$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa File: bb02bbe3-126a-326c-b493-d6ffc832128e.roa (raw, json) Hash identifier: b+6rom3AjOU/P0D2cpgoEFM8kZBvyYCkiKAlmgf4gn8= Subject key identifier: B4:88:D7:0D:01:78:80:E8:BF:E2:84:03:E8:3C:67:50:45:FE:6C:00 Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584B970CF43113422019F7CC6080 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 134351 IP address blocks: 23.19.53.0/24 maxlen: 24 2607:f5b5:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f4:31:13:42:20:19:f7:cc:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=bd65da24-5a75-4d71-9fdf-db2845230486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:af:a0:ea:6c:eb:9d:f6:31:40:4e:05:de: 8d:11:5c:08:64:11:22:ee:14:07:3a:a5:7f:bd:76: 30:76:87:bc:e3:07:7f:e2:2b:5b:91:90:ed:f3:ce: 83:f4:92:0f:ad:62:28:b7:05:4d:67:29:ba:82:86: 8a:b5:25:58:08:34:9f:81:65:7a:3e:cb:56:24:14: b3:20:ad:23:16:a9:2f:56:07:a4:71:d7:92:3c:64: 57:e4:28:53:a7:3f:73:47:1b:e1:99:8f:4c:95:30: 94:84:d0:2d:a8:6b:30:99:57:aa:e8:a7:fd:30:99: 35:da:e6:a3:ef:c5:7b:c5:25:e1:80:e3:da:1e:6b: bd:d2:36:c7:9a:d8:ff:d1:67:4f:67:84:61:14:56: ff:04:08:fc:bc:2f:8e:c1:c9:ad:18:6c:d4:99:0a: 0b:64:71:16:67:c5:f8:86:c1:8e:af:0b:bc:37:99: 5d:75:82:7e:e7:f9:8b:2e:21:1c:b4:d7:b1:9b:4c: a0:30:30:a5:76:91:9e:f8:34:64:f6:5e:75:1e:43: 19:19:07:51:60:08:97:28:15:9f:5d:79:70:c3:9e: 43:a3:74:2d:36:69:7b:e9:f8:be:da:1c:81:14:fc: 66:30:0e:7a:78:ec:a1:ac:d4:29:9d:2a:7f:aa:63: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:88:D7:0D:01:78:80:E8:BF:E2:84:03:E8:3C:67:50:45:FE:6C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.19.53.0/24 IPv6: 2607:f5b5:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:f5:a6:0a:2d:fe:b4:a2:ae:fd:c9:98:44:08:02:d0:22:39: 1a:d0:44:5e:88:27:52:73:ea:c0:2f:ce:ac:43:af:9b:cb:24: e1:34:80:0a:b7:26:b1:c4:a5:83:b6:cc:56:f2:d8:0d:b1:10: c3:f4:8f:9f:86:24:6d:d7:0f:44:f4:59:08:2a:19:8c:67:38: 59:97:f1:ac:77:c0:c4:b9:d8:5e:3f:26:ec:36:22:63:4e:3a: 2e:44:34:f6:e6:a2:d6:eb:70:2d:d3:ed:57:dd:22:7c:b1:e0: 6e:c6:b9:5b:63:fd:77:50:b2:ea:20:8b:6e:dd:40:b8:c1:b9: 63:d0:93:c9:f8:ab:ea:7c:21:4a:eb:8d:eb:4c:be:1b:e0:92: 6d:16:20:0b:0b:24:05:d4:38:13:93:79:ff:12:43:8a:4e:e0: f2:5a:f5:63:96:dd:60:c8:3c:69:e5:04:7d:77:5a:ed:2a:41: b6:e2:ff:52:a1:e2:c5:9e:a5:47:95:3b:99:1d:4d:61:b2:e2: 33:4c:f3:84:32:48:3f:3f:58:38:84:ec:bd:91:7a:cb:f4:3a: bd:b3:50:bd:42:ec:c4:12:dc:4d:7c:9e:ef:99:3c:8c:28:33: 2c:6a:5e:b3:13:26:f9:67:d8:e7:9c:be:0a:c1:13:00:ac:83: d1:aa:8f:e6 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuXDPQxE0IgGffMYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YmQ2NWRhMjQtNWE3NS00ZDcxLTlmZGYtZGIyODQ1MjMwNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mKvoOps6532MUBOBd6NEVwIZBEi7hQHOqV/ vXYwdoe84wd/4itbkZDt886D9JIPrWIotwVNZym6goaKtSVYCDSfgWV6PstWJBSz IK0jFqkvVgekcdeSPGRX5ChTpz9zRxvhmY9MlTCUhNAtqGswmVeq6Kf9MJk12uaj 78V7xSXhgOPaHmu90jbHmtj/0WdPZ4RhFFb/BAj8vC+OwcmtGGzUmQoLZHEWZ8X4 hsGOrwu8N5lddYJ+5/mLLiEctNexm0ygMDCldpGe+DRk9l51HkMZGQdRYAiXKBWf XXlww55Do3QtNml76fi+2hyBFPxmMA56eOyhrNQpnSp/qmNbZQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLSI1w0BeIDov+KEA+g8Z1BF/mwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmIwMmJiZTMtMTI2YS0z MjZjLWI0OTMtZDZmZmM4MzIxMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAFxM1MA8E AgACMAkDBwAmB/W1AAMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEArfWmCi3+tKKu/cmYRAgC0CI5GtBEXogn UnPqwC/OrEOvm8sk4TSACrcmscSlg7bMVvLYDbEQw/SPn4YkbdcPRPRZCCoZjGc4 WZfxrHfAxLnYXj8m7DYiY046LkQ09uai1utwLdPtV90ifLHgbsa5W2P9d1Cy6iCL bt1AuMG5Y9CTyfir6nwhSuuN60y+G+CSbRYgCwskBdQ4E5N5/xJDik7g8lr1Y5bd YMg8aeUEfXda7SpBtuL/UqHixZ6lR5U7mR1NYbLiM0zzhDJIPz9YOITsvZF6y/Q6 vbNQvULsxBLcTXye75k8jCgzLGpesxMm+WfY55y+CsETAKyD0aqP5g== -----END CERTIFICATE-----Generated at Wed Nov 5 02:53:14 2025 by rpki-client