$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa File: dc37949b-fd68-31d3-8530-d51a972e599a.roa (raw, json) Hash identifier: lYUxwiUWbVG8BwG4iJuLtzZ496/W+DC6m/pwZiS4cVk= Subject key identifier: 7A:13:08:1A:12:00:0B:B9:5F:D0:EF:8D:BD:6C:E0:99:AD:67:DE:AD Certificate issuer: /CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Certificate serial: 010D0C9F4328584B5E25933A828AAF6537566300 Authority key identifier: DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 400719 IP address blocks: 23.140.168.0/24 maxlen: 25 207.174.50.0/24 maxlen: 25 2602:80f:c000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:25:93:3a:82:8a:af:65:37:56:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c7bb7c9-9462-45de-9a96-5887b6042f79 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=2f625f1d-d2bc-4271-9b55-85e03ebe3e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d4:ab:bd:0d:32:88:68:f1:af:52:e4:3d:19: 3f:7c:67:c3:22:4a:a5:ea:ab:bc:65:42:10:5f:28: 83:d3:62:72:e8:d5:b0:ce:14:67:21:1b:d5:6a:f8: 41:5a:09:48:a4:98:c7:88:ca:a4:47:0f:c9:14:2d: ea:6b:15:86:fe:50:74:aa:a0:b3:92:ee:a8:f2:66: c6:00:f2:0b:9d:c9:72:fd:d5:b8:9f:9f:08:d4:8e: 94:d8:00:17:20:2d:66:63:5e:32:a7:ff:c2:d9:d1: 00:b3:30:b2:f2:84:bf:8e:55:66:a4:e8:a4:04:62: c0:37:64:ff:f0:61:f8:38:b1:e4:c8:18:1e:70:8e: df:05:5c:e9:5e:3c:a7:12:a4:d1:43:8a:72:bf:a4: 06:55:a4:87:e3:2e:f3:76:8a:bf:13:6e:5c:1e:17: 0c:17:ba:8c:fb:02:02:5d:99:07:96:2e:25:1c:74: da:03:73:ec:ce:45:83:84:d3:7c:de:52:ed:54:7b: 21:43:0b:f3:6e:ce:7b:d2:d1:e7:43:33:c3:c3:96: 19:21:25:72:f6:ae:0f:8b:ef:81:20:0c:87:23:45: cb:ad:b7:b5:13:a9:c2:b7:e1:e1:1e:37:d1:1c:33: 19:e9:41:4a:34:96:f1:7d:66:09:00:87:05:ca:12: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:13:08:1A:12:00:0B:B9:5F:D0:EF:8D:BD:6C:E0:99:AD:67:DE:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/dc37949b-fd68-31d3-8530-d51a972e599a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79/4c7bb7c9-9462-45de-9a96-5887b6042f79.crl X509v3 Authority Key Identifier: keyid:DA:DD:B7:A5:36:89:D6:40:54:A6:6B:41:71:04:A1:F4:04:9E:83:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c7bb7c9-9462-45de-9a96-5887b6042f79.cer sbgp-ipAddrBlock: critical IPv4: 23.140.168.0/24 207.174.50.0/24 IPv6: 2602:80f:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:59:1f:0e:5c:04:b3:3f:12:7d:66:8c:c8:95:b9:a9:0e:c0: 73:e0:d4:10:d7:79:c8:64:92:75:62:21:96:34:68:78:b0:ae: ba:64:f9:e8:80:ce:3e:0c:b2:a5:56:e9:c3:60:a2:37:cd:c7: c9:46:b3:ab:ef:57:2d:ba:0e:be:8a:62:fd:63:c4:7f:6f:54: b1:13:40:a4:5b:5e:53:8b:f9:99:65:4e:81:19:d2:17:80:33: a7:cf:9a:74:d3:58:67:68:11:ec:1f:a9:3f:d8:60:88:e5:a8: 78:76:f9:46:71:5b:de:d7:7d:f5:31:a5:34:88:ac:53:28:91: f7:6e:9a:9e:c3:f0:47:f2:53:b5:f4:3e:ef:cb:ce:63:c1:17: 72:6e:6e:c5:85:4d:a6:39:1c:f1:be:c9:19:b9:45:dd:a7:53: 48:42:3f:48:fc:e5:72:9d:d3:71:7e:3e:5c:59:5f:f9:0c:0a: 7a:83:7c:28:95:92:46:43:3c:47:47:7b:73:5a:bf:cb:c6:65: a1:af:45:79:38:30:11:77:9a:2f:2f:30:10:47:ea:a2:22:e6: 37:be:d6:89:9b:4b:58:c4:f1:5d:42:59:85:91:30:61:a1:01: b8:c8:b4:87:51:11:2b:56:da:14:60:22:e3:91:57:d0:e6:78: a2:8e:38:17 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEteJZM6goqvZTdWYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM3YmI3YzktOTQ2Mi00NWRlLTlhOTYtNTg4N2I2MDQy Zjc5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MmY2MjVmMWQtZDJiYy00MjcxLTliNTUtODVlMDNlYmUzZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNSrvQ0yiGjxr1LkPRk/fGfDIkql6qu8ZUIQ XyiD02Jy6NWwzhRnIRvVavhBWglIpJjHiMqkRw/JFC3qaxWG/lB0qqCzku6o8mbG APILncly/dW4n58I1I6U2AAXIC1mY14yp//C2dEAszCy8oS/jlVmpOikBGLAN2T/ 8GH4OLHkyBgecI7fBVzpXjynEqTRQ4pyv6QGVaSH4y7zdoq/E25cHhcMF7qM+wIC XZkHli4lHHTaA3PszkWDhNN83lLtVHshQwvzbs570tHnQzPDw5YZISVy9q4Pi++B IAyHI0XLrbe1E6nCt+HhHjfRHDMZ6UFKNJbxfWYJAIcFyhKHMQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFHoTCBoSAAu5X9Dvjb1s4JmtZ96tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Yzdi YjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3YjYwNDJmNzkvZGMzNzk0OWItZmQ2OC0z MWQzLTg1MzAtZDUxYTk3MmU1OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGM3YmI3YzktOTQ2Mi00NWRlLTlh OTYtNTg4N2I2MDQyZjc5LzRjN2JiN2M5LTk0NjItNDVkZS05YTk2LTU4ODdiNjA0 MmY3OS5jcmwwHwYDVR0jBBgwFoAU2t23pTaJ1kBUpmtBcQSh9ASegwUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80YzdiYjdjOS05NDYyLTQ1ZGUtOWE5Ni01ODg3 YjYwNDJmNzkuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAF4yoAwQA z64yMA8EAgACMAkDBwQmAggPwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOlkfDlwEsz8SfWaMyJW5qQ7A c+DUENd5yGSSdWIhljRoeLCuumT56IDOPgyypVbpw2CiN83HyUazq+9XLboOvopi /WPEf29UsRNApFteU4v5mWVOgRnSF4Azp8+adNNYZ2gR7B+pP9hgiOWoeHb5RnFb 3td99TGlNIisUyiR926ansPwR/JTtfQ+78vOY8EXcm5uxYVNpjkc8b7JGblF3adT SEI/SPzlcp3TcX4+XFlf+QwKeoN8KJWSRkM8R0d7c1q/y8Zloa9FeTgwEXeaLy8w EEfqoiLmN77WiZtLWMTxXUJZhZEwYaEBuMi0h1ERK1baFGAi45FX0OZ4oo44Fw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:16:14 2025 by rpki-client