$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa File: 25e84704-60c2-30c2-9812-d48955828bb7.roa (raw, json) Hash identifier: l00TgDy0llb7YwOM8Sx+DTiOnGucs4+MwFNWpfwvt+E= Subject key identifier: 90:BC:BB:62:3F:B2:D2:3B:66:02:52:0B:E7:C1:BB:85:76:A0:6D:46 Certificate issuer: /CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Certificate serial: 010D0C9F4328584BB7BA2359137E419954B52B00 Authority key identifier: 34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 21647 IP address blocks: 23.167.200.0/24 maxlen: 24 2602:f9c6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:ba:23:59:13:7e:41:99:54:b5:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=1e968cdd-4093-40cd-8f89-760f7c3c35db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:4f:d3:42:f0:f9:24:ad:96:5e:27:68:9e: d9:39:03:05:1c:17:b9:ca:6a:2e:dd:ee:6b:95:45: 1c:70:7e:ab:ff:f1:7a:b8:01:bf:37:b1:62:3c:4a: 19:0e:03:7e:e5:69:a6:a1:08:fe:85:43:fc:d4:0b: fb:64:63:90:53:57:f5:f8:ac:72:71:1e:b6:71:f2: 0d:e2:21:0f:62:ae:29:22:b2:98:1b:5a:8a:22:0d: 7b:98:fd:2b:0e:fd:d0:0e:30:65:e7:ca:0e:47:42: 98:7e:c1:37:de:31:06:16:10:75:10:aa:34:d0:e6: 77:50:f2:1b:86:6a:c8:50:da:a4:e0:bf:77:c3:18: f3:7f:cc:3e:72:53:1d:d7:ad:c8:4f:1d:f3:26:bb: f2:f9:ee:28:ef:9d:7c:36:c1:7c:7a:b5:f4:24:93: db:67:55:25:5b:b7:13:b2:cf:e8:45:e0:89:5f:e4: 7a:de:ec:4c:b3:53:79:06:c2:43:bb:7a:5d:18:84: 54:9b:7f:79:ed:d9:e8:ab:4c:9e:a3:ec:e1:0c:3a: ea:05:36:03:a3:82:d2:d3:c3:b0:e0:2b:68:31:bf: 5b:49:af:ef:a6:2a:55:c3:95:6c:95:fb:17:cf:0e: a5:c0:6e:d8:29:77:c2:ba:07:c4:27:43:5a:bb:e0: 06:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BC:BB:62:3F:B2:D2:3B:66:02:52:0B:E7:C1:BB:85:76:A0:6D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl X509v3 Authority Key Identifier: keyid:34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer sbgp-ipAddrBlock: critical IPv4: 23.167.200.0/24 IPv6: 2602:f9c6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ad:33:ac:a3:e0:6a:d3:53:26:5b:2e:83:9c:c5:3b:25:33: 54:d3:6a:c4:d0:50:f2:44:11:c2:7f:50:33:7a:49:c7:81:3e: 60:77:dc:e0:85:09:73:f2:13:a6:df:f5:a9:b8:b8:e4:7f:eb: fc:46:20:32:b6:01:47:77:c6:06:a3:93:ce:c0:24:b2:b7:c3: 2e:d6:b3:3e:47:bb:53:03:be:28:a9:7b:b8:ef:9e:bc:c1:0e: 58:8f:a4:ac:c0:e7:fb:13:c1:3d:fa:15:1f:a2:65:90:36:f9: 1c:eb:45:c7:02:21:b6:50:cb:3a:4c:f3:93:c7:45:8a:50:96: 55:e9:1b:89:0b:58:76:f6:42:f0:97:6b:ca:ef:04:05:a9:95: 17:85:ad:b4:5d:7e:04:34:ab:3a:f5:7d:8f:65:02:95:6d:20: d6:d9:48:5a:8c:72:db:63:2f:d5:dd:93:c4:59:13:9a:e4:ce: 43:3b:0f:46:16:87:45:4b:ba:40:70:37:a1:e3:8b:0f:fa:dc: 38:50:ed:15:33:ed:60:f6:1f:22:b8:8d:3f:46:4a:26:ca:27: 0b:5c:d8:d3:78:e6:51:d4:b0:a6:47:1e:1f:9c:1b:71:43:f8: a1:38:8f:a7:79:cf:cc:6d:7f:cd:d1:d9:0f:5d:4b:ab:62:c7: 3a:f6:ab:c7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu3uiNZE35BmVS1KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQzMWNiYmYtNDQxZS00ZDhkLWI1OGYtNDE2N2QxMzg2 ZjZkMB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MWU5NjhjZGQtNDA5My00MGNkLThmODktNzYwZjdjM2MzNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN1P00Lw+SStll4naJ7ZOQMFHBe5ymou3e5r lUUccH6r//F6uAG/N7FiPEoZDgN+5WmmoQj+hUP81Av7ZGOQU1f1+KxycR62cfIN 4iEPYq4pIrKYG1qKIg17mP0rDv3QDjBl58oOR0KYfsE33jEGFhB1EKo00OZ3UPIb hmrIUNqk4L93wxjzf8w+clMd163ITx3zJrvy+e4o7518NsF8erX0JJPbZ1UlW7cT ss/oReCJX+R63uxMs1N5BsJDu3pdGIRUm3957dnoq0yeo+zhDDrqBTYDo4LS08Ow 4CtoMb9bSa/vpipVw5VslfsXzw6lwG7YKXfCugfEJ0Nau+AGXQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJC8u2I/stI7ZgJSC+fBu4V2oG1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMx Y2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3ZDEzODZmNmQvMjVlODQ3MDQtNjBjMi0z MGMyLTk4MTItZDQ4OTU1ODI4YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjQzMWNiYmYtNDQxZS00ZDhkLWI1 OGYtNDE2N2QxMzg2ZjZkL2Y0MzFjYmJmLTQ0MWUtNGQ4ZC1iNThmLTQxNjdkMTM4 NmY2ZC5jcmwwHwYDVR0jBBgwFoAUNKAYHeaDHg2G04ycNul41/k14TkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMxY2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3 ZDEzODZmNmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6fIMA4E AgACMAgDBgAmAvnGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRrTOso+Bq01MmWy6DnMU7JTNU02rE0FDy RBHCf1AzeknHgT5gd9zghQlz8hOm3/WpuLjkf+v8RiAytgFHd8YGo5POwCSyt8Mu 1rM+R7tTA74oqXu47568wQ5Yj6SswOf7E8E9+hUfomWQNvkc60XHAiG2UMs6TPOT x0WKUJZV6RuJC1h29kLwl2vK7wQFqZUXha20XX4ENKs69X2PZQKVbSDW2UhajHLb Yy/V3ZPEWROa5M5DOw9GFodFS7pAcDeh44sP+tw4UO0VM+1g9h8iuI0/RkomyicL XNjTeOZR1LCmRx4fnBtxQ/ihOI+nec/MbX/N0dkPXUurYsc69qvH -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:18 2025 by rpki-client