$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa File: d4df3a08-c899-316f-abc6-b58548efce04.roa (raw, json) Hash identifier: WO4P10fL/EkGOHuq9PktNuu9ZDhXaAv/jsY2sv+UVhM= Subject key identifier: 91:49:2D:E0:CA:29:7B:55:55:6C:09:F3:98:BE:9E:4E:8D:5A:E0:89 Certificate issuer: /CN=d7396eb8-1550-4d28-9285-c71c97fd087d Certificate serial: 010D0C9F4328584BBB759A1ABCF4FC88B86E0540 Authority key identifier: FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 31959 IP address blocks: 23.130.252.0/24 maxlen: 24 2602:f76a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:9a:1a:bc:f4:fc:88:b8:6e:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7396eb8-1550-4d28-9285-c71c97fd087d Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=8cd4fe1f-7e9b-429e-82cb-517dc6a5f7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:7e:51:01:ff:a6:49:a2:64:f7:fb:46:33: bb:e1:f7:e1:3c:04:0d:67:3b:4f:af:d3:26:1c:21: a1:0b:53:63:d7:a8:45:b7:68:e7:e5:fc:5d:76:cf: 1c:58:78:db:ea:37:fe:72:6e:f7:2b:f3:77:9a:33: 16:d5:1b:fc:4c:75:a5:45:4a:89:5e:06:bf:14:19: 47:8f:c5:1d:e2:bb:c0:a2:38:01:d6:6d:da:0e:2e: 6c:31:88:46:44:77:e1:43:4b:50:c1:69:67:40:8c: f5:e1:2d:fa:80:20:05:be:1e:ea:83:26:d7:08:5e: fa:d1:b7:9a:95:50:cc:10:a5:64:01:51:43:f3:f9: a2:2d:c3:fb:82:2d:b6:72:63:37:4f:af:2e:3a:73: 30:21:16:5d:fd:ef:95:6b:c1:a9:e1:7c:bf:18:e3: 8b:62:60:7f:e6:0d:ab:44:31:d5:ca:13:c0:ba:f0: ac:80:46:67:78:7a:e6:38:b7:f7:90:5c:f4:d2:5d: c9:5d:32:bc:68:38:87:9c:e6:9f:09:cd:92:a5:6a: 42:d0:52:c6:31:12:c6:1c:9b:ca:9c:30:73:aa:17: 5b:e8:87:99:58:b3:bc:93:b9:53:b3:b0:7b:5e:95: d7:9c:fa:2c:35:c5:33:50:8e:05:c7:ab:8e:bb:12: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:49:2D:E0:CA:29:7B:55:55:6C:09:F3:98:BE:9E:4E:8D:5A:E0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl X509v3 Authority Key Identifier: keyid:FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.252.0/24 IPv6: 2602:f76a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f5:3a:59:23:a2:51:85:00:9c:18:1a:83:ed:b1:bf:b3:78: 0e:e0:d8:50:1c:e8:d4:71:b2:9f:48:7c:30:88:a7:3e:6f:c4: c3:ad:e7:20:69:ab:76:fe:b5:94:9b:fb:44:b0:cf:e2:ab:7a: 59:d8:75:d3:80:c3:c2:8d:0b:a4:a3:86:40:3e:83:55:10:d6: 9b:2b:f9:ee:41:81:a4:1e:00:49:45:a0:e0:19:f2:62:88:b8: 31:43:ad:77:74:49:72:77:51:bf:25:87:91:b5:70:7c:32:e7: f0:32:cf:dd:ba:d2:45:98:47:9b:38:6a:66:c3:92:34:e2:03: 75:b5:e0:08:c3:25:35:02:11:ff:45:02:d2:dd:ea:16:f2:ae: 35:a6:36:a5:8b:5b:f7:51:3f:76:2d:c5:90:32:a3:ee:67:52: 66:6e:4f:5f:10:96:8b:04:65:f9:4e:57:0c:9c:64:04:50:ec: 15:af:a1:dc:ce:06:32:10:02:df:4b:5b:b5:09:75:94:86:68: 4a:b1:9a:56:a2:fd:6f:80:db:91:31:1d:bf:2e:84:ea:d5:2d: 7d:7b:95:ae:25:89:81:86:4b:2c:a7:3f:03:52:4e:a3:74:c8: 87:8a:51:ba:d1:de:1f:88:04:84:e7:28:2d:23:63:b4:c3:26: 52:09:13:dc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu7dZoavPT8iLhuBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDczOTZlYjgtMTU1MC00ZDI4LTkyODUtYzcxYzk3ZmQw ODdkMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk OGNkNGZlMWYtN2U5Yi00MjllLTgyY2ItNTE3ZGM2YTVmN2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAZ+UQH/pkmiZPf7RjO74ffhPAQNZztPr9Mm HCGhC1Nj16hFt2jn5fxdds8cWHjb6jf+cm73K/N3mjMW1Rv8THWlRUqJXga/FBlH j8Ud4rvAojgB1m3aDi5sMYhGRHfhQ0tQwWlnQIz14S36gCAFvh7qgybXCF760bea lVDMEKVkAVFD8/miLcP7gi22cmM3T68uOnMwIRZd/e+Va8Gp4Xy/GOOLYmB/5g2r RDHVyhPAuvCsgEZneHrmOLf3kFz00l3JXTK8aDiHnOafCc2SpWpC0FLGMRLGHJvK nDBzqhdb6IeZWLO8k7lTs7B7XpXXnPosNcUzUI4Fx6uOuxL+twIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJFJLeDKKXtVVWwJ85i+nk6NWuCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5 NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFjOTdmZDA4N2QvZDRkZjNhMDgtYzg5OS0z MTZmLWFiYzYtYjU4NTQ4ZWZjZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDczOTZlYjgtMTU1MC00ZDI4LTky ODUtYzcxYzk3ZmQwODdkL2Q3Mzk2ZWI4LTE1NTAtNGQyOC05Mjg1LWM3MWM5N2Zk MDg3ZC5jcmwwHwYDVR0jBBgwFoAU/fXEy1utd3VckcIWxmi9xeQPFkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFj OTdmZDA4N2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4L8MA4E AgACMAgDBgQmAvdqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBT9TpZI6JRhQCcGBqD7bG/s3gO4NhQHOjU cbKfSHwwiKc+b8TDrecgaat2/rWUm/tEsM/iq3pZ2HXTgMPCjQuko4ZAPoNVENab K/nuQYGkHgBJRaDgGfJiiLgxQ613dElyd1G/JYeRtXB8MufwMs/dutJFmEebOGpm w5I04gN1teAIwyU1AhH/RQLS3eoW8q41pjali1v3UT92LcWQMqPuZ1Jmbk9fEJaL BGX5TlcMnGQEUOwVr6HczgYyEALfS1u1CXWUhmhKsZpWov1vgNuRMR2/LoTq1S19 e5WuJYmBhksspz8DUk6jdMiHilG60d4fiASE5ygtI2O0wyZSCRPc -----END CERTIFICATE-----Generated at Wed Nov 5 13:01:04 2025 by rpki-client