$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/175486fd-ca0f-3f0b-8fde-5143519bfdfe.roa File: 175486fd-ca0f-3f0b-8fde-5143519bfdfe.roa (raw, json) Hash identifier: ZgCYMKm3zJ3chzg6laCFh9FNzxMvDTHlw+SVtauCNuA= Subject key identifier: FB:4D:61:7E:63:82:47:4A:23:9D:D0:DB:02:D5:96:5B:12:83:99:88 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584B988E82373A92661134D35400 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/175486fd-ca0f-3f0b-8fde-5143519bfdfe.roa Signing time: Tue 21 Oct 2025 13:57:42 +0000 ROA not before: Tue 21 Oct 2025 13:57:42 +0000 ROA not after: Mon 19 Jan 2026 14:57:42 +0000 asID: 395901 IP address blocks: 23.165.48.0/24 maxlen: 24 199.33.210.0/24 maxlen: 24 2602:fd1c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:8e:82:37:3a:92:66:11:34:d3:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Oct 21 13:57:42 2025 GMT Not After : Jan 19 14:57:42 2026 GMT Subject: CN=77e42a06-0883-45d1-a3c8-1916b0e1d4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:82:db:31:1e:c1:f9:f6:81:24:fb:62:1f: 0c:ed:7b:92:62:3e:cf:c5:bb:74:c9:75:f1:af:b9: a3:31:1c:0d:7e:5d:39:c9:c4:ba:18:3b:ac:d4:75: db:ab:17:50:49:08:c1:80:f3:51:69:e3:b6:e1:83: 20:01:cd:45:3d:d5:19:c1:b3:63:75:9a:a6:a2:71: 4c:c6:b0:05:45:42:33:3b:2f:d9:4a:90:75:d1:13: ce:7e:11:1d:01:20:57:64:b8:b8:b8:b1:cd:53:dd: 64:ec:9e:78:3f:fc:af:03:2a:35:4c:d7:9c:72:a5: 6b:6d:e8:45:6f:38:f7:b5:00:28:b0:bc:75:4f:4b: ee:19:4f:41:09:76:8a:a4:d2:ea:ef:14:2f:a8:63: 08:04:31:be:2a:b6:d8:e9:3c:6c:7e:ff:24:e8:e5: 3d:8a:4d:74:a8:ef:c5:a6:e4:bc:3f:50:f0:d0:84: 6e:1c:31:4c:16:12:aa:be:a6:e7:d8:e6:4f:4a:8e: 06:54:4d:6d:3a:4f:61:f1:f7:9a:10:0e:3c:f3:3b: df:50:b4:cd:90:c2:73:99:e6:22:12:5d:e2:d1:bb: 98:9f:9b:94:39:18:8c:d2:7b:13:47:4b:07:79:be: 6c:fe:1d:57:b0:14:41:fe:e3:fa:25:d3:64:c4:4e: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4D:61:7E:63:82:47:4A:23:9D:D0:DB:02:D5:96:5B:12:83:99:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/175486fd-ca0f-3f0b-8fde-5143519bfdfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 23.165.48.0/24 199.33.210.0/24 IPv6: 2602:fd1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f4:19:b8:39:14:72:3f:6a:16:4d:41:3d:f3:67:8a:db:26: 1f:d5:03:57:f8:24:8a:16:1e:1f:9a:c0:fd:f1:e2:e7:23:88: a1:59:97:a7:5f:34:bb:50:85:ff:1e:de:f8:1d:bb:b7:39:99: 49:85:69:4f:d8:46:a3:99:bf:7c:0b:2a:7e:c3:13:4d:d1:49: da:85:d7:d1:e1:19:e2:cb:69:e4:93:a2:c0:d5:8d:1c:50:2c: 68:3e:26:41:b6:10:ce:97:b9:a3:c7:c9:17:e9:c8:b8:a0:d3: 93:09:96:e5:03:a1:f1:d1:d2:c4:e5:ee:41:15:44:f3:0a:35: af:dc:8b:e5:d5:0d:fd:4a:bd:52:79:f9:c6:70:2c:0d:6a:9c: 2b:40:12:47:f5:83:ca:ab:3c:7b:51:2c:7c:5c:4d:ff:80:96: a9:0d:28:f2:1f:e2:a9:06:2b:2c:34:81:8c:69:d8:f5:2e:20: a1:fc:e1:2c:36:a4:42:8b:b0:4e:55:f1:e3:2f:b2:a4:1c:6b: 4e:f6:7e:75:ba:72:6f:e9:97:67:69:5e:6c:9c:21:f4:8b:59: b1:99:6b:c5:e6:fc:ad:82:f0:b6:83:ce:00:29:63:f4:59:a7: 7e:db:b1:32:ed:40:b9:57:5e:cb:da:6b:5d:6b:fc:9b:45:3a: b4:d6:7a:ac -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEuYjoI3OpJmETTTVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI1MTAyMTEzNTc0MloXDTI2MDExOTE0NTc0MlowLzEtMCsGA1UEAxMk NzdlNDJhMDYtMDg4My00NWQxLWEzYzgtMTkxNmIwZTFkNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDGC2zEewfn2gST7Yh8M7XuSYj7Pxbt0yXXx r7mjMRwNfl05ycS6GDus1HXbqxdQSQjBgPNRaeO24YMgAc1FPdUZwbNjdZqmonFM xrAFRUIzOy/ZSpB10RPOfhEdASBXZLi4uLHNU91k7J54P/yvAyo1TNeccqVrbehF bzj3tQAosLx1T0vuGU9BCXaKpNLq7xQvqGMIBDG+KrbY6Txsfv8k6OU9ik10qO/F puS8P1Dw0IRuHDFMFhKqvqbn2OZPSo4GVE1tOk9h8feaEA488zvfULTNkMJzmeYi El3i0buYn5uUORiM0nsTR0sHeb5s/h1XsBRB/uP6JdNkxE6NxQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFPtNYX5jgkdKI53Q2wLVllsSg5mIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTc1NDg2ZmQtY2EwZi0z ZjBiLThmZGUtNTE0MzUxOWJmZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6UwAwQA xyHSMA4EAgACMAgDBgQmAv0cADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC9Bm4ORRyP2oWTUE982eK2yYf 1QNX+CSKFh4fmsD98eLnI4ihWZenXzS7UIX/Ht74Hbu3OZlJhWlP2Eajmb98Cyp+ wxNN0UnahdfR4Rniy2nkk6LA1Y0cUCxoPiZBthDOl7mjx8kX6ci4oNOTCZblA6Hx 0dLE5e5BFUTzCjWv3Ivl1Q39Sr1SefnGcCwNapwrQBJH9YPKqzx7USx8XE3/gJap DSjyH+KpBissNIGMadj1LiCh/OEsNqRCi7BOVfHjL7KkHGtO9n51unJv6ZdnaV5s nCH0i1mxmWvF5vytgvC2g84AKWP0Wad+27Ey7UC5V17L2mtda/ybRTq01nqs -----END CERTIFICATE-----Generated at Wed Nov 5 17:25:50 2025 by rpki-client