$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa File: 23168d98-beae-3197-8375-14702f665631.roa (raw, json) Hash identifier: 7S7+6reF1FrizSxY3zZkt+CRwifC/2D1vgQK+Vh7YiA= Subject key identifier: 97:58:C3:73:F2:69:05:EE:33:F1:D8:55:5F:F3:76:55:01:D4:F7:2B Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584B80B7671C24E54A720F6F32A0 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 3676 IP address blocks: 128.255.0.0/16 maxlen: 24 129.255.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:67:1c:24:e5:4a:72:0f:6f:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=18c1eeb2-bb48-4a8c-b810-b09ae2f1cb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:e6:2c:37:ff:0f:bc:b2:e9:b3:76:8f:49: 49:e9:f4:04:5d:0c:64:18:c2:b4:45:aa:ad:6f:2e: 56:dd:40:70:f5:f0:ef:fb:72:03:b4:8d:bc:9d:95: 2f:07:1b:a7:5d:61:be:c0:05:95:68:91:01:ab:c3: 33:4a:e2:5a:42:3a:91:4d:07:1e:18:1b:a4:14:2b: d1:75:91:6b:25:5f:ce:b0:81:dd:90:ff:f4:d3:76: 26:fc:d1:9a:c0:3d:ec:2c:ba:87:9a:cf:a0:08:d9: 26:3c:58:e3:c7:f7:b1:fe:20:63:c4:12:92:8f:9c: 7d:d0:a4:6c:89:f7:45:06:6f:01:94:64:c8:6c:c3: 64:de:45:b0:c7:cf:ba:88:c6:d9:f8:fc:f3:1b:85: 10:72:46:54:d7:1f:8b:7c:14:0e:b1:7a:fd:ea:05: a3:79:03:94:44:02:68:2b:1a:f9:28:fa:50:b9:7d: 97:9b:61:48:d9:a1:7f:18:35:ca:4d:e4:cd:3f:b8: 48:ec:ef:40:bb:22:dd:13:3b:71:7e:89:c3:68:db: 2c:ff:33:0e:5e:32:8e:aa:14:cb:aa:28:15:10:d1: 90:4e:b0:79:de:b3:f7:ef:7e:82:2d:48:5a:99:0c: 3a:6a:05:1c:89:af:1c:bc:6f:14:7b:39:d8:9c:c8: 0b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:58:C3:73:F2:69:05:EE:33:F1:D8:55:5F:F3:76:55:01:D4:F7:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:b5:10:18:ca:24:82:40:6e:0f:d4:fb:b4:6a:45:18:47:ec: 8c:2b:b8:eb:5e:6e:ce:df:8c:b5:bc:65:7b:1f:b7:c5:1f:d0: 5d:84:54:8a:0a:98:4f:4c:5f:24:7e:ff:a4:36:5d:52:6c:24: 25:de:c5:58:f1:04:d0:a3:d0:1b:fc:99:94:5e:89:3d:01:01: e1:c1:86:f4:09:f5:9a:29:36:48:15:da:71:51:11:64:56:22: f7:b9:47:1e:a8:a2:b1:8f:a6:01:54:c1:67:bd:df:d8:e3:21: f1:83:e9:30:88:2b:26:2c:11:7c:24:22:85:6d:3f:4a:39:cc: 65:51:2d:a3:fa:14:20:fc:4a:34:5b:fc:12:11:06:8f:89:94: c2:48:00:b6:63:e8:94:58:96:7f:ba:50:7b:15:69:90:05:cc: ec:fd:20:51:72:84:47:ee:47:bf:1b:64:a1:b0:86:7a:1d:8f: 69:33:c1:5a:6a:f3:41:f6:76:26:57:19:6e:a0:22:91:c9:3a: 78:46:cb:0e:99:a1:ed:d1:e2:62:53:52:85:4f:2b:ed:6a:b7: 35:75:25:70:28:1b:1c:26:58:b8:b9:8e:cb:dd:b7:7b:80:d4: 1b:fc:d3:14:0d:1c:bc:42:a2:10:62:e5:17:cc:1c:b8:b3:b5: cf:72:18:e2 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEuAt2ccJOVKcg9vMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MThjMWVlYjItYmI0OC00YThjLWI4MTAtYjA5YWUyZjFjYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJnmLDf/D7yy6bN2j0lJ6fQEXQxkGMK0Raqt by5W3UBw9fDv+3IDtI28nZUvBxunXWG+wAWVaJEBq8MzSuJaQjqRTQceGBukFCvR dZFrJV/OsIHdkP/003Ym/NGawD3sLLqHms+gCNkmPFjjx/ex/iBjxBKSj5x90KRs ifdFBm8BlGTIbMNk3kWwx8+6iMbZ+PzzG4UQckZU1x+LfBQOsXr96gWjeQOURAJo Kxr5KPpQuX2Xm2FI2aF/GDXKTeTNP7hI7O9AuyLdEztxfonDaNss/zMOXjKOqhTL qigVENGQTrB53rP3736CLUhamQw6agUcia8cvG8UeznYnMgLlwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFJdYw3PyaQXuM/HYVV/zdlUB1PcrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMjMxNjhkOTgtYmVhZS0z MTk3LTgzNzUtMTQ3MDJmNjY1NjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgP8DAwCB /zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCqtRAYyiSCQG4P1Pu0akUYR+yMK7jrXm7O34y1vGV7H7fFH9Bd hFSKCphPTF8kfv+kNl1SbCQl3sVY8QTQo9Ab/JmUXok9AQHhwYb0CfWaKTZIFdpx URFkViL3uUceqKKxj6YBVMFnvd/Y4yHxg+kwiCsmLBF8JCKFbT9KOcxlUS2j+hQg /Eo0W/wSEQaPiZTCSAC2Y+iUWJZ/ulB7FWmQBczs/SBRcoRH7ke/G2ShsIZ6HY9p M8FaavNB9nYmVxluoCKRyTp4RssOmaHt0eJiU1KFTyvtarc1dSVwKBscJli4uY7L 3bd7gNQb/NMUDRy8QqIQYuUXzBy4s7XPchji -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:00 2025 by rpki-client