$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa File: 2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa (raw, json) Hash identifier: 1RHsWq3DaPaBQ6EX5d80j5F64PbLKxN1GOG7xFglixc= Subject key identifier: DC:0A:E2:36:2E:E8:5D:72:76:29:6A:CF:26:25:07:8B:6A:6D:F4:76 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584B970CDDDC980EB5541BF41280 Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16584 IP address blocks: 23.140.96.0/24 maxlen: 24 23.140.97.0/24 maxlen: 24 204.9.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:dd:dc:98:0e:b5:54:1b:f4:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=c1a816e4-37d9-4846-9083-b04e24441799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:db:ad:98:a5:b0:2c:5b:ec:ce:48:03:07:42: 95:fb:92:73:5c:cb:a1:6a:b5:e3:83:32:12:b4:e2: 89:05:ad:ac:22:45:63:15:1d:5b:d3:d8:e8:4a:22: a7:b1:d0:74:cc:13:01:8a:b3:44:75:f9:c3:1f:3f: cd:dd:b4:2c:c0:9b:9b:3d:15:cc:9b:4a:6b:a2:55: b0:1c:1a:2a:f7:3c:a3:ea:ee:26:1b:a1:75:08:9f: bd:ab:28:59:7f:76:a1:1f:12:5f:3b:d6:5f:17:e6: c4:e9:c9:2f:e2:00:5f:64:6a:9d:d4:18:b7:57:43: ba:d1:47:8f:7d:38:81:ca:83:55:d0:44:66:c4:2f: c1:10:58:f7:73:85:cf:ce:99:b4:0a:97:db:9c:40: e0:27:4a:36:d9:1b:a6:7f:88:07:da:e6:a7:92:22: c6:63:7d:cb:b4:78:49:85:f7:1e:90:81:2f:8a:bd: 53:2b:a9:ce:d2:9d:1d:b2:0a:80:f7:b7:56:83:6d: 78:a8:8f:e7:f7:9e:ea:a6:28:c6:cb:04:76:f8:b2: ba:26:fa:2a:fd:78:c5:c5:47:f9:5d:39:3e:1d:9c: 39:d7:5f:f1:f6:16:42:61:26:31:8c:64:3c:1f:1e: fa:85:0e:e4:60:85:6b:73:bc:42:17:55:64:06:5d: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0A:E2:36:2E:E8:5D:72:76:29:6A:CF:26:25:07:8B:6A:6D:F4:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 23.140.96.0/23 204.9.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:da:49:7a:4a:aa:2c:8d:11:b1:b1:82:ca:04:a2:57:74:d9: 82:23:03:a6:29:ed:f0:9e:c2:d2:13:a7:2b:c1:ef:1f:8c:ad: 67:35:13:33:11:c1:27:c2:6c:79:f5:3a:0f:b8:a1:af:da:14: 53:3d:ad:32:d6:bc:28:37:d3:72:27:19:e6:75:33:55:0d:45: 24:4d:52:c4:36:da:bc:93:e5:03:7d:8f:66:a6:26:58:42:48: c9:8a:00:76:a1:e2:4a:3a:79:9b:cf:75:43:ce:50:28:65:6f: 25:76:2f:2c:53:0a:5f:a3:2c:72:a5:40:35:f9:64:9a:08:7b: 8a:54:6c:bc:b4:96:c4:ce:84:29:d2:de:51:53:54:11:b7:23: b5:f9:91:6b:a4:22:0f:73:54:22:51:50:d1:8b:68:8c:15:c9: 10:b8:f7:1a:44:e9:f3:c5:b2:ca:69:bd:2b:5d:c5:b7:64:85: 43:f5:89:e9:89:c1:cc:06:85:ea:a6:9a:bb:d8:08:f7:4c:54: 7b:82:c1:22:92:d9:57:d8:4e:ef:10:85:b5:d3:87:9c:0f:d4: 0e:be:77:5c:ce:96:b7:83:42:b2:52:ce:cc:fb:9e:88:32:27: 32:89:7b:4b:16:2a:26:fe:c2:90:6e:25:d1:2c:b6:ef:7f:bb: 86:0e:f9:70 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuXDN3cmA61VBv0EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YzFhODE2ZTQtMzdkOS00ODQ2LTkwODMtYjA0ZTI0NDQxNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29utmKWwLFvszkgDB0KV+5JzXMuharXjgzIS tOKJBa2sIkVjFR1b09joSiKnsdB0zBMBirNEdfnDHz/N3bQswJubPRXMm0prolWw HBoq9zyj6u4mG6F1CJ+9qyhZf3ahHxJfO9ZfF+bE6ckv4gBfZGqd1Bi3V0O60UeP fTiByoNV0ERmxC/BEFj3c4XPzpm0CpfbnEDgJ0o22Rumf4gH2uankiLGY33LtHhJ hfcekIEvir1TK6nO0p0dsgqA97dWg214qI/n957qpijGywR2+LK6Jvoq/XjFxUf5 XTk+HZw511/x9hZCYSYxjGQ8Hx76hQ7kYIVrc7xCF1VkBl2qDwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNwK4jYu6F1ydilqzyYlB4tqbfR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvMjM4NWRiZDctMmQ3Ny0z M2ZjLThiZGQtZmI1N2IxZWNkYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF4xgAwQC zAkkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACnaSXpKqiyNEbGxgsoEold02YIjA6Yp7fCewtITpyvB7x+M rWc1EzMRwSfCbHn1Og+4oa/aFFM9rTLWvCg303InGeZ1M1UNRSRNUsQ22ryT5QN9 j2amJlhCSMmKAHah4ko6eZvPdUPOUChlbyV2LyxTCl+jLHKlQDX5ZJoIe4pUbLy0 lsTOhCnS3lFTVBG3I7X5kWukIg9zVCJRUNGLaIwVyRC49xpE6fPFssppvStdxbdk hUP1iemJwcwGheqmmrvYCPdMVHuCwSKS2VfYTu8QhbXTh5wP1A6+d1zOlreDQrJS zsz7nogyJzKJe0sWKib+wpBuJdEstu9/u4YO+XA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:52:02 2025 by rpki-client