$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa File: 533e30dd-0c0f-371b-8de9-b5ee71425ace.roa (raw, json) Hash identifier: ryDKWU22JG9VnOkK14tL0Z7zAwxxvcRW9go10RdyKNM= Subject key identifier: 91:13:FD:B3:FD:B6:A3:F0:AD:7A:BF:9C:25:AF:E1:7D:20:29:B2:85 Certificate issuer: /CN=1f767e4f-700e-495f-8a3b-72eed82055b4 Certificate serial: 010D0C9F4328584B5C19195127918CF3BFCF9CC0 Authority key identifier: 18:39:30:73:F9:D2:68:2D:B0:5F:52:03:A1:24:32:10:D5:96:C6:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa Signing time: Mon 29 Sep 2025 22:12:38 +0000 ROA not before: Mon 29 Sep 2025 22:12:38 +0000 ROA not after: Sun 28 Dec 2025 23:12:38 +0000 asID: 1097 IP address blocks: 23.145.20.0/24 maxlen: 24 2602:81c:3000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:19:19:51:27:91:8c:f3:bf:cf:9c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f767e4f-700e-495f-8a3b-72eed82055b4 Validity Not Before: Sep 29 22:12:38 2025 GMT Not After : Dec 28 23:12:38 2025 GMT Subject: CN=a4c43f95-e2b7-4e9e-8c75-4e152e274599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c3:36:83:cb:78:fa:dc:a4:cf:3b:8c:c8:2c: ed:9f:24:3d:d4:3b:4b:6c:50:74:b7:33:45:47:95: a4:b1:f3:b9:9a:6a:60:b2:fe:6e:e6:c7:aa:66:a5: a0:fd:02:72:b8:b1:c2:97:17:7f:d5:a0:2c:85:1e: 12:ac:01:2a:71:99:79:44:73:68:3c:73:88:81:44: b2:ed:5c:68:0b:a4:b3:26:a6:44:a1:c0:12:a4:eb: b8:ca:fa:0a:db:9e:03:f1:17:d8:a2:2b:70:06:db: a6:22:9f:7e:91:14:6c:de:e6:05:41:c3:75:74:80: 6d:74:cb:30:b6:4d:ae:cf:8e:7a:fc:49:49:73:96: e0:79:54:88:c2:39:f7:22:6f:d6:06:53:bf:4b:28: de:57:2f:5a:e6:48:f2:f6:47:3e:9d:ca:bb:bb:e1: 73:b1:77:eb:2c:c8:b7:6c:d3:16:10:9f:17:0c:c7: 4b:85:fc:e0:c6:5f:03:5e:73:96:a5:6c:c1:9c:6e: 60:22:99:75:d7:92:eb:ae:7e:47:44:45:69:1f:4a: ef:47:31:9a:9b:f7:30:c4:68:5c:6b:52:2d:8f:49: 18:30:2d:e7:0c:aa:e8:15:57:0c:4a:af:f8:93:44: 41:60:0e:b8:26:66:75:d2:8e:be:88:a4:1c:fb:28: 95:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:13:FD:B3:FD:B6:A3:F0:AD:7A:BF:9C:25:AF:E1:7D:20:29:B2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.crl X509v3 Authority Key Identifier: keyid:18:39:30:73:F9:D2:68:2D:B0:5F:52:03:A1:24:32:10:D5:96:C6:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer sbgp-ipAddrBlock: critical IPv4: 23.145.20.0/24 IPv6: 2602:81c:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:06:55:57:db:bf:f4:84:8e:82:3a:f3:19:17:e7:c7:57:d9: 15:84:4e:36:8a:c6:02:35:ea:32:fc:dd:65:17:d5:21:2f:82: d4:8a:08:75:78:86:b4:33:bf:6a:8e:93:58:84:fa:d8:00:cf: 58:44:00:b4:d9:82:fd:9b:03:13:5f:30:f8:98:52:b4:74:ac: 9b:16:e3:cb:87:92:c1:40:ea:42:92:f9:50:21:9c:61:e0:75: 33:82:9d:9f:a2:4a:5f:bc:20:c8:be:0a:11:e2:0c:8d:9d:b2: 02:1b:d0:77:94:8c:16:47:3b:fc:19:27:7f:5c:31:ba:f7:d8: 74:69:1a:cc:17:de:40:8e:00:bd:1b:c8:48:2c:de:d5:6c:8b: e6:f8:56:65:a4:95:28:00:c4:41:bd:df:4f:1d:d5:e6:a6:36: ab:e1:f4:1e:9e:12:7b:38:26:cb:8a:07:a6:e1:9f:26:e9:75: 98:dd:19:68:82:3f:cf:93:06:60:05:2f:4b:df:31:1f:cd:c0: 57:16:e6:ba:e7:8e:07:b8:a2:29:1d:f4:c6:c4:33:08:20:59: 1f:43:65:02:57:df:32:68:b1:48:7d:c7:dd:a9:be:de:b3:b1: 1c:6d:68:9d:72:dd:a7:87:3e:6f:a5:95:70:ad:67:fd:4c:dd: d0:e7:f6:86 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtcGRlRJ5GM87/PnMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY3NjdlNGYtNzAwZS00OTVmLThhM2ItNzJlZWQ4MjA1 NWI0MB4XDTI1MDkyOTIyMTIzOFoXDTI1MTIyODIzMTIzOFowLzEtMCsGA1UEAxMk YTRjNDNmOTUtZTJiNy00ZTllLThjNzUtNGUxNTJlMjc0NTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsM2g8t4+tykzzuMyCztnyQ91DtLbFB0tzNF R5WksfO5mmpgsv5u5seqZqWg/QJyuLHClxd/1aAshR4SrAEqcZl5RHNoPHOIgUSy 7VxoC6SzJqZEocASpOu4yvoK254D8RfYoitwBtumIp9+kRRs3uYFQcN1dIBtdMsw tk2uz456/ElJc5bgeVSIwjn3Im/WBlO/SyjeVy9a5kjy9kc+ncq7u+FzsXfrLMi3 bNMWEJ8XDMdLhfzgxl8DXnOWpWzBnG5gIpl115Lrrn5HREVpH0rvRzGam/cwxGhc a1Itj0kYMC3nDKroFVcMSq/4k0RBYA64JmZ10o6+iKQc+yiVfwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJET/bP9tqPwrXq/nCWv4X0gKbKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xZjc2 N2U0Zi03MDBlLTQ5NWYtOGEzYi03MmVlZDgyMDU1YjQvNTMzZTMwZGQtMGMwZi0z NzFiLThkZTktYjVlZTcxNDI1YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWY3NjdlNGYtNzAwZS00OTVmLThh M2ItNzJlZWQ4MjA1NWI0LzFmNzY3ZTRmLTcwMGUtNDk1Zi04YTNiLTcyZWVkODIw NTViNC5jcmwwHwYDVR0jBBgwFoAUGDkwc/nSaC2wX1IDoSQyENWWxq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xZjc2N2U0Zi03MDBlLTQ5NWYtOGEzYi03MmVl ZDgyMDU1YjQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5EUMA8E AgACMAkDBwQmAggcMAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgwZVV9u/9ISOgjrzGRfnx1fZFYRONorG AjXqMvzdZRfVIS+C1IoIdXiGtDO/ao6TWIT62ADPWEQAtNmC/ZsDE18w+JhStHSs mxbjy4eSwUDqQpL5UCGcYeB1M4Kdn6JKX7wgyL4KEeIMjZ2yAhvQd5SMFkc7/Bkn f1wxuvfYdGkazBfeQI4AvRvISCze1WyL5vhWZaSVKADEQb3fTx3V5qY2q+H0Hp4S ezgmy4oHpuGfJul1mN0ZaII/z5MGYAUvS98xH83AVxbmuueOB7iiKR30xsQzCCBZ H0NlAlffMmixSH3H3am+3rOxHG1onXLdp4c+b6WVcK1n/Uzd0Of2hg== -----END CERTIFICATE-----Generated at Wed Oct 8 22:52:32 2025 by rpki-client