$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa File: dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (raw, json) Hash identifier: O4KdQ/xbAkRHMLUccr+zms1fah0SYRXJdkjLJuXC1zc= Subject key identifier: AA:3F:6E:F0:94:CD:FD:CE:BB:2C:5E:05:8B:E1:0F:31:43:12:B7:EF Certificate issuer: /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Certificate serial: 010D0C9F4328584B821CCE6C4DADC694083C99E0 Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 396935 IP address blocks: 23.135.48.0/24 maxlen: 24 2602:fdd9::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:ce:6c:4d:ad:c6:94:08:3c:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=1ed04d61-6813-4259-9aba-7b5d55082f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:b1:24:91:98:15:1a:23:38:f6:2e:20:b9: 18:99:58:10:40:c3:e7:34:37:c4:aa:79:62:2b:ff: 90:4c:03:9f:91:dc:70:01:07:1f:61:b3:50:83:7d: 8a:fc:1a:54:26:2d:bb:c8:dc:30:a5:b1:2a:0c:8e: 7e:30:99:8e:46:32:a6:9d:09:16:90:79:b3:26:15: d2:4e:a1:be:09:5c:ac:e3:9d:08:5b:ab:7a:a3:4f: 29:4e:0e:63:a0:58:fe:c6:c2:28:5f:4c:15:17:95: ca:c8:fe:a8:27:f6:6a:be:0e:56:cd:fb:00:4b:b0: 35:7d:12:25:a6:a7:d7:ce:d8:f7:78:60:90:9e:c4: 84:c9:f2:d3:02:89:e1:2a:90:55:89:3f:a0:c5:c0: 34:ab:07:5f:5b:9f:d7:35:01:35:f9:ad:48:92:08: 5a:6e:3f:ec:70:6e:d3:88:e6:a1:0a:02:97:c3:7c: 11:cc:5c:af:dd:62:d4:72:17:96:74:55:dc:79:b3: 46:d7:3e:c8:b3:ab:24:25:46:25:22:66:64:a5:e4: 76:ad:4b:c2:75:dd:00:2e:69:f2:56:00:6a:7b:68: 2a:e4:ec:7f:76:79:5c:0e:c3:13:57:f7:52:7a:4a: 29:3f:49:63:46:a8:18:c2:5f:b7:ab:ba:00:3e:39: a2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3F:6E:F0:94:CD:FD:CE:BB:2C:5E:05:8B:E1:0F:31:43:12:B7:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl X509v3 Authority Key Identifier: keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer sbgp-ipAddrBlock: critical IPv4: 23.135.48.0/24 IPv6: 2602:fdd9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:dc:1b:0f:08:fd:c2:47:b6:28:dc:23:cf:4d:6c:23:e8:ed: b5:3f:a7:ba:5f:20:0b:4d:b2:e8:ca:c3:97:16:12:b1:e5:59: ba:a9:e2:31:69:09:65:b6:7c:54:f6:1d:69:47:81:58:e6:0f: f6:e4:6e:ff:6a:87:c7:f8:25:af:07:95:45:2d:bf:45:ad:01: 59:35:ed:3e:95:99:12:c8:a4:af:70:52:08:e2:8b:8f:46:dd: 41:5f:0b:4d:4f:09:1e:73:ef:0e:b4:b3:fe:05:ab:c4:b9:f3: bd:80:19:02:f3:c4:5d:09:41:ec:6a:8e:d3:3a:c2:ca:67:9c: f2:59:86:65:a5:11:ce:db:6f:0e:9c:9b:24:9a:09:4f:c4:21: 35:47:47:a9:e3:2f:5c:bf:31:da:d4:fb:c8:d9:d4:8d:d6:ce: 85:ba:19:15:cc:96:ba:7c:b5:43:1b:a9:2f:a4:e3:3c:0f:56: b6:1d:37:53:ce:cc:ac:7d:97:64:f8:e3:b9:9e:45:06:df:14: fe:6c:0d:cc:e1:c0:bb:14:c4:2c:73:03:3c:31:af:25:8d:4d: d8:cb:ed:61:e2:64:a7:53:5b:b7:34:e6:bc:2c:2a:23:48:79: 00:7c:4d:58:ca:e1:32:1c:3c:28:1d:c1:71:f1:7c:9f:d9:4b: 44:5c:1e:3b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuCHM5sTa3GlAg8meAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUx Yzk5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MWVkMDRkNjEtNjgxMy00MjU5LTlhYmEtN2I1ZDU1MDgyZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX2xJJGYFRojOPYuILkYmVgQQMPnNDfEqnli K/+QTAOfkdxwAQcfYbNQg32K/BpUJi27yNwwpbEqDI5+MJmORjKmnQkWkHmzJhXS TqG+CVys450IW6t6o08pTg5joFj+xsIoX0wVF5XKyP6oJ/Zqvg5WzfsAS7A1fRIl pqfXztj3eGCQnsSEyfLTAonhKpBViT+gxcA0qwdfW5/XNQE1+a1Ikghabj/scG7T iOahCgKXw3wRzFyv3WLUcheWdFXcebNG1z7Is6skJUYlImZkpeR2rUvCdd0ALmny VgBqe2gq5Ox/dnlcDsMTV/dSekopP0ljRqgYwl+3q7oAPjmiaQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKo/bvCUzf3OuyxeBYvhDzFDErfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZDk1 OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvZGM5MzQwZDQtMTA2NS0z YjA4LTgzMjgtY2ZjN2EwZjU5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGQ5NThjNDctYzE4Zi00NmUyLWEz YzMtZWQ0YmEyOWUxYzk5LzhkOTU4YzQ3LWMxOGYtNDZlMi1hM2MzLWVkNGJhMjll MWM5OS5jcmwwHwYDVR0jBBgwFoAU81JdyNStSz3Ob5qF+sRRU2En/yQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRi YTI5ZTFjOTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4cwMA4E AgACMAgDBgQmAv3ZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/3BsPCP3CR7Yo3CPPTWwj6O21P6e6XyAL TbLoysOXFhKx5Vm6qeIxaQlltnxU9h1pR4FY5g/25G7/aofH+CWvB5VFLb9FrQFZ Ne0+lZkSyKSvcFII4ouPRt1BXwtNTwkec+8OtLP+BavEufO9gBkC88RdCUHsao7T OsLKZ5zyWYZlpRHO228OnJskmglPxCE1R0ep4y9cvzHa1PvI2dSN1s6FuhkVzJa6 fLVDG6kvpOM8D1a2HTdTzsysfZdk+OO5nkUG3xT+bA3M4cC7FMQscwM8Ma8ljU3Y y+1h4mSnU1u3NOa8LCojSHkAfE1YyuEyHDwoHcFx8Xyf2UtEXB47 -----END CERTIFICATE-----Generated at Mon Nov 3 08:31:19 2025 by rpki-client