$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa File: 7a124059-8167-385d-841b-71708d4474a3.roa (raw, json) Hash identifier: LZOr+B8VMzXMZNOk2YqZMB0b3wYejwy6v8PLBWv1Mts= Subject key identifier: E8:A5:4F:66:9C:62:8B:BD:A7:75:70:12:04:79:FF:3C:BE:01:33:9D Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584BA14BD306F9F2CCF392D85E80 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 0 IP address blocks: 23.134.216.0/24 maxlen: 24 128.254.185.0/24 maxlen: 24 2602:fbca::/36 maxlen: 36 2602:fbd0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a1:4b:d3:06:f9:f2:cc:f3:92:d8:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=361c3848-e18d-4383-a704-f3b679d58a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:2b:80:1e:52:c5:e7:4e:df:45:46:65:a0: 5b:3b:ae:8e:5f:ed:19:73:35:b7:20:c2:c4:46:76: 4a:44:05:02:99:3f:a0:5c:c0:bb:e6:79:1c:8b:64: b6:b3:4d:2e:03:87:14:87:79:00:69:40:2d:46:77: 8a:3b:d1:77:f2:c6:56:56:fe:17:87:ad:79:2d:26: f7:fa:a8:db:e6:ce:d6:5e:c4:5f:56:43:99:4a:8e: 67:ea:dc:38:05:66:ca:04:d4:4c:12:12:cf:27:4a: c2:b1:e4:fb:90:73:8d:7e:1b:ce:23:a1:f2:4d:2f: ec:02:0e:6a:38:f6:9b:97:c3:eb:c1:35:96:f6:8f: 51:b4:d9:1d:a5:fd:1b:8f:55:21:0b:13:fe:c0:34: 39:8b:ae:24:dc:d9:f1:4b:f0:b2:bc:2c:60:82:40: e2:23:fc:46:2c:a9:8f:2e:ab:30:6e:64:17:d3:14: d7:cc:2c:1d:f5:7a:1c:8d:05:f0:92:8c:44:b6:79: 05:cb:55:a1:1f:6e:85:c0:21:f3:17:de:ca:3e:75: d7:04:f2:e7:e0:55:bf:5c:27:5a:9d:92:e1:d6:78: 9f:d2:7f:b6:16:0b:ea:ae:12:8e:a6:20:55:d0:1c: 30:6b:a2:67:05:4f:fe:f0:47:14:00:fe:4e:97:a5: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:4F:66:9C:62:8B:BD:A7:75:70:12:04:79:FF:3C:BE:01:33:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 23.134.216.0/24 128.254.185.0/24 IPv6: 2602:fbca::/36 2602:fbd0::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:46:8a:16:40:66:01:cd:d9:be:8f:f1:94:70:db:7b:0f:4a: 4a:a4:d1:9b:6e:13:55:ab:1e:96:7d:d5:81:51:93:8a:e9:7e: f5:64:7a:6f:bb:81:bd:2a:69:1a:d0:2c:f6:24:19:5b:73:1e: 69:30:27:00:ea:01:1e:be:4e:7c:83:06:14:6e:1f:08:ad:a4: a4:21:c0:33:f2:ca:81:38:c5:5f:61:c0:12:22:26:67:d3:4c: 8a:dd:18:2a:e4:da:c0:d5:0c:52:90:e3:a2:42:fd:98:07:19: 37:b4:7e:5e:8c:2e:47:8d:91:29:d2:dd:36:16:5f:99:d5:aa: c8:52:50:d6:56:74:cc:07:99:42:0f:f4:1b:52:d0:4b:41:03: 89:f4:8a:1b:fa:9e:fc:60:c2:a0:77:20:64:20:b8:1e:f6:87: 48:88:65:45:a2:0d:53:21:57:f7:f9:3e:2b:08:47:dd:b5:24: 1d:6f:df:63:f0:54:cc:12:f9:d1:69:ef:dc:d9:bd:ec:7b:56: 32:e3:b0:0d:68:7e:28:9d:10:c7:5f:a0:18:7f:9b:06:52:b0: c6:0d:d2:3f:6a:ba:c0:8f:6e:d2:d2:d8:b8:5a:a9:33:34:bc: c8:1b:55:b9:54:9d:29:da:a0:94:8e:c8:a1:c5:9b:e1:0b:80: ca:78:7c:fc -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEuhS9MG+fLM85LYXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MzYxYzM4NDgtZTE4ZC00MzgzLWE3MDQtZjNiNjc5ZDU4YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5wrgB5SxedO30VGZaBbO66OX+0ZczW3IMLE RnZKRAUCmT+gXMC75nkci2S2s00uA4cUh3kAaUAtRneKO9F38sZWVv4Xh615LSb3 +qjb5s7WXsRfVkOZSo5n6tw4BWbKBNRMEhLPJ0rCseT7kHONfhvOI6HyTS/sAg5q OPabl8PrwTWW9o9RtNkdpf0bj1UhCxP+wDQ5i64k3NnxS/CyvCxggkDiI/xGLKmP LqswbmQX0xTXzCwd9XocjQXwkoxEtnkFy1WhH26FwCHzF97KPnXXBPLn4FW/XCda nZLh1nif0n+2FgvqrhKOpiBV0Bwwa6JnBU/+8EcUAP5Ol6WjXQIDAQABo4IDczCC A28wHQYDVR0OBBYEFOilT2acYou9p3VwEgR5/zy+ATOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvN2ExMjQwNTktODE2Ny0z ODVkLTg0MWItNzE3MDhkNDQ3NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAF4bYAwQA gP65MBYEAgACMBADBgQmAvvKAAMGBCYC+9AAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAARGihZAZgHN2b6P 8ZRw23sPSkqk0ZtuE1WrHpZ91YFRk4rpfvVkem+7gb0qaRrQLPYkGVtzHmkwJwDq AR6+TnyDBhRuHwitpKQhwDPyyoE4xV9hwBIiJmfTTIrdGCrk2sDVDFKQ46JC/ZgH GTe0fl6MLkeNkSnS3TYWX5nVqshSUNZWdMwHmUIP9BtS0EtBA4n0ihv6nvxgwqB3 IGQguB72h0iIZUWiDVMhV/f5PisIR921JB1v32PwVMwS+dFp79zZvex7VjLjsA1o fiidEMdfoBh/mwZSsMYN0j9qusCPbtLS2LhaqTM0vMgbVblUnSnaoJSOyKHFm+EL gMp4fPw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:44:08 2025 by rpki-client