$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa File: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (raw, json) Hash identifier: v4xCBy/EC+VupVbFzbqq/rDSzR8q3JqBx0A/KAkkfKQ= Subject key identifier: 6F:2F:EC:EE:A0:DD:AF:06:38:C6:F5:55:37:A9:9F:9D:9D:A9:F4:37 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584B9B6AC707E11B306B3E29CE00 Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa Signing time: Wed 22 Oct 2025 14:33:08 +0000 ROA not before: Wed 22 Oct 2025 14:33:08 +0000 ROA not after: Tue 20 Jan 2026 15:33:08 +0000 asID: 152179 IP address blocks: 23.147.4.0/24 maxlen: 24 2602:f52e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:6a:c7:07:e1:1b:30:6b:3e:29:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Oct 22 14:33:08 2025 GMT Not After : Jan 20 15:33:08 2026 GMT Subject: CN=6a73c9a7-0297-439d-8b1d-b06d9c15e00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b5:c7:6b:e5:28:87:b1:de:2a:27:93:b0:13: 01:d2:4d:03:71:c7:34:38:35:e2:ff:73:14:70:7a: 81:ad:3c:0b:d6:94:9a:7e:51:45:59:32:28:e3:0b: 6b:0d:20:88:15:81:a5:5e:53:49:b0:20:85:a8:3f: cd:75:11:32:53:ea:f9:09:44:64:3c:e9:54:26:db: 8b:d3:a7:d8:9f:47:09:86:14:46:d1:94:f8:ae:01: 4a:85:d6:1c:74:04:23:ce:96:e9:31:64:ed:64:bd: a1:14:b5:e7:8c:01:e2:eb:d2:9f:63:ef:b1:69:e9: 75:88:d9:7e:fd:79:7b:4b:fb:e6:40:f5:08:b1:e2: 74:ab:b3:6b:d6:a1:c8:03:24:20:3a:95:b7:08:49: 79:e1:82:23:a3:1d:0a:c8:89:a0:96:0d:8b:ce:94: 93:bf:48:48:0f:fa:5f:08:97:5b:f3:e4:c1:79:91: 74:3f:d7:a7:25:fa:64:14:6e:d4:89:30:48:07:da: 6e:94:44:81:9c:a7:c0:5f:e5:93:f5:ad:08:71:f0: b8:0d:bb:9d:d3:13:0b:7d:a6:df:3d:bb:a5:4b:fd: 3e:81:06:fe:f8:b6:be:d5:cb:ee:a7:4c:ab:dc:05: 77:51:76:09:ac:4f:16:98:8f:2c:0c:69:07:60:59: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2F:EC:EE:A0:DD:AF:06:38:C6:F5:55:37:A9:9F:9D:9D:A9:F4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: 23.147.4.0/24 IPv6: 2602:f52e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a6:51:09:94:b3:6d:92:5f:86:57:0d:a0:ce:0b:06:fb:f6: 26:01:7e:18:56:b5:60:de:e5:d1:52:cb:68:9e:0f:ab:40:62: 7a:ed:92:0a:3a:82:ef:03:13:5a:31:80:a0:68:4d:59:80:f8: 6f:00:b9:40:fc:34:65:b3:51:23:27:29:26:b6:1a:00:15:f3: 11:8b:77:de:6f:9b:ab:d7:51:d1:25:0c:d8:3a:af:d0:b1:21: 98:33:ac:fe:1f:d0:0c:10:61:b9:96:1b:c9:3f:58:e9:32:1e: 57:72:93:cc:de:96:c4:9a:46:86:a9:67:81:30:90:c9:fe:61: f9:3a:b1:60:24:7f:e6:07:9e:7d:7f:0f:fd:8e:bf:3d:13:1d: f3:ca:6d:13:0d:ca:f0:00:e2:50:6d:5f:dd:2b:6a:a0:aa:2a: 65:a9:6f:c1:53:54:79:94:dc:63:c8:93:5f:33:d0:c9:45:ed: 23:8f:ef:5c:40:2c:48:b1:c4:fa:e8:f8:d0:2c:57:25:4f:92: fd:ef:1e:ad:59:68:ab:c2:3d:69:cb:97:c8:9e:54:f2:cb:e6: 3b:29:3c:0e:a5:6d:23:b2:23:70:99:2e:fa:94:d8:8b:4d:c3: ae:a9:fc:9d:fe:c4:d8:2c:9e:a5:73:57:d4:d3:57:d1:a3:fb: 5d:4c:e3:5b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEubascH4Rswaz4pzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI1MTAyMjE0MzMwOFoXDTI2MDEyMDE1MzMwOFowLzEtMCsGA1UEAxMk NmE3M2M5YTctMDI5Ny00MzlkLThiMWQtYjA2ZDljMTVlMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrXHa+Uoh7HeKieTsBMB0k0Dccc0ODXi/3MU cHqBrTwL1pSaflFFWTIo4wtrDSCIFYGlXlNJsCCFqD/NdREyU+r5CURkPOlUJtuL 06fYn0cJhhRG0ZT4rgFKhdYcdAQjzpbpMWTtZL2hFLXnjAHi69KfY++xael1iNl+ /Xl7S/vmQPUIseJ0q7Nr1qHIAyQgOpW3CEl54YIjox0KyImglg2LzpSTv0hID/pf CJdb8+TBeZF0P9enJfpkFG7UiTBIB9pulESBnKfAX+WT9a0IcfC4Dbud0xMLfabf PbulS/0+gQb++La+1cvup0yr3AV3UXYJrE8WmI8sDGkHYFlRawIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFG8v7O6g3a8GOMb1VTepn52dqfQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMmM5NDk5YTYtNzVlYS0z ZmY2LTkyNDEtMzIxODMzY2FhMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MEMA4E AgACMAgDBgAmAvUuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTplEJlLNtkl+GVw2gzgsG+/YmAX4YVrVg 3uXRUstong+rQGJ67ZIKOoLvAxNaMYCgaE1ZgPhvALlA/DRls1EjJykmthoAFfMR i3feb5ur11HRJQzYOq/QsSGYM6z+H9AMEGG5lhvJP1jpMh5XcpPM3pbEmkaGqWeB MJDJ/mH5OrFgJH/mB559fw/9jr89Ex3zym0TDcrwAOJQbV/dK2qgqiplqW/BU1R5 lNxjyJNfM9DJRe0jj+9cQCxIscT66PjQLFclT5L97x6tWWirwj1py5fInlTyy+Y7 KTwOpW0jsiNwmS76lNiLTcOuqfyd/sTYLJ6lc1fU01fRo/tdTONb -----END CERTIFICATE-----Generated at Wed Nov 5 03:23:51 2025 by rpki-client