$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa File: 50295063-44b9-3f73-8e63-136553fdd8cc.roa (raw, json) Hash identifier: YnELkFQ3Y8Z45x7FEvVAf4Qh5521I7tZBizN9GKirWs= Subject key identifier: 94:5F:9F:22:CE:9F:EF:BD:20:FA:D2:FD:52:77:01:3D:F8:97:15:39 Certificate issuer: /CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Certificate serial: 010D0C9F4328584B6A6202CC58937AA5CD107380 Authority key identifier: C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 54004 IP address blocks: 23.141.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:02:cc:58:93:7a:a5:cd:10:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670b9f4e-c369-4f4c-aa24-27f3fc851bc5 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=84176ae1-9ade-43cf-9e82-da82e7a82c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4a:3a:04:45:15:54:a6:93:29:55:cb:b9:2e: 34:ae:79:df:a8:8e:d9:13:2f:89:e5:83:0f:fd:82: fb:9a:07:39:db:47:30:55:1e:d2:43:44:99:d4:3f: ea:b9:f7:f3:d7:cf:79:21:15:c7:ee:4b:4c:b4:d3: 10:ca:b4:ec:eb:f4:d8:43:b1:39:10:ee:64:7f:4b: be:06:a7:41:37:8f:f4:49:50:e4:60:c9:fd:d6:30: 1d:67:dd:f8:84:96:8d:e0:db:fd:b7:33:3d:be:a9: f6:79:ac:e2:1d:b4:6d:4e:f2:9c:4e:1f:e6:f3:28: eb:f2:ce:33:71:d4:b3:5d:7c:d9:f1:d1:6c:c8:f4: 3d:59:5e:65:0a:03:47:dc:80:f2:42:43:bd:e5:4a: a5:e1:62:25:78:b6:a3:66:a6:e6:f5:39:50:2c:d0: 84:72:bf:88:8c:1d:d9:7d:02:e7:36:4c:e0:a3:41: c3:9a:69:25:c5:cc:2c:63:af:ce:3c:9a:fb:ee:03: 7f:0c:69:c2:27:39:96:c0:fb:12:dd:74:da:3a:84: 3f:7c:1f:82:2f:88:88:56:56:58:5d:13:ce:d9:3a: d4:39:ca:53:f1:04:f5:6c:30:be:26:79:b2:22:a8: ef:1d:7a:3c:18:1d:25:3c:0a:52:1b:d5:46:55:51: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5F:9F:22:CE:9F:EF:BD:20:FA:D2:FD:52:77:01:3D:F8:97:15:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/50295063-44b9-3f73-8e63-136553fdd8cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.crl X509v3 Authority Key Identifier: keyid:C2:9F:A9:B8:BA:42:7E:3C:F3:9D:6B:BB:28:14:8A:E9:03:51:9B:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/670b9f4e-c369-4f4c-aa24-27f3fc851bc5.cer sbgp-ipAddrBlock: critical IPv4: 23.141.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b1:ed:7d:2c:fb:8e:74:bb:2a:6e:6d:bb:ea:aa:c1:df:5b: e4:34:7a:11:00:ee:a3:c6:cd:17:3f:33:b4:89:c3:56:26:e9: c1:6e:ea:c5:15:46:e4:be:fd:4e:98:91:f4:a3:22:e1:2d:ed: 39:b9:bd:8f:29:74:0c:12:1e:e6:16:f0:62:71:35:a5:55:d7: 40:3b:bb:d4:4f:ac:d5:9e:e8:5d:6b:2c:2a:a8:5b:f7:b2:5d: b2:4b:66:ee:b5:d1:38:74:66:6a:28:36:d7:fe:84:d5:ef:14: c0:cc:de:58:3a:e4:23:b9:0e:c9:d7:61:bc:e6:b5:df:2f:b9: 8f:d1:7a:07:be:c1:8f:a1:07:fc:18:60:ab:06:79:3b:0e:44: 93:3c:ce:1f:23:8d:6e:e2:7a:71:21:14:8e:ae:33:84:db:3f: 1c:49:9f:b4:81:60:cc:a2:0a:71:94:95:f1:ef:e9:c2:61:b3: 04:01:ff:07:b8:16:93:ba:3b:4e:b8:59:38:71:46:ff:55:2a: 6c:d4:9b:e3:16:39:7b:34:b4:b3:ef:6d:d4:26:3c:4b:d0:ac: 73:57:d1:cd:64:80:3d:c6:7d:f5:87:79:a5:d2:60:a6:82:56: 03:47:ae:a1:88:30:f3:32:ff:36:e9:14:5a:11:55:ea:f0:91: b4:0a:99:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYgLMWJN6pc0Qc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjcwYjlmNGUtYzM2OS00ZjRjLWFhMjQtMjdmM2ZjODUx YmM1MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ODQxNzZhZTEtOWFkZS00M2NmLTllODItZGE4MmU3YTgyYzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhko6BEUVVKaTKVXLuS40rnnfqI7ZEy+J5YMP /YL7mgc520cwVR7SQ0SZ1D/quffz1895IRXH7ktMtNMQyrTs6/TYQ7E5EO5kf0u+ BqdBN4/0SVDkYMn91jAdZ934hJaN4Nv9tzM9vqn2eaziHbRtTvKcTh/m8yjr8s4z cdSzXXzZ8dFsyPQ9WV5lCgNH3IDyQkO95Uql4WIleLajZqbm9TlQLNCEcr+IjB3Z fQLnNkzgo0HDmmklxcwsY6/OPJr77gN/DGnCJzmWwPsS3XTaOoQ/fB+CL4iIVlZY XRPO2TrUOcpT8QT1bDC+JnmyIqjvHXo8GB0lPApSG9VGVVG9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRfnyLOn++9IPrS/VJ3AT34lxU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82NzBi OWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2YzZmM4NTFiYzUvNTAyOTUwNjMtNDRiOS0z ZjczLThlNjMtMTM2NTUzZmRkOGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjcwYjlmNGUtYzM2OS00ZjRjLWFh MjQtMjdmM2ZjODUxYmM1LzY3MGI5ZjRlLWMzNjktNGY0Yy1hYTI0LTI3ZjNmYzg1 MWJjNS5jcmwwHwYDVR0jBBgwFoAUwp+puLpCfjzznWu7KBSK6QNRm/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82NzBiOWY0ZS1jMzY5LTRmNGMtYWEyNC0yN2Yz ZmM4NTFiYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF418MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFax7X0s+450uypubbvqqsHfW+Q0ehEA7qPGzRc/M7SJw1Ym6cFu6sUV RuS+/U6YkfSjIuEt7Tm5vY8pdAwSHuYW8GJxNaVV10A7u9RPrNWe6F1rLCqoW/ey XbJLZu610Th0ZmooNtf+hNXvFMDM3lg65CO5DsnXYbzmtd8vuY/Rege+wY+hB/wY YKsGeTsORJM8zh8jjW7ienEhFI6uM4TbPxxJn7SBYMyiCnGUlfHv6cJhswQB/we4 FpO6O064WThxRv9VKmzUm+MWOXs0tLPvbdQmPEvQrHNX0c1kgD3GffWHeaXSYKaC VgNHrqGIMPMy/zbpFFoRVerwkbQKmXc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:41 2025 by rpki-client