$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa File: e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa (raw, json) Hash identifier: cLH/tdMTuHM0FZrRaTgmgf1rqH0+JxBNM0sEj7f13yw= Subject key identifier: 27:DE:CD:F8:1C:20:4E:5F:CB:E2:BA:93:41:68:8B:3E:B1:2E:B3:9E Certificate issuer: /CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Certificate serial: 010D0C9F4328584BB45D1B7B2808F1A8F46C623E Authority key identifier: 7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 401139 IP address blocks: 23.181.168.0/24 maxlen: 24 2602:f8b1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1b:7b:28:08:f1:a8:f4:6c:62:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=2330a3fb-014e-488c-afd1-4183ff19f441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:b5:7b:4e:44:09:91:b5:4c:a4:74:d7:4e: e1:c6:0e:2e:71:3f:51:36:12:c9:87:b1:1a:04:78: 20:34:09:5b:3c:fd:d3:94:5c:3a:40:cd:76:49:f7: 0a:d5:a2:ad:50:c7:6f:d2:ab:72:79:b4:6c:c3:61: ef:0a:e2:10:1c:22:50:e3:92:26:94:6b:7f:cc:67: 98:0c:e8:45:92:d4:02:62:84:b3:09:90:d4:36:4a: 04:f7:d3:bc:12:45:1a:8a:4c:ba:63:79:57:1f:00: 77:7a:76:b9:64:d4:4f:2d:a0:30:2a:a0:13:f6:7d: ce:f2:8e:a9:fb:4f:ee:05:d8:d6:99:0a:87:24:d1: b0:2a:9d:41:bd:84:e4:58:e0:a7:6e:1c:37:d4:9b: 14:db:68:ea:bf:4a:b5:1b:f5:88:9c:4d:1d:db:be: 52:a4:e2:31:b6:4f:32:0c:b0:22:15:40:4b:c1:2f: 89:96:31:b2:08:41:3d:c8:b3:88:f5:f7:7d:76:85: 47:6b:aa:ad:f6:d8:05:35:de:63:56:47:78:ff:af: 0d:c3:a5:6a:89:cd:15:6d:14:ce:b3:fc:ee:7a:25: 42:95:85:10:b0:eb:f7:92:da:bf:45:5c:19:ad:96: 64:15:d6:d4:d7:4d:bf:51:30:36:29:6a:8c:07:86: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DE:CD:F8:1C:20:4E:5F:CB:E2:BA:93:41:68:8B:3E:B1:2E:B3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl X509v3 Authority Key Identifier: keyid:7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer sbgp-ipAddrBlock: critical IPv4: 23.181.168.0/24 IPv6: 2602:f8b1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f8:81:53:c1:29:e4:32:4f:d9:43:55:53:cd:40:d6:37:19: ad:3b:4b:b5:b5:e4:a6:4c:db:2e:31:3e:93:55:63:93:e8:39: b1:ee:3e:62:c4:89:ef:18:d2:25:2a:ff:26:70:16:90:e1:38: 93:03:49:9c:53:ff:42:15:c5:07:09:3d:a6:66:f4:80:74:26: 4b:51:aa:d8:bb:d7:c3:af:a7:d6:bb:4d:02:32:a6:1b:bd:30: 51:0f:4b:ef:2b:37:c6:7c:05:a4:34:cc:9c:cb:c2:ac:a6:3d: cd:bf:9b:92:53:f0:9b:5d:cf:c8:74:14:fc:7f:13:59:ac:dd: 4e:4f:67:6f:02:bf:f0:ce:2e:6b:3d:e5:94:c7:a6:58:c2:85: b8:cf:72:2b:b1:c3:23:63:61:0f:14:de:7a:66:71:80:c0:ff: de:5d:54:16:a4:25:5d:51:ea:b3:7f:2d:55:47:a3:55:52:de: 7d:22:de:16:6f:78:98:a4:93:68:d2:da:00:5d:52:d8:72:ea: 19:13:4c:e9:1d:29:a0:dc:b1:2c:f2:7b:5a:b2:a4:55:d5:67: aa:3e:6f:69:d7:88:bf:24:b0:94:58:1e:9a:56:14:64:7f:3b: 00:0c:ed:d8:0b:5c:82:45:85:4a:ab:d6:22:c8:e1:97:14:9a: 3a:e2:15:b6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu0XRt7KAjxqPRsYj4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmNjdiMTItNDU4Zi00MjU3LWJkYjEtZGU4NGIxYjhk NDBkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MjMzMGEzZmItMDE0ZS00ODhjLWFmZDEtNDE4M2ZmMTlmNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosK1e05ECZG1TKR0107hxg4ucT9RNhLJh7Ea BHggNAlbPP3TlFw6QM12SfcK1aKtUMdv0qtyebRsw2HvCuIQHCJQ45ImlGt/zGeY DOhFktQCYoSzCZDUNkoE99O8EkUaiky6Y3lXHwB3ena5ZNRPLaAwKqAT9n3O8o6p +0/uBdjWmQqHJNGwKp1BvYTkWOCnbhw31JsU22jqv0q1G/WInE0d275SpOIxtk8y DLAiFUBLwS+JljGyCEE9yLOI9fd9doVHa6qt9tgFNd5jVkd4/68Nw6Vqic0VbRTO s/zueiVClYUQsOv3ktq/RVwZrZZkFdbU102/UTA2KWqMB4ZoWQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCfezfgcIE5fy+K6k0Foiz6xLrOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2 N2IxMi00NThmLTQyNTctYmRiMS1kZTg0YjFiOGQ0MGQvZTc2N2JhMDQtZTcyOS0z NmE5LWFkMmUtYWMxMmU3ZDhjNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNmNjdiMTItNDU4Zi00MjU3LWJk YjEtZGU4NGIxYjhkNDBkL2EzZjY3YjEyLTQ1OGYtNDI1Ny1iZGIxLWRlODRiMWI4 ZDQwZC5jcmwwHwYDVR0jBBgwFoAUeusTNaT6sOe2Pmwwzb5EUU2NCOwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2N2IxMi00NThmLTQyNTctYmRiMS1kZTg0 YjFiOGQ0MGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7WoMA4E AgACMAgDBgQmAvixADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAL+IFTwSnkMk/ZQ1VTzUDWNxmtO0u1teSm TNsuMT6TVWOT6Dmx7j5ixInvGNIlKv8mcBaQ4TiTA0mcU/9CFcUHCT2mZvSAdCZL UarYu9fDr6fWu00CMqYbvTBRD0vvKzfGfAWkNMycy8Kspj3Nv5uSU/CbXc/IdBT8 fxNZrN1OT2dvAr/wzi5rPeWUx6ZYwoW4z3IrscMjY2EPFN56ZnGAwP/eXVQWpCVd Ueqzfy1VR6NVUt59It4Wb3iYpJNo0toAXVLYcuoZE0zpHSmg3LEs8ntasqRV1Weq Pm9p14i/JLCUWB6aVhRkfzsADO3YC1yCRYVKq9YiyOGXFJo64hW2 -----END CERTIFICATE-----Generated at Wed Nov 5 20:46:07 2025 by rpki-client