$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa File: d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa (raw, json) Hash identifier: wzrQ3XmKTUioLLXH4Vg4ZWnW+oFtBePFa58VTg1aB8s= Subject key identifier: 7A:C9:D8:A7:B8:2B:58:FB:C1:AC:88:56:2F:2A:9B:AD:43:28:2E:7F Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Certificate serial: 010D0C9F4328584B48E213ABB5AE6A48DDB99660 Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 12202 IP address blocks: 23.141.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:13:ab:b5:ae:6a:48:dd:b9:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=5c655e9d-2e72-48b1-9b23-781eca1dcde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:10:23:67:d2:82:55:94:85:b9:d1:3f:5e: 12:66:6c:54:67:c8:92:c9:8f:e0:c0:ab:94:e2:cb: d5:50:c4:65:82:06:3d:e3:3b:69:29:99:c9:1c:45: df:77:4c:36:ac:cb:be:97:18:17:2d:7f:3c:7d:75: dd:32:37:12:2e:79:16:0e:5e:ee:1d:b9:1f:54:20: 77:22:51:81:c8:75:fc:c5:c6:4f:0f:20:e3:eb:3f: 71:03:03:e7:a8:9f:ee:57:21:f3:c7:70:83:78:f5: 5d:bf:f7:7e:8d:12:b9:56:6a:4b:06:df:6f:17:e4: dd:b7:a0:f3:5b:8b:2f:df:7c:25:b2:5d:7b:38:a7: d2:2d:42:54:1e:27:a8:b7:47:dc:72:6c:6b:8a:25: 0f:75:0b:4f:16:be:dc:d9:e3:2d:85:02:41:2b:40: b1:19:c5:4a:75:a2:7d:77:9e:ed:04:f2:79:c9:6f: f8:74:ee:03:9a:e0:41:d5:51:04:8f:10:f4:a9:38: ef:51:e8:b0:1c:84:16:19:f5:fc:76:98:1c:cf:fe: 44:a5:47:88:78:36:39:e1:44:d4:d2:90:95:e9:2c: 03:6d:e9:07:21:ce:8c:7b:9d:97:5f:11:43:6d:7d: 30:70:7b:ed:1f:78:2f:30:e4:24:27:23:3c:78:fa: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C9:D8:A7:B8:2B:58:FB:C1:AC:88:56:2F:2A:9B:AD:43:28:2E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/d6650b92-22b7-3d90-8e40-5bad34f3ba2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl X509v3 Authority Key Identifier: keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer sbgp-ipAddrBlock: critical IPv4: 23.141.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:60:27:a8:3a:d0:ab:22:ae:f6:54:79:04:ee:69:3d:34:68: 34:33:9f:1d:39:77:96:58:0d:85:1e:26:88:70:13:31:ea:5a: e3:1c:fc:20:22:06:a6:2e:53:fd:3a:0a:99:8b:bf:64:ae:94: b0:e2:72:7a:16:8a:16:9f:86:7a:02:99:5b:da:43:fa:15:4a: 2e:dc:bb:b6:8a:f1:98:36:5c:3c:cc:45:a3:20:a1:94:c4:d0: 58:68:0c:18:45:d3:bc:bf:11:eb:af:ea:54:5e:0d:fb:f2:a9: d7:07:c2:ac:c2:d5:b2:3d:a5:68:ef:0e:da:e1:a8:51:9f:24: 1e:1a:02:d3:f3:c0:45:c7:aa:90:20:64:59:ae:0e:e2:51:2b: e1:53:15:ef:96:0a:e0:5c:6f:03:71:7a:02:67:29:fd:5e:8c: f3:76:8a:82:be:9d:90:1d:c6:27:26:04:91:d1:f8:f2:06:fd: 55:26:2a:38:d4:a1:df:0a:e7:07:35:28:a1:31:1e:9e:bc:41: 74:3d:57:e6:1e:d0:15:45:d6:e3:b8:d8:cd:b5:af:45:27:9a: f5:96:96:09:a9:44:8a:cd:5a:e7:03:c0:54:eb:e0:a5:07:22: 3a:2a:c8:b2:05:89:1a:85:4f:db:3b:19:03:5e:1a:e4:c2:6c: 7d:0e:9d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4hOrta5qSN25lmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy ZTBhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NWM2NTVlOWQtMmU3Mi00OGIxLTliMjMtNzgxZWNhMWRjZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPAQI2fSglWUhbnRP14SZmxUZ8iSyY/gwKuU 4svVUMRlggY94ztpKZnJHEXfd0w2rMu+lxgXLX88fXXdMjcSLnkWDl7uHbkfVCB3 IlGByHX8xcZPDyDj6z9xAwPnqJ/uVyHzx3CDePVdv/d+jRK5VmpLBt9vF+Tdt6Dz W4sv33wlsl17OKfSLUJUHieot0fccmxriiUPdQtPFr7c2eMthQJBK0CxGcVKdaJ9 d57tBPJ5yW/4dO4DmuBB1VEEjxD0qTjvUeiwHIQWGfX8dpgcz/5EpUeIeDY54UTU 0pCV6SwDbekHIc6Me52XXxFDbX0wcHvtH3gvMOQkJyM8ePpWFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrJ2Ke4K1j7wayIVi8qm61DKC5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvZDY2NTBiOTItMjJiNy0z ZDkwLThlNDAtNWJhZDM0ZjNiYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1 NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1 MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5gJ6g60KsirvZUeQTuaT00aDQznx05d5ZYDYUeJohwEzHqWuMc/CAi BqYuU/06CpmLv2SulLDicnoWihafhnoCmVvaQ/oVSi7cu7aK8Zg2XDzMRaMgoZTE 0FhoDBhF07y/Eeuv6lReDfvyqdcHwqzC1bI9pWjvDtrhqFGfJB4aAtPzwEXHqpAg ZFmuDuJRK+FTFe+WCuBcbwNxegJnKf1ejPN2ioK+nZAdxicmBJHR+PIG/VUmKjjU od8K5wc1KKExHp68QXQ9V+Ye0BVF1uO42M21r0UnmvWWlgmpRIrNWucDwFTr4KUH IjoqyLIFiRqFT9s7GQNeGuTCbH0OnQw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:34:20 2025 by rpki-client