$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa File: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (raw, json) Hash identifier: G42ei1h1NPV1iLNaQZKWGRJfKbJJLGkLF0lSr/s7oWU= Subject key identifier: 29:45:52:43:7C:3F:3A:D8:C3:46:60:FD:75:17:02:B5:BF:79:7E:C1 Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584B1C36D3627DEF0842AD40A100 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 401560 IP address blocks: 23.131.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d3:62:7d:ef:08:42:ad:40:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5108004e-16fd-4b5b-9066-dd10df17bdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9d:69:bd:55:c6:e0:ae:f0:ba:9c:05:7e:fc: 4f:8a:80:6b:b5:04:5d:6c:17:8c:ac:82:aa:c1:69: 2e:a6:c2:35:fc:ca:3c:45:54:9d:f2:6b:33:ad:3b: 64:c0:24:f9:e2:20:a2:8a:14:b1:31:eb:61:19:c8: 6c:52:5e:e4:d5:7a:ff:a5:95:00:b5:f2:e2:05:98: ef:f4:0b:b1:f3:ee:2d:d2:ca:e2:45:21:b3:81:1d: 96:ea:1a:7d:6f:d4:d6:94:86:31:9c:c7:fd:b4:b1: 17:e4:a7:16:e5:26:ab:84:1c:44:ab:92:cf:98:d4: 88:fe:d9:96:03:9d:57:e3:bb:35:2f:28:0b:e8:77: 16:8c:be:c4:86:04:6d:95:40:53:3a:52:43:d0:1e: fc:00:4c:5a:77:89:60:04:ce:a1:61:86:d0:18:53: e4:1f:b5:98:6f:f2:35:3e:be:f9:8c:92:d9:39:2a: a2:99:66:8b:23:c4:26:8e:53:0e:3f:1e:47:02:fb: c2:37:81:e2:23:9e:b9:ff:f4:c6:b9:b5:be:f3:e9: b5:96:7f:0f:34:20:93:57:35:83:a4:09:a7:bb:bb: d5:90:ba:38:57:4d:1d:6e:3f:9b:b5:4d:d8:c7:d1: e8:83:2f:c3:70:83:29:44:9d:24:ad:2f:fb:ed:3d: cb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:45:52:43:7C:3F:3A:D8:C3:46:60:FD:75:17:02:B5:BF:79:7E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:57:2e:26:ba:40:7f:4e:0c:9e:db:1f:8e:6c:3b:47:34:93: 4d:76:5a:b3:f2:ee:f3:60:e4:87:7a:21:e9:e9:02:7f:39:21: cb:b7:5e:b0:91:e9:a8:5b:00:08:e4:26:5e:93:e9:27:90:e6: ae:c6:f3:c4:b0:65:89:0e:e5:df:f3:24:88:41:7e:f6:5a:eb: 3a:92:0c:78:a4:cd:14:4f:8f:b0:77:ac:5a:c1:62:9e:07:5e: 67:49:1c:c4:10:9e:ad:3c:ec:27:29:e4:ab:54:13:90:09:d6: 9f:45:4e:de:fc:72:e1:e4:93:c7:9d:0c:c7:30:2c:42:44:2d: 70:a4:57:13:e7:6b:65:28:5f:e6:a9:09:79:38:7d:9d:c9:c2: 84:ef:9e:1d:66:9f:11:e6:4d:4f:b9:b6:fe:67:cf:22:76:d5: 45:e6:25:49:1c:29:66:f4:dd:13:00:70:b7:3c:74:a7:8c:33: ee:5a:56:cc:1e:36:28:40:28:b6:0a:11:3a:da:55:79:c9:21: 94:8b:aa:7d:d9:36:83:67:77:88:2c:3e:f1:9a:37:ff:72:bd: 0f:65:40:eb:3b:e3:53:64:bd:d0:b9:03:19:7e:cb:f4:7b:ab: b0:9c:f3:5d:ec:27:93:52:1f:cb:84:66:0f:0e:c3:d0:49:f5: 81:59:45:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtNife8IQq1AoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NTEwODAwNGUtMTZmZC00YjViLTkwNjYtZGQxMGRmMTdiZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ1pvVXG4K7wupwFfvxPioBrtQRdbBeMrIKq wWkupsI1/Mo8RVSd8mszrTtkwCT54iCiihSxMethGchsUl7k1Xr/pZUAtfLiBZjv 9Aux8+4t0sriRSGzgR2W6hp9b9TWlIYxnMf9tLEX5KcW5SarhBxEq5LPmNSI/tmW A51X47s1LygL6HcWjL7EhgRtlUBTOlJD0B78AExad4lgBM6hYYbQGFPkH7WYb/I1 Pr75jJLZOSqimWaLI8QmjlMOPx5HAvvCN4HiI565//TGubW+8+m1ln8PNCCTVzWD pAmnu7vVkLo4V00dbj+btU3Yx9Hogy/DcIMpRJ0krS/77T3LQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClFUkN8PzrYw0Zg/XUXArW/eX7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvNTEzMGJlZjktNWUyNC0z OTc1LTk5MTQtMDg5MmY4ZGVjN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4P8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5XLia6QH9ODJ7bH45sO0c0k012WrPy7vNg5Id6IenpAn85Icu3XrCR 6ahbAAjkJl6T6SeQ5q7G88SwZYkO5d/zJIhBfvZa6zqSDHikzRRPj7B3rFrBYp4H XmdJHMQQnq087Ccp5KtUE5AJ1p9FTt78cuHkk8edDMcwLEJELXCkVxPna2UoX+ap CXk4fZ3JwoTvnh1mnxHmTU+5tv5nzyJ21UXmJUkcKWb03RMAcLc8dKeMM+5aVswe NihAKLYKETraVXnJIZSLqn3ZNoNnd4gsPvGaN/9yvQ9lQOs741NkvdC5Axl+y/R7 q7Cc813sJ5NSH8uEZg8Ow9BJ9YFZRQM= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:37 2025 by rpki-client