$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa File: e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa (raw, json) Hash identifier: cLAKZjfCvb7Fz8Q4J90aZlkT8sx+WTPvw25VHG5F9Os= Subject key identifier: 66:0B:C4:3A:FB:20:63:B9:D9:B9:C4:34:34:44:C4:77:35:39:7A:6F Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584B004BE7B1EF317C7EC2214980 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 23.234.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e7:b1:ef:31:7c:7e:c2:21:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=d970ab5f-95ba-453f-aa0f-0cbca71d5759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d1:ae:11:0f:ef:71:9a:e1:df:62:95:94:bc: 81:39:54:18:7b:47:b4:24:39:37:e3:9d:c4:84:bb: a3:aa:e1:ca:c4:29:32:4f:b9:1f:7c:39:d2:e9:eb: 28:41:3f:18:79:1a:bf:65:47:37:9c:38:b4:e3:4b: f2:ab:0d:6c:49:88:24:5b:33:73:0b:e6:46:ee:63: 05:be:cc:2e:ce:4f:df:fd:5a:bb:75:e5:67:e0:e9: cc:9a:e7:8f:87:73:a4:f9:21:2a:fe:6e:3a:0e:79: 47:d4:47:bd:42:e5:51:b4:54:cc:4e:29:df:e9:8b: 10:19:44:88:ec:db:c0:50:e5:55:e3:11:88:9c:e7: 03:c5:7a:ae:3c:52:ba:60:68:d1:92:03:d2:a9:18: c3:27:7d:42:7c:0b:96:8f:22:78:d4:2b:92:70:60: 49:87:36:c4:ee:0b:c8:11:18:8f:83:3f:cb:1e:0d: ec:e5:88:67:c9:8c:a7:7f:c8:00:7b:ff:6b:8c:f7: 2d:c6:fa:e8:98:48:af:07:61:7a:20:3d:f7:1a:e4: b4:a0:02:96:77:6f:0e:14:6e:e8:03:d2:08:d1:c6: b5:04:86:0e:2b:f6:0a:4d:3e:34:f0:64:32:a6:47: 46:2e:bc:de:9b:c2:3f:3c:68:19:52:4c:5d:fd:5f: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0B:C4:3A:FB:20:63:B9:D9:B9:C4:34:34:44:C4:77:35:39:7A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/e2175a98-8268-3e0e-89c4-e7ff0ad248d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:07:c4:03:95:c3:40:f4:47:83:c7:fc:ef:5e:d4:47:f4:87: f2:41:fb:50:69:75:b2:96:d8:81:fc:d3:c2:f7:48:a2:80:32: fc:a1:6b:28:46:e7:fb:c3:c7:21:2c:03:4e:81:d2:f6:a5:2f: f5:67:e6:e4:65:90:bd:bf:45:18:f3:08:7e:3f:f4:5e:a1:ca: f3:1e:88:25:df:d8:3f:7c:5d:7c:71:9c:b7:5f:2d:c8:15:b7: f2:3c:81:71:2e:8e:1e:eb:eb:b0:d3:f2:50:45:d1:89:02:cb: 78:80:6e:79:65:4a:e2:d9:c7:cd:72:4e:a9:cf:a8:68:f8:f6: 39:fe:09:7a:63:99:4d:29:19:40:58:57:b0:86:f3:bd:f9:49: c8:d3:17:ca:13:8c:17:da:0d:7b:ec:31:22:64:e2:85:b0:89: 5a:23:b5:53:54:e4:39:7f:44:8c:00:be:6e:87:ea:d5:ad:97: 9d:2c:81:a4:02:30:43:f9:8b:5f:e2:57:50:5c:23:e7:7d:a4: 44:df:fd:4e:cc:13:05:4a:aa:69:9f:ff:13:61:17:40:8a:92: e9:26:d3:e8:91:34:8a:5e:b0:8f:2f:a9:2a:90:3b:9d:43:c2: 5b:f4:27:6f:c5:19:e7:27:74:17:ae:12:8f:8b:7f:1b:f0:e6: cf:27:15:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+ex7zF8fsIhSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDk3MGFiNWYtOTViYS00NTNmLWFhMGYtMGNiY2E3MWQ1NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtGuEQ/vcZrh32KVlLyBOVQYe0e0JDk3453E hLujquHKxCkyT7kffDnS6esoQT8YeRq/ZUc3nDi040vyqw1sSYgkWzNzC+ZG7mMF vswuzk/f/Vq7deVn4OnMmuePh3Ok+SEq/m46DnlH1Ee9QuVRtFTMTinf6YsQGUSI 7NvAUOVV4xGInOcDxXquPFK6YGjRkgPSqRjDJ31CfAuWjyJ41CuScGBJhzbE7gvI ERiPgz/LHg3s5YhnyYynf8gAe/9rjPctxvromEivB2F6ID33GuS0oAKWd28OFG7o A9II0ca1BIYOK/YKTT408GQypkdGLrzem8I/PGgZUkxd/V8RzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYLxDr7IGO52bnENDRExHc1OXpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZTIxNzVhOTgtODI2OC0z ZTBlLTg5YzQtZTdmZjBhZDI0OGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwHxAOVw0D0R4PH/O9e1Ef0h/JB+1BpdbKW2IH808L3SKKAMvyhayhG 5/vDxyEsA06B0valL/Vn5uRlkL2/RRjzCH4/9F6hyvMeiCXf2D98XXxxnLdfLcgV t/I8gXEujh7r67DT8lBF0YkCy3iAbnllSuLZx81yTqnPqGj49jn+CXpjmU0pGUBY V7CG8735ScjTF8oTjBfaDXvsMSJk4oWwiVojtVNU5Dl/RIwAvm6H6tWtl50sgaQC MEP5i1/iV1BcI+d9pETf/U7MEwVKqmmf/xNhF0CKkukm0+iRNIpesI8vqSqQO51D wlv0J2/FGecndBeuEo+Lfxvw5s8nFTI= -----END CERTIFICATE-----Generated at Fri Oct 24 09:53:42 2025 by rpki-client