$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa File: 1190cb49-d6b6-36f1-8898-ac542e226430.roa (raw, json) Hash identifier: qjq2suXFHyRMVjwNLqWy5uO7fY9r4OVkyKD3oTrff1E= Subject key identifier: DC:D3:57:10:91:35:A2:D1:BF:1D:D5:C1:25:3F:80:2B:3C:99:41:69 Certificate issuer: /CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Certificate serial: 010D0C9F4328584B3AEC54A72A4AC88134C13200 Authority key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 7018 IP address blocks: 23.132.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:54:a7:2a:4a:c8:81:34:c1:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=3ef6e502-b457-49cc-8f50-a47113698cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:58:12:c1:ed:bf:35:d8:89:85:e7:57:3c:06: d5:bf:f9:93:3f:5d:5f:d8:2d:f5:30:ed:76:93:07: e9:bb:0f:ad:a1:fa:c6:ce:0c:ae:ce:2e:de:2b:77: 97:3f:a1:d9:2b:c5:3f:f1:66:a7:25:ea:15:7c:98: 6f:3a:ac:3a:c4:04:71:db:c5:b6:47:0c:58:80:a4: 72:49:bd:91:8a:03:a1:53:40:dc:52:0c:b0:27:47: 5f:c1:55:32:72:2b:a6:31:68:1a:cc:44:b9:8d:6d: 1f:14:22:c7:17:0f:47:4d:45:d8:61:56:85:90:d1: dd:46:9c:20:82:f5:64:c1:10:34:11:4a:07:3f:09: 8f:02:a8:fc:58:a9:19:1c:7e:f7:64:a9:ed:48:d7: 09:1b:ff:42:96:18:8b:14:d1:38:2e:56:d9:c1:4c: bd:26:55:36:54:39:23:2d:69:de:5d:2b:8a:c0:21: a2:07:33:50:04:75:de:25:4a:85:0f:f3:9c:ea:69: 8a:1d:19:89:03:7a:e4:ab:40:4f:91:c3:e9:3e:8d: f1:29:55:f6:c7:21:a0:3d:70:17:b4:ae:7b:35:2f: 1e:1d:a5:a9:4f:d8:ee:8b:81:e8:bd:90:30:dc:bd: ea:3f:10:90:09:a4:b4:47:9e:e5:23:ba:49:f4:12: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:57:10:91:35:A2:D1:BF:1D:D5:C1:25:3F:80:2B:3C:99:41:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl X509v3 Authority Key Identifier: keyid:D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer sbgp-ipAddrBlock: critical IPv4: 23.132.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:84:f9:df:16:06:86:79:79:e9:04:07:f6:7c:c3:91:0c:0f: 76:3c:85:7d:de:57:42:15:da:e2:63:e7:7e:5b:f7:5f:5b:d2: 4d:ed:36:9a:cd:f2:47:55:29:96:f3:87:b9:16:f2:a3:49:7b: 42:d8:ef:05:3e:dc:71:4b:f4:49:dd:cd:df:43:62:24:20:f2: 7a:40:15:48:62:f7:30:0e:d4:1b:42:66:1b:e9:d2:e7:df:88: 35:f1:fa:29:50:65:27:f1:45:22:03:08:29:eb:ab:fe:7c:ba: 53:ec:10:e2:dd:7f:bf:aa:c2:9e:f4:59:c4:61:60:9b:70:27: 1d:c0:44:75:df:63:30:c0:21:92:65:c9:fd:68:a4:f8:58:5d: 4f:8a:9d:cf:f1:6a:9e:d8:37:31:e9:4f:f3:9d:38:22:e3:d4: 2a:ba:0c:21:eb:a2:55:6d:6e:de:db:13:3c:7c:4f:b7:d5:f9: 01:fc:4f:fe:07:8a:62:ee:52:3e:9c:51:df:f8:f1:91:83:59: 08:3b:ce:dd:db:6e:7c:9c:59:f0:22:63:fb:a8:5a:13:a8:e6: 58:15:5b:4b:b5:39:a0:80:3f:3f:08:20:2d:28:ba:5c:1d:12: f1:63:56:87:17:6f:b5:7e:6e:cb:7d:ce:84:a6:0e:33:b5:a2: 2c:9f:f8:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs67FSnKkrIgTTBMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJiYjRjNTQtMTRhNi00ZTMyLWIzYTAtZGVmYWQzMDBk OWZjMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk M2VmNmU1MDItYjQ1Ny00OWNjLThmNTAtYTQ3MTEzNjk4Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVgSwe2/NdiJhedXPAbVv/mTP11f2C31MO12 kwfpuw+tofrGzgyuzi7eK3eXP6HZK8U/8WanJeoVfJhvOqw6xARx28W2RwxYgKRy Sb2RigOhU0DcUgywJ0dfwVUyciumMWgazES5jW0fFCLHFw9HTUXYYVaFkNHdRpwg gvVkwRA0EUoHPwmPAqj8WKkZHH73ZKntSNcJG/9ClhiLFNE4LlbZwUy9JlU2VDkj LWneXSuKwCGiBzNQBHXeJUqFD/Oc6mmKHRmJA3rkq0BPkcPpPo3xKVX2xyGgPXAX tK57NS8eHaWpT9jui4HovZAw3L3qPxCQCaS0R57lI7pJ9BLsSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzTVxCRNaLRvx3VwSU/gCs8mUFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMmJi NGM1NC0xNGE2LTRlMzItYjNhMC1kZWZhZDMwMGQ5ZmMvMTE5MGNiNDktZDZiNi0z NmYxLTg4OTgtYWM1NDJlMjI2NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzJiYjRjNTQtMTRhNi00ZTMyLWIz YTAtZGVmYWQzMDBkOWZjL2MyYmI0YzU0LTE0YTYtNGUzMi1iM2EwLWRlZmFkMzAw ZDlmYy5jcmwwHwYDVR0jBBgwFoAU1FljNJLTiXWCreXe3xu4GJvnei8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMmJiNGM1NC0xNGE2LTRlMzItYjNhMC1kZWZh ZDMwMGQ5ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaE+d8WBoZ5eekEB/Z8w5EMD3Y8hX3eV0IV2uJj535b919b0k3tNprN 8kdVKZbzh7kW8qNJe0LY7wU+3HFL9Endzd9DYiQg8npAFUhi9zAO1BtCZhvp0uff iDXx+ilQZSfxRSIDCCnrq/58ulPsEOLdf7+qwp70WcRhYJtwJx3ARHXfYzDAIZJl yf1opPhYXU+Knc/xap7YNzHpT/OdOCLj1Cq6DCHrolVtbt7bEzx8T7fV+QH8T/4H imLuUj6cUd/48ZGDWQg7zt3bbnycWfAiY/uoWhOo5lgVW0u1OaCAPz8IIC0oulwd EvFjVocXb7V+bst9zoSmDjO1oiyf+Ho= -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:10 2025 by rpki-client