$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa File: d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa (raw, json) Hash identifier: Hqhvf7BoAlbzQNTdU3VzbfRX59T4poBdb4ikebN/uQg= Subject key identifier: D7:03:EE:E0:03:FD:C1:DE:F9:6B:8B:CB:0B:8A:2F:55:2B:06:D5:C6 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BB2F7A8F6CB0BCF6EEE392880 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 19437 IP address blocks: 23.235.252.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a8:f6:cb:0b:cf:6e:ee:39:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=fafef1fc-a7fe-4269-bef1-f53d99630edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4f:87:ec:f0:16:74:01:a0:89:f9:20:e8:b0: a3:d8:ae:ad:34:51:05:49:d1:4c:5a:90:51:99:5a: ef:a6:d0:9d:35:30:bd:92:98:8a:d7:a7:85:c7:85: c1:c7:8f:bc:9b:11:0d:75:57:e1:82:de:9d:69:e2: 4f:24:63:ce:d0:ee:ea:ce:c0:2a:65:30:ce:1f:bb: 88:f2:02:b1:35:cd:bb:22:69:ad:ae:3e:b9:da:6f: db:90:f8:2c:5e:c6:03:cb:81:17:81:d6:f8:1b:ce: 3d:ad:e2:c3:16:07:72:49:d2:ec:21:03:22:32:b3: 64:fc:56:49:42:ea:e3:3d:6c:48:32:df:0f:43:85: e9:e5:60:6b:6d:c0:e2:93:75:18:40:41:d7:a9:1d: 24:b2:e2:f4:68:9c:c6:0e:69:02:60:08:34:cf:60: 68:71:82:fe:2b:a2:04:bf:43:7c:b1:ff:a6:dd:60: dc:1a:0a:61:6b:30:76:12:b8:53:9e:01:63:04:45: 33:34:bb:73:8d:19:0d:0c:eb:77:9f:55:de:35:55: 22:f0:bd:a5:59:c2:5a:40:a0:e5:ab:5a:98:b5:7f: 60:3d:df:ea:9a:1d:cc:eb:db:bc:ca:29:00:1f:de: bc:6c:00:ee:62:f1:4a:83:ca:b0:68:21:88:df:c7: 7d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:03:EE:E0:03:FD:C1:DE:F9:6B:8B:CB:0B:8A:2F:55:2B:06:D5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d7fc411b-66b9-35f2-9bac-1a91b18ee301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1e:be:11:27:90:4a:4e:b9:3d:e9:96:6e:ae:a9:e7:67:05: 3c:25:af:52:0f:1e:7e:30:b1:98:26:18:cd:e4:08:af:12:d0: b5:b5:ac:2c:fb:78:c0:e9:ee:c2:80:7b:32:51:f5:6a:43:89: 78:80:b6:09:d3:2b:c0:dd:17:62:93:45:b2:a1:6f:3d:c1:95: c6:e0:7c:71:0a:8c:28:b1:bc:25:9c:19:97:05:dc:6f:21:0f: 5a:d0:d6:91:a9:0d:92:c9:d9:4b:37:b6:db:78:c8:d2:3b:7f: 5d:58:33:15:17:e3:84:e0:7d:cf:95:e7:72:d8:2e:51:01:77: 56:49:d8:08:a6:c5:01:41:18:a4:72:29:a4:1a:af:a5:62:df: 94:91:09:32:0c:8b:4a:af:12:eb:25:5e:d7:88:a2:97:ec:6c: 85:49:f0:06:fa:02:b7:40:b8:cc:40:04:9b:b2:0b:fd:03:e9: 9f:b0:c0:a8:20:a3:24:c6:ba:a1:f8:60:6d:0d:87:14:01:7f: ba:2c:ab:9c:a6:53:d5:08:c0:d8:18:c8:e7:09:fa:c0:c2:a7: b4:d9:05:fe:19:4f:37:73:05:7d:bb:97:e1:57:e9:74:40:35: 33:85:a3:55:8b:63:f7:92:1d:ac:ed:a9:cc:ce:8b:b8:94:14: 32:8a:b8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96j2ywvPbu45KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmFmZWYxZmMtYTdmZS00MjY5LWJlZjEtZjUzZDk5NjMwZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk+H7PAWdAGgifkg6LCj2K6tNFEFSdFMWpBR mVrvptCdNTC9kpiK16eFx4XBx4+8mxENdVfhgt6daeJPJGPO0O7qzsAqZTDOH7uI 8gKxNc27Immtrj652m/bkPgsXsYDy4EXgdb4G849reLDFgdySdLsIQMiMrNk/FZJ QurjPWxIMt8PQ4Xp5WBrbcDik3UYQEHXqR0ksuL0aJzGDmkCYAg0z2BocYL+K6IE v0N8sf+m3WDcGgphazB2ErhTngFjBEUzNLtzjRkNDOt3n1XeNVUi8L2lWcJaQKDl q1qYtX9gPd/qmh3M69u8yikAH968bADuYvFKg8qwaCGI38d9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcD7uAD/cHe+WuLywuKL1UrBtXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDdmYzQxMWItNjZiOS0z NWYyLTliYWMtMWE5MWIxOGVlMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+v8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwevhEnkEpOuT3plm6uqednBTwlr1IPHn4wsZgmGM3kCK8S0LW1rCz7 eMDp7sKAezJR9WpDiXiAtgnTK8DdF2KTRbKhbz3BlcbgfHEKjCixvCWcGZcF3G8h D1rQ1pGpDZLJ2Us3ttt4yNI7f11YMxUX44Tgfc+V53LYLlEBd1ZJ2AimxQFBGKRy KaQar6Vi35SRCTIMi0qvEuslXteIopfsbIVJ8Ab6ArdAuMxABJuyC/0D6Z+wwKgg oyTGuqH4YG0NhxQBf7osq5ymU9UIwNgYyOcJ+sDCp7TZBf4ZTzdzBX27l+FX6XRA NTOFo1WLY/eSHaztqczOi7iUFDKKuNY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:44 2025 by rpki-client