$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa File: 8cfb401d-a235-3259-9fc3-160664b8029d.roa (raw, json) Hash identifier: 4DIV99sfO1DkPTUTzSBCabhlB6QG3QJTsgHWl3nnfTY= Subject key identifier: 65:80:68:35:07:0E:20:1C:02:F3:9F:79:E0:F5:68:60:A5:CD:40:8B Certificate issuer: /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Certificate serial: 010D0C9F4328584B5C6C79BE16E06250EA7B3620 Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 18013 IP address blocks: 23.247.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:79:be:16:e0:62:50:ea:7b:36:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=68e263eb-8ac4-444b-8efa-1af7e2f57007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:75:d2:45:ad:9e:ed:80:4f:10:cf:99:2c:2e: 82:ff:15:d5:be:b0:35:e8:23:46:0f:96:1b:e5:83: e6:48:ee:bc:60:4b:43:57:d4:2e:9e:f7:a4:a6:d1: 93:1f:32:b0:a8:4b:85:1d:44:75:5b:aa:91:49:b3: 3e:b9:fe:a2:47:9a:22:d8:62:78:11:90:82:8a:ca: 66:54:5c:73:15:34:e0:b1:e7:f8:5e:b3:c7:8f:7b: 41:0e:bd:01:e7:b4:dd:fe:88:0a:23:52:23:4b:9f: 80:d3:d2:c0:14:51:14:a4:e8:b3:af:5e:70:26:4b: 3a:0f:1e:75:fc:7f:5e:c6:3e:6f:b9:14:19:1f:28: 2b:23:dd:44:43:32:57:a8:64:00:51:6f:95:47:f2: ea:53:c8:7d:d0:94:ab:75:2d:3e:95:8a:bb:2f:f4: f7:85:8a:10:b7:e4:4e:24:36:3d:73:75:82:52:3b: 40:74:87:d6:7b:dd:ce:89:6c:ca:1d:b3:29:45:35: cb:75:b3:36:76:9f:af:e7:ac:b1:6d:c5:04:88:07: 3f:cc:bc:72:ce:df:64:59:10:2e:de:29:aa:86:f1: ac:f0:38:98:11:43:e0:08:62:d7:b8:91:d6:fa:54: b1:65:dc:13:e9:17:70:d2:eb:f8:8a:b4:d2:e4:84: 7b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:80:68:35:07:0E:20:1C:02:F3:9F:79:E0:F5:68:60:A5:CD:40:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl X509v3 Authority Key Identifier: keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a3:ef:8d:0a:6a:f8:11:e4:b8:fb:98:e2:f7:05:d8:bd:a0: 32:ec:1c:d5:5c:6d:3c:e2:5b:2d:70:ed:e7:31:a3:bd:e9:6c: 2e:5d:0f:cf:5b:72:6f:56:cd:4b:1b:2b:57:6e:67:11:7c:e2: 87:d6:25:7c:23:db:7a:36:52:ee:a7:66:e1:80:af:af:b4:fc: 24:73:38:13:f4:ec:c2:0a:ad:56:91:6b:03:dd:f6:81:1f:c5: 40:c2:c2:61:70:1e:73:91:70:a0:eb:2d:6b:75:09:5e:c6:fb: c4:76:3d:03:5d:c8:22:0d:c9:ba:8a:28:ac:bf:1e:53:4f:54: 00:18:60:8c:48:69:99:9f:4b:a4:0e:6f:4f:7a:4d:7f:a7:b4: 65:b7:8d:86:fa:f0:86:ea:b9:a3:24:2a:45:0a:9e:9d:b1:8a: c4:c3:23:82:22:dc:9a:c9:ba:8c:61:49:0d:f5:c0:1b:b0:91: 61:e5:c6:82:c0:76:ef:be:c4:72:4c:8e:7d:46:a2:87:53:f8: 36:eb:7a:72:22:89:cc:cc:4f:75:fd:d3:1f:b9:d7:50:2b:f0: cf:aa:04:1a:5d:2e:96:1c:dc:76:15:80:4f:ea:fe:e7:3b:39: 15:73:79:ef:10:e2:d6:50:4f:0d:46:2c:a6:a7:fe:36:b0:4d: 9d:bd:4c:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHm+FuBiUOp7NiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj ZGIxMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NjhlMjYzZWItOGFjNC00NDRiLThlZmEtMWFmN2UyZjU3MDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHXSRa2e7YBPEM+ZLC6C/xXVvrA16CNGD5Yb 5YPmSO68YEtDV9QunvekptGTHzKwqEuFHUR1W6qRSbM+uf6iR5oi2GJ4EZCCispm VFxzFTTgsef4XrPHj3tBDr0B57Td/ogKI1IjS5+A09LAFFEUpOizr15wJks6Dx51 /H9exj5vuRQZHygrI91EQzJXqGQAUW+VR/LqU8h90JSrdS0+lYq7L/T3hYoQt+RO JDY9c3WCUjtAdIfWe93OiWzKHbMpRTXLdbM2dp+v56yxbcUEiAc/zLxyzt9kWRAu 3imqhvGs8DiYEUPgCGLXuJHW+lSxZdwT6Rdw0uv4irTS5IR7gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWAaDUHDiAcAvOfeeD1aGClzUCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvOGNmYjQwMWQtYTIzNS0z MjU5LTlmYzMtMTYwNjY0YjgwMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0 M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5 MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6j740KavgR5Lj7mOL3Bdi9oDLsHNVcbTziWy1w7ecxo73pbC5dD89b cm9WzUsbK1duZxF84ofWJXwj23o2Uu6nZuGAr6+0/CRzOBP07MIKrVaRawPd9oEf xUDCwmFwHnORcKDrLWt1CV7G+8R2PQNdyCINybqKKKy/HlNPVAAYYIxIaZmfS6QO b096TX+ntGW3jYb68IbquaMkKkUKnp2xisTDI4Ii3JrJuoxhSQ31wBuwkWHlxoLA du++xHJMjn1GoodT+DbrenIiiczMT3X90x+511Ar8M+qBBpdLpYc3HYVgE/q/uc7 ORVzee8Q4tZQTw1GLKan/jawTZ29TEw= -----END CERTIFICATE-----Generated at Fri Oct 10 22:38:47 2025 by rpki-client