$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa File: f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa (raw, json) Hash identifier: jhULa1IceYNjsnoaVmXxA93Ng4ecD4CGP+yt03IdCE8= Subject key identifier: 41:2E:7E:C5:6D:FF:CB:39:08:6B:35:6F:74:EA:E2:4D:35:D4:13:AD Certificate issuer: /CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Certificate serial: 010D0C9F4328584B970CF6B9697F939602C33900 Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 401474 IP address blocks: 23.129.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f6:b9:69:7f:93:96:02:c3:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ac3015d7-0136-4574-ad20-0bafbe3f7277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:f0:56:ec:c4:29:2e:de:4e:0d:25:d8:80: 77:cf:29:01:ed:94:6b:36:98:f1:f7:28:9c:82:90: 11:f3:0e:f2:21:2e:f4:a5:b7:a9:57:c3:25:20:6e: 87:d6:4e:71:e9:6e:e5:5a:f4:df:b8:ad:e7:31:9d: e7:31:55:a8:79:19:49:0a:f0:9f:90:dd:ec:a5:86: 9d:59:e2:0d:0e:f2:35:16:fb:30:a2:dc:62:4c:0c: 7e:ae:f8:5f:a1:3b:e0:4a:b0:45:5c:6a:e5:f0:ce: 3e:3a:57:dc:69:9a:f4:ed:67:f3:25:9a:6c:c9:35: 0b:bc:a3:40:44:a0:93:ac:17:db:d6:1e:94:b1:e3: f9:55:85:99:87:3c:43:b2:12:06:e5:02:ae:c4:5c: dc:e0:92:b0:4f:c3:53:23:81:d3:eb:99:c3:6d:a5: 94:f0:b7:dc:4a:1e:a8:47:8f:65:d5:ee:2d:f1:de: a3:9a:e0:19:75:57:e1:11:e0:c3:7e:cd:1e:25:67: 59:1a:f5:cf:d4:0c:30:a8:cc:2c:b0:7c:97:81:ca: aa:58:5b:c1:b9:bc:49:a5:33:b4:04:bb:3c:e5:84: bd:c3:35:76:0c:bc:a3:a2:36:80:ec:ac:ae:19:09: 5b:27:08:90:f9:c6:cf:df:d2:d5:7a:21:cf:3b:a3: aa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2E:7E:C5:6D:FF:CB:39:08:6B:35:6F:74:EA:E2:4D:35:D4:13:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl X509v3 Authority Key Identifier: keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer sbgp-ipAddrBlock: critical IPv4: 23.129.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:48:2f:72:c2:4c:db:46:d6:8f:75:7f:ab:aa:32:3f:71:7e: 64:fd:4c:10:39:8a:f0:6c:57:77:b0:59:55:b4:6f:20:12:e6: 74:4e:74:59:ef:d5:4f:f3:b3:be:a0:16:29:c7:98:a7:f0:4b: bb:b3:13:92:22:87:21:31:b7:21:0f:e8:73:ff:ac:3e:d2:36: 63:3b:b5:76:fd:ec:1a:bc:43:b5:c8:7d:f9:c5:e8:52:c1:b4: c1:4b:be:df:71:e1:19:6b:dc:b9:46:17:d4:b6:de:26:4c:d6: b3:f9:4f:01:b3:fa:32:b6:02:bf:d2:a4:e8:29:fb:7b:fb:bf: 65:ad:4e:d2:b9:5f:70:17:52:f5:92:97:05:be:71:45:aa:f9: 96:2c:43:a8:0f:1d:3f:14:e8:37:56:f5:c6:34:ce:6a:ed:02: f3:f2:8d:92:4a:00:db:52:ff:ac:7c:92:67:37:14:fb:7b:2d: e4:92:80:c5:d1:73:e8:84:d9:17:d3:c5:32:95:10:f9:ee:08: 76:18:e9:ea:47:68:ff:c0:13:dc:ca:5e:4f:0a:d9:89:65:59: e0:16:7b:7d:55:78:a1:4b:a9:5d:13:bf:dd:5d:07:c1:e5:3c: 1c:b2:ef:71:28:ab:b3:b1:0e:b9:dd:91:66:ae:52:50:f8:f4: 6e:bf:21:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPa5aX+TlgLDOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJlZWU1M2MtZjM3My00ZWZlLWFlZDMtNGM1MDFjOWRk ZTc4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YWMzMDE1ZDctMDEzNi00NTc0LWFkMjAtMGJhZmJlM2Y3Mjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw7wVuzEKS7eTg0l2IB3zykB7ZRrNpjx9yic gpAR8w7yIS70pbepV8MlIG6H1k5x6W7lWvTfuK3nMZ3nMVWoeRlJCvCfkN3spYad WeINDvI1FvswotxiTAx+rvhfoTvgSrBFXGrl8M4+OlfcaZr07WfzJZpsyTULvKNA RKCTrBfb1h6UseP5VYWZhzxDshIG5QKuxFzc4JKwT8NTI4HT65nDbaWU8LfcSh6o R49l1e4t8d6jmuAZdVfhEeDDfs0eJWdZGvXP1AwwqMwssHyXgcqqWFvBubxJpTO0 BLs85YS9wzV2DLyjojaA7KyuGQlbJwiQ+cbP39LVeiHPO6OqbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEufsVt/8s5CGs1b3Tq4k011BOtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MmVl ZTUzYy1mMzczLTRlZmUtYWVkMy00YzUwMWM5ZGRlNzgvZjJiMmVmNWUtZTE5Ny0z MjczLTk3MjEtYjlhNTc1ZTFhZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDJlZWU1M2MtZjM3My00ZWZlLWFl ZDMtNGM1MDFjOWRkZTc4LzQyZWVlNTNjLWYzNzMtNGVmZS1hZWQzLTRjNTAxYzlk ZGU3OC5jcmwwHwYDVR0jBBgwFoAUoDUsuAu0cqvuuZwbSmjtCLih/ccwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MmVlZTUzYy1mMzczLTRlZmUtYWVkMy00YzUw MWM5ZGRlNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFIL3LCTNtG1o91f6uqMj9xfmT9TBA5ivBsV3ewWVW0byAS5nROdFnv 1U/zs76gFinHmKfwS7uzE5IihyExtyEP6HP/rD7SNmM7tXb97Bq8Q7XIffnF6FLB tMFLvt9x4Rlr3LlGF9S23iZM1rP5TwGz+jK2Ar/SpOgp+3v7v2WtTtK5X3AXUvWS lwW+cUWq+ZYsQ6gPHT8U6DdW9cY0zmrtAvPyjZJKANtS/6x8kmc3FPt7LeSSgMXR c+iE2RfTxTKVEPnuCHYY6epHaP/AE9zKXk8K2YllWeAWe31VeKFLqV0Tv91dB8Hl PByy73Eoq7OxDrndkWauUlD49G6/If8= -----END CERTIFICATE-----Generated at Wed Nov 5 09:15:18 2025 by rpki-client