$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa File: 882d0ec4-8387-38e3-93e9-e4806eb2a252.roa (raw, json) Hash identifier: G4NmjX9FtMU4j6EIVFtBQfW+33pG+z5ikRuJTCxqXLo= Subject key identifier: FB:C4:86:53:3D:FF:E6:B1:1E:10:E3:A9:09:BA:D7:DE:C2:68:6D:24 Certificate issuer: /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Certificate serial: 010D0C9F4328584B99D7AEC4BE11FB8F778CA280 Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 26904 IP address blocks: 23.247.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ae:c4:be:11:fb:8f:77:8c:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=bd373fa2-5629-46e5-934e-43f296f4f345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:53:d7:30:e6:22:3c:cb:af:50:81:47:aa: 70:18:6d:f4:41:41:64:fe:4e:a1:17:0f:1e:b4:54: 11:bf:21:92:12:ec:dd:40:70:92:a3:45:ca:34:22: 9e:3a:b5:92:45:fe:40:7e:f6:b7:ca:0e:d9:12:48: f7:5b:e6:9c:a3:0a:c9:32:e1:75:0d:91:43:f0:dd: d8:29:e2:03:d0:e7:cc:97:c8:a6:ea:6b:4f:fa:a3: d8:f3:ee:f2:94:f9:30:34:b9:02:ed:b4:7f:e2:38: 91:aa:87:8d:ce:45:c3:84:2c:0f:f4:82:ea:75:4f: 73:fd:03:51:1f:0c:6e:39:cc:f6:4e:30:11:40:93: a6:ba:34:53:5f:18:7f:6d:62:4c:8e:c5:ac:3a:ca: c9:7c:cf:e5:c5:ae:af:cc:df:c0:8e:9f:1a:af:41: cc:64:a6:b0:b4:a6:7f:31:41:bb:28:f6:37:12:7b: c3:97:90:9f:0d:2b:56:71:b8:30:37:02:c8:8b:10: 53:5c:0b:4f:f3:88:3b:39:01:cb:24:da:18:85:fb: d2:d0:ad:20:7e:a7:77:27:d4:44:42:62:c4:2a:4c: 01:0d:e1:5e:a3:24:3e:5e:48:8e:e4:00:51:48:06: 6c:46:4c:23:dc:7f:0b:ef:8e:14:af:60:24:35:58: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C4:86:53:3D:FF:E6:B1:1E:10:E3:A9:09:BA:D7:DE:C2:68:6D:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/882d0ec4-8387-38e3-93e9-e4806eb2a252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl X509v3 Authority Key Identifier: keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer sbgp-ipAddrBlock: critical IPv4: 23.247.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:99:21:2f:33:13:d9:af:be:d5:4b:8a:9b:10:68:6c:83:37: d6:ac:92:42:9e:3d:62:db:e0:64:84:44:4c:af:aa:5e:04:35: a7:61:d5:e2:88:54:5a:5d:0c:a4:19:19:fb:a1:2a:ea:1e:2b: ec:ef:85:2e:8a:37:fb:db:57:82:72:cd:5c:55:bd:4e:12:f0: 32:df:39:5a:0e:90:7b:8f:ec:fa:7f:11:68:ba:86:9a:93:f0: 9e:7d:cb:52:b9:84:e7:21:82:0c:61:68:d4:36:f8:3c:9a:04: 21:b3:69:b6:ed:ff:af:08:16:48:8e:38:3b:a8:18:9e:df:87: 99:4c:5a:bd:16:8e:97:54:95:95:13:f0:9e:2e:70:92:ad:94: 68:af:69:9e:60:78:7d:5b:95:7c:7c:d3:f5:3e:2f:ae:f1:22: 4d:2b:e5:68:d4:92:c4:ed:73:22:c7:b9:36:1e:b8:19:12:24: 4b:83:e4:4c:86:f0:47:7b:6f:28:1d:a2:b8:0d:a2:48:4f:23: 8e:31:e8:69:ae:86:f9:64:f0:95:0f:69:31:ed:74:78:b7:9d: 9b:15:04:7c:e3:e3:41:0e:b4:86:8f:a6:85:b4:bc:b8:5d:f0: a5:58:f1:49:a5:0e:59:43:46:a5:65:2a:0b:e2:80:f8:5f:8b: 9b:41:6d:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ167EvhH7j3eMooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VlNzIwZGUtYzMyMi00YmI1LWI4Y2QtYzdhM2YyM2I5 MmQ3MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YmQzNzNmYTItNTYyOS00NmU1LTkzNGUtNDNmMjk2ZjRmMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij5T1zDmIjzLr1CBR6pwGG30QUFk/k6hFw8e tFQRvyGSEuzdQHCSo0XKNCKeOrWSRf5Afva3yg7ZEkj3W+acowrJMuF1DZFD8N3Y KeID0OfMl8im6mtP+qPY8+7ylPkwNLkC7bR/4jiRqoeNzkXDhCwP9ILqdU9z/QNR HwxuOcz2TjARQJOmujRTXxh/bWJMjsWsOsrJfM/lxa6vzN/Ajp8ar0HMZKawtKZ/ MUG7KPY3EnvDl5CfDStWcbgwNwLIixBTXAtP84g7OQHLJNoYhfvS0K0gfqd3J9RE QmLEKkwBDeFeoyQ+XkiO5ABRSAZsRkwj3H8L744Ur2AkNVi1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvEhlM9/+axHhDjqQm6197CaG0kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3 MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2EzZjIzYjkyZDcvODgyZDBlYzQtODM4Ny0z OGUzLTkzZTktZTQ4MDZlYjJhMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2VlNzIwZGUtYzMyMi00YmI1LWI4 Y2QtYzdhM2YyM2I5MmQ3LzNlZTcyMGRlLWMzMjItNGJiNS1iOGNkLWM3YTNmMjNi OTJkNy5jcmwwHwYDVR0jBBgwFoAUCeWmFW+MnUDiNV/P2g31BT5Sb+gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZWU3MjBkZS1jMzIyLTRiYjUtYjhjZC1jN2Ez ZjIzYjkyZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/eoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGZIS8zE9mvvtVLipsQaGyDN9askkKePWLb4GSEREyvql4ENadh1eKI VFpdDKQZGfuhKuoeK+zvhS6KN/vbV4JyzVxVvU4S8DLfOVoOkHuP7Pp/EWi6hpqT 8J59y1K5hOchggxhaNQ2+DyaBCGzabbt/68IFkiOODuoGJ7fh5lMWr0WjpdUlZUT 8J4ucJKtlGivaZ5geH1blXx80/U+L67xIk0r5WjUksTtcyLHuTYeuBkSJEuD5EyG 8Ed7bygdorgNokhPI44x6Gmuhvlk8JUPaTHtdHi3nZsVBHzj40EOtIaPpoW0vLhd 8KVY8UmlDllDRqVlKgvigPhfi5tBbYo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:08:43 2025 by rpki-client