$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa File: c293780d-5803-3e0e-a47f-235faa11c550.roa (raw, json) Hash identifier: k67RLaaGnMtIffASmZYVpOv1nE0Ox+gp9qBeSJBoHQQ= Subject key identifier: E7:B2:E0:F8:8C:D7:BF:90:22:E7:40:DC:7A:B4:2F:8A:6D:16:69:72 Certificate issuer: /CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Certificate serial: 010D0C9F4328584BA502373B3B43A84F60726BE0 Authority key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 2914 IP address blocks: 23.133.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:37:3b:3b:43:a8:4f:60:72:6b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=4236c86e-eb69-45db-909f-ca20a3c5f463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:09:9c:c3:8d:9b:c6:22:dc:98:27:6d:53:e7: a0:01:83:14:78:fe:76:1e:f6:77:bf:f7:77:8e:4f: 5b:11:9e:5a:07:07:3f:f4:0b:75:5e:71:18:ab:2f: da:69:40:0d:64:f2:27:c5:b3:98:29:0d:c2:ae:c1: 40:ac:72:70:66:5e:46:ce:a1:d2:94:2a:5b:b5:4f: 95:69:0a:91:5a:af:68:5f:94:a4:7f:07:e6:04:35: ba:cc:2f:a0:e7:a8:61:5f:c5:86:d1:05:e9:41:ff: 4e:37:b5:e6:90:2a:30:03:d7:b6:4a:40:53:32:3b: e1:c1:18:ca:61:72:99:37:8d:10:49:eb:4c:7a:ec: c9:eb:56:1d:6a:eb:4a:98:19:64:1d:5f:c7:4d:3c: 86:9e:f8:46:31:aa:da:79:8e:ca:10:ad:7b:16:6d: 30:a9:7e:cf:10:22:5f:9c:6a:99:7c:90:90:13:d6: 5e:cf:17:d7:f6:00:84:b0:30:5a:22:89:f7:8a:30: 04:3c:c1:11:41:5c:a8:4b:50:f4:05:c7:a8:d8:7a: c3:1c:3b:62:1e:e5:ae:64:9d:40:e6:0b:72:8f:4b: c8:e9:d9:74:26:dd:9a:e4:40:b4:14:f3:e8:5a:95: 91:33:4f:ad:35:89:60:8a:19:dd:ad:f7:77:fd:cc: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B2:E0:F8:8C:D7:BF:90:22:E7:40:DC:7A:B4:2F:8A:6D:16:69:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl X509v3 Authority Key Identifier: keyid:76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer sbgp-ipAddrBlock: critical IPv4: 23.133.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b4:9c:88:15:5c:eb:b0:35:3f:45:1c:60:39:61:a2:e2:5f: a2:71:eb:f6:79:75:ed:85:e4:6f:1f:3c:80:f2:6a:82:52:c4: 8d:8d:bd:cc:c6:14:eb:fd:67:a3:5c:9c:45:54:1d:77:e6:9f: dc:64:9f:a6:23:42:50:3b:2a:74:b3:88:ec:a4:aa:1b:74:c9: bc:ab:61:58:a4:10:11:df:af:76:cf:8f:02:ee:0d:02:7a:f4: fa:64:c9:c9:65:20:43:db:0f:6c:81:f8:9e:f8:1a:fc:10:6a: fb:2a:1d:9c:49:b8:1f:14:aa:84:38:f7:3e:07:99:80:3c:d8: 78:6d:b4:20:25:31:20:ed:21:99:79:23:a1:93:01:38:a6:ed: 1c:5c:d9:9b:f7:39:67:c3:6c:a5:60:98:54:53:e5:7e:3e:f5: ce:e9:ac:3a:46:dd:a7:23:9b:23:79:a0:5b:da:3e:d5:30:30: 3b:a0:5f:7b:b6:92:b6:1c:33:90:a0:cf:83:10:51:bb:fd:c6: a3:dd:2e:98:1e:cf:66:b0:79:b8:c1:84:dc:0a:55:ba:cb:19: 1f:ae:a8:69:6b:33:9c:3a:03:2b:80:25:f9:45:f3:fe:bc:6d: af:d3:ed:73:6a:c1:96:70:b7:01:fa:db:eb:6a:2b:f1:54:fa: c3:69:83:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjc7O0OoT2Bya+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmYmY1ZDctZGRmZS00ZTJlLThhOTUtNjhkZWQ2NDk4 OTEzMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk NDIzNmM4NmUtZWI2OS00NWRiLTkwOWYtY2EyMGEzYzVmNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gmcw42bxiLcmCdtU+egAYMUeP52HvZ3v/d3 jk9bEZ5aBwc/9At1XnEYqy/aaUANZPInxbOYKQ3CrsFArHJwZl5GzqHSlCpbtU+V aQqRWq9oX5SkfwfmBDW6zC+g56hhX8WG0QXpQf9ON7XmkCowA9e2SkBTMjvhwRjK YXKZN40QSetMeuzJ61YdautKmBlkHV/HTTyGnvhGMaraeY7KEK17Fm0wqX7PECJf nGqZfJCQE9ZezxfX9gCEsDBaIon3ijAEPMERQVyoS1D0Bceo2HrDHDtiHuWuZJ1A 5gtyj0vI6dl0Jt2a5EC0FPPoWpWRM0+tNYlgihndrfd3/cy0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOey4PiM17+QIudA3Hq0L4ptFmlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZi ZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0OTg5MTMvYzI5Mzc4MGQtNTgwMy0z ZTBlLWE0N2YtMjM1ZmFhMTFjNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWRmYmY1ZDctZGRmZS00ZTJlLThh OTUtNjhkZWQ2NDk4OTEzLzlkZmJmNWQ3LWRkZmUtNGUyZS04YTk1LTY4ZGVkNjQ5 ODkxMy5jcmwwHwYDVR0jBBgwFoAUdghT1LipsDTyMx5oi9yVMNoNBpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRl ZDY0OTg5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACa0nIgVXOuwNT9FHGA5YaLiX6Jx6/Z5de2F5G8fPIDyaoJSxI2NvczG FOv9Z6NcnEVUHXfmn9xkn6YjQlA7KnSziOykqht0ybyrYVikEBHfr3bPjwLuDQJ6 9PpkycllIEPbD2yB+J74GvwQavsqHZxJuB8UqoQ49z4HmYA82HhttCAlMSDtIZl5 I6GTATim7Rxc2Zv3OWfDbKVgmFRT5X4+9c7prDpG3acjmyN5oFvaPtUwMDugX3u2 krYcM5Cgz4MQUbv9xqPdLpgez2awebjBhNwKVbrLGR+uqGlrM5w6AyuAJflF8/68 ba/T7XNqwZZwtwH62+tqK/FU+sNpg9E= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:19 2025 by rpki-client