$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa File: 7dc9f381-556f-3234-ab22-8ad7b4242933.roa (raw, json) Hash identifier: +Qi3t3rzJhvFeYopu/woCmCvaEjttNMC6tN3toKzpVg= Subject key identifier: 4D:46:FB:7B:92:23:01:16:64:45:7D:1A:B3:0B:25:24:7D:E3:DF:C1 Certificate issuer: /CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a Certificate serial: 010D0C9F4328584B2CF6E9E4C10ED51723CF25B0 Authority key identifier: 3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 27602 IP address blocks: 23.249.171.0/24 maxlen: 24 63.246.134.0/24 maxlen: 24 209.209.96.0/22 maxlen: 24 2604:f3c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e9:e4:c1:0e:d5:17:23:cf:25:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=d39d974c-6f4e-40fc-be0c-f267700d77b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:40:66:5b:d2:e3:bd:ef:d8:e6:2c:f5:c7:d2: 5f:4a:27:98:45:91:98:f9:59:06:fa:ed:51:79:b5: 71:ec:e9:82:2d:e9:16:f7:65:c4:84:29:b3:92:41: 5e:7c:2d:4a:79:d5:eb:71:6d:24:03:04:98:d2:fa: ee:64:d9:06:58:70:c5:46:ac:45:65:fa:e2:3b:33: f6:20:1f:b1:19:b9:41:82:71:8a:9e:c8:98:a9:d7: 3e:dc:16:d8:b9:07:bd:d4:8e:71:9e:e4:bc:07:a1: c1:ad:41:4c:75:16:54:d1:57:d3:81:07:38:eb:ac: c4:10:0f:80:37:24:b0:72:39:70:49:ab:c8:d1:ee: 07:58:ff:d1:f7:0c:19:15:7b:a8:98:ac:76:da:c5: 0b:9a:2c:ca:13:95:17:9f:e6:df:e9:12:ef:b4:1b: 02:72:3a:b9:31:64:ce:a8:65:5f:e6:c4:6a:93:fa: 97:71:43:8c:43:cf:d2:58:af:d7:d3:28:0c:16:f4: a6:4d:5b:36:83:47:97:05:83:67:e3:6b:f4:11:93: fe:4d:0d:b1:f5:9d:37:05:6b:1f:09:f1:32:10:be: d9:30:a0:6a:f0:6e:d0:d4:38:2b:63:90:24:e0:23: 03:7e:c8:77:f0:94:db:b7:ee:a1:23:28:f2:53:72: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:46:FB:7B:92:23:01:16:64:45:7D:1A:B3:0B:25:24:7D:E3:DF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl X509v3 Authority Key Identifier: keyid:3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer sbgp-ipAddrBlock: critical IPv4: 23.249.171.0/24 63.246.134.0/24 209.209.96.0/22 IPv6: 2604:f3c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6e:20:c1:33:2b:ac:1a:6d:e9:18:e7:95:d5:52:46:4b:e6: 02:78:96:1c:46:7d:9c:4a:66:ef:2c:ba:4f:d1:fb:7d:e8:9a: 73:6e:ee:07:a0:4d:1f:33:fa:2d:4e:d1:97:24:b2:40:44:fe: f2:8f:6b:e1:10:ad:c7:90:8b:f1:0f:bd:44:5c:ae:f7:52:e2: 4e:c7:08:ba:b8:05:78:97:52:41:fd:3f:91:31:53:f4:61:1b: 4e:ce:bd:c3:32:88:89:ee:08:6f:70:0d:62:1a:f6:d5:48:8b: b1:76:69:5b:21:b5:74:3b:83:7a:a1:1b:da:34:e6:5f:00:ea: be:51:99:c7:3b:48:28:ab:18:dd:33:c5:66:fe:31:ee:d4:32: 69:16:58:33:f0:29:fd:17:ff:92:a4:9f:aa:b9:24:f1:cd:9b: 32:6d:42:08:e2:9c:0b:07:5b:98:f1:03:19:42:f8:93:ef:ed: 65:b2:62:63:7b:b1:d8:ad:b2:0a:14:ca:66:4c:09:bb:f2:8f: eb:74:5c:8d:4c:d5:ff:59:fc:17:7e:78:61:40:07:30:ba:79: 39:d5:90:ff:17:a5:1f:93:8e:1d:07:23:14:ec:c5:1c:8e:81: be:20:d3:df:d0:31:69:ce:b7:3b:94:3c:7d:06:5f:3c:a3:87: 96:48:dd:29 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEss9unkwQ7VFyPPJbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFjZDljOTctNWIwOC00ZTdkLWFlZDYtMWY1OTlhMzVi ZDRhMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDM5ZDk3NGMtNmY0ZS00MGZjLWJlMGMtZjI2NzcwMGQ3N2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEBmW9Ljve/Y5iz1x9JfSieYRZGY+VkG+u1R ebVx7OmCLekW92XEhCmzkkFefC1KedXrcW0kAwSY0vruZNkGWHDFRqxFZfriOzP2 IB+xGblBgnGKnsiYqdc+3BbYuQe91I5xnuS8B6HBrUFMdRZU0VfTgQc466zEEA+A NySwcjlwSavI0e4HWP/R9wwZFXuomKx22sULmizKE5UXn+bf6RLvtBsCcjq5MWTO qGVf5sRqk/qXcUOMQ8/SWK/X0ygMFvSmTVs2g0eXBYNn42v0EZP+TQ2x9Z03BWsf CfEyEL7ZMKBq8G7Q1DgrY5Ak4CMDfsh38JTbt+6hIyjyU3KnvQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFE1G+3uSIwEWZEV9GrMLJSR949/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWNk OWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5OWEzNWJkNGEvN2RjOWYzODEtNTU2Zi0z MjM0LWFiMjItOGFkN2I0MjQyOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFjZDljOTctNWIwOC00ZTdkLWFl ZDYtMWY1OTlhMzViZDRhLzgxY2Q5Yzk3LTViMDgtNGU3ZC1hZWQ2LTFmNTk5YTM1 YmQ0YS5jcmwwHwYDVR0jBBgwFoAUP8S2EhEUE8gIcSKKrnEYVpKc20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWNkOWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5 OWEzNWJkNGEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF/mrAwQA P/aGAwQC0dFgMA0EAgACMAcDBQAmBPPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEhuIMEzK6wabekY55XV UkZL5gJ4lhxGfZxKZu8suk/R+33omnNu7gegTR8z+i1O0ZckskBE/vKPa+EQrceQ i/EPvURcrvdS4k7HCLq4BXiXUkH9P5ExU/RhG07OvcMyiInuCG9wDWIa9tVIi7F2 aVshtXQ7g3qhG9o05l8A6r5Rmcc7SCirGN0zxWb+Me7UMmkWWDPwKf0X/5Kkn6q5 JPHNmzJtQgjinAsHW5jxAxlC+JPv7WWyYmN7sditsgoUymZMCbvyj+t0XI1M1f9Z /Bd+eGFABzC6eTnVkP8XpR+Tjh0HIxTsxRyOgb4g09/QMWnOtzuUPH0GXzyjh5ZI 3Sk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:11:02 2025 by rpki-client