$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa File: 11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa (raw, json) Hash identifier: nJCejjvpZ54IEkkbZw2EbPgz9QZfrHIdvMOkCImWm7M= Subject key identifier: 88:21:CE:E5:A0:27:67:E1:F6:33:E0:B2:30:34:15:E5:D9:64:DD:4E Certificate issuer: /CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Certificate serial: 010D0C9F4328584B8BE22FC24938EDA0A4313480 Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 394144 IP address blocks: 23.143.8.0/24 maxlen: 24 130.51.127.0/24 maxlen: 24 2602:27c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:2f:c2:49:38:ed:a0:a4:31:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=d17d6a6a-4e73-47c6-adf5-9f8e63bedcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:27:f7:6a:e4:39:03:a9:ff:f7:47:77:1e: 37:c2:4a:fd:f1:bc:be:c3:06:86:40:d2:47:2f:9a: ad:80:4b:fa:c8:73:a1:e2:f8:da:04:77:80:ef:38: 94:84:c4:18:22:f9:0c:25:fe:ad:94:cd:92:79:5c: 55:98:61:dc:6f:7e:aa:20:75:c0:c4:f7:6d:1f:9d: 00:d8:cd:57:2d:cf:6e:af:52:89:d0:10:9a:8f:a4: b5:78:21:6b:e5:4d:7f:ce:b2:5b:db:43:ec:0a:1d: c5:bb:ad:55:68:b5:68:dd:8e:e5:21:af:00:e5:bf: 40:ea:f7:d9:8e:1e:04:8d:3e:2f:bb:2b:1a:c2:39: 46:2e:18:6a:81:22:a5:35:b6:68:7e:e0:2e:a7:92: 4c:09:f7:b1:37:d3:09:92:27:73:2f:1b:be:3e:c5: 99:2b:94:31:69:fb:2b:db:e5:96:69:45:53:ad:d0: a9:84:5d:63:e8:97:3f:1d:c5:36:42:9c:38:e2:58: aa:0b:97:86:ad:46:39:81:71:22:bd:15:5c:7b:fd: 33:55:75:62:44:8a:e5:9f:66:69:ae:fd:8e:0a:a7: 0c:15:1c:e7:8e:74:23:c1:9b:85:76:e1:87:62:33: 06:4f:35:2e:0d:4b:4c:38:50:a8:41:e9:6d:13:d3: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:21:CE:E5:A0:27:67:E1:F6:33:E0:B2:30:34:15:E5:D9:64:DD:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl X509v3 Authority Key Identifier: keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer sbgp-ipAddrBlock: critical IPv4: 23.143.8.0/24 130.51.127.0/24 IPv6: 2602:27c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:1c:32:f0:4a:1c:b2:ec:f3:67:d3:b1:bc:f4:b5:da:27:8c: 29:bb:7b:5b:d3:8c:81:47:12:73:54:c8:a4:d1:e7:64:a7:71: 6b:27:17:e1:40:3e:da:70:87:d5:6a:43:a3:4e:e2:bb:dd:0c: 33:a7:39:1b:68:65:25:4d:24:4c:56:d8:a8:8c:c1:90:5c:42: a3:49:00:bd:f8:ff:86:bf:b9:be:a9:5b:23:42:37:d7:72:8c: 07:72:1b:ab:4a:a7:8c:55:98:4c:23:aa:13:c9:ae:d8:52:9b: 5f:c3:0c:55:45:2e:4e:db:2e:f1:c9:a0:6c:38:f2:23:fc:1b: e0:58:aa:9e:eb:01:e0:99:2d:97:90:98:e4:21:72:34:6b:cb: 4f:7d:c9:03:0a:58:02:bb:9d:df:d1:08:5a:c4:73:e3:cf:c3: 02:75:33:b3:dc:db:00:f1:8d:ce:7b:3c:87:6c:93:f3:87:58: 0d:87:79:9d:86:48:cb:4b:7d:8e:ab:d9:39:6a:87:66:28:a5: ab:7b:40:2b:00:55:56:96:74:8d:38:9f:76:9e:0b:90:22:55: bc:2f:b8:bd:93:2c:7f:c9:26:fd:1f:ec:81:5d:dd:f4:b7:04: 44:88:5e:ba:89:42:6a:6a:96:6b:25:db:a8:98:89:37:45:1e: db:dd:95:38 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEuL4i/CSTjtoKQxNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwYjk3OGEtOTQ0YS00MDFjLWFhMjUtMmViYmQ0ZDU4 MzQwMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZDE3ZDZhNmEtNGU3My00N2M2LWFkZjUtOWY4ZTYzYmVkY2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAcn92rkOQOp//dHdx43wkr98by+wwaGQNJH L5qtgEv6yHOh4vjaBHeA7ziUhMQYIvkMJf6tlM2SeVxVmGHcb36qIHXAxPdtH50A 2M1XLc9ur1KJ0BCaj6S1eCFr5U1/zrJb20PsCh3Fu61VaLVo3Y7lIa8A5b9A6vfZ jh4EjT4vuysawjlGLhhqgSKlNbZofuAup5JMCfexN9MJkidzLxu+PsWZK5Qxafsr 2+WWaUVTrdCphF1j6Jc/HcU2Qpw44liqC5eGrUY5gXEivRVce/0zVXViRIrln2Zp rv2OCqcMFRznjnQjwZuFduGHYjMGTzUuDUtMOFCoQeltE9MmtQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFIghzuWgJ2fh9jPgsjA0FeXZZN1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBi OTc4YS05NDRhLTQwMWMtYWEyNS0yZWJiZDRkNTgzNDAvMTFkMmJiZTEtNmI0Ni0z NmQzLTk4OTctOWZmMzEwZmI3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwYjk3OGEtOTQ0YS00MDFjLWFh MjUtMmViYmQ0ZDU4MzQwL2Q3MGI5NzhhLTk0NGEtNDAxYy1hYTI1LTJlYmJkNGQ1 ODM0MC5jcmwwHwYDVR0jBBgwFoAUcx9dnRTzp+3CNGp0KmTLcKr/LnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBiOTc4YS05NDRhLTQwMWMtYWEyNS0yZWJi ZDRkNTgzNDAuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF48IAwQA gjN/MA4EAgACMAgDBgQmAgJ8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCsHDLwShyy7PNn07G89LXaJ4wp u3tb04yBRxJzVMik0edkp3FrJxfhQD7acIfVakOjTuK73QwzpzkbaGUlTSRMVtio jMGQXEKjSQC9+P+Gv7m+qVsjQjfXcowHchurSqeMVZhMI6oTya7YUptfwwxVRS5O 2y7xyaBsOPIj/BvgWKqe6wHgmS2XkJjkIXI0a8tPfckDClgCu53f0QhaxHPjz8MC dTOz3NsA8Y3OezyHbJPzh1gNh3mdhkjLS32Oq9k5aodmKKWre0ArAFVWlnSNOJ92 nguQIlW8L7i9kyx/ySb9H+yBXd30twREiF66iUJqapZrJduomIk3RR7b3ZU4 -----END CERTIFICATE-----Generated at Wed Nov 5 03:59:47 2025 by rpki-client