$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6b4aada1-e770-3078-aefb-059660524c32.roa File: 6b4aada1-e770-3078-aefb-059660524c32.roa (raw, json) Hash identifier: M4UlCbWU/9chGDRvYqYX/ilxfbohL/jdvtKOYhpCFKU= Subject key identifier: 28:B5:F0:A1:6D:C7:83:35:63:37:A3:D8:D6:AA:46:79:00:B4:E0:80 Certificate issuer: /CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59 Certificate serial: 010D0C9F4328584BB45D2EA877155901DD74A600 Authority key identifier: 0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6b4aada1-e770-3078-aefb-059660524c32.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 23077 IP address blocks: 23.170.24.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2e:a8:77:15:59:01:dd:74:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75d2cba5-acec-4ba8-ade7-0f83a6aefd59 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=0cea355d-3a5f-4c95-8255-731d9ae4560a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:bf:9f:b4:b8:ee:77:f8:23:5f:d4:84:41: 0f:8d:09:2c:6a:4c:fd:68:47:f0:70:c0:3a:3b:b0: b7:a8:d4:a8:b9:c4:25:c6:b2:36:06:ef:a7:95:50: 32:a6:44:a9:31:93:83:14:f9:1c:58:6d:c0:43:18: 2d:db:c4:7f:10:38:1e:3f:64:6d:93:d1:b0:39:aa: 1e:85:ef:c2:c7:f9:e1:93:5a:63:d6:5a:14:a5:0b: 1b:72:e3:f2:d9:58:3d:71:0c:b4:db:fc:de:27:23: a5:29:d5:c4:ad:a0:0d:4d:8f:19:ed:6a:2f:94:3e: aa:bb:f3:27:58:01:4c:59:6b:b7:6b:33:28:7c:fd: f5:e6:5a:38:2f:14:a4:5d:4d:bd:16:dc:07:1e:6e: af:b5:89:7c:2a:b9:83:28:0e:21:6c:ac:87:26:fe: d1:ee:db:96:e3:11:1e:e4:28:e4:31:76:df:fd:0c: 10:a0:ba:2c:c3:9c:1a:8d:f8:79:2d:b8:c8:b0:c5: fe:ca:06:66:9c:3a:42:de:49:03:d9:35:9f:87:9b: fc:ea:92:96:6a:7c:91:d4:35:db:a0:55:fb:19:34: 3a:9d:8e:98:12:77:80:b5:8e:2b:a1:f3:f0:bc:55: 9f:81:14:d6:26:24:67:dd:44:f6:59:f7:ff:f9:06: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B5:F0:A1:6D:C7:83:35:63:37:A3:D8:D6:AA:46:79:00:B4:E0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/6b4aada1-e770-3078-aefb-059660524c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.crl X509v3 Authority Key Identifier: keyid:0B:42:83:AD:39:29:A6:89:DF:8C:7F:D7:13:47:46:6F:8F:CB:EF:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/75d2cba5-acec-4ba8-ade7-0f83a6aefd59.cer sbgp-ipAddrBlock: critical IPv4: 23.170.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:f1:4c:2a:99:4d:06:21:ea:d9:53:58:0a:e1:ef:32:19:ae: 0a:5e:96:2a:d6:e5:e4:7f:e5:ba:00:58:97:b2:37:68:dd:38: 1b:1c:95:3c:c0:0c:5e:fc:87:cf:10:20:fa:f9:47:26:46:0c: 20:7d:b0:42:71:5f:51:a5:b7:bf:9d:8a:14:0c:77:74:cb:80: 5d:e3:5c:db:37:33:48:ba:b3:92:d0:44:1b:48:80:bb:45:0e: 57:8e:a7:0c:eb:90:a6:ba:63:85:1c:6c:70:cd:d0:f8:cb:15: 8d:13:ab:29:f3:90:71:33:14:12:45:90:c3:dc:b4:05:54:7d: ed:1a:74:2c:b4:cc:67:bc:8d:6f:8e:cb:98:8e:14:43:4a:ba: ec:b1:5e:d6:b3:b9:5b:8e:39:ec:2f:ed:fe:63:8f:61:ab:76: b9:c9:32:64:a0:70:05:02:c7:c5:4e:45:af:6e:22:15:5b:bd: 00:1a:10:c1:32:8d:ed:40:b7:66:5f:65:6e:39:f3:1b:35:94: 3b:14:0f:6b:29:35:d5:33:aa:72:75:fd:53:5f:6b:20:37:eb: e3:64:86:45:8f:d1:88:02:c9:12:bd:68:1e:c7:1a:ef:41:bd: 95:39:a6:40:a4:97:18:c3:d5:5f:41:49:e9:a4:f9:6c:09:d3: f2:67:af:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XS6odxVZAd10pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVkMmNiYTUtYWNlYy00YmE4LWFkZTctMGY4M2E2YWVm ZDU5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MGNlYTM1NWQtM2E1Zi00Yzk1LTgyNTUtNzMxZDlhZTQ1NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/O/n7S47nf4I1/UhEEPjQksakz9aEfwcMA6 O7C3qNSoucQlxrI2Bu+nlVAypkSpMZODFPkcWG3AQxgt28R/EDgeP2Rtk9GwOaoe he/Cx/nhk1pj1loUpQsbcuPy2Vg9cQy02/zeJyOlKdXEraANTY8Z7WovlD6qu/Mn WAFMWWu3azMofP315lo4LxSkXU29FtwHHm6vtYl8KrmDKA4hbKyHJv7R7tuW4xEe 5CjkMXbf/QwQoLosw5wajfh5LbjIsMX+ygZmnDpC3kkD2TWfh5v86pKWanyR1DXb oFX7GTQ6nY6YEneAtY4rofPwvFWfgRTWJiRn3UT2Wff/+QZnaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCi18KFtx4M1Yzej2NaqRnkAtOCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQy Y2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgzYTZhZWZkNTkvNmI0YWFkYTEtZTc3MC0z MDc4LWFlZmItMDU5NjYwNTI0YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzVkMmNiYTUtYWNlYy00YmE4LWFk ZTctMGY4M2E2YWVmZDU5Lzc1ZDJjYmE1LWFjZWMtNGJhOC1hZGU3LTBmODNhNmFl ZmQ1OS5jcmwwHwYDVR0jBBgwFoAUC0KDrTkpponfjH/XE0dGb4/L7/UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83NWQyY2JhNS1hY2VjLTRiYTgtYWRlNy0wZjgz YTZhZWZkNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDxTCqZTQYh6tlTWArh7zIZrgpelirW5eR/5boAWJeyN2jdOBsclTzA DF78h88QIPr5RyZGDCB9sEJxX1Glt7+dihQMd3TLgF3jXNs3M0i6s5LQRBtIgLtF DleOpwzrkKa6Y4UcbHDN0PjLFY0TqynzkHEzFBJFkMPctAVUfe0adCy0zGe8jW+O y5iOFENKuuyxXtazuVuOOewv7f5jj2GrdrnJMmSgcAUCx8VORa9uIhVbvQAaEMEy je1At2ZfZW458xs1lDsUD2spNdUzqnJ1/VNfayA36+NkhkWP0YgCyRK9aB7HGu9B vZU5pkCklxjD1V9BSemk+WwJ0/Jnr/g= -----END CERTIFICATE-----Generated at Wed Nov 5 01:20:35 2025 by rpki-client