$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa File: a3325f5a-465e-3622-a353-ec026e3ae096.roa (raw, json) Hash identifier: 6cXyioJatLDuWsFHOx13DXhDwAXM36fQTzEfcX/LYyE= Subject key identifier: C4:91:E5:28:F0:78:D7:0E:A2:B8:66:08:1C:CB:3D:70:28:D7:88:CD Certificate issuer: /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Certificate serial: 010D0C9F4328584B99D7877F833D0217E903F380 Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 7065 IP address blocks: 23.93.0.0/16 maxlen: 24 50.0.0.0/15 maxlen: 24 64.142.0.0/17 maxlen: 24 69.12.128.0/17 maxlen: 24 70.36.128.0/17 maxlen: 24 75.101.0.0/17 maxlen: 24 76.191.128.0/17 maxlen: 24 107.156.0.0/15 maxlen: 24 108.169.0.0/17 maxlen: 24 135.180.0.0/16 maxlen: 24 142.254.0.0/17 maxlen: 24 157.131.0.0/16 maxlen: 24 173.228.0.0/17 maxlen: 24 184.23.0.0/16 maxlen: 24 192.184.128.0/17 maxlen: 24 198.27.128.0/17 maxlen: 24 199.245.68.0/24 maxlen: 24 208.106.0.0/17 maxlen: 24 209.148.96.0/19 maxlen: 24 209.204.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:87:7f:83:3d:02:17:e9:03:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d1db64d0-293f-4a84-b6fa-4388de93d8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:f0:b0:c1:83:3c:da:9e:d2:ed:c8:ae:62: be:02:7b:57:a6:a1:62:c5:f1:f4:41:e9:10:ed:38: 45:5e:9a:b1:e0:c2:1e:3c:e4:36:eb:26:87:79:c2: 01:d9:aa:2a:58:c6:80:fe:0a:b8:9f:5c:42:34:29: 51:b4:54:31:82:02:97:87:05:52:d1:df:1a:98:72: b0:c5:c8:f8:3f:f6:aa:01:8d:4e:28:df:68:0d:9d: 22:2f:f6:31:fb:bd:60:40:40:05:83:7f:94:7b:a3: 41:3c:06:25:72:cb:90:f4:d5:b6:43:19:64:c8:50: d8:97:2f:d2:64:3b:5a:24:cd:bd:c8:7f:04:82:11: b3:49:41:00:1b:a6:f9:f4:a2:a5:fa:d4:ae:80:93: 34:72:ac:42:f8:5d:c6:4a:d6:c8:f8:f1:56:f8:4a: 6e:cb:ef:6b:7c:bf:a8:76:0f:d6:4d:0d:65:37:36: 1c:04:4b:9a:f7:90:3f:fa:d2:0b:b8:7f:c3:cd:ab: 5a:bd:9c:de:09:e1:2c:f8:6a:5e:cc:9e:0e:61:7e: 4e:72:69:f2:65:b8:01:2d:ce:48:59:a6:57:8e:dd: fc:8a:5a:24:25:18:3f:46:aa:10:f3:7d:ea:5d:92: 9d:60:f5:8b:c2:06:bc:92:45:f9:cd:7d:4b:f1:32: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:91:E5:28:F0:78:D7:0E:A2:B8:66:08:1C:CB:3D:70:28:D7:88:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/a3325f5a-465e-3622-a353-ec026e3ae096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl X509v3 Authority Key Identifier: keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer sbgp-ipAddrBlock: critical IPv4: 23.93.0.0/16 50.0.0.0/15 64.142.0.0/17 69.12.128.0/17 70.36.128.0/17 75.101.0.0/17 76.191.128.0/17 107.156.0.0/15 108.169.0.0/17 135.180.0.0/16 142.254.0.0/17 157.131.0.0/16 173.228.0.0/17 184.23.0.0/16 192.184.128.0/17 198.27.128.0/17 199.245.68.0/24 208.106.0.0/17 209.148.96.0/19 209.204.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:86:32:bb:af:60:b0:68:ea:d7:90:65:46:5d:78:77:70:fa: cd:b0:73:e5:14:b5:04:bd:9e:ff:8b:29:e4:22:35:36:62:12: 23:69:bb:01:56:5b:0d:99:75:26:5e:97:6c:8b:83:ca:d4:e1: 39:04:fa:d9:c1:8f:cb:6d:41:ad:7d:9c:ea:cd:7a:1b:93:6f: cd:3c:d3:7c:8a:c6:c0:82:ef:60:3e:d9:c1:44:36:cf:e3:f0: 67:56:36:16:26:0c:c2:c9:7a:bc:21:94:bf:4a:a0:26:64:be: ef:27:0d:7e:78:51:f3:19:05:67:1b:6b:e8:69:31:26:36:0d: 1c:30:6d:8a:e6:e8:63:b1:9a:6b:3b:da:c1:05:4f:4e:19:79: 01:98:75:95:52:bb:eb:0c:a6:82:b8:b9:c8:14:7c:fc:87:fe: 80:bc:fa:90:8e:4b:57:8e:1c:49:75:0b:85:fc:62:ce:1d:9a: 1f:5a:67:28:46:e2:19:eb:7c:96:82:6c:1a:68:c1:de:f0:c1: da:ae:18:14:2c:35:32:74:2d:e5:9b:8a:ee:53:7e:4b:cb:b2: 8d:e9:6c:ad:4b:dc:ac:05:b6:83:d4:2b:f1:b6:67:7c:f3:83: 3a:a0:8e:ba:16:f6:e7:f3:5f:8e:1f:51:cc:33:35:b1:d8:d5: 88:34:c1:4e -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIUAQ0Mn0MoWEuZ14d/gz0CF+kD84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU5ZjRhMWYtMTM3MS00ZjNmLWIyOTEtNjllYWJmOGJi MDg3MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDFkYjY0ZDAtMjkzZi00YTg0LWI2ZmEtNDM4OGRlOTNkOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRHwsMGDPNqe0u3IrmK+AntXpqFixfH0QekQ 7ThFXpqx4MIePOQ26yaHecIB2aoqWMaA/gq4n1xCNClRtFQxggKXhwVS0d8amHKw xcj4P/aqAY1OKN9oDZ0iL/Yx+71gQEAFg3+Ue6NBPAYlcsuQ9NW2QxlkyFDYly/S ZDtaJM29yH8EghGzSUEAG6b59KKl+tSugJM0cqxC+F3GStbI+PFW+Epuy+9rfL+o dg/WTQ1lNzYcBEua95A/+tILuH/DzatavZzeCeEs+GpezJ4OYX5OcmnyZbgBLc5I WaZXjt38ilokJRg/RqoQ833qXZKdYPWLwga8kkX5zX1L8TLjqQIDAQABo4IDwjCC A74wHQYDVR0OBBYEFMSR5SjweNcOorhmCBzLPXAo14jNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlm NGExZi0xMzcxLTRmM2YtYjI5MS02OWVhYmY4YmIwODcvYTMzMjVmNWEtNDY1ZS0z NjIyLWEzNTMtZWMwMjZlM2FlMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmU5ZjRhMWYtMTM3MS00ZjNmLWIy OTEtNjllYWJmOGJiMDg3L2JlOWY0YTFmLTEzNzEtNGYzZi1iMjkxLTY5ZWFiZjhi YjA4Ny5jcmwwHwYDVR0jBBgwFoAULwwCufh39B5QfFnfYu1eKPkJXfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTlmNGExZi0xMzcxLTRmM2YtYjI5MS02OWVh YmY4YmIwODcuY2VyMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMDABddAwMB MgADBAdAjgADBAdFDIADBAdGJIADBAdLZQADBAdMv4ADAwFrnAMEB2ypAAMDAIe0 AwQHjv4AAwMAnYMDBAet5AADAwC4FwMEB8C4gAMEB8YbgAMEAMf1RAMEB9BqAAME BdGUYAMEBtHMgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlhjK7r2CwaOrXkGVGXXh3cPrNsHPlFLUEvZ7/ iynkIjU2YhIjabsBVlsNmXUmXpdsi4PK1OE5BPrZwY/LbUGtfZzqzXobk2/NPNN8 isbAgu9gPtnBRDbP4/BnVjYWJgzCyXq8IZS/SqAmZL7vJw1+eFHzGQVnG2voaTEm Ng0cMG2K5uhjsZprO9rBBU9OGXkBmHWVUrvrDKaCuLnIFHz8h/6AvPqQjktXjhxJ dQuF/GLOHZofWmcoRuIZ63yWgmwaaMHe8MHarhgULDUydC3lm4ruU35Ly7KN6Wyt S9ysBbaD1Cvxtmd884M6oI66Fvbn81+OH1HMMzWx2NWINMFO -----END CERTIFICATE-----Generated at Fri Oct 24 08:44:33 2025 by rpki-client