$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa File: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json) Hash identifier: lmaTFWvzavA9uFBL1C4JKHXylBcWzhbYpDdBAqSuAP8= Subject key identifier: 89:CE:22:8A:CE:02:F8:A5:96:76:78:2E:76:9F:D2:C9:90:CC:28:32 Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Certificate serial: 010D0C9F4328584B3821977E1AC8951B14302800 Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 62516 IP address blocks: 23.140.104.0/24 maxlen: 32 2604:4940::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:97:7e:1a:c8:95:1b:14:30:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=1d2ffccc-814e-4cd7-8a9d-9130976efb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:fc:e4:05:4c:75:3e:65:a4:aa:55:e1:2d: b0:bf:45:f8:20:11:cf:66:a3:c2:bf:10:b0:55:ea: a5:c8:cd:a8:ea:a1:37:1d:d2:61:32:b0:5f:e1:15: 88:81:f1:fb:ad:17:a9:72:88:dd:22:03:e7:ae:b5: 20:3e:db:84:ed:01:6d:80:b3:69:6c:49:ac:ed:11: 6c:26:8b:e0:c0:cc:c3:d1:10:a8:84:43:6b:d0:71: d0:bb:c1:00:32:a4:a9:9c:3a:6c:82:30:f3:d6:97: 02:73:51:b6:0c:bc:f4:24:fe:1c:f9:45:4b:b7:d7: 0d:1a:88:c3:2e:4c:92:0f:fa:a8:54:29:46:01:8d: 92:41:c3:eb:f0:1f:c9:5d:47:9e:1c:79:3a:3c:14: 5f:76:82:68:89:6a:93:00:4b:ca:1a:87:33:d6:bb: e0:d0:d3:38:54:4a:c5:de:3a:c5:35:d1:73:a2:02: 73:62:bc:56:72:61:63:84:20:83:12:73:1f:57:00: c4:98:b0:41:2b:60:7f:d4:2a:b6:88:90:9b:06:3b: ec:ab:48:eb:64:1d:86:2e:69:ff:70:91:78:6e:cf: 97:d5:34:85:e4:f7:8f:d5:4c:20:88:53:f3:25:e5: fd:f2:fd:88:78:25:99:02:47:c3:19:c0:b5:33:ec: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CE:22:8A:CE:02:F8:A5:96:76:78:2E:76:9F:D2:C9:90:CC:28:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl X509v3 Authority Key Identifier: keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer sbgp-ipAddrBlock: critical IPv4: 23.140.104.0/24 IPv6: 2604:4940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d7:ec:fc:e8:af:1a:30:f7:86:8d:45:79:be:f4:12:5a:a6: c9:29:b5:26:e1:99:36:ee:4f:f6:d7:a0:c1:5f:b5:09:e5:6b: 91:44:5f:e9:80:d0:5b:9b:9b:3f:4f:b6:2e:47:ed:e9:73:a4: 40:d8:5f:01:9c:f8:24:67:0b:7e:47:f7:fe:42:cb:23:85:0b: e4:8c:35:47:2d:27:83:36:9b:36:98:2c:ee:84:c8:57:5c:b8: 93:96:74:af:8e:fc:20:30:75:bf:e2:68:24:97:d4:05:c7:0d: a0:2b:29:a4:15:2d:51:ec:34:99:4b:91:57:e4:80:38:2d:37: 4a:0f:54:29:d4:b1:cc:66:ab:55:17:76:79:5d:4f:1b:4e:a7: 32:84:20:5e:9f:67:7d:b1:2b:4d:d6:10:4d:24:f7:62:20:ad: ec:3a:49:5b:a6:09:85:ba:1e:83:15:d8:9f:ab:ac:fb:2d:46: 53:11:9b:d2:64:0f:d8:73:e8:0b:fd:43:b1:d2:7b:63:0a:13: f6:63:4a:e8:b2:54:01:de:38:a0:96:b8:62:a6:1e:89:66:c3: 73:b8:6e:3b:02:c3:78:d7:95:83:06:25:b9:89:67:af:7b:b0: b4:53:46:d7:cd:5a:1f:7d:0f:f1:35:53:fa:56:a6:2e:05:2f: c0:76:95:f3 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEs4IZd+GsiVGxQwKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZkNWYzNWQtNWIwMi00ODRhLThlMGUtYTczMGFiZDk4 ZmEyMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MWQyZmZjY2MtODE0ZS00Y2Q3LThhOWQtOTEzMDk3NmVmYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6n85AVMdT5lpKpV4S2wv0X4IBHPZqPCvxCw VeqlyM2o6qE3HdJhMrBf4RWIgfH7rRepcojdIgPnrrUgPtuE7QFtgLNpbEms7RFs JovgwMzD0RCohENr0HHQu8EAMqSpnDpsgjDz1pcCc1G2DLz0JP4c+UVLt9cNGojD LkySD/qoVClGAY2SQcPr8B/JXUeeHHk6PBRfdoJoiWqTAEvKGocz1rvg0NM4VErF 3jrFNdFzogJzYrxWcmFjhCCDEnMfVwDEmLBBK2B/1Cq2iJCbBjvsq0jrZB2GLmn/ cJF4bs+X1TSF5PeP1UwgiFPzJeX98v2IeCWZAkfDGcC1M+ytFwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFInOIorOAvillnZ4Lnaf0smQzCgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1 ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMwYWJkOThmYTIvOTdhOTAyM2MtM2I2ZS0z MTU4LTg5ZDgtZWZlNjMwMDFmNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGZkNWYzNWQtNWIwMi00ODRhLThl MGUtYTczMGFiZDk4ZmEyL2RmZDVmMzVkLTViMDItNDg0YS04ZTBlLWE3MzBhYmQ5 OGZhMi5jcmwwHwYDVR0jBBgwFoAUGqPjaFCuyycxWd2nix8QwlkQm0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZmQ1ZjM1ZC01YjAyLTQ4NGEtOGUwZS1hNzMw YWJkOThmYTIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4xoMA0E AgACMAcDBQAmBElAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAELX7Pzorxow94aNRXm+9BJapskptSbhmTbu T/bXoMFftQnla5FEX+mA0Fubmz9Pti5H7elzpEDYXwGc+CRnC35H9/5CyyOFC+SM NUctJ4M2mzaYLO6EyFdcuJOWdK+O/CAwdb/iaCSX1AXHDaArKaQVLVHsNJlLkVfk gDgtN0oPVCnUscxmq1UXdnldTxtOpzKEIF6fZ32xK03WEE0k92Igrew6SVumCYW6 HoMV2J+rrPstRlMRm9JkD9hz6Av9Q7HSe2MKE/ZjSuiyVAHeOKCWuGKmHolmw3O4 bjsCw3jXlYMGJbmJZ697sLRTRtfNWh99D/E1U/pWpi4FL8B2lfM= -----END CERTIFICATE-----Generated at Wed Oct 15 22:30:22 2025 by rpki-client