$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa File: cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa (raw, json) Hash identifier: njaZB5l3XquVn6C+nhF7sykSBG2dE/ndq9VACkB0XuI= Subject key identifier: 24:E1:4B:42:6F:C2:A0:F8:10:88:DE:86:BB:9F:1C:37:20:0A:2B:B2 Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Certificate serial: 010D0C9F4328584B5B0747846A39334C4D5353C0 Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 12131 IP address blocks: 23.161.34.0/24 maxlen: 24 23.187.0.0/24 maxlen: 24 23.187.1.0/24 maxlen: 24 2620:1df::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:47:84:6a:39:33:4c:4d:53:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=00a415c8-a59a-4317-966c-4c054710d7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f0:95:36:4a:b5:03:b7:6e:3d:f5:e2:ac:85: 7c:78:88:cf:c3:8e:29:89:bd:18:17:74:5f:7c:8b: 7b:e5:40:a1:c9:d4:78:18:24:13:41:8f:80:3a:52: 51:dd:60:c7:9a:f6:01:a4:76:06:49:2a:39:ca:40: f3:66:35:3c:5a:62:2a:e9:05:2c:2a:91:09:fb:0b: 53:ca:61:0a:82:71:dd:24:02:dd:e2:ce:e4:5e:a5: 73:68:16:56:0d:33:7d:da:a1:5a:7d:42:07:6a:c6: 3d:95:6b:63:fb:52:01:f2:a0:85:34:ff:6c:bb:f8: 43:8f:ae:a2:e5:73:2a:2a:31:bc:d4:1f:29:12:29: 77:26:b1:41:75:fe:e3:1e:e2:12:e1:4e:d6:d8:40: 02:ef:40:0a:25:ff:eb:f3:21:d1:8a:c1:be:90:71: 2b:74:86:32:08:0d:02:8f:44:31:52:10:22:1d:f2: b4:ce:16:68:e6:77:bb:0c:8f:75:95:3f:83:9e:87: 67:cf:0e:b2:50:cd:67:1f:2d:88:b6:90:68:da:db: 27:24:6d:b1:4c:ae:cc:7e:c1:cb:a3:55:50:57:9c: 7a:a3:29:dc:6d:a4:85:2c:62:e2:5b:5f:7b:06:55: 8e:ed:02:5e:cd:ba:58:64:c4:2d:19:10:4b:5e:18: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E1:4B:42:6F:C2:A0:F8:10:88:DE:86:BB:9F:1C:37:20:0A:2B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl X509v3 Authority Key Identifier: keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.34.0/24 23.187.0.0/23 IPv6: 2620:1df::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d2:d0:f0:87:91:35:ce:0e:db:53:92:f6:7f:ec:8b:c3:f8: 62:4f:a9:58:ff:30:21:88:fa:e9:99:17:e7:1f:f7:23:84:4f: be:93:23:4d:d8:b1:f6:f0:78:98:24:f7:7d:41:79:20:2d:08: ae:ec:8e:e7:7e:79:5e:bb:a5:ef:78:59:cd:1b:9e:68:09:29: 07:ed:0f:8e:58:13:b8:b9:47:18:fa:83:18:8e:4d:d6:59:bb: c2:6e:28:b4:a8:0a:a8:1e:f1:00:06:6a:bd:34:fe:ea:37:27: c7:8a:b3:5a:12:3d:74:2c:a5:06:51:b5:fb:57:14:01:50:c8: ae:45:cc:57:f8:d2:12:ff:90:73:35:0a:23:fc:d1:a9:dc:cd: f2:45:5a:b9:fc:7b:7a:b3:7d:96:eb:2e:fa:fe:76:7e:d7:ec: 64:ff:6a:f3:42:05:dd:ac:f7:ce:78:7d:0d:85:9b:5f:f6:9d: 0f:75:49:fd:97:ed:cc:a1:b3:a6:63:cf:62:7c:cc:9f:ec:ef: 76:ed:c7:e6:71:b7:a6:ab:fd:0a:50:89:a4:ba:43:13:98:55: dd:69:d6:47:73:df:d9:7c:6e:eb:51:25:be:5a:5c:82:5c:31: ce:07:76:87:20:9d:22:63:52:de:01:28:21:33:e8:04:49:bd: f9:5d:ef:34 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEtbB0eEajkzTE1TU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy YTYyMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MDBhNDE1YzgtYTU5YS00MzE3LTk2NmMtNGMwNTQ3MTBkN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivCVNkq1A7duPfXirIV8eIjPw44pib0YF3Rf fIt75UChydR4GCQTQY+AOlJR3WDHmvYBpHYGSSo5ykDzZjU8WmIq6QUsKpEJ+wtT ymEKgnHdJALd4s7kXqVzaBZWDTN92qFafUIHasY9lWtj+1IB8qCFNP9su/hDj66i 5XMqKjG81B8pEil3JrFBdf7jHuIS4U7W2EAC70AKJf/r8yHRisG+kHErdIYyCA0C j0QxUhAiHfK0zhZo5ne7DI91lT+Dnodnzw6yUM1nHy2ItpBo2tsnJG2xTK7MfsHL o1VQV5x6oyncbaSFLGLiW197BlWO7QJezbpYZMQtGRBLXhiiWQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFCThS0JvwqD4EIjehrufHDcgCiuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5 MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2YxZjU1NDItMzgzMi0z ZGQ3LWEyYTItMmM2ODU3MWRkMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3 MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl YWE5NzJhNjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6EiAwQB F7sAMA0EAgACMAcDBQAmIAHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEjS0PCHkTXODttTkvZ/7IvD+GJP qVj/MCGI+umZF+cf9yOET76TI03YsfbweJgk931BeSAtCK7sjud+eV67pe94Wc0b nmgJKQftD45YE7i5Rxj6gxiOTdZZu8JuKLSoCqge8QAGar00/uo3J8eKs1oSPXQs pQZRtftXFAFQyK5FzFf40hL/kHM1CiP80anczfJFWrn8e3qzfZbrLvr+dn7X7GT/ avNCBd2s9854fQ2Fm1/2nQ91Sf2X7cyhs6Zjz2J8zJ/s73btx+Zxt6ar/QpQiaS6 QxOYVd1p1kdz39l8butRJb5aXIJcMc4HdocgnSJjUt4BKCEz6ARJvfld7zQ= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:27 2025 by rpki-client