$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa File: c4f1131d-3203-3b87-9282-48a9051598c8.roa (raw, json) Hash identifier: iEErocXH455nqjMAb1Rwqxw3S3epwUw5ErBwSa1LXUA= Subject key identifier: EC:43:69:09:31:87:6B:9B:E9:04:59:94:26:D0:C6:A9:65:AC:C6:EA Certificate issuer: /CN=b59002d2-8fd4-446f-987c-e63485cf1a5a Certificate serial: 010D0C9F4328584B5571E5E07C442EBB47ECD700 Authority key identifier: FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 401474 IP address blocks: 23.133.100.0/24 maxlen: 24 2602:f724::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e5:e0:7c:44:2e:bb:47:ec:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59002d2-8fd4-446f-987c-e63485cf1a5a Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=03116fb0-a15f-4cd0-ae12-56b896cade5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b2:49:d7:fb:96:de:10:fb:88:b9:fd:cd:da: b7:25:f3:6c:1b:50:07:f1:e8:ae:9c:6b:dd:c4:0c: c4:8f:6c:14:60:76:7e:9c:75:a8:a4:72:34:eb:35: 3c:ef:74:ae:9d:2e:4e:03:35:21:2a:03:27:39:41: 24:d2:37:3e:d3:f6:78:13:87:50:c8:3c:c2:96:e6: be:46:8a:f6:98:68:21:5a:0f:a3:d7:b6:e3:e1:c4: 82:96:d1:d2:20:5f:33:59:50:fb:32:9a:1d:c5:d6: 5c:dc:59:34:79:6e:e5:1c:9f:94:0c:f9:d8:ca:c5: 0e:b5:83:e4:41:bb:cf:c4:7a:37:e4:44:49:39:84: 36:0c:99:68:0a:01:c8:ce:a7:af:44:5a:8d:e6:fb: 76:c5:38:4a:a3:a0:9a:dc:d7:0a:8d:5c:68:62:86: f8:28:df:65:c8:64:61:49:88:a6:59:0c:c8:5b:02: e9:3c:a0:ce:46:ed:3c:c2:35:9c:aa:7c:0e:bc:63: 31:e3:50:97:6b:b4:94:27:62:4d:9b:0b:f9:5b:77: 16:6f:96:c1:e3:cc:e7:09:74:c2:ba:45:f2:9d:26: dc:d4:18:d3:96:e6:a3:e7:2f:a9:00:38:d1:31:5b: ca:82:2f:7f:98:72:d8:70:e5:e5:15:c8:9f:62:55: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:69:09:31:87:6B:9B:E9:04:59:94:26:D0:C6:A9:65:AC:C6:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/c4f1131d-3203-3b87-9282-48a9051598c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl X509v3 Authority Key Identifier: keyid:FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer sbgp-ipAddrBlock: critical IPv4: 23.133.100.0/24 IPv6: 2602:f724::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:fc:e2:c7:ba:65:79:73:49:f6:58:48:42:b3:8f:22:5b:2d: b4:65:15:01:cb:17:9c:40:6a:52:40:ef:55:f5:61:a5:ec:da: c2:c9:14:6b:64:52:02:96:1f:9d:8b:30:8f:05:5a:b1:f5:a8: c6:5f:bc:d8:2a:a3:be:ba:e4:48:c9:fc:a3:b5:e0:db:1a:f9: 7d:5e:5c:5f:d4:bb:41:38:85:01:31:4a:4a:7c:28:d1:40:0d: d5:48:1a:b0:85:50:a3:ec:43:59:11:8f:26:0a:53:2a:a1:df: 0a:1b:ba:40:8e:50:42:bc:72:ed:f5:68:6e:03:42:6d:ac:d5: d7:43:95:97:71:e1:de:b6:69:29:0b:ca:e3:58:ae:6b:d9:48: 24:06:df:06:e7:a6:ac:f4:a7:f9:6a:72:11:6f:b5:1b:ef:11: 1e:a3:95:9b:56:ff:61:ca:4d:09:f5:da:7b:9e:64:d7:ee:a1: 6e:e9:0c:8a:13:71:85:ee:c2:71:b3:a6:9e:9c:fc:9b:d0:bf: 47:f2:26:64:e3:2f:81:9f:7b:c9:b8:83:f3:ea:48:62:66:f4: 94:d8:c7:57:b0:b9:19:04:22:ce:bc:d7:a0:8e:15:16:a1:c3: cc:e8:b3:d2:2b:01:28:b5:96:8e:98:58:2a:a6:30:72:2a:7c: 41:fa:e4:2d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtVceXgfEQuu0fs1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU5MDAyZDItOGZkNC00NDZmLTk4N2MtZTYzNDg1Y2Yx YTVhMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk MDMxMTZmYjAtYTE1Zi00Y2QwLWFlMTItNTZiODk2Y2FkZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7JJ1/uW3hD7iLn9zdq3JfNsG1AH8eiunGvd xAzEj2wUYHZ+nHWopHI06zU873SunS5OAzUhKgMnOUEk0jc+0/Z4E4dQyDzClua+ Ror2mGghWg+j17bj4cSCltHSIF8zWVD7MpodxdZc3Fk0eW7lHJ+UDPnYysUOtYPk QbvPxHo35ERJOYQ2DJloCgHIzqevRFqN5vt2xThKo6Ca3NcKjVxoYob4KN9lyGRh SYimWQzIWwLpPKDORu08wjWcqnwOvGMx41CXa7SUJ2JNmwv5W3cWb5bB48znCXTC ukXynSbc1BjTluaj5y+pADjRMVvKgi9/mHLYcOXlFcifYlVFrQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOxDaQkxh2ub6QRZlCbQxqllrMbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNTkw MDJkMi04ZmQ0LTQ0NmYtOTg3Yy1lNjM0ODVjZjFhNWEvYzRmMTEzMWQtMzIwMy0z Yjg3LTkyODItNDhhOTA1MTU5OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjU5MDAyZDItOGZkNC00NDZmLTk4 N2MtZTYzNDg1Y2YxYTVhL2I1OTAwMmQyLThmZDQtNDQ2Zi05ODdjLWU2MzQ4NWNm MWE1YS5jcmwwHwYDVR0jBBgwFoAU/+LGVpY+PHvaE/LxAWasVBvyCrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNTkwMDJkMi04ZmQ0LTQ0NmYtOTg3Yy1lNjM0 ODVjZjFhNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VkMA4E AgACMAgDBgQmAvckADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAK/OLHumV5c0n2WEhCs48iWy20ZRUByxec QGpSQO9V9WGl7NrCyRRrZFIClh+dizCPBVqx9ajGX7zYKqO+uuRIyfyjteDbGvl9 Xlxf1LtBOIUBMUpKfCjRQA3VSBqwhVCj7ENZEY8mClMqod8KG7pAjlBCvHLt9Whu A0JtrNXXQ5WXceHetmkpC8rjWK5r2UgkBt8G56as9Kf5anIRb7Ub7xEeo5WbVv9h yk0J9dp7nmTX7qFu6QyKE3GF7sJxs6aenPyb0L9H8iZk4y+Bn3vJuIPz6khiZvSU 2MdXsLkZBCLOvNegjhUWocPM6LPSKwEotZaOmFgqpjByKnxB+uQt -----END CERTIFICATE-----Generated at Wed Nov 5 10:47:41 2025 by rpki-client