$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa File: 43870171-fec9-3adf-a047-9532779804f9.roa (raw, json) Hash identifier: 9lhinR+wuQf8SR4UfWc0FNbS859Q4wW7LMr6E8eGc0o= Subject key identifier: F9:19:2C:19:B3:C9:B6:00:40:29:D9:7B:3F:01:A8:37:50:1D:2B:88 Certificate issuer: /CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Certificate serial: 010D0C9F4328584B0A116CF7E645DCE838465000 Authority key identifier: C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 40924 IP address blocks: 23.165.24.0/24 maxlen: 24 2602:816:7000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:6c:f7:e6:45:dc:e8:38:46:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=b8c39aad-39e9-4f74-bf4d-71e469a0607d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:31:75:2a:6f:03:88:f5:ed:65:00:7d:27: 38:32:15:40:63:01:f9:f5:31:bd:d2:c7:73:0d:3f: 0d:8b:e9:75:dd:97:a5:41:67:d2:92:90:61:16:2b: af:d2:b1:a0:c1:2e:fa:51:34:f1:9a:6d:07:ac:cb: ae:57:d7:63:cc:99:4f:57:8f:f3:95:0a:8b:80:28: 73:00:81:39:dc:a9:d9:93:ea:0a:93:50:5a:e4:50: ba:ab:1a:c3:67:7d:fb:6e:94:b3:f2:f2:f9:24:ef: 2c:c8:5c:74:04:0b:ae:e1:8d:12:29:1b:94:e6:c4: b2:df:16:a7:44:1d:ac:3f:79:77:cc:3e:48:95:fa: 78:03:65:ea:c8:0a:67:9a:09:8c:df:54:ac:c1:34: c0:6e:aa:4b:c9:dd:19:1e:17:c9:ad:ce:4d:65:63: e6:4b:a0:15:99:04:e8:30:43:7c:12:4f:90:c4:8e: af:3b:d6:3f:ac:fb:29:53:09:fe:20:ed:4a:ea:7e: ba:0e:29:c9:25:be:5b:c5:35:fa:57:81:8f:55:ab: 3e:77:4e:58:9b:76:e8:c6:dc:91:9f:da:47:9e:7f: 16:1e:c2:9a:e3:ca:72:49:2d:a8:cf:a4:2a:da:b8: 72:8a:d9:b3:79:7f:e7:fd:ec:91:7c:0d:cb:cf:1c: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:19:2C:19:B3:C9:B6:00:40:29:D9:7B:3F:01:A8:37:50:1D:2B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/43870171-fec9-3adf-a047-9532779804f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.crl X509v3 Authority Key Identifier: keyid:C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer sbgp-ipAddrBlock: critical IPv4: 23.165.24.0/24 IPv6: 2602:816:7000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:9e:cb:58:5e:9f:a0:06:42:97:ca:eb:d7:d3:4b:ec:e1:f2: 4e:bb:57:08:b2:32:62:19:88:6e:55:d0:63:ac:1d:8c:32:99: 24:cd:aa:a2:94:16:0d:1a:78:b7:f2:d4:ce:74:07:3a:a6:d6: 19:66:d0:07:93:aa:77:a1:3e:95:75:f1:4a:95:da:e5:a9:d6: 9d:3d:62:3a:f7:e5:0d:0b:fa:49:8e:ad:cc:69:6f:c6:75:d8: a6:9d:2b:57:59:7e:89:9f:94:08:7e:cc:4f:8a:98:6c:7f:25: ea:1e:93:75:d3:4e:cb:b0:15:19:a0:8a:33:27:9e:93:12:4a: ea:d4:2b:70:90:b9:2d:d2:70:5d:12:8d:e7:fe:55:da:47:d5: 65:82:5e:f2:c9:a2:0f:6e:19:c1:23:d6:2f:be:bd:c1:7f:72: 44:dd:bb:28:fa:4a:35:9d:0e:b9:ad:71:0d:3d:8a:35:0c:f6: a9:cd:c9:61:ae:02:fb:fc:ec:06:ac:dd:43:24:7e:62:e3:13: fb:98:b1:67:d4:73:2c:04:c1:9a:78:fa:27:fc:9e:2b:7a:9b: 40:b3:ca:98:a7:74:7b:da:67:0d:67:31:50:92:4e:52:03:3c: 48:33:ae:4f:47:35:9f:6a:f7:13:ce:ce:38:73:f5:3a:60:92: a2:fb:78:22 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsKEWz35kXc6DhGUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAxZjdlMGItMDBjYi00N2EyLThlMjAtMDMzYjM1Njdj YzZkMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YjhjMzlhYWQtMzllOS00Zjc0LWJmNGQtNzFlNDY5YTA2MDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl40xdSpvA4j17WUAfSc4MhVAYwH59TG90sdz DT8Ni+l13ZelQWfSkpBhFiuv0rGgwS76UTTxmm0HrMuuV9djzJlPV4/zlQqLgChz AIE53KnZk+oKk1Ba5FC6qxrDZ337bpSz8vL5JO8syFx0BAuu4Y0SKRuU5sSy3xan RB2sP3l3zD5Ilfp4A2XqyApnmgmM31SswTTAbqpLyd0ZHhfJrc5NZWPmS6AVmQTo MEN8Ek+QxI6vO9Y/rPspUwn+IO1K6n66DinJJb5bxTX6V4GPVas+d05Ym3boxtyR n9pHnn8WHsKa48pySS2oz6Qq2rhyitmzeX/n/eyRfA3Lzxxd9wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPkZLBmzybYAQCnZez8BqDdQHSuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDFm N2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNiMzU2N2NjNmQvNDM4NzAxNzEtZmVjOS0z YWRmLWEwNDctOTUzMjc3OTgwNGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZjAxZjdlMGItMDBjYi00N2EyLThl MjAtMDMzYjM1NjdjYzZkL2YwMWY3ZTBiLTAwY2ItNDdhMi04ZTIwLTAzM2IzNTY3 Y2M2ZC5jcmwwHwYDVR0jBBgwFoAUxBCwz+7PLW5YneCYZYFXgiGkKEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9mMDFmN2UwYi0wMGNiLTQ3YTItOGUyMC0wMzNi MzU2N2NjNmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF6UYMA8E AgACMAkDBwQmAggWcAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcJ7LWF6foAZCl8rr19NL7OHyTrtXCLIy YhmIblXQY6wdjDKZJM2qopQWDRp4t/LUznQHOqbWGWbQB5Oqd6E+lXXxSpXa5anW nT1iOvflDQv6SY6tzGlvxnXYpp0rV1l+iZ+UCH7MT4qYbH8l6h6TddNOy7AVGaCK MyeekxJK6tQrcJC5LdJwXRKN5/5V2kfVZYJe8smiD24ZwSPWL769wX9yRN27KPpK NZ0Oua1xDT2KNQz2qc3JYa4C+/zsBqzdQyR+YuMT+5ixZ9RzLATBmnj6J/yeK3qb QLPKmKd0e9pnDWcxUJJOUgM8SDOuT0c1n2r3E87OOHP1OmCSovt4Ig== -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:20 2025 by rpki-client