$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa File: b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa (raw, json) Hash identifier: vz0btkaCnNQo53KdwYv5YFsYetarMeRyPl5NQcE4Xac= Subject key identifier: C3:3A:CE:FA:3D:1B:F2:CF:33:53:5C:3B:B0:A7:57:92:EF:DF:12:02 Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9 Certificate serial: 010D0C9F4328584B004BF28EEABB0A216EB73600 Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 32821 IP address blocks: 208.94.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f2:8e:ea:bb:0a:21:6e:b7:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=87dbf313-707e-481c-b16f-a4d6199e805a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:2c:a9:9f:de:5a:64:56:18:83:79:4f:79: 06:ec:f5:27:75:bf:13:3d:9c:be:00:bd:3e:2b:7a: 79:e4:cf:9f:82:1d:91:28:6e:95:a9:3d:7f:9a:98: bd:77:4c:05:55:94:ca:32:f4:1a:3d:c9:af:25:d4: 9c:2b:2a:ca:27:d1:bb:dc:75:ce:ab:5c:cc:05:e1: 27:f9:95:98:5a:33:5a:2a:19:23:e1:d7:6a:30:0d: e3:ed:8a:75:d4:71:94:cf:9f:4e:1d:87:dc:7d:9a: df:f3:3c:b7:21:b6:8d:23:31:6c:20:02:dc:72:db: ae:36:56:dc:72:c8:b8:bf:b4:8c:1a:30:c0:59:57: 36:3c:03:2f:4a:6c:e6:55:99:c0:b7:0f:4f:d1:db: 48:fd:c4:f3:de:7b:d4:96:a8:8f:02:4f:1b:fb:04: 03:f1:d4:ba:92:8c:5c:e7:71:d1:58:72:61:a7:99: aa:ef:8b:f8:9a:7c:2f:50:dc:3e:c8:7d:04:23:7b: 20:38:f9:08:0b:27:0d:82:9c:2e:0d:1b:c6:85:4b: 83:18:a2:ce:cd:3e:6b:8b:56:7d:90:d0:4c:8a:38: 1a:84:db:32:cc:60:5e:35:ed:d6:a3:f7:63:9b:2e: bb:7f:ed:1a:03:ee:07:0f:f3:60:74:3f:17:b2:fe: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3A:CE:FA:3D:1B:F2:CF:33:53:5C:3B:B0:A7:57:92:EF:DF:12:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b2a5ebb7-977f-3511-bdce-1e1a8b5df256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl X509v3 Authority Key Identifier: keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer sbgp-ipAddrBlock: critical IPv4: 208.94.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:1e:09:7f:71:78:ed:7f:57:6c:f4:92:a7:c3:53:fd:ea:57: bc:11:bc:f5:99:ab:e2:79:5f:de:10:4d:42:b5:46:f9:c3:1a: f1:26:e7:3a:13:73:5c:83:02:11:5c:c7:9b:67:2b:c4:8d:ef: de:a0:c6:79:a4:5d:b9:0a:28:cf:b4:d3:34:65:69:31:1d:1f: d6:95:15:d0:03:7b:6a:ec:b5:8d:68:0f:9a:cd:5f:ec:fe:d1: d9:56:fa:01:26:3e:41:ff:cf:81:0e:d2:71:66:ec:d3:cb:da: 26:bf:6d:9f:46:df:73:c3:54:4e:a0:7c:58:7c:73:1b:73:7f: d0:35:6d:18:cf:8d:23:b8:fa:f1:63:68:07:bc:38:d7:bf:64: ab:5b:39:44:74:d3:1c:88:87:bc:28:59:07:ff:26:58:71:6e: cb:f5:15:af:c6:43:65:f4:3b:34:c5:6b:f6:78:f5:e8:d0:eb: b9:03:6e:1e:ea:58:52:df:65:da:88:3f:3b:0e:e0:04:d7:53: c3:24:ed:96:22:62:5b:07:d0:1e:5e:f4:bd:cc:25:6c:43:89: f4:7f:13:ac:12:ce:a8:d1:3c:16:27:47:67:f9:68:34:42:67: 81:fe:0f:ce:de:ab:64:80:f2:ca:8e:10:ae:8d:14:85:13:fb: 70:9f:16:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/KO6rsKIW63NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZGFhMTEtNDAzNy00NTJhLTkzNGItNjg0ZWRiZWZj YmY5MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ODdkYmYzMTMtNzA3ZS00ODFjLWIxNmYtYTRkNjE5OWU4MDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A0sqZ/eWmRWGIN5T3kG7PUndb8TPZy+AL0+ K3p55M+fgh2RKG6VqT1/mpi9d0wFVZTKMvQaPcmvJdScKyrKJ9G73HXOq1zMBeEn +ZWYWjNaKhkj4ddqMA3j7Yp11HGUz59OHYfcfZrf8zy3IbaNIzFsIALcctuuNlbc csi4v7SMGjDAWVc2PAMvSmzmVZnAtw9P0dtI/cTz3nvUlqiPAk8b+wQD8dS6koxc 53HRWHJhp5mq74v4mnwvUNw+yH0EI3sgOPkICycNgpwuDRvGhUuDGKLOzT5ri1Z9 kNBMijgahNsyzGBeNe3Wo/djmy67f+0aA+4HD/NgdD8Xsv7s/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM6zvo9G/LPM1NcO7CnV5Lv3xICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNk YWExMS00MDM3LTQ1MmEtOTM0Yi02ODRlZGJlZmNiZjkvYjJhNWViYjctOTc3Zi0z NTExLWJkY2UtMWUxYThiNWRmMjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjIzZGFhMTEtNDAzNy00NTJhLTkz NGItNjg0ZWRiZWZjYmY5L2IyM2RhYTExLTQwMzctNDUyYS05MzRiLTY4NGVkYmVm Y2JmOS5jcmwwHwYDVR0jBBgwFoAU/DCcwzym6cnUepEDiE3wHQBXYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNkYWExMS00MDM3LTQ1MmEtOTM0Yi02ODRl ZGJlZmNiZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0F50MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEeCX9xeO1/V2z0kqfDU/3qV7wRvPWZq+J5X94QTUK1RvnDGvEm5zoT c1yDAhFcx5tnK8SN796gxnmkXbkKKM+00zRlaTEdH9aVFdADe2rstY1oD5rNX+z+ 0dlW+gEmPkH/z4EO0nFm7NPL2ia/bZ9G33PDVE6gfFh8cxtzf9A1bRjPjSO4+vFj aAe8ONe/ZKtbOUR00xyIh7woWQf/Jlhxbsv1Fa/GQ2X0OzTFa/Z49ejQ67kDbh7q WFLfZdqIPzsO4ATXU8Mk7ZYiYlsH0B5e9L3MJWxDifR/E6wSzqjRPBYnR2f5aDRC Z4H+D87eq2SA8sqOEK6NFIUT+3CfFns= -----END CERTIFICATE-----Generated at Sat Nov 1 10:09:12 2025 by rpki-client