$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/aaa78d9f-91e4-3028-b943-562c3b17769c.roa File: aaa78d9f-91e4-3028-b943-562c3b17769c.roa (raw, json) Hash identifier: cSSuY9t/NCv8ZWZmndhO960HyiO7Qx09hvH4mKdCXx8= Subject key identifier: FD:A4:37:F4:95:E9:7F:DD:D5:C3:F2:BF:0B:65:DB:7B:37:3D:F2:7C Certificate issuer: /CN=391e9aeb-641f-4719-b971-6fbcfdfddbf8 Certificate serial: 010D0C9F4328584B95A788E1663AC10697470C00 Authority key identifier: BC:AB:48:1F:73:0F:08:1A:19:D6:28:94:5E:C2:5A:7D:69:EC:E2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/aaa78d9f-91e4-3028-b943-562c3b17769c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 27207 IP address blocks: 23.135.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/391e9aeb-641f-4719-b971-6fbcfdfddbf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/391e9aeb-641f-4719-b971-6fbcfdfddbf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:88:e1:66:3a:c1:06:97:47:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391e9aeb-641f-4719-b971-6fbcfdfddbf8 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bd31d279-a25e-42f2-9124-63b9812e52be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:2f:57:70:db:b8:85:9f:48:fa:99:a7:11: a8:ea:d3:16:23:0b:2c:4f:42:cf:61:43:80:3a:32: 4a:d5:85:d2:95:7a:1e:b6:75:8d:a4:11:f8:e4:ee: a0:d2:10:62:22:95:a1:47:9e:13:df:bc:7e:4c:00: 71:ed:70:95:6e:7c:d0:1f:55:24:30:28:1b:09:bf: 29:71:93:bd:e4:3c:22:c5:68:6b:92:64:d7:03:ce: 47:f5:d8:7c:02:c4:15:a1:b5:cb:d6:46:55:24:fb: 01:8b:0c:f1:e1:de:f2:d3:b2:36:23:06:62:cd:1d: 8d:aa:7c:42:da:0b:86:2b:30:9d:4d:78:62:78:c2: 7e:c3:1f:96:9f:ca:be:b4:c7:fa:a4:67:9d:10:6e: a1:67:3d:ca:54:d2:43:e7:e0:a8:ed:9f:2f:26:af: ec:fe:87:cd:05:22:fe:7a:7b:7b:d9:87:76:46:ca: 69:93:93:1b:87:36:45:fa:99:fb:76:1b:41:40:63: 6c:98:67:37:73:bf:0a:12:82:d9:68:e5:29:1c:ea: f2:03:66:6c:ce:cb:dc:d7:09:9d:bd:d9:68:52:48: 7b:1b:e8:00:fe:c5:b3:ae:80:5b:91:da:29:74:16: 6f:a6:ef:b6:a9:1c:b5:aa:fb:35:09:87:7a:cb:f7: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A4:37:F4:95:E9:7F:DD:D5:C3:F2:BF:0B:65:DB:7B:37:3D:F2:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/aaa78d9f-91e4-3028-b943-562c3b17769c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8/391e9aeb-641f-4719-b971-6fbcfdfddbf8.crl X509v3 Authority Key Identifier: keyid:BC:AB:48:1F:73:0F:08:1A:19:D6:28:94:5E:C2:5A:7D:69:EC:E2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/391e9aeb-641f-4719-b971-6fbcfdfddbf8.cer sbgp-ipAddrBlock: critical IPv4: 23.135.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:39:21:85:fe:98:de:eb:16:39:0b:cd:a7:d4:d3:a4:c8:e3: 04:38:be:3e:11:fe:42:a2:1f:a5:c2:45:88:3e:05:7e:96:85: 8f:3a:8c:e8:ca:b2:33:9e:bc:50:be:7d:ab:07:36:1f:9e:95: f0:a6:da:cd:e1:9d:03:8a:4a:50:e4:41:41:e2:01:c8:13:94: f8:30:f2:74:10:7e:db:a2:aa:ca:a7:82:0a:05:e3:00:e5:f7: 16:12:94:0c:c3:fa:cf:e3:d9:0e:0d:19:5e:36:90:f4:00:36: 06:b8:ff:9d:7d:a9:1f:d7:6a:84:e6:44:50:ee:ff:76:39:0b: fb:3c:a8:3b:f4:aa:8b:7b:6b:05:e4:b8:a4:29:64:72:ab:52: 9c:03:da:47:09:20:3e:79:c3:ec:20:2e:3c:c0:f0:bb:5c:14: dc:6b:09:6d:62:c7:0b:8f:a2:96:5c:b4:89:b7:51:74:a5:ba: 8c:ab:55:85:99:6e:1c:1f:3f:2d:49:55:7e:c5:dc:7a:55:83: a2:25:88:9d:38:6b:3e:7f:05:ae:7b:29:45:8e:e5:a8:8d:9d: 79:76:db:0c:30:28:9d:13:bb:13:38:ab:7d:d0:ea:74:94:87: f5:3c:e5:b4:f2:48:83:ac:88:29:09:a3:db:12:d3:93:05:98: 74:2a:3e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4jhZjrBBpdHDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkxZTlhZWItNjQxZi00NzE5LWI5NzEtNmZiY2ZkZmRk YmY4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmQzMWQyNzktYTI1ZS00MmYyLTkxMjQtNjNiOTgxMmU1MmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1wvV3DbuIWfSPqZpxGo6tMWIwssT0LPYUOA OjJK1YXSlXoetnWNpBH45O6g0hBiIpWhR54T37x+TABx7XCVbnzQH1UkMCgbCb8p cZO95DwixWhrkmTXA85H9dh8AsQVobXL1kZVJPsBiwzx4d7y07I2IwZizR2NqnxC 2guGKzCdTXhieMJ+wx+Wn8q+tMf6pGedEG6hZz3KVNJD5+Co7Z8vJq/s/ofNBSL+ ent72Yd2Rsppk5MbhzZF+pn7dhtBQGNsmGc3c78KEoLZaOUpHOryA2Zszsvc1wmd vdloUkh7G+gA/sWzroBbkdopdBZvpu+2qRy1qvs1CYd6y/fPxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2kN/SV6X/d1cPyvwtl23s3PfJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zOTFl OWFlYi02NDFmLTQ3MTktYjk3MS02ZmJjZmRmZGRiZjgvYWFhNzhkOWYtOTFlNC0z MDI4LWI5NDMtNTYyYzNiMTc3NjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzkxZTlhZWItNjQxZi00NzE5LWI5 NzEtNmZiY2ZkZmRkYmY4LzM5MWU5YWViLTY0MWYtNDcxOS1iOTcxLTZmYmNmZGZk ZGJmOC5jcmwwHwYDVR0jBBgwFoAUvKtIH3MPCBoZ1iiUXsJafWns4tIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zOTFlOWFlYi02NDFmLTQ3MTktYjk3MS02ZmJj ZmRmZGRiZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4e0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk5IYX+mN7rFjkLzafU06TI4wQ4vj4R/kKiH6XCRYg+BX6WhY86jOjK sjOevFC+fasHNh+elfCm2s3hnQOKSlDkQUHiAcgTlPgw8nQQftuiqsqnggoF4wDl 9xYSlAzD+s/j2Q4NGV42kPQANga4/519qR/XaoTmRFDu/3Y5C/s8qDv0qot7awXk uKQpZHKrUpwD2kcJID55w+wgLjzA8LtcFNxrCW1ixwuPopZctIm3UXSluoyrVYWZ bhwfPy1JVX7F3HpVg6IliJ04az5/Ba57KUWO5aiNnXl22wwwKJ0TuxM4q33Q6nSU h/U85bTySIOsiCkJo9sS05MFmHQqPi0= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:04 2025 by rpki-client