$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/41f690aa-9b57-3b7e-8232-c49b539a6d86.roa File: 41f690aa-9b57-3b7e-8232-c49b539a6d86.roa (raw, json) Hash identifier: VeArWGlz6zx3NTUbrmxga1krAWfJaLOSU9eEKrG5MP4= Subject key identifier: D4:D2:47:6D:A9:B7:4D:AC:28:9D:BC:A7:F8:8F:F5:6F:C9:23:D0:75 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B1C36BA5FB64EA8EC23E86880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/41f690aa-9b57-3b7e-8232-c49b539a6d86.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 11135 IP address blocks: 65.59.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:ba:5f:b6:4e:a8:ec:23:e8:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=4ebe19e9-bcb8-402e-9bc4-489083af483f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e1:04:dc:ad:b8:4a:5d:c3:b3:52:76:e5:24: 06:f3:bf:92:67:90:6c:1d:8d:78:55:40:aa:04:f4: 1e:1a:9b:a8:e4:ea:ab:10:78:94:94:96:76:03:61: 15:7f:ce:84:83:6f:b1:91:fc:57:5a:a2:e8:4b:a1: 26:62:af:85:30:55:c3:fe:fb:2a:0d:09:0b:ab:65: 49:0a:32:1c:f2:65:54:d9:05:eb:e1:b6:07:35:f2: 0b:02:40:d0:21:1f:0f:34:29:71:d8:04:99:e2:e9: d7:15:cb:32:6c:d8:bf:cf:5b:29:42:44:ec:f1:8a: b7:fe:99:0d:13:c1:68:fd:e7:5f:73:e3:a7:e0:93: a9:ac:ed:29:23:ca:19:12:6c:3c:8d:0f:90:a5:a0: 1d:2f:2b:43:7b:ec:96:e3:cb:41:db:f1:d6:33:54: 66:3b:98:51:94:01:2d:eb:9d:b4:4f:27:50:c4:bb: a1:13:a1:1c:12:cd:a0:7b:ce:07:48:1b:de:46:a4: 1d:ed:79:1a:c7:2c:ba:f2:fd:06:6e:16:22:bf:98: 4e:b2:a2:38:f3:18:f6:38:fc:38:8f:b3:a4:10:c5: ba:c9:47:ab:54:3f:8f:ac:2c:4d:cf:0b:8d:0e:4e: fa:4a:77:be:ca:03:7e:48:1a:74:05:ca:13:2c:22: 99:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D2:47:6D:A9:B7:4D:AC:28:9D:BC:A7:F8:8F:F5:6F:C9:23:D0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/41f690aa-9b57-3b7e-8232-c49b539a6d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 65.59.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:24:05:86:b6:ac:12:1f:49:b4:37:21:c0:91:a6:32:22:6d: 4f:1d:37:7e:ba:63:8c:24:b9:e2:b7:13:ac:01:0b:a8:37:49: 80:f1:e1:99:32:05:11:d9:f1:c6:95:bd:da:80:f3:89:26:8b: d9:b9:33:bd:03:86:5f:cd:07:11:a1:e9:04:a9:94:e8:57:65: 4d:10:1a:0b:16:40:70:78:8b:6e:ff:0a:44:46:ea:46:19:51: 7d:f3:3a:44:24:c5:62:93:7e:87:1d:86:26:c2:e9:5c:26:e6: 36:ed:26:78:3a:e2:cf:b8:59:43:62:0e:e6:62:0e:6a:d1:ff: cb:27:92:f9:32:00:87:78:3e:48:ee:1f:f7:77:5e:29:68:d0: fc:e9:77:fc:76:54:30:a7:9c:55:46:ca:9f:2f:c0:fd:4a:36: 94:01:97:78:c4:c8:47:ae:91:f2:c3:50:39:16:4a:e7:0e:2d: b0:5a:82:e3:e1:0b:e7:1e:be:ee:fa:09:26:ee:c9:e8:e9:dd: 6e:71:b3:81:64:dc:d0:a9:75:30:45:a9:71:f7:95:07:46:f5: 50:0d:96:8f:32:03:a0:d2:5c:73:1a:d0:8e:65:e2:53:89:f5: c0:ed:56:39:86:3d:3f:55:26:9c:c1:ea:bc:93:62:d3:08:01: 0e:b3:bd:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNrpftk6o7CPoaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NGViZTE5ZTktYmNiOC00MDJlLTliYzQtNDg5MDgzYWY0ODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOEE3K24Sl3Ds1J25SQG87+SZ5BsHY14VUCq BPQeGpuo5OqrEHiUlJZ2A2EVf86Eg2+xkfxXWqLoS6EmYq+FMFXD/vsqDQkLq2VJ CjIc8mVU2QXr4bYHNfILAkDQIR8PNClx2ASZ4unXFcsybNi/z1spQkTs8Yq3/pkN E8Fo/edfc+On4JOprO0pI8oZEmw8jQ+QpaAdLytDe+yW48tB2/HWM1RmO5hRlAEt 6520TydQxLuhE6EcEs2ge84HSBveRqQd7Xkaxyy68v0GbhYiv5hOsqI48xj2OPw4 j7OkEMW6yUerVD+PrCxNzwuNDk76Sne+ygN+SBp0BcoTLCKZTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTSR22pt02sKJ28p/iP9W/JI9B1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDFmNjkwYWEtOWI1Ny0z YjdlLTgyMzItYzQ5YjUzOWE2ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTv3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALokBYa2rBIfSbQ3IcCRpjIibU8dN366Y4wkueK3E6wBC6g3SYDx4Zky BRHZ8caVvdqA84kmi9m5M70Dhl/NBxGh6QSplOhXZU0QGgsWQHB4i27/CkRG6kYZ UX3zOkQkxWKTfocdhibC6Vwm5jbtJng64s+4WUNiDuZiDmrR/8snkvkyAId4Pkju H/d3Xilo0Pzpd/x2VDCnnFVGyp8vwP1KNpQBl3jEyEeukfLDUDkWSucOLbBaguPh C+cevu76CSbuyejp3W5xs4Fk3NCpdTBFqXH3lQdG9VANlo8yA6DSXHMa0I5l4lOJ 9cDtVjmGPT9VJpzB6ryTYtMIAQ6zvT8= -----END CERTIFICATE-----Generated at Sat Oct 11 14:48:57 2025 by rpki-client