$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa File: 9c3e3edc-3909-344f-8448-01bc508f03d9.roa (raw, json) Hash identifier: b5K4MGmftmdfim4HvshgdGxk/Qj/wNHLPEXkK+BvW98= Subject key identifier: 2C:17:BF:2D:82:69:0A:D2:02:5A:29:8C:2A:34:A3:73:87:38:22:6D Certificate issuer: /CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Certificate serial: 010D0C9F4328584B1806E4D6651B18F7C4A5FA00 Authority key identifier: 9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 400414 IP address blocks: 23.140.152.0/24 maxlen: 24 130.51.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e4:d6:65:1b:18:f7:c4:a5:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=311e0039-6b7c-42f2-a76e-395b51d9ec97 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=676c4d87-5c4e-4c85-b189-4d4876d4e26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ad:a5:d5:a8:00:ae:4c:b0:9f:01:16:84:18: ce:c1:e7:b4:d4:8f:a3:8e:dc:46:52:94:92:c0:1f: 3a:49:26:92:e1:ca:08:07:6d:0d:af:a1:a6:90:07: 21:48:5f:24:53:c8:65:b9:30:3d:b5:85:e3:f6:c8: ef:88:c2:1e:50:e3:b4:eb:85:ff:c2:0a:10:f8:3a: 72:a6:2a:b9:be:bf:f2:62:97:5d:e5:64:b9:9c:5e: a7:88:00:2b:dc:7a:c5:1d:38:3f:03:13:ec:55:04: a8:c8:11:61:f9:f5:78:11:e0:29:bd:ae:63:3a:b1: ee:3a:4d:ad:15:e3:fa:26:67:6b:5e:9a:ef:4b:46: 91:9c:25:a6:ef:d6:ce:24:70:48:d6:fc:6f:06:ea: 83:99:02:21:63:da:bb:04:c3:98:8f:bf:03:b7:b6: cb:ab:fa:46:3d:ff:57:55:15:25:0c:83:ea:9a:1b: d4:09:63:a8:25:85:8d:7d:0d:12:3d:b6:47:bf:45: 70:8e:d1:2b:cf:9c:d1:77:cd:78:9c:f0:3e:d2:b7: 46:80:fb:62:76:17:63:3f:d7:7c:4e:9d:28:5b:c0: 49:58:fb:e3:4b:86:b9:ad:36:e2:bf:a3:76:1e:72: 9b:53:b4:be:75:bf:15:5f:84:3c:05:e8:87:cf:fc: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:17:BF:2D:82:69:0A:D2:02:5A:29:8C:2A:34:A3:73:87:38:22:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/9c3e3edc-3909-344f-8448-01bc508f03d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97/311e0039-6b7c-42f2-a76e-395b51d9ec97.crl X509v3 Authority Key Identifier: keyid:9A:90:99:7A:47:4A:98:A4:A1:24:89:41:55:90:BE:7C:B7:54:35:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/311e0039-6b7c-42f2-a76e-395b51d9ec97.cer sbgp-ipAddrBlock: critical IPv4: 23.140.152.0/24 130.51.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:5b:7c:12:00:4e:20:f1:01:ed:aa:f0:47:f3:a8:36:2d:7f: 72:dc:b4:5b:59:dd:73:0b:00:ac:f1:e1:b0:cb:f9:11:8c:8c: 17:a8:c1:d8:a5:85:c7:a5:5a:8c:c2:af:06:23:8e:50:75:b5: 1a:0e:98:c6:9b:fe:40:76:96:5c:0c:0a:6f:5d:f0:c2:e9:71: 44:9c:79:0c:a2:1a:f1:28:73:0c:ce:04:1d:3e:61:d3:2f:01: 6f:bf:46:34:72:78:b0:88:2a:9c:64:3f:d9:66:b9:c5:01:ab: be:f4:45:29:09:fa:03:2c:27:50:4b:88:52:ef:96:18:5f:d5: bc:9d:d6:8c:73:f5:e5:77:3a:8d:ec:d4:59:f0:37:94:86:5a: d9:3e:d2:56:50:95:9d:b0:bd:c3:55:cd:74:61:12:54:9e:33: 15:5a:1b:fa:ca:b0:3f:9f:fe:a1:81:b4:36:53:1c:e8:6b:65: 50:04:f4:db:87:e2:fd:94:6f:41:3a:7b:35:dd:54:06:78:25: 37:bd:20:aa:10:6a:2a:68:e4:a1:c0:1c:d3:a9:35:8b:e4:46: 80:2a:a8:f3:c0:a7:52:d5:f0:7b:7f:b2:3d:62:cf:23:b9:f9: 64:eb:0b:7b:0a:eb:0b:95:bd:ba:2d:5d:b4:9e:85:0e:c9:d9: 1c:ca:a1:7a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsYBuTWZRsY98Sl+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzExZTAwMzktNmI3Yy00MmYyLWE3NmUtMzk1YjUxZDll Yzk3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Njc2YzRkODctNWM0ZS00Yzg1LWIxODktNGQ0ODc2ZDRlMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia2l1agArkywnwEWhBjOwee01I+jjtxGUpSS wB86SSaS4coIB20Nr6GmkAchSF8kU8hluTA9tYXj9sjviMIeUOO064X/wgoQ+Dpy piq5vr/yYpdd5WS5nF6niAAr3HrFHTg/AxPsVQSoyBFh+fV4EeApva5jOrHuOk2t FeP6JmdrXprvS0aRnCWm79bOJHBI1vxvBuqDmQIhY9q7BMOYj78Dt7bLq/pGPf9X VRUlDIPqmhvUCWOoJYWNfQ0SPbZHv0VwjtErz5zRd814nPA+0rdGgPtidhdjP9d8 Tp0oW8BJWPvjS4a5rTbiv6N2HnKbU7S+db8VX4Q8BeiHz/z84QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCwXvy2CaQrSAlopjCo0o3OHOCJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFl MDAzOS02YjdjLTQyZjItYTc2ZS0zOTViNTFkOWVjOTcvOWMzZTNlZGMtMzkwOS0z NDRmLTg0NDgtMDFiYzUwOGYwM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzExZTAwMzktNmI3Yy00MmYyLWE3 NmUtMzk1YjUxZDllYzk3LzMxMWUwMDM5LTZiN2MtNDJmMi1hNzZlLTM5NWI1MWQ5 ZWM5Ny5jcmwwHwYDVR0jBBgwFoAUmpCZekdKmKShJIlBVZC+fLdUNXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMTFlMDAzOS02YjdjLTQyZjItYTc2ZS0zOTVi NTFkOWVjOTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4yYAwQB gjN8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABZbfBIATiDxAe2q8EfzqDYtf3LctFtZ3XMLAKzx4bDL+RGM jBeowdilhcelWozCrwYjjlB1tRoOmMab/kB2llwMCm9d8MLpcUSceQyiGvEocwzO BB0+YdMvAW+/RjRyeLCIKpxkP9lmucUBq770RSkJ+gMsJ1BLiFLvlhhf1byd1oxz 9eV3Oo3s1FnwN5SGWtk+0lZQlZ2wvcNVzXRhElSeMxVaG/rKsD+f/qGBtDZTHOhr ZVAE9NuH4v2Ub0E6ezXdVAZ4JTe9IKoQaipo5KHAHNOpNYvkRoAqqPPAp1LV8Ht/ sj1izyO5+WTrC3sK6wuVvbotXbSehQ7J2RzKoXo= -----END CERTIFICATE-----Generated at Sat Oct 11 15:01:49 2025 by rpki-client