$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/79131f5d-781c-3098-bc49-84c4e9a80675.roa File: 79131f5d-781c-3098-bc49-84c4e9a80675.roa (raw, json) Hash identifier: w+CEfT/cjLxx1nWXAKaZ9stYqjiy5setbuxzV1TXcXE= Subject key identifier: ED:59:BE:6D:76:FD:C9:D2:C4:88:62:C5:53:D3:D6:35:9D:CA:B3:BA Certificate issuer: /CN=3e9ca003-d1bd-4848-a9c8-2b65aeba6342 Certificate serial: 010D0C9F4328584B0B76A22B33D70436F0111000 Authority key identifier: 86:71:B7:E8:8F:DC:7C:88:5B:AD:20:88:49:E1:FF:04:19:E5:7B:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/79131f5d-781c-3098-bc49-84c4e9a80675.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 394715 IP address blocks: 23.137.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a2:2b:33:d7:04:36:f0:11:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e9ca003-d1bd-4848-a9c8-2b65aeba6342 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=df77e0fc-4473-4dc9-9811-5b86950f962f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:0b:0b:15:29:fa:a0:79:7f:34:fe:e6:32: 77:17:8c:b4:e8:d2:b4:d8:de:a0:38:5c:bc:97:98: 09:73:d7:f8:51:fc:c8:30:69:11:01:f7:2a:42:63: 1c:1e:3c:d1:3c:fc:62:60:86:2a:c6:43:b6:fb:5e: ef:b7:40:e3:1b:2b:71:1c:c7:88:94:19:a4:91:75: 44:92:3b:78:d2:07:11:9b:80:cc:0e:17:f9:40:cd: bf:58:d1:7e:af:13:36:da:43:0b:ff:b2:01:ed:3a: b4:45:46:15:83:33:fa:81:1b:35:d4:42:eb:53:0f: 4a:02:dd:cb:34:74:df:15:88:e5:9a:cf:0f:81:a0: a9:45:bb:b9:4f:ba:0a:1d:22:42:1c:28:a9:93:45: 8a:28:74:c0:f2:7b:f9:ca:eb:f6:92:bf:ba:4f:25: f2:55:6d:4a:14:f0:49:ef:df:2c:5a:c7:92:4b:3c: 6b:a0:ab:b5:3b:d2:39:ea:8b:9d:dc:53:88:68:40: 3a:f0:6e:fe:a8:20:57:75:af:19:a7:cd:76:4d:af: 7f:ca:79:39:a5:b6:df:54:a8:5e:f2:3c:b3:8b:e8: 66:24:03:bf:46:ac:d3:cc:59:f7:ee:43:e9:64:06: 4b:27:19:93:68:07:3b:4c:bb:08:13:fe:6a:22:3b: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:59:BE:6D:76:FD:C9:D2:C4:88:62:C5:53:D3:D6:35:9D:CA:B3:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/79131f5d-781c-3098-bc49-84c4e9a80675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.crl X509v3 Authority Key Identifier: keyid:86:71:B7:E8:8F:DC:7C:88:5B:AD:20:88:49:E1:FF:04:19:E5:7B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3e9ca003-d1bd-4848-a9c8-2b65aeba6342.cer sbgp-ipAddrBlock: critical IPv4: 23.137.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c8:70:8c:16:35:b8:ed:b9:14:37:b7:d9:d7:a1:3a:2e:02: be:7c:92:bf:8c:91:d1:e2:71:55:bd:59:03:be:a7:90:d2:81: 88:c3:bb:2e:06:d3:81:0b:bb:e2:d5:47:38:9e:46:6b:29:ba: d7:a1:9d:90:4a:3c:92:bb:e5:a9:02:07:80:86:45:1a:c3:6e: a6:81:c1:85:f0:d0:55:11:61:c7:8e:44:7c:a1:25:07:e0:a7: 96:77:7e:af:8b:1f:80:69:5a:42:d2:41:a9:5a:e1:60:a0:71: 08:ef:45:f9:4d:20:36:45:fb:6c:be:a4:66:2d:4c:77:fe:12: ad:e8:29:e4:38:34:24:9a:17:5b:8b:a7:c9:0d:d1:ba:18:4e: 43:35:00:82:0d:4f:a2:28:ca:5e:87:9c:19:6f:7c:2a:64:15: 61:df:e2:de:97:fc:09:f7:4c:47:fe:90:9b:11:bf:08:0e:d0: a3:b6:c7:ee:f0:2c:f0:6f:f0:29:c6:c7:78:5c:4b:b0:2d:ff: 2d:f2:c5:cf:ed:78:25:cc:11:8d:d5:27:b5:0e:fe:03:26:c5: 10:2e:df:66:f1:b0:f6:73:68:9b:c3:e7:b9:e3:2c:b4:c5:7c: f4:7d:3d:27:dd:bd:2e:3d:90:20:04:9d:e8:a9:f9:dd:a4:d0: cc:36:bf:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqIrM9cENvAREAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5Y2EwMDMtZDFiZC00ODQ4LWE5YzgtMmI2NWFlYmE2 MzQyMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZGY3N2UwZmMtNDQ3My00ZGM5LTk4MTEtNWI4Njk1MGY5NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlicLCxUp+qB5fzT+5jJ3F4y06NK02N6gOFy8 l5gJc9f4UfzIMGkRAfcqQmMcHjzRPPxiYIYqxkO2+17vt0DjGytxHMeIlBmkkXVE kjt40gcRm4DMDhf5QM2/WNF+rxM22kML/7IB7Tq0RUYVgzP6gRs11ELrUw9KAt3L NHTfFYjlms8PgaCpRbu5T7oKHSJCHCipk0WKKHTA8nv5yuv2kr+6TyXyVW1KFPBJ 798sWseSSzxroKu1O9I56oud3FOIaEA68G7+qCBXda8Zp812Ta9/ynk5pbbfVKhe 8jyzi+hmJAO/RqzTzFn37kPpZAZLJxmTaAc7TLsIE/5qIjv/cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1Zvm12/cnSxIhixVPT1jWdyrO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zZTlj YTAwMy1kMWJkLTQ4NDgtYTljOC0yYjY1YWViYTYzNDIvNzkxMzFmNWQtNzgxYy0z MDk4LWJjNDktODRjNGU5YTgwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2U5Y2EwMDMtZDFiZC00ODQ4LWE5 YzgtMmI2NWFlYmE2MzQyLzNlOWNhMDAzLWQxYmQtNDg0OC1hOWM4LTJiNjVhZWJh NjM0Mi5jcmwwHwYDVR0jBBgwFoAUhnG36I/cfIhbrSCISeH/BBnle8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zZTljYTAwMy1kMWJkLTQ4NDgtYTljOC0yYjY1 YWViYTYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4nYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzIcIwWNbjtuRQ3t9nXoTouAr58kr+MkdHicVW9WQO+p5DSgYjDuy4G 04ELu+LVRzieRmsputehnZBKPJK75akCB4CGRRrDbqaBwYXw0FURYceORHyhJQfg p5Z3fq+LH4BpWkLSQala4WCgcQjvRflNIDZF+2y+pGYtTHf+Eq3oKeQ4NCSaF1uL p8kN0boYTkM1AIINT6Ioyl6HnBlvfCpkFWHf4t6X/An3TEf+kJsRvwgO0KO2x+7w LPBv8CnGx3hcS7At/y3yxc/teCXMEY3VJ7UO/gMmxRAu32bxsPZzaJvD57njLLTF fPR9PSfdvS49kCAEneip+d2k0Mw2v7g= -----END CERTIFICATE-----Generated at Sun Nov 2 11:32:05 2025 by rpki-client