$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa File: 131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa (raw, json) Hash identifier: k0E2mL4YUCXPPaENgddeqk5WacxPQ1xP4lEWPgJaPug= Subject key identifier: EB:BA:00:03:55:1C:80:AF:C3:D3:5A:E6:47:80:C7:31:4C:F0:8F:59 Certificate issuer: /CN=040ac077-a6b6-4194-a06e-6c9593332536 Certificate serial: 010D0C9F4328584B2A2C25B13750F4B6C35C6380 Authority key identifier: E4:3D:57:58:2B:D6:AA:FC:53:49:D6:BF:6E:0D:11:86:DE:0D:81:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 14828 IP address blocks: 23.235.0.0/20 maxlen: 24 104.218.220.0/22 maxlen: 24 140.190.0.0/18 maxlen: 24 173.224.172.0/22 maxlen: 24 192.145.240.0/20 maxlen: 24 192.151.160.0/20 maxlen: 24 2605:9b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:25:b1:37:50:f4:b6:c3:5c:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040ac077-a6b6-4194-a06e-6c9593332536 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=7b1df8ee-ff00-4020-ad51-9b11f7fe3c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:c3:7e:d0:cd:6f:17:58:55:96:77:42:4f: 94:15:e4:9b:0e:86:3c:8a:c3:cb:8c:79:e6:ec:2b: b7:3a:f0:f4:64:3b:8d:27:91:7b:08:d0:60:76:6f: 87:27:ee:fd:c3:9b:30:4d:79:f6:d2:6c:3b:ab:36: 3f:37:f2:10:a7:63:ea:c8:72:97:1e:fa:ec:64:bc: 3f:f3:5d:b2:1c:f6:5a:c1:94:8a:f7:e9:b8:ea:b4: 03:a8:98:2d:56:6f:1d:88:6b:6d:10:1b:da:6d:2e: 74:32:ca:71:af:f7:fe:af:4d:8f:40:24:c2:f0:80: b9:ba:a2:56:4d:4e:bc:23:9a:1c:ec:e7:98:b3:47: 16:5b:07:14:4d:4a:ec:2d:7b:f0:06:18:0a:74:78: 30:6f:ee:b3:5d:56:de:94:27:e5:59:65:19:02:52: 67:b8:04:b9:6e:06:36:8d:c5:f4:c7:c6:ae:74:1f: 03:53:75:2b:a3:97:5a:66:9f:d0:35:4d:e5:ab:f3: e7:2a:4e:cf:0a:1a:de:c0:31:90:59:c7:b6:46:ab: b8:bc:63:ea:0d:8a:a2:d4:4c:bb:d1:23:79:59:7b: dc:68:5c:c8:f0:b1:5b:14:98:31:86:e6:db:63:4e: 7e:b0:cc:01:cb:ca:83:73:5b:b6:2f:f1:d4:c7:70: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BA:00:03:55:1C:80:AF:C3:D3:5A:E6:47:80:C7:31:4C:F0:8F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.crl X509v3 Authority Key Identifier: keyid:E4:3D:57:58:2B:D6:AA:FC:53:49:D6:BF:6E:0D:11:86:DE:0D:81:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer sbgp-ipAddrBlock: critical IPv4: 23.235.0.0/20 104.218.220.0/22 140.190.0.0/18 173.224.172.0/22 192.145.240.0/20 192.151.160.0/20 IPv6: 2605:9b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8f:28:25:f1:ce:1c:1c:3a:a2:4b:b8:96:b8:be:63:5d:66: 4f:e0:36:ea:6b:34:72:84:38:26:f6:15:f6:64:38:0a:52:a1: 65:11:f4:71:14:16:db:69:aa:17:03:2a:fa:d3:10:9c:e8:b2: 6c:d3:3a:8c:51:84:19:b7:c5:39:22:4c:e8:1c:4d:11:0c:06: 12:07:20:bd:c3:72:9f:16:6e:2c:10:72:3d:93:16:3c:62:d7: aa:a1:08:1d:c0:4a:16:03:9c:00:3d:e3:33:4a:43:ae:7b:93: 3d:4a:ac:e2:70:bb:85:42:73:d8:30:ca:25:22:8c:10:aa:3e: 32:76:89:e5:21:94:16:1c:8b:22:5b:78:fa:5e:e6:e5:9a:d9: 3c:ad:de:c0:e9:a3:d7:a5:89:f8:eb:a5:66:9b:29:a2:2c:f7: 05:3b:06:9d:c1:e4:e6:28:9c:77:66:b6:85:e6:8d:ba:76:0c: e2:dc:93:7e:b1:15:92:a8:1d:da:2b:9f:40:8b:e3:99:d7:ac: 30:26:8d:f7:89:f4:8a:ee:4b:4b:88:cf:e8:f3:e5:1c:27:58: 71:aa:7a:e7:d1:ab:c4:d8:19:a9:c8:0e:37:78:ad:24:2c:12: e8:06:85:2b:6a:b8:f2:58:e8:70:cd:ec:cc:75:e2:fb:d6:63: 95:3c:d7:ff -----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIUAQ0Mn0MoWEsqLCWxN1D0tsNcY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwYWMwNzctYTZiNi00MTk0LWEwNmUtNmM5NTkzMzMy NTM2MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk N2IxZGY4ZWUtZmYwMC00MDIwLWFkNTEtOWIxMWY3ZmUzYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCLDftDNbxdYVZZ3Qk+UFeSbDoY8isPLjHnm 7Cu3OvD0ZDuNJ5F7CNBgdm+HJ+79w5swTXn20mw7qzY/N/IQp2PqyHKXHvrsZLw/ 812yHPZawZSK9+m46rQDqJgtVm8diGttEBvabS50Mspxr/f+r02PQCTC8IC5uqJW TU68I5oc7OeYs0cWWwcUTUrsLXvwBhgKdHgwb+6zXVbelCflWWUZAlJnuAS5bgY2 jcX0x8audB8DU3Uro5daZp/QNU3lq/PnKk7PChrewDGQWce2Rqu4vGPqDYqi1Ey7 0SN5WXvcaFzI8LFbFJgxhubbY05+sMwBy8qDc1u2L/HUx3BUfQIDAQABo4IDgjCC A34wHQYDVR0OBBYEFOu6AANVHICvw9Na5keAxzFM8I9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNDBh YzA3Ny1hNmI2LTQxOTQtYTA2ZS02Yzk1OTMzMzI1MzYvMTMxZmVkOGUtODQ3OC0z YmFhLWEzNGMtY2JiOGIyNGJiYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDQwYWMwNzctYTZiNi00MTk0LWEw NmUtNmM5NTkzMzMyNTM2LzA0MGFjMDc3LWE2YjYtNDE5NC1hMDZlLTZjOTU5MzMz MjUzNi5jcmwwHwYDVR0jBBgwFoAU5D1XWCvWqvxTSda/bg0Rht4NgfkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNDBhYzA3Ny1hNmI2LTQxOTQtYTA2ZS02Yzk1 OTMzMzI1MzYuY2VyMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQEF+sAAwQC aNrcAwQGjL4AAwQCreCsAwQEwJHwAwQEwJegMA0EAgACMAcDBQAmBZuAMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAImPKCXxzhwcOqJLuJa4vmNdZk/gNuprNHKEOCb2FfZkOApSoWUR9HEUFttp qhcDKvrTEJzosmzTOoxRhBm3xTkiTOgcTREMBhIHIL3Dcp8WbiwQcj2TFjxi16qh CB3AShYDnAA94zNKQ657kz1KrOJwu4VCc9gwyiUijBCqPjJ2ieUhlBYciyJbePpe 5uWa2Tyt3sDpo9elifjrpWabKaIs9wU7Bp3B5OYonHdmtoXmjbp2DOLck36xFZKo Hdorn0CL45nXrDAmjfeJ9IruS0uIz+jz5RwnWHGqeufRq8TYGanIDjd4rSQsEugG hStquPJY6HDN7Mx14vvWY5U81/8= -----END CERTIFICATE-----Generated at Sat Oct 11 15:06:53 2025 by rpki-client