$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/3964af05-8f41-3757-ad9c-16b99f15cc39.roa File: 3964af05-8f41-3757-ad9c-16b99f15cc39.roa (raw, json) Hash identifier: B7InVeo7kREFxyIVqaAsFhG5hWpyKfCK4gONjH0mkJw= Subject key identifier: A3:02:49:37:41:65:4B:2C:93:8F:18:06:FB:91:42:86:ED:B7:90:41 Certificate issuer: /CN=a7bb872d-e597-498e-8bd5-d2efae320554 Certificate serial: 010D0C9F4328584AFC1C1EA2AD26BCA39C402580 Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/3964af05-8f41-3757-ad9c-16b99f15cc39.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 62890 IP address blocks: 23.145.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1e:a2:ad:26:bc:a3:9c:40:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=dbe58ba7-5855-4342-8dc5-051d91be8c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:13:c2:ee:60:83:8e:8d:66:64:af:b6:81: 00:a1:26:97:05:7c:9c:74:9e:5e:40:2e:a4:ef:b2: a1:07:5c:5b:39:b2:c6:d4:20:09:16:ba:a2:40:61: 04:fa:c3:3a:02:ee:cc:f8:66:28:c2:49:77:fa:67: 20:3c:88:d0:30:bd:3d:b0:31:15:3a:2e:b4:98:ee: b1:0e:30:bd:91:40:68:62:1e:88:4a:65:33:13:a9: 95:85:97:4a:12:29:37:ce:12:69:cd:85:46:54:ca: d3:c0:1a:fa:0b:49:0d:43:b8:26:b0:fb:6f:9b:2e: de:8c:e8:d5:a6:e7:1e:35:f1:54:cc:82:e8:03:b5: 7e:39:8b:2a:2c:4c:c6:59:b2:24:a9:41:1e:e4:c7: 4a:6f:ae:9a:13:48:22:a7:4d:1e:c2:96:b0:0c:ac: 53:79:f2:4f:f0:14:ee:bc:f6:9d:f5:86:40:7f:f2: e4:e8:3c:e4:4e:f8:c0:a9:20:36:f1:81:d3:c4:1a: f4:3e:3f:d2:f4:6c:14:b8:94:01:08:a1:7b:6f:7f: 2d:e5:ea:62:dc:89:6c:0a:ef:db:28:de:94:ed:e2: 9d:33:ba:62:00:7f:45:32:b0:46:25:a1:c9:3c:9b: 9f:95:c5:44:df:fe:f8:21:39:5e:7f:74:2f:b2:92: 95:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:02:49:37:41:65:4B:2C:93:8F:18:06:FB:91:42:86:ED:B7:90:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/3964af05-8f41-3757-ad9c-16b99f15cc39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl X509v3 Authority Key Identifier: keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer sbgp-ipAddrBlock: critical IPv4: 23.145.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c7:e0:af:eb:21:ed:ea:b5:2a:80:4b:42:10:33:1b:d8:00: b5:ee:10:de:c4:95:e4:4b:3b:56:b9:c3:e6:82:2a:d2:2e:d7: d1:52:47:b3:77:82:fd:48:2f:95:d5:fb:cb:3b:bb:ac:08:07: 48:e7:b2:61:92:fc:a3:ef:31:da:47:96:e2:6c:37:c2:94:d4: a7:17:62:ab:95:03:ae:97:bc:79:4b:6c:45:f9:7c:24:06:43: 59:62:ff:49:a8:4d:68:82:76:fd:9e:ad:9f:94:57:83:f7:92: 45:e1:82:91:f8:ed:9f:13:2a:93:33:7c:69:d6:fc:06:fa:ad: 11:a6:db:8e:2c:9c:58:6a:03:0b:16:1f:03:5c:85:61:db:21: f8:7e:70:22:3f:69:16:f0:8d:60:91:c2:3a:a4:93:8d:30:b0: c7:72:3b:1d:26:a7:75:93:3c:db:ab:f2:1d:cc:f3:7c:b0:7a: c0:81:df:6a:75:4f:86:9b:8b:08:f7:dd:19:52:9b:a6:9a:c8: e7:2a:fa:96:37:55:31:b4:27:e5:80:b4:5f:ce:6e:0e:17:8c: 13:c1:d5:81:67:67:fa:a1:80:53:9c:b6:e0:5b:60:0d:3b:17: da:9b:ca:76:fc:21:00:f8:e1:3d:06:88:4e:6d:e7:ba:07:b6: 40:d1:20:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HB6irSa8o5xAJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdiYjg3MmQtZTU5Ny00OThlLThiZDUtZDJlZmFlMzIw NTU0MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGJlNThiYTctNTg1NS00MzQyLThkYzUtMDUxZDkxYmU4Yzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaITwu5gg46NZmSvtoEAoSaXBXycdJ5eQC6k 77KhB1xbObLG1CAJFrqiQGEE+sM6Au7M+GYowkl3+mcgPIjQML09sDEVOi60mO6x DjC9kUBoYh6ISmUzE6mVhZdKEik3zhJpzYVGVMrTwBr6C0kNQ7gmsPtvmy7ejOjV puceNfFUzILoA7V+OYsqLEzGWbIkqUEe5MdKb66aE0gip00ewpawDKxTefJP8BTu vPad9YZAf/Lk6DzkTvjAqSA28YHTxBr0Pj/S9GwUuJQBCKF7b38t5epi3IlsCu/b KN6U7eKdM7piAH9FMrBGJaHJPJuflcVE3/74ITlef3QvspKVLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMCSTdBZUssk48YBvuRQobtt5BBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hN2Ji ODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVmYWUzMjA1NTQvMzk2NGFmMDUtOGY0MS0z NzU3LWFkOWMtMTZiOTlmMTVjYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYTdiYjg3MmQtZTU5Ny00OThlLThi ZDUtZDJlZmFlMzIwNTU0L2E3YmI4NzJkLWU1OTctNDk4ZS04YmQ1LWQyZWZhZTMy MDU1NC5jcmwwHwYDVR0jBBgwFoAUC8EfTnl51j+L4kq4T5khA3lCaX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hN2JiODcyZC1lNTk3LTQ5OGUtOGJkNS1kMmVm YWUzMjA1NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5FoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLH4K/rIe3qtSqAS0IQMxvYALXuEN7EleRLO1a5w+aCKtIu19FSR7N3 gv1IL5XV+8s7u6wIB0jnsmGS/KPvMdpHluJsN8KU1KcXYquVA66XvHlLbEX5fCQG Q1li/0moTWiCdv2erZ+UV4P3kkXhgpH47Z8TKpMzfGnW/Ab6rRGm244snFhqAwsW HwNchWHbIfh+cCI/aRbwjWCRwjqkk40wsMdyOx0mp3WTPNur8h3M83ywesCB32p1 T4abiwj33RlSm6aayOcq+pY3VTG0J+WAtF/Obg4XjBPB1YFnZ/qhgFOctuBbYA07 F9qbynb8IQD44T0GiE5t57oHtkDRIIY= -----END CERTIFICATE-----Generated at Sat Sep 13 23:16:34 2025 by rpki-client