByJHhBcC8u3 Dzc/Sn/CgpKBA/uyXHf/4jQpojs4cd5Fre2ufahOw6WbqDxQb+r3AlEHTiOUeZjt b5MHpah3DDHBBjgpy72vgtEN/2Pm2CKS4T4+pgiZyUe7ogrUg4ByE/Ap3jIPDdhI BWVY179dzajpk7h9AHgHnVDp+L5p7BmavfNGu06UnYQREdbt1yIu9S+ll775SVm/ itiPoNKPVi0l+c+1sAqjra5kF6SkAfbuCJ7Xr9HPFdeU5mHDJBVIKnTaeNt3q+Ml Lch1lUemC+SeYdEo6f8ZUECyDkTo+GHiIzE9n030G3GkGOq49QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqKp6a84QXjlHV0WUZOV2ZKE3j+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NGFi YmZiMi1lNWRjLTQ1MzEtOGY4Yi04NTYzOTlmOGZhNDUvZTljZTZhMGUtYjFmYS0z OTg3LWI5YWQtZDcxOTU3ZDE4NzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzRhYmJmYjItZTVkYy00NTMxLThm OGItODU2Mzk5ZjhmYTQ1Lzc0YWJiZmIyLWU1ZGMtNDUzMS04ZjhiLTg1NjM5OWY4 ZmE0NS5jcmwwHwYDVR0jBBgwFoAUCBLR/t0bDiadTNSTNTWShHv4QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NGFiYmZiMi1lNWRjLTQ1MzEtOGY4Yi04NTYz OTlmOGZhNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8uc15aXxX7mEROCaFxQiubtorgDw487nGOvURWcbyJ95dcTQjCp8dH XuN5Ok6gm276SCG6ZVFNMN+HFHRP7rYMs7i+AUotkrbBP2A9dIf2D2pl2QWq9o9T d8ZbhCx4yL/LclPDXZoUNXCZzdeRc41KSYprpwjlu9FqDFQpazv23YudcI3KMeNf jxwcbz+lYXzit1xgv5c9+i8QxIYwgfyaJTHGX9RZE505jtTOX9rAuNIHqLB3GAWk U/BVzwCY0abIZdSQ/+LetXVMIKwK9eeiCLPi1J/cPG9Oij+TdBlBtdM1EV67HVxZ QUt2UTFFK/Jq5c0qhzRoq/H/XCRL/mg= -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:19 2025 by rpki-client