$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/904f7122-132d-3561-97f4-c69806a6c9c8.roa File: 904f7122-132d-3561-97f4-c69806a6c9c8.roa (raw, json) Hash identifier: mzfxMFU7RcGcjqFfkyAG2y2TygEgtxuH84cdohakVUI= Subject key identifier: AA:84:26:21:06:F8:8C:F9:58:5A:E1:69:4E:13:09:CA:2B:5D:1D:C3 Certificate issuer: /CN=e96285ea-5cb8-44da-b665-eabe5aa637c7 Certificate serial: 010D0C9F4328584AF9E9BB100B5B7C3210C00180 Authority key identifier: DB:92:19:BF:AD:B4:FA:12:24:20:E9:7F:82:CB:B5:8C:E5:00:68:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/904f7122-132d-3561-97f4-c69806a6c9c8.roa Signing time: Mon 25 Aug 2025 18:07:59 +0000 ROA not before: Mon 25 Aug 2025 18:07:59 +0000 ROA not after: Sun 23 Nov 2025 19:07:59 +0000 asID: 400443 IP address blocks: 23.132.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/e96285ea-5cb8-44da-b665-eabe5aa637c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/e96285ea-5cb8-44da-b665-eabe5aa637c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:e9:bb:10:0b:5b:7c:32:10:c0:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96285ea-5cb8-44da-b665-eabe5aa637c7 Validity Not Before: Aug 25 18:07:59 2025 GMT Not After : Nov 23 19:07:59 2025 GMT Subject: CN=bf76a509-6079-4e96-affc-33ce06943b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8b:33:d2:22:76:c5:a4:b9:20:c9:e2:c1:39: 20:b5:c0:74:a8:76:d9:91:ee:4e:f8:a0:10:c4:fe: fc:1b:8e:8c:f4:95:c5:dd:c1:13:91:7d:37:51:82: 03:75:bc:74:ff:a1:3a:d3:73:16:60:79:2e:38:ba: 83:01:6c:d7:4b:2c:30:b8:42:4b:b2:50:d2:82:23: 2f:05:e8:4d:54:7e:a5:f0:70:0e:b5:b1:73:62:ed: df:74:d8:50:31:6d:2f:fc:23:3d:8d:5b:58:9f:ae: 1b:1e:e4:81:53:1e:aa:e2:01:68:fa:a3:0e:aa:36: 1a:3f:b6:47:40:d8:87:8c:65:95:60:b2:e2:3f:8a: 7c:62:e0:8b:03:0c:ab:80:d8:bc:f1:d5:89:63:f0: bc:d7:ab:dc:06:61:73:a6:9f:35:02:34:f9:bd:3c: 1c:8b:72:4e:c9:d0:59:99:37:c9:13:b8:6a:5e:53: a6:ef:92:86:79:e9:4d:58:ff:55:02:6c:3b:d2:59: 2e:dd:42:51:f4:a6:b5:ba:6d:f3:ba:84:1d:6f:00: 52:f7:36:d4:69:74:0b:a7:7e:46:2b:fa:5d:5d:54: eb:a2:52:d3:65:f6:2c:37:bd:2a:69:52:98:58:df: c7:34:80:83:83:14:84:43:ff:d2:29:ae:97:bd:61: d1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:84:26:21:06:F8:8C:F9:58:5A:E1:69:4E:13:09:CA:2B:5D:1D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/904f7122-132d-3561-97f4-c69806a6c9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7/e96285ea-5cb8-44da-b665-eabe5aa637c7.crl X509v3 Authority Key Identifier: keyid:DB:92:19:BF:AD:B4:FA:12:24:20:E9:7F:82:CB:B5:8C:E5:00:68:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e96285ea-5cb8-44da-b665-eabe5aa637c7.cer sbgp-ipAddrBlock: critical IPv4: 23.132.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ee:10:32:9e:14:18:0c:cf:df:7c:80:be:98:e5:bd:86:6e: 69:27:b5:19:78:6d:40:06:7e:1c:13:9c:ff:38:39:e3:b9:fe: d8:19:13:09:0e:4e:1b:0f:c2:da:01:98:d1:be:fa:d7:e8:b1: 7a:0f:5d:95:bd:7e:72:f6:07:ad:66:75:3e:dd:16:b9:85:d7: e1:17:48:4e:85:2c:ba:39:00:22:ba:5c:15:ff:75:1b:4f:17: 17:56:6f:23:d4:63:94:a6:a2:df:39:1b:cb:e7:85:c0:35:c5: 21:ea:ca:35:56:a0:91:80:d0:6c:30:86:57:18:75:35:1e:66: 9a:7e:16:d3:a4:b6:f6:47:6a:a2:38:76:7a:50:91:d4:0b:c9: c6:a5:74:4b:88:f6:da:6f:d6:24:78:75:c2:fd:53:4b:36:ea: 65:21:92:d9:af:09:0f:8a:5f:80:d4:80:79:31:dc:f7:d2:c4: 7d:5f:f8:00:79:cb:0f:81:25:93:73:23:98:4b:10:b4:f4:e1: 1e:e3:aa:9f:4c:f6:77:f2:ae:53:59:a3:0a:3e:f8:d9:d5:c2: 0c:19:5f:f9:18:e2:fa:c4:df:4a:5e:2f:25:44:96:37:f2:d7: cd:79:7e:82:22:d8:98:95:7b:06:1f:0f:49:ed:ae:fc:82:a5: 2c:2b:a7:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr56bsQC1t8MhDAAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2Mjg1ZWEtNWNiOC00NGRhLWI2NjUtZWFiZTVhYTYz N2M3MB4XDTI1MDgyNTE4MDc1OVoXDTI1MTEyMzE5MDc1OVowLzEtMCsGA1UEAxMk YmY3NmE1MDktNjA3OS00ZTk2LWFmZmMtMzNjZTA2OTQzYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIsz0iJ2xaS5IMniwTkgtcB0qHbZke5O+KAQ xP78G46M9JXF3cETkX03UYIDdbx0/6E603MWYHkuOLqDAWzXSywwuEJLslDSgiMv BehNVH6l8HAOtbFzYu3fdNhQMW0v/CM9jVtYn64bHuSBUx6q4gFo+qMOqjYaP7ZH QNiHjGWVYLLiP4p8YuCLAwyrgNi88dWJY/C816vcBmFzpp81AjT5vTwci3JOydBZ mTfJE7hqXlOm75KGeelNWP9VAmw70lku3UJR9Ka1um3zuoQdbwBS9zbUaXQLp35G K/pdXVTrolLTZfYsN70qaVKYWN/HNICDgxSEQ//SKa6XvWHR7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqEJiEG+Iz5WFrhaU4TCcorXR3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lOTYy ODVlYS01Y2I4LTQ0ZGEtYjY2NS1lYWJlNWFhNjM3YzcvOTA0ZjcxMjItMTMyZC0z NTYxLTk3ZjQtYzY5ODA2YTZjOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTk2Mjg1ZWEtNWNiOC00NGRhLWI2 NjUtZWFiZTVhYTYzN2M3L2U5NjI4NWVhLTVjYjgtNDRkYS1iNjY1LWVhYmU1YWE2 MzdjNy5jcmwwHwYDVR0jBBgwFoAU25IZv620+hIkIOl/gsu1jOUAaHkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lOTYyODVlYS01Y2I4LTQ0ZGEtYjY2NS1lYWJl NWFhNjM3YzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3uEDKeFBgMz998gL6Y5b2GbmkntRl4bUAGfhwTnP84OeO5/tgZEwkO ThsPwtoBmNG++tfosXoPXZW9fnL2B61mdT7dFrmF1+EXSE6FLLo5ACK6XBX/dRtP FxdWbyPUY5Smot85G8vnhcA1xSHqyjVWoJGA0GwwhlcYdTUeZpp+FtOktvZHaqI4 dnpQkdQLycaldEuI9tpv1iR4dcL9U0s26mUhktmvCQ+KX4DUgHkx3PfSxH1f+AB5 yw+BJZNzI5hLELT04R7jqp9M9nfyrlNZowo++NnVwgwZX/kY4vrE30peLyVEljfy 1815foIi2JiVewYfD0ntrvyCpSwrpzg= -----END CERTIFICATE-----Generated at Wed Oct 8 22:55:09 2025 by rpki-client