$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa File: dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa (raw, json) Hash identifier: xVHq7+StYy72v4PZaQlgOckOGB+9QcXv/VfwP4c9WbM= Subject key identifier: D3:E5:54:B1:E5:9B:0B:45:20:F9:CD:3A:8B:F5:79:EC:E1:11:71:9F Certificate issuer: /CN=2aa2eb71-3102-4859-928f-a833f2c63713 Certificate serial: 010D0C9F4328584B970CD404658FF387F5A7A980 Authority key identifier: AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 64260 IP address blocks: 23.138.192.0/24 maxlen: 24 138.128.252.0/22 maxlen: 24 2607:7c80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d4:04:65:8f:f3:87:f5:a7:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa2eb71-3102-4859-928f-a833f2c63713 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=cf5ed268-e5cf-4fd3-ae39-13ca27878565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:11:94:2e:e4:6f:31:71:45:0f:42:c1:1b:d2: 50:d0:99:a8:c2:cb:27:04:f6:9b:ab:c1:f0:02:94: d0:8e:db:2b:51:d6:d1:4d:5f:b9:b8:7a:1d:2b:20: 67:13:95:1c:3c:01:45:1a:a6:ef:87:fb:1c:f5:0d: 67:44:bc:5b:f7:eb:8f:5f:75:7e:ec:34:e7:bf:fc: 3f:06:16:6f:e7:5c:ab:56:ab:59:00:4d:89:08:1e: 71:32:09:ed:ad:81:7a:36:2b:c4:a7:b4:5b:59:47: e1:7e:c5:72:c0:43:b0:5d:aa:2a:da:13:29:44:4c: 05:b7:fe:75:ce:e0:fe:7c:93:47:be:5d:d9:29:c1: a8:6c:55:b5:cf:cd:c4:dc:a8:13:63:e9:98:27:9a: 6d:2c:b4:8d:c3:72:05:9e:12:16:7d:ca:a3:95:5c: a7:b2:3a:9f:3e:88:0a:ed:29:97:4d:df:78:e3:06: 7a:88:03:5e:49:6d:e6:d9:e3:d4:04:13:99:f5:a5: aa:f8:87:c3:9c:5d:7b:53:db:5f:95:78:05:86:18: 5f:42:d9:0a:e2:28:64:1d:42:fd:fd:fd:a0:dc:84: 51:86:8f:16:64:c1:7d:79:7a:e3:5a:34:53:bb:db: b5:87:9f:10:27:6f:27:cb:6c:fe:02:d1:28:92:3a: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E5:54:B1:E5:9B:0B:45:20:F9:CD:3A:8B:F5:79:EC:E1:11:71:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl X509v3 Authority Key Identifier: keyid:AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer sbgp-ipAddrBlock: critical IPv4: 23.138.192.0/24 138.128.252.0/22 IPv6: 2607:7c80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:0c:b7:89:4d:21:ba:58:ea:0a:24:56:a1:34:7a:5c:61:80: fb:3e:89:14:c7:4a:cb:96:4e:29:5e:57:48:27:a5:74:e1:1e: 76:33:42:3d:3f:80:14:9e:d4:5e:69:4b:f2:22:48:f9:37:b4: 3f:f1:7f:95:30:25:86:d3:37:53:15:1b:44:e5:e5:84:ca:57: 94:6c:46:37:81:86:9a:5a:1f:7c:5d:30:6c:ce:dd:0e:5e:49: 04:07:7a:0f:5e:cd:b9:fc:50:8b:77:da:73:9f:e5:2e:95:f0: ea:e1:66:c8:94:a7:c6:1b:d5:c8:b0:91:08:5f:04:ed:38:1e: 39:65:c4:db:fd:c7:5d:ad:f4:00:60:9a:d3:d6:e6:49:c8:8e: 52:f1:5b:73:1b:7a:bf:dd:3a:2b:cd:53:8f:df:c8:68:99:9f: 58:05:17:f1:ee:91:66:7d:bf:c4:8f:30:99:31:48:ff:c0:30: cf:7e:5a:e3:4e:28:9a:ce:3a:c8:ba:e3:41:af:3e:7a:56:fe: 19:35:95:40:f4:46:14:5c:db:73:98:f0:b2:a8:c9:2f:c8:ce: 79:11:2e:c0:9e:0f:d8:c0:2d:d2:d2:52:1e:3d:97:a8:1c:7b: 5e:bc:77:52:d0:01:f7:ca:9a:f7:e3:63:e8:87:15:c2:e0:4a: f1:d9:12:1a -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEuXDNQEZY/zh/WnqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhMmViNzEtMzEwMi00ODU5LTkyOGYtYTgzM2YyYzYz NzEzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk Y2Y1ZWQyNjgtZTVjZi00ZmQzLWFlMzktMTNjYTI3ODc4NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBGULuRvMXFFD0LBG9JQ0JmowssnBPabq8Hw ApTQjtsrUdbRTV+5uHodKyBnE5UcPAFFGqbvh/sc9Q1nRLxb9+uPX3V+7DTnv/w/ BhZv51yrVqtZAE2JCB5xMgntrYF6NivEp7RbWUfhfsVywEOwXaoq2hMpREwFt/51 zuD+fJNHvl3ZKcGobFW1z83E3KgTY+mYJ5ptLLSNw3IFnhIWfcqjlVynsjqfPogK 7SmXTd944wZ6iANeSW3m2ePUBBOZ9aWq+IfDnF17U9tflXgFhhhfQtkK4ihkHUL9 /f2g3IRRho8WZMF9eXrjWjRTu9u1h58QJ28ny2z+AtEokjoQxwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFNPlVLHlmwtFIPnNOov1eezhEXGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYWEy ZWI3MS0zMTAyLTQ4NTktOTI4Zi1hODMzZjJjNjM3MTMvZGQ2YWY0YzItNTQwMy0z MTg1LWEyZTEtNTVhZWJmYTZmZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmFhMmViNzEtMzEwMi00ODU5LTky OGYtYTgzM2YyYzYzNzEzLzJhYTJlYjcxLTMxMDItNDg1OS05MjhmLWE4MzNmMmM2 MzcxMy5jcmwwHwYDVR0jBBgwFoAUqnfVe8EWT764gX0/TOAzfkdCPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYWEyZWI3MS0zMTAyLTQ4NTktOTI4Zi1hODMz ZjJjNjM3MTMuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4rAAwQC ioD8MA0EAgACMAcDBQAmB3yAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBANcMt4lNIbpY6gokVqE0elxhgPs+ iRTHSsuWTileV0gnpXThHnYzQj0/gBSe1F5pS/IiSPk3tD/xf5UwJYbTN1MVG0Tl 5YTKV5RsRjeBhppaH3xdMGzO3Q5eSQQHeg9ezbn8UIt32nOf5S6V8OrhZsiUp8Yb 1ciwkQhfBO04HjllxNv9x12t9ABgmtPW5knIjlLxW3Mber/dOivNU4/fyGiZn1gF F/HukWZ9v8SPMJkxSP/AMM9+WuNOKJrOOsi640GvPnpW/hk1lUD0RhRc23OY8LKo yS/IznkRLsCeD9jALdLSUh49l6gce168d1LQAffKmvfjY+iHFcLgSvHZEho= -----END CERTIFICATE-----Generated at Wed Nov 5 23:04:37 2025 by rpki-client