$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa File: ca4eafff-9365-3068-b787-140215783a30.roa (raw, json) Hash identifier: Pk2iHWmbdccv1GkUBR62Zu+hkhuOyxHc9Hz5AGNnQ30= Subject key identifier: A1:C9:2D:71:BA:9B:CC:17:78:C8:BB:9B:5B:14:B0:8A:6D:A4:35:30 Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Certificate serial: 010D0C9F4328584B5C6C7B1991792A125384A9B4 Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 401472 IP address blocks: 23.129.28.0/24 maxlen: 24 2602:f7af::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:7b:19:91:79:2a:12:53:84:a9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=304c7276-6124-46a1-986d-ac0b8051b70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c0:a9:63:46:ed:98:d5:77:f1:f7:8c:43:d1: 20:16:4f:54:4d:55:66:8e:9a:14:4e:d6:db:2d:d7: 89:93:b8:42:94:a2:b2:d1:69:48:ec:2a:14:e4:42: 11:f2:71:d6:f6:50:b6:28:bf:8c:92:51:30:d0:c6: 64:55:c6:81:67:51:18:13:ea:dd:ce:84:a9:9f:50: e3:53:75:89:64:00:20:6d:6f:f9:9d:de:3b:1f:9a: 36:41:98:cf:f6:ed:dc:e6:d5:bd:20:07:a7:fe:24: 47:ba:11:19:2f:20:50:68:b8:4b:ec:f2:48:b7:a7: 3b:76:dd:af:a7:1c:ec:d7:6c:ba:18:ff:a6:bf:25: 38:85:34:ff:3a:b3:b2:c5:39:a4:b4:f3:72:0d:d0: 10:cb:a1:e6:a6:64:8c:90:36:4e:a1:01:a0:bc:0a: d5:79:a0:23:ed:4c:fb:6b:ff:4e:44:f5:95:c7:d3: e8:bf:8c:f5:71:e2:c2:b4:ef:b1:4a:69:1e:6b:ba: c8:4d:3a:84:81:f3:16:fb:ca:d9:98:9d:1d:73:46: 61:7d:cf:82:c3:31:31:b4:0d:63:47:d2:d1:7c:66: 57:13:06:39:84:7e:db:4b:16:cc:e8:23:89:7e:b9: 91:8b:07:b1:bb:e0:13:3e:81:34:9c:96:65:4f:75: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:2D:71:BA:9B:CC:17:78:C8:BB:9B:5B:14:B0:8A:6D:A4:35:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl X509v3 Authority Key Identifier: keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer sbgp-ipAddrBlock: critical IPv4: 23.129.28.0/24 IPv6: 2602:f7af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:df:c4:64:6a:b9:90:b8:9a:d6:d9:f7:70:05:74:c5:b3:a2: 98:8a:92:94:69:ae:d7:6b:2f:0a:50:df:02:ba:47:71:0a:a8: 91:a2:9b:c4:0a:80:67:b2:0a:ea:4f:29:73:cf:b9:94:d8:17: f1:67:8a:48:3b:91:3d:6f:a6:50:43:90:c4:3b:07:59:3e:64: 3e:69:18:d7:7f:0a:0f:d4:dd:f8:fe:1c:35:de:81:27:5d:8b: 88:d4:dc:01:fb:82:fb:b7:ab:2b:6b:38:23:4b:b7:9e:63:3f: b7:26:41:e1:32:68:93:cf:db:82:da:46:51:70:38:00:5d:2a: 46:76:e5:91:f9:48:67:5e:f7:22:5e:57:db:6c:62:4a:cc:e5: 1d:a5:a1:dd:eb:aa:50:69:55:45:58:57:4c:c7:88:dc:12:e0: 0d:83:a3:78:1b:f2:c2:0d:d3:4c:6f:89:6c:5e:ca:d4:52:d6: 6b:b8:13:0e:59:cf:31:83:ce:d0:74:43:ad:54:95:38:81:7b: 37:41:49:1c:1e:b3:95:e3:e2:5e:56:0f:73:b0:47:38:fd:2c: 74:23:01:70:22:c7:75:57:61:02:0e:fc:fa:ed:b8:db:00:d8: f8:67:26:26:79:2f:01:17:45:df:53:8f:ea:18:ae:0e:db:ce: ce:8f:80:b2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtcbHsZkXkqElOEqbQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky ZTA4MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MzA0YzcyNzYtNjEyNC00NmExLTk4NmQtYWMwYjgwNTFiNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMCpY0btmNV38feMQ9EgFk9UTVVmjpoUTtbb LdeJk7hClKKy0WlI7CoU5EIR8nHW9lC2KL+MklEw0MZkVcaBZ1EYE+rdzoSpn1Dj U3WJZAAgbW/5nd47H5o2QZjP9u3c5tW9IAen/iRHuhEZLyBQaLhL7PJIt6c7dt2v pxzs12y6GP+mvyU4hTT/OrOyxTmktPNyDdAQy6HmpmSMkDZOoQGgvArVeaAj7Uz7 a/9ORPWVx9Pov4z1ceLCtO+xSmkea7rITTqEgfMW+8rZmJ0dc0Zhfc+CwzExtA1j R9LRfGZXEwY5hH7bSxbM6COJfrmRiwexu+ATPoE0nJZlT3WtGQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKHJLXG6m8wXeMi7m1sUsIptpDUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0 Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvY2E0ZWFmZmYtOTM2NS0z MDY4LWI3ODctMTQwMjE1NzgzYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5 MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi ZWFjOTJlMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4EcMA4E AgACMAgDBgAmAvevADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA638RkarmQuJrW2fdwBXTFs6KYipKUaa7X ay8KUN8CukdxCqiRopvECoBnsgrqTylzz7mU2BfxZ4pIO5E9b6ZQQ5DEOwdZPmQ+ aRjXfwoP1N34/hw13oEnXYuI1NwB+4L7t6srazgjS7eeYz+3JkHhMmiTz9uC2kZR cDgAXSpGduWR+UhnXvciXlfbbGJKzOUdpaHd66pQaVVFWFdMx4jcEuANg6N4G/LC DdNMb4lsXsrUUtZruBMOWc8xg87QdEOtVJU4gXs3QUkcHrOV4+JeVg9zsEc4/Sx0 IwFwIsd1V2ECDvz67bjbANj4ZyYmeS8BF0XfU4/qGK4O287Oj4Cy -----END CERTIFICATE-----Generated at Thu Oct 9 20:15:40 2025 by rpki-client