$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa File: c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa (raw, json) Hash identifier: gSGE5g0kTfgsdAhSbKH1kA+fbRRtTxAnp3zPf7G7GiA= Subject key identifier: 4D:5A:29:CF:3F:A4:9B:00:45:54:16:40:E9:B9:7A:DB:1E:CD:2A:D0 Certificate issuer: /CN=756004e4-ddca-45b3-bf76-89761c8369fd Certificate serial: 010D0C9F4328584BA93290CA6E199D02EA47AB00 Authority key identifier: 89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 401052 IP address blocks: 23.187.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:90:ca:6e:19:9d:02:ea:47:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756004e4-ddca-45b3-bf76-89761c8369fd Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=4532a2af-cc4c-4c5e-b277-07ce86ff281b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:7b:71:5a:1a:84:8d:41:31:94:68:1c:28: 58:a3:b2:b3:15:6e:6d:17:86:c4:16:5e:b5:98:da: ff:40:d1:32:2e:20:7b:23:e5:e5:0c:22:fc:61:02: fd:b0:c0:81:43:14:96:62:3a:87:0c:5e:c1:74:09: d9:33:f7:f8:7d:16:1d:2c:ab:c6:1b:2f:30:4b:91: f4:99:50:c1:6b:76:00:2a:69:b1:40:7f:f2:56:7d: 41:df:f6:09:55:74:4b:cd:25:10:22:66:bb:d3:c5: 48:f3:74:22:a0:a1:d8:0b:d4:0c:64:4c:17:ce:3c: 48:4d:a8:ba:47:6f:b2:2d:85:5d:93:3b:36:66:b6: 4b:cb:24:e2:a1:bf:dd:34:f4:78:0a:94:f0:0c:a4: 7a:09:2e:de:f8:12:1c:39:1a:b8:03:4a:4a:ff:24: 9d:b3:87:02:04:d8:76:9f:a1:f6:3d:a1:7c:11:7f: 0c:bb:98:0a:17:dd:7a:2d:e9:d7:13:0a:6c:86:d7: c9:52:fe:42:08:b7:56:56:2f:b8:d9:a0:68:03:52: 3f:80:ac:4c:1b:0e:0c:81:ba:0d:34:d9:ad:a7:22: cf:68:c9:6d:ed:6a:c8:0e:06:eb:78:2a:7c:74:7b: 77:fd:0e:76:43:cd:65:88:cb:5f:fb:3b:8e:dd:07: df:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5A:29:CF:3F:A4:9B:00:45:54:16:40:E9:B9:7A:DB:1E:CD:2A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/c28e6623-3fd7-3703-92b5-2a32b564fe5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd/756004e4-ddca-45b3-bf76-89761c8369fd.crl X509v3 Authority Key Identifier: keyid:89:38:9B:71:10:63:B2:F4:5C:3B:6B:FE:3F:D7:09:9B:D3:3E:AF:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/756004e4-ddca-45b3-bf76-89761c8369fd.cer sbgp-ipAddrBlock: critical IPv4: 23.187.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:be:19:07:0f:e1:11:73:4b:c5:06:26:61:33:1e:16:70:64: c5:fe:9a:bd:ba:69:3d:40:46:99:1b:3b:54:e0:c2:44:0f:c1: d5:66:2d:db:65:10:34:b6:ab:95:da:d3:d5:7e:e0:fd:58:24: 64:f5:76:ce:19:1f:c9:a8:aa:e3:59:4e:b0:bc:ee:aa:9c:d7: 82:26:00:b5:3c:d9:2b:71:07:8b:b2:10:a3:89:32:31:c7:00: 30:40:2e:1e:42:ba:e4:6b:64:59:85:6b:56:f8:9e:c5:76:79: 45:c3:fe:20:e2:24:a0:5e:19:9d:f6:85:27:4b:91:22:40:05: 89:a7:70:fb:b2:3b:ff:41:84:11:76:56:b2:87:77:0c:29:e3: 08:35:c3:f5:95:50:d0:2e:98:38:cf:a1:76:67:6d:58:3f:9a: 1a:18:31:af:4c:00:7c:1e:eb:1d:6e:da:ae:5d:87:45:04:98: cf:7d:37:7e:26:8e:f5:fe:5d:b9:a1:95:00:b2:3b:7b:b7:5f: b8:82:57:4e:f6:2e:93:bb:a5:3d:e2:5b:b9:d8:70:47:1a:f6: 8e:a3:c7:2a:b0:12:93:8b:a2:61:43:67:be:13:a5:34:f0:f7: 3e:7d:21:ad:8d:67:14:ad:a2:52:40:4b:6e:28:e1:ca:ab:7c: d9:f1:4e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpDKbhmdAupHqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzU2MDA0ZTQtZGRjYS00NWIzLWJmNzYtODk3NjFjODM2 OWZkMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk NDUzMmEyYWYtY2M0Yy00YzVlLWIyNzctMDdjZTg2ZmYyODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVt7cVoahI1BMZRoHChYo7KzFW5tF4bEFl61 mNr/QNEyLiB7I+XlDCL8YQL9sMCBQxSWYjqHDF7BdAnZM/f4fRYdLKvGGy8wS5H0 mVDBa3YAKmmxQH/yVn1B3/YJVXRLzSUQIma708VI83QioKHYC9QMZEwXzjxITai6 R2+yLYVdkzs2ZrZLyyTiob/dNPR4CpTwDKR6CS7e+BIcORq4A0pK/ySds4cCBNh2 n6H2PaF8EX8Mu5gKF916LenXEwpshtfJUv5CCLdWVi+42aBoA1I/gKxMGw4MgboN NNmtpyLPaMlt7WrIDgbreCp8dHt3/Q52Q81liMtf+zuO3QffIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1aKc8/pJsARVQWQOm5etsezSrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NTYw MDRlNC1kZGNhLTQ1YjMtYmY3Ni04OTc2MWM4MzY5ZmQvYzI4ZTY2MjMtM2ZkNy0z NzAzLTkyYjUtMmEzMmI1NjRmZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzU2MDA0ZTQtZGRjYS00NWIzLWJm NzYtODk3NjFjODM2OWZkLzc1NjAwNGU0LWRkY2EtNDViMy1iZjc2LTg5NzYxYzgz NjlmZC5jcmwwHwYDVR0jBBgwFoAUiTibcRBjsvRcO2v+P9cJm9M+rykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NTYwMDRlNC1kZGNhLTQ1YjMtYmY3Ni04OTc2 MWM4MzY5ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7vIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq+GQcP4RFzS8UGJmEzHhZwZMX+mr26aT1ARpkbO1TgwkQPwdVmLdtl EDS2q5Xa09V+4P1YJGT1ds4ZH8moquNZTrC87qqc14ImALU82StxB4uyEKOJMjHH ADBALh5CuuRrZFmFa1b4nsV2eUXD/iDiJKBeGZ32hSdLkSJABYmncPuyO/9BhBF2 VrKHdwwp4wg1w/WVUNAumDjPoXZnbVg/mhoYMa9MAHwe6x1u2q5dh0UEmM99N34m jvX+XbmhlQCyO3u3X7iCV072LpO7pT3iW7nYcEca9o6jxyqwEpOLomFDZ74TpTTw 9z59Ia2NZxStolJAS24o4cqrfNnxTk0= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:47 2025 by rpki-client