$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/b54f4269-34b2-3d57-8d81-e3a6a7e3fc64.roa File: b54f4269-34b2-3d57-8d81-e3a6a7e3fc64.roa (raw, json) Hash identifier: VqY4cdigNZRbPifkttmK8XaGZuextcdzw/USJZLOkvA= Subject key identifier: 4A:FA:4B:64:49:E4:15:9F:DB:00:5C:C0:F6:71:FC:56:B0:B2:9D:7F Certificate issuer: /CN=ab1a140b-878b-41cc-864f-08e0177f7325 Certificate serial: 010D0C9F4328584BA9325B50B704BB371C2571E0 Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/b54f4269-34b2-3d57-8d81-e3a6a7e3fc64.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 46793 IP address blocks: 23.150.240.0/24 maxlen: 24 204.238.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:5b:50:b7:04:bb:37:1c:25:71:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=14a86c82-f271-4a8c-a61c-692fd5063830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8b:3c:6e:d6:d0:13:05:78:f2:53:a6:51:23: 61:43:36:08:ae:ae:03:64:e5:de:fd:18:06:82:2b: 5e:4e:cb:f3:20:44:6b:6c:07:5a:2a:f0:b7:cf:1c: db:92:3b:3e:de:b7:5f:cc:6c:12:80:b3:81:ec:64: 4c:2b:03:da:fc:46:f3:07:de:af:04:a1:a9:e2:e8: ab:c0:60:fb:c4:ae:14:34:fe:31:63:7e:a1:49:bf: 00:52:1f:9f:58:6c:f5:61:03:e3:34:06:99:ae:ee: a2:eb:b0:3e:22:20:bb:81:42:0e:78:4e:35:37:1a: 40:e0:91:3a:e2:d2:48:f4:de:8b:13:5d:7b:5e:ff: b3:3d:0e:5c:19:87:15:21:45:02:3c:81:0a:38:0e: fa:f0:74:cb:bc:2f:87:00:5e:a0:5b:38:a7:d7:58: 84:2e:4f:13:2b:59:e8:9d:0f:60:23:a3:84:7f:2f: 32:e5:af:0b:ff:63:85:25:b7:29:64:24:11:3b:5f: 16:29:6e:e6:e4:ce:db:9f:d7:c4:2d:77:f0:5f:05: fc:4b:39:dd:4d:39:b0:fe:cb:b6:1d:7f:13:8c:21: f8:e9:00:43:1e:dc:d8:c2:71:ea:d1:db:22:8f:05: 11:16:e0:35:1b:6e:bd:c6:85:17:cd:b0:12:d9:6c: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FA:4B:64:49:E4:15:9F:DB:00:5C:C0:F6:71:FC:56:B0:B2:9D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/b54f4269-34b2-3d57-8d81-e3a6a7e3fc64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl X509v3 Authority Key Identifier: keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer sbgp-ipAddrBlock: critical IPv4: 23.150.240.0/24 204.238.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:0a:ef:98:41:f4:23:cd:d6:a6:c5:47:f5:8f:fa:82:1c:74: 9b:d5:b5:7d:01:ec:4b:71:f6:7a:bf:7c:ad:49:32:20:0a:22: 6e:83:7f:e9:2c:65:88:c6:33:9c:03:b9:cb:19:94:9d:21:64: 96:79:83:dc:01:17:57:73:ea:7f:f6:c5:aa:37:ab:92:e3:5b: 62:51:68:f0:32:7a:53:f3:ee:60:6f:24:6d:9a:d1:1e:3a:08: 13:63:ab:f1:4f:17:33:5d:56:1a:6b:a0:ef:1e:a7:94:98:5d: fa:c9:85:00:0c:de:6f:5e:1c:83:c1:65:80:f4:56:08:b5:23: bf:83:2f:ec:a1:5a:fe:8c:cf:57:95:ba:a5:30:ea:10:f4:93: 36:5c:a2:c9:a2:c3:d2:87:f8:50:6b:88:4b:a6:ba:e7:ce:17: ff:67:ab:6d:56:ac:ac:0a:1d:92:ac:78:c9:dd:20:62:10:e7: 98:38:88:59:14:cb:6f:5c:f2:3c:87:0c:26:96:fe:c0:d5:a9: 20:7c:48:3b:58:7d:00:e4:29:c9:75:83:6c:c0:80:00:16:8e: 2a:eb:5c:9d:21:17:c3:ad:03:ee:4e:0b:70:53:81:b5:76:24: 3a:d8:a0:1a:63:e9:de:0e:07:11:6e:16:33:f1:e2:69:1b:af: e4:23:70:c6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEupMltQtwS7NxwlceAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxYTE0MGItODc4Yi00MWNjLTg2NGYtMDhlMDE3N2Y3 MzI1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MTRhODZjODItZjI3MS00YThjLWE2MWMtNjkyZmQ1MDYzODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34s8btbQEwV48lOmUSNhQzYIrq4DZOXe/RgG giteTsvzIERrbAdaKvC3zxzbkjs+3rdfzGwSgLOB7GRMKwPa/EbzB96vBKGp4uir wGD7xK4UNP4xY36hSb8AUh+fWGz1YQPjNAaZru6i67A+IiC7gUIOeE41NxpA4JE6 4tJI9N6LE117Xv+zPQ5cGYcVIUUCPIEKOA768HTLvC+HAF6gWzin11iELk8TK1no nQ9gI6OEfy8y5a8L/2OFJbcpZCQRO18WKW7m5M7bn9fELXfwXwX8SzndTTmw/su2 HX8TjCH46QBDHtzYwnHq0dsijwURFuA1G269xoUXzbAS2WwfIwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEr6S2RJ5BWf2wBcwPZx/Fawsp1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFh MTQwYi04NzhiLTQxY2MtODY0Zi0wOGUwMTc3ZjczMjUvYjU0ZjQyNjktMzRiMi0z ZDU3LThkODEtZTNhNmE3ZTNmYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWIxYTE0MGItODc4Yi00MWNjLTg2 NGYtMDhlMDE3N2Y3MzI1L2FiMWExNDBiLTg3OGItNDFjYy04NjRmLTA4ZTAxNzdm NzMyNS5jcmwwHwYDVR0jBBgwFoAUcS17FddH32zbmLHcy+0aLSiUV30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFhMTQwYi04NzhiLTQxY2MtODY0Zi0wOGUw MTc3ZjczMjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5bwAwQA zO5GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKEK75hB9CPN1qbFR/WP+oIcdJvVtX0B7Etx9nq/fK1JMiAK Im6Df+ksZYjGM5wDucsZlJ0hZJZ5g9wBF1dz6n/2xao3q5LjW2JRaPAyelPz7mBv JG2a0R46CBNjq/FPFzNdVhproO8ep5SYXfrJhQAM3m9eHIPBZYD0Vgi1I7+DL+yh Wv6Mz1eVuqUw6hD0kzZcosmiw9KH+FBriEumuufOF/9nq21WrKwKHZKseMndIGIQ 55g4iFkUy29c8jyHDCaW/sDVqSB8SDtYfQDkKcl1g2zAgAAWjirrXJ0hF8OtA+5O C3BTgbV2JDrYoBpj6d4OBxFuFjPx4mkbr+QjcMY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:06 2025 by rpki-client