$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa File: cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa (raw, json) Hash identifier: TlyRfJKlwkxcJtbIJJepK3Xlhaepp9NDKt3dOvpBEdM= Subject key identifier: 87:42:0B:CC:8D:6B:0C:61:82:AC:E4:38:62:99:3B:BE:A8:04:48:B9 Certificate issuer: /CN=42804204-aefa-4fac-9d39-1599fa403e46 Certificate serial: 010D0C9F4328584BA5023B861151CB78617184F0 Authority key identifier: 05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 401414 IP address blocks: 23.128.76.0/24 maxlen: 24 2602:f7c6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3b:86:11:51:cb:78:61:71:84:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42804204-aefa-4fac-9d39-1599fa403e46 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=ab197ca1-83cf-4d9d-84e7-d82d612f5c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:75:29:e2:6e:be:76:88:54:0a:37:c0:25: 62:b1:e2:35:17:51:df:32:59:57:0b:02:c8:a3:c1: 41:ad:4c:30:ee:95:85:ff:07:c4:f0:28:d0:d7:54: 78:38:24:93:00:0b:f2:19:80:f4:14:dd:5b:14:9c: 69:c2:96:29:38:24:c5:a2:07:6b:84:1e:22:ea:e0: b9:01:3f:eb:a5:b9:c4:85:a8:d5:9c:76:3a:61:a8: 27:7d:b9:e7:02:31:ce:92:a8:a0:46:5f:e8:e1:c4: 4e:a1:3e:ca:e0:9b:d0:f4:fc:9f:57:96:d0:3f:dd: ea:61:a2:18:d0:21:01:e7:20:af:d6:3a:a6:ea:ba: 8f:8e:30:de:51:ff:e8:e3:90:01:d4:d8:20:ab:a2: 90:c7:43:6f:40:62:a6:a8:6a:b5:2b:f0:10:6a:84: 7d:32:69:df:23:8e:d1:c4:d1:2d:b3:50:45:5b:93: f0:7c:0f:73:c2:a2:48:dd:08:8d:0c:91:c6:5a:a1: 7f:51:50:8c:41:52:16:67:47:33:49:48:26:84:b8: c7:68:0e:bb:13:f3:be:34:ed:78:1b:5e:ff:66:84: da:b0:89:0e:a6:82:a9:c9:ec:a3:aa:f9:23:6d:53: 83:19:24:ce:88:dd:24:f1:47:71:45:87:77:59:93: 9e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:42:0B:CC:8D:6B:0C:61:82:AC:E4:38:62:99:3B:BE:A8:04:48:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl X509v3 Authority Key Identifier: keyid:05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer sbgp-ipAddrBlock: critical IPv4: 23.128.76.0/24 IPv6: 2602:f7c6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e5:98:8a:8b:3c:65:16:62:33:43:4a:13:fa:44:03:6b:87: 9c:d9:4e:97:a8:86:a9:b5:93:47:93:c4:01:54:a8:82:26:f9: ae:65:38:d1:e5:70:24:44:e5:3a:07:03:b9:a7:0b:20:3f:de: 6e:32:a7:b3:86:c5:78:d9:a5:6c:e8:1f:e3:4e:a9:f0:c0:57: c8:57:56:7b:b4:4b:e6:b0:c7:13:ac:25:9b:47:bd:32:50:57: ba:22:85:0a:e9:89:29:04:78:dd:5d:79:30:47:c3:76:ec:d8: bb:77:eb:c6:03:1d:e8:92:38:a3:03:67:2e:70:ea:ca:57:2c: 82:f9:63:4d:cf:58:98:a2:f3:37:09:bd:1e:88:15:ef:de:f1: 57:31:54:c7:48:15:21:83:37:1e:7a:5e:e9:d2:5c:87:55:4e: b7:61:95:90:89:05:db:e2:e6:24:c3:68:38:45:38:00:0b:16: 59:46:c3:6e:df:a6:fc:13:cc:46:53:42:e2:b1:e9:b9:96:e8: 30:26:77:fd:b5:f3:24:b6:39:52:a6:2c:b4:67:60:d4:fc:eb: a4:4c:30:ea:e6:76:c5:04:7e:71:fe:ad:9a:cc:00:fa:8f:38: 88:f9:1b:c6:99:da:9a:cb:6e:86:74:96:dc:ca:0c:eb:ce:50: a0:d1:86:8f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEulAjuGEVHLeGFxhPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI4MDQyMDQtYWVmYS00ZmFjLTlkMzktMTU5OWZhNDAz ZTQ2MB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk YWIxOTdjYTEtODNjZi00ZDlkLTg0ZTctZDgyZDYxMmY1YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfh1KeJuvnaIVAo3wCViseI1F1HfMllXCwLI o8FBrUww7pWF/wfE8CjQ11R4OCSTAAvyGYD0FN1bFJxpwpYpOCTFogdrhB4i6uC5 AT/rpbnEhajVnHY6YagnfbnnAjHOkqigRl/o4cROoT7K4JvQ9PyfV5bQP93qYaIY 0CEB5yCv1jqm6rqPjjDeUf/o45AB1Nggq6KQx0NvQGKmqGq1K/AQaoR9MmnfI47R xNEts1BFW5PwfA9zwqJI3QiNDJHGWqF/UVCMQVIWZ0czSUgmhLjHaA67E/O+NO14 G17/ZoTasIkOpoKpyeyjqvkjbVODGSTOiN0k8UdxRYd3WZOeNwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIdCC8yNawxhgqzkOGKZO76oBEi5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80Mjgw NDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5ZmE0MDNlNDYvY2JlNzUwYjUtYTQ4ZC0z ZWQ3LTgxZjYtYjkzZWIxYTM2NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDI4MDQyMDQtYWVmYS00ZmFjLTlk MzktMTU5OWZhNDAzZTQ2LzQyODA0MjA0LWFlZmEtNGZhYy05ZDM5LTE1OTlmYTQw M2U0Ni5jcmwwHwYDVR0jBBgwFoAUBXzILUv4qGmvJ6oIhxcWElC11HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MjgwNDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5 ZmE0MDNlNDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BMMA4E AgACMAgDBgAmAvfGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBN5ZiKizxlFmIzQ0oT+kQDa4ec2U6XqIap tZNHk8QBVKiCJvmuZTjR5XAkROU6BwO5pwsgP95uMqezhsV42aVs6B/jTqnwwFfI V1Z7tEvmsMcTrCWbR70yUFe6IoUK6YkpBHjdXXkwR8N27Ni7d+vGAx3okjijA2cu cOrKVyyC+WNNz1iYovM3Cb0eiBXv3vFXMVTHSBUhgzceel7p0lyHVU63YZWQiQXb 4uYkw2g4RTgACxZZRsNu36b8E8xGU0Lisem5lugwJnf9tfMktjlSpiy0Z2DU/Ouk TDDq5nbFBH5x/q2azAD6jziI+RvGmdqay26GdJbcygzrzlCg0YaP -----END CERTIFICATE-----Generated at Wed Nov 5 23:47:08 2025 by rpki-client