$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/b8bdad08-de17-33b5-a6dc-1b64a1bdec6a.roa File: b8bdad08-de17-33b5-a6dc-1b64a1bdec6a.roa (raw, json) Hash identifier: 1uB1Uj1FQC4fcEKN+2lWCwospgamTCcKc0DkOoz2Ge0= Subject key identifier: 7E:BB:D7:88:90:5E:2D:14:A8:42:7E:B1:F7:C8:41:E6:D3:0B:FC:3C Certificate issuer: /CN=18c91241-805a-43ab-bbfb-d41ab0260dc6 Certificate serial: 010D0C9F4328584B7187B68F0CF0EAADA5D5CEE0 Authority key identifier: 55:EC:22:5B:45:AE:F2:82:14:1A:76:07:51:8B:CE:D4:5A:DB:F1:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/b8bdad08-de17-33b5-a6dc-1b64a1bdec6a.roa Signing time: Fri 26 Sep 2025 14:01:54 +0000 ROA not before: Fri 26 Sep 2025 14:01:54 +0000 ROA not after: Thu 25 Dec 2025 15:01:54 +0000 asID: 401455 IP address blocks: 23.146.228.0/24 maxlen: 24 2602:f7ba::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/18c91241-805a-43ab-bbfb-d41ab0260dc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/18c91241-805a-43ab-bbfb-d41ab0260dc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:87:b6:8f:0c:f0:ea:ad:a5:d5:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18c91241-805a-43ab-bbfb-d41ab0260dc6 Validity Not Before: Sep 26 14:01:54 2025 GMT Not After : Dec 25 15:01:54 2025 GMT Subject: CN=c4a76bb0-44ab-478d-bf3b-e8880fbe554e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ab:c8:63:a7:e1:f4:4b:34:2f:6d:ed:db:b4: 79:53:ee:4a:a9:12:c2:b7:81:81:d1:c8:d7:c9:20: b1:54:e1:a3:86:91:87:1e:7e:c9:f4:43:e3:db:c1: a9:b4:82:0b:27:75:94:d5:20:1e:80:95:0a:79:42: e9:cf:35:72:cc:66:2f:8a:6f:2e:dc:e2:e8:9c:f3: 43:f7:e9:1f:7e:a9:4f:d3:8d:44:a5:a4:1c:5c:f9: 07:b7:cf:c5:b4:26:2c:f2:19:5b:14:3e:31:d7:85: 4c:0f:87:c4:e3:8b:64:e1:ec:68:18:2e:f8:7c:cb: 0e:2b:25:df:d6:91:66:8f:a7:81:fc:0e:a3:00:dc: d5:b5:78:9e:c0:ff:57:5b:c3:ae:d1:2d:f4:3f:d8: c3:5c:b5:b6:37:49:6b:80:5a:c3:0a:96:13:a8:ae: 77:9e:9d:4d:b7:ca:c3:59:f2:85:27:fa:f8:1e:a9: 9b:5e:e4:26:d8:fb:d5:69:cf:20:bf:24:9b:77:3b: 89:55:4a:51:74:b0:0c:11:d2:95:4a:6a:19:68:3c: 7a:64:cb:3f:75:78:d7:5b:0a:48:17:f6:53:79:15: 9a:62:b4:63:dc:7e:6f:d8:a0:a0:98:3a:04:f5:54: bf:b5:fd:1c:1f:04:8a:2e:f5:f2:6c:80:f0:bf:9b: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:D7:88:90:5E:2D:14:A8:42:7E:B1:F7:C8:41:E6:D3:0B:FC:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/b8bdad08-de17-33b5-a6dc-1b64a1bdec6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6/18c91241-805a-43ab-bbfb-d41ab0260dc6.crl X509v3 Authority Key Identifier: keyid:55:EC:22:5B:45:AE:F2:82:14:1A:76:07:51:8B:CE:D4:5A:DB:F1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18c91241-805a-43ab-bbfb-d41ab0260dc6.cer sbgp-ipAddrBlock: critical IPv4: 23.146.228.0/24 IPv6: 2602:f7ba::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0a:27:92:f6:1a:c4:9e:df:6b:54:aa:4f:0f:62:42:ea:44: 45:2e:16:42:3a:c7:ea:f8:43:62:36:61:65:f6:b2:1a:72:e5: c8:16:8e:e3:4a:84:ba:41:0d:95:19:24:36:e7:8b:bf:e0:38: 7a:82:e8:7c:21:95:70:ad:08:81:d5:78:0e:e5:c8:33:64:00: 4b:41:1a:2b:5d:83:77:66:5a:7a:96:ca:64:5d:d1:78:3b:ec: 00:08:5a:ae:d6:1f:04:83:7c:2d:1f:79:7b:cf:20:e5:d4:97: c0:5f:ca:e1:a8:18:83:3a:cc:a7:b8:b4:e0:9e:2c:9a:f9:4e: 92:d0:79:9e:96:75:60:ce:8c:4a:5b:17:e3:50:ff:3a:02:5d: 6b:1c:3d:94:57:62:61:fa:bc:fc:e9:87:c3:b6:3c:2b:0f:0b: 3f:a4:a4:5b:41:f0:ac:c4:32:e0:ae:08:e3:61:b9:cf:c7:14: 1a:cd:57:f9:42:cc:e4:42:cf:5a:81:42:fe:dd:77:32:c8:c5: e8:45:6c:b4:38:e5:53:d0:14:c0:1e:67:5f:2e:86:ef:0c:11: da:c7:cb:b4:e8:15:5f:1b:e7:a9:12:ca:ee:de:d7:50:b1:c5: 16:0e:aa:72:ad:aa:cf:bd:7a:2e:28:8b:f8:bb:6a:a4:c9:ae: 8e:0a:bb:33 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtxh7aPDPDqraXVzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThjOTEyNDEtODA1YS00M2FiLWJiZmItZDQxYWIwMjYw ZGM2MB4XDTI1MDkyNjE0MDE1NFoXDTI1MTIyNTE1MDE1NFowLzEtMCsGA1UEAxMk YzRhNzZiYjAtNDRhYi00NzhkLWJmM2ItZTg4ODBmYmU1NTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKvIY6fh9Es0L23t27R5U+5KqRLCt4GB0cjX ySCxVOGjhpGHHn7J9EPj28GptIILJ3WU1SAegJUKeULpzzVyzGYvim8u3OLonPND 9+kffqlP041EpaQcXPkHt8/FtCYs8hlbFD4x14VMD4fE44tk4exoGC74fMsOKyXf 1pFmj6eB/A6jANzVtXiewP9XW8Ou0S30P9jDXLW2N0lrgFrDCpYTqK53np1Nt8rD WfKFJ/r4HqmbXuQm2PvVac8gvySbdzuJVUpRdLAMEdKVSmoZaDx6ZMs/dXjXWwpI F/ZTeRWaYrRj3H5v2KCgmDoE9VS/tf0cHwSKLvXybIDwv5u3YwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFH6714iQXi0UqEJ+sffIQebTC/w8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xOGM5 MTI0MS04MDVhLTQzYWItYmJmYi1kNDFhYjAyNjBkYzYvYjhiZGFkMDgtZGUxNy0z M2I1LWE2ZGMtMWI2NGExYmRlYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMThjOTEyNDEtODA1YS00M2FiLWJi ZmItZDQxYWIwMjYwZGM2LzE4YzkxMjQxLTgwNWEtNDNhYi1iYmZiLWQ0MWFiMDI2 MGRjNi5jcmwwHwYDVR0jBBgwFoAUVewiW0Wu8oIUGnYHUYvO1Frb8YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xOGM5MTI0MS04MDVhLTQzYWItYmJmYi1kNDFh YjAyNjBkYzYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5LkMA4E AgACMAgDBgQmAve6ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGCieS9hrEnt9rVKpPD2JC6kRFLhZCOsfq +ENiNmFl9rIacuXIFo7jSoS6QQ2VGSQ254u/4Dh6guh8IZVwrQiB1XgO5cgzZABL QRorXYN3Zlp6lspkXdF4O+wACFqu1h8Eg3wtH3l7zyDl1JfAX8rhqBiDOsynuLTg niya+U6S0HmelnVgzoxKWxfjUP86Al1rHD2UV2Jh+rz86YfDtjwrDws/pKRbQfCs xDLgrgjjYbnPxxQazVf5QszkQs9agUL+3XcyyMXoRWy0OOVT0BTAHmdfLobvDBHa x8u06BVfG+epEsru3tdQscUWDqpyrarPvXouKIv4u2qkya6OCrsz -----END CERTIFICATE-----Generated at Wed Oct 8 19:37:30 2025 by rpki-client