$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa File: 9e55505e-fa19-3b06-96c9-8080da376ec7.roa (raw, json) Hash identifier: CKymLxvWj3HiOEpJ4NlHUSSfqmo2zsEy7F765iQqlGE= Subject key identifier: 58:5A:C3:05:5C:64:A1:96:27:25:3C:EC:EA:A4:05:47:6E:33:AF:F4 Certificate issuer: /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Certificate serial: 010D0C9F4328584B5C6C799231FE6445C9BF3000 Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 152705 IP address blocks: 23.247.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:79:92:31:fe:64:45:c9:bf:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=d9ec1b92-1939-4a17-bd21-69e84fd7ab15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:a4:67:3d:ce:89:c8:d5:93:57:9c:e5:f3: a2:48:d6:d3:4c:db:28:b3:65:44:54:b8:22:1c:3d: d7:6b:5b:76:2a:de:2e:65:7a:6f:de:c1:70:ff:b2: c8:83:50:4b:05:4b:31:0f:bb:2c:6e:b7:30:a2:c7: 86:1b:0b:cc:36:27:65:5b:b0:2d:ab:65:e3:f0:0f: 94:b8:6d:b8:5f:86:f8:42:98:7c:06:e9:88:78:8c: 69:af:5f:01:5a:14:88:e2:aa:36:34:89:17:e2:2e: 7a:64:ba:4b:70:fa:dc:5e:e6:4e:36:97:fd:10:cf: 81:de:fa:e9:8f:73:5a:ce:ee:fb:47:bf:53:ec:46: f4:85:f4:8b:7f:2c:1f:ee:19:e4:45:42:f3:e4:da: 28:da:ac:98:d6:f7:ad:e2:19:ce:a2:45:8e:6b:d9: 3b:a9:2e:86:0c:49:1e:81:ec:ed:7c:0e:6b:6e:bd: 9a:73:8a:32:8a:4f:58:f0:30:ef:a7:b3:96:9b:7d: 7d:7f:18:11:8a:bb:a4:f5:34:33:95:d3:a7:22:bf: e8:c6:7d:67:5c:0c:a2:c8:74:8a:eb:b9:3d:c9:9b: 10:34:28:53:57:f7:2c:44:c7:dc:b5:1e:6a:dd:23: f9:37:f1:5b:81:93:93:7b:c8:68:a1:a4:49:42:9d: 35:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:C3:05:5C:64:A1:96:27:25:3C:EC:EA:A4:05:47:6E:33:AF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/9e55505e-fa19-3b06-96c9-8080da376ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl X509v3 Authority Key Identifier: keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9b:ce:47:e1:1b:9a:74:7c:6b:5b:71:d0:0f:a2:cb:d2:14: e1:1d:a2:69:f7:e7:75:97:39:c4:04:4f:fb:63:51:97:65:8e: 95:48:99:9b:d3:eb:7d:bf:16:c7:2e:c9:f0:6c:87:ee:d2:4a: c0:75:74:15:55:f1:d2:73:81:e6:c7:93:b5:3d:f6:fa:23:d7: f6:8c:34:71:8c:04:55:4b:79:d4:64:19:c9:6c:71:77:4e:e9: 1f:fe:c1:0c:b4:8b:a4:6b:f4:9a:53:88:70:e1:5a:cc:e3:5d: a9:5c:31:63:ed:53:75:61:30:a7:df:d7:74:fb:3f:6e:6a:70: a6:6c:00:1e:b5:4a:4d:60:68:44:9e:93:13:ef:a1:66:41:e0: 3f:75:32:04:37:c2:cf:95:bd:3c:4b:3a:97:2c:a5:aa:de:87: 9f:3c:f8:68:26:de:3c:0f:d2:bd:c8:06:a9:4e:17:41:07:3d: 23:3f:99:73:b5:41:c5:ed:ef:09:88:da:24:03:a9:ed:07:68: 32:9a:2c:03:2f:3b:2c:6d:5d:61:9c:35:0b:d2:55:95:31:de: 78:46:72:f7:5b:8d:b4:0e:24:6f:92:8d:ac:74:4a:98:d6:61: 0e:cd:58:8b:ce:89:80:ad:25:56:0f:9e:6a:89:bd:c1:6e:14: ae:a6:f4:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHmSMf5kRcm/MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj ZGIxMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDllYzFiOTItMTkzOS00YTE3LWJkMjEtNjllODRmZDdhYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOykZz3OicjVk1ec5fOiSNbTTNsos2VEVLgi HD3Xa1t2Kt4uZXpv3sFw/7LIg1BLBUsxD7ssbrcwoseGGwvMNidlW7Atq2Xj8A+U uG24X4b4Qph8BumIeIxpr18BWhSI4qo2NIkX4i56ZLpLcPrcXuZONpf9EM+B3vrp j3Nazu77R79T7Eb0hfSLfywf7hnkRULz5Noo2qyY1vet4hnOokWOa9k7qS6GDEke geztfA5rbr2ac4oyik9Y8DDvp7OWm319fxgRiruk9TQzldOnIr/oxn1nXAyiyHSK 67k9yZsQNChTV/csRMfctR5q3SP5N/FbgZOTe8hooaRJQp01pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhawwVcZKGWJyU87OqkBUduM6/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvOWU1NTUwNWUtZmExOS0z YjA2LTk2YzktODA4MGRhMzc2ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0 M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5 MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEObzkfhG5p0fGtbcdAPosvSFOEdomn353WXOcQET/tjUZdljpVImZvT 632/FscuyfBsh+7SSsB1dBVV8dJzgebHk7U99voj1/aMNHGMBFVLedRkGclscXdO 6R/+wQy0i6Rr9JpTiHDhWszjXalcMWPtU3VhMKff13T7P25qcKZsAB61Sk1gaESe kxPvoWZB4D91MgQ3ws+VvTxLOpcspareh588+Ggm3jwP0r3IBqlOF0EHPSM/mXO1 QcXt7wmI2iQDqe0HaDKaLAMvOyxtXWGcNQvSVZUx3nhGcvdbjbQOJG+Sjax0SpjW YQ7NWIvOiYCtJVYPnmqJvcFuFK6m9Fk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:51 2025 by rpki-client