$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/989473aa-70cf-3ca6-8bd9-4796efd0763e.roa File: 989473aa-70cf-3ca6-8bd9-4796efd0763e.roa (raw, json) Hash identifier: ES8RileTAVxecf09LKnNMj1Eg2B7OPD/CJBfQ44c1DI= Subject key identifier: D2:54:CF:77:49:C0:0C:80:CE:65:0A:9A:10:9C:E7:1B:3D:F6:FA:80 Certificate issuer: /CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Certificate serial: 010D0C9F4328584B2B919C4B5D4E20F16C1CF980 Authority key identifier: 72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/989473aa-70cf-3ca6-8bd9-4796efd0763e.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 399861 IP address blocks: 23.131.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:9c:4b:5d:4e:20:f1:6c:1c:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=b69000bd-2ccb-40bc-a814-e3debd10af77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:a2:42:0a:83:e6:4c:48:24:96:5b:9e:f6: 85:c3:de:13:7b:9d:09:91:2a:0a:5b:87:ca:0e:8b: 13:02:3e:95:98:bb:df:40:9b:c4:cc:8c:ea:77:4a: 00:0e:42:df:99:4c:96:6f:8d:ae:ce:95:da:7f:1b: 62:56:00:e0:cc:6f:27:09:a9:81:8a:e0:37:9b:c5: e0:2d:6d:52:01:3b:3e:4c:30:10:ac:3b:9b:b4:0e: 0b:e7:71:a8:04:f1:ed:94:62:d7:7d:0a:26:44:2c: 92:e6:cc:25:a0:63:d6:e2:ad:4c:0e:14:a5:4f:a8: ee:1c:33:43:d3:d0:20:ea:bc:15:bf:61:48:f5:c3: 9c:07:5e:5b:ab:01:60:0b:6b:05:dd:eb:df:c7:3b: 5f:9c:60:ca:ae:da:c8:d5:53:ee:0f:a0:78:e7:8d: 36:6a:0e:1c:66:0c:f0:56:8c:ac:52:dd:4b:ec:2a: 80:57:e6:80:17:e6:ab:d8:87:87:5c:28:cb:a6:60: 47:c7:2b:fb:02:a7:81:84:94:00:f0:e1:e0:e5:45: a1:e8:9f:6f:b2:4c:81:53:42:7d:c5:5a:fe:22:8e: 27:55:d0:ac:b7:2a:68:b9:36:13:66:b8:d3:40:ce: 0c:ac:fc:05:a2:7e:47:f9:68:10:43:ae:d9:da:cf: 01:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:54:CF:77:49:C0:0C:80:CE:65:0A:9A:10:9C:E7:1B:3D:F6:FA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/989473aa-70cf-3ca6-8bd9-4796efd0763e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl X509v3 Authority Key Identifier: keyid:72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer sbgp-ipAddrBlock: critical IPv4: 23.131.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d7:2b:87:97:3f:4c:a0:97:10:59:df:38:ef:a6:07:1d:69: b8:cb:7b:a6:95:67:a3:41:bd:d8:bb:37:7d:42:ca:cb:d5:b4: 2d:b4:a1:7b:9b:76:21:68:79:26:ba:69:23:33:d0:8f:57:ed: d8:1b:29:fc:65:37:da:2d:49:9d:6d:55:39:15:d5:1d:c5:cc: 83:e2:c3:e6:f3:15:63:3d:51:db:a0:31:b9:57:d2:e4:c2:da: 25:1e:ac:23:64:d0:6f:27:bd:65:93:fd:b8:61:62:d5:9a:49: ac:25:97:86:08:e6:13:0f:1c:e1:6f:d2:d6:7b:10:b3:c9:03: 11:31:d4:14:49:c5:85:97:aa:62:94:8e:ee:dc:10:09:53:9a: 31:83:c4:ec:5e:3a:1e:7d:b5:ac:25:61:60:67:4b:a4:07:d7: 8b:4e:e3:18:f0:d5:09:5d:dc:6e:eb:b9:b1:b3:08:00:68:77: 2b:3b:18:44:f5:a9:33:dc:b2:86:70:c5:a6:2d:47:59:55:08: 96:0b:c3:8b:99:4f:d3:14:28:f1:0c:1c:e5:0e:11:3f:db:fb: 39:2b:b0:30:ae:a5:9e:54:a7:f2:aa:26:95:f4:8f:22:57:78: fe:7e:a6:b9:d1:81:d1:01:b3:38:a3:2e:a8:58:f2:24:a5:9f: b6:29:a0:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZxLXU4g8Wwc+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAwYTE4Y2EtYTllNS00MzBkLWI1YzQtZDE1ZTg4ZWE3 OWEzMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YjY5MDAwYmQtMmNjYi00MGJjLWE4MTQtZTNkZWJkMTBhZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkueiQgqD5kxIJJZbnvaFw94Te50JkSoKW4fK DosTAj6VmLvfQJvEzIzqd0oADkLfmUyWb42uzpXafxtiVgDgzG8nCamBiuA3m8Xg LW1SATs+TDAQrDubtA4L53GoBPHtlGLXfQomRCyS5swloGPW4q1MDhSlT6juHDND 09Ag6rwVv2FI9cOcB15bqwFgC2sF3evfxztfnGDKrtrI1VPuD6B45402ag4cZgzw VoysUt1L7CqAV+aAF+ar2IeHXCjLpmBHxyv7AqeBhJQA8OHg5UWh6J9vskyBU0J9 xVr+Io4nVdCstypouTYTZrjTQM4MrPwFon5H+WgQQ67Z2s8BiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJUz3dJwAyAzmUKmhCc5xs99vqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMDBh MThjYS1hOWU1LTQzMGQtYjVjNC1kMTVlODhlYTc5YTMvOTg5NDczYWEtNzBjZi0z Y2E2LThiZDktNDc5NmVmZDA3NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzAwYTE4Y2EtYTllNS00MzBkLWI1 YzQtZDE1ZTg4ZWE3OWEzLzMwMGExOGNhLWE5ZTUtNDMwZC1iNWM0LWQxNWU4OGVh NzlhMy5jcmwwHwYDVR0jBBgwFoAUcp90e0cEgtpXiiWu8M+c75gfBrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMDBhMThjYS1hOWU1LTQzMGQtYjVjNC1kMTVl ODhlYTc5YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnXK4eXP0yglxBZ3zjvpgcdabjLe6aVZ6NBvdi7N31CysvVtC20oXub diFoeSa6aSMz0I9X7dgbKfxlN9otSZ1tVTkV1R3FzIPiw+bzFWM9UdugMblX0uTC 2iUerCNk0G8nvWWT/bhhYtWaSawll4YI5hMPHOFv0tZ7ELPJAxEx1BRJxYWXqmKU ju7cEAlTmjGDxOxeOh59tawlYWBnS6QH14tO4xjw1Qld3G7rubGzCABodys7GET1 qTPcsoZwxaYtR1lVCJYLw4uZT9MUKPEMHOUOET/b+zkrsDCupZ5Up/KqJpX0jyJX eP5+prnRgdEBszijLqhY8iSln7YpoEg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:43:27 2025 by rpki-client