$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa File: 76dd9975-746a-344b-b81a-674850bce36f.roa (raw, json) Hash identifier: n+VAg3bLiQk+CoJTFkXQZFWySFHI69DePzgv++Vlopk= Subject key identifier: 5F:9B:4C:C0:71:FA:F4:B2:D6:B1:80:11:FD:6A:AF:BF:44:58:97:C9 Certificate issuer: /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a Certificate serial: 010D0C9F4328584AFEE6A5B92D226C0791BA45C0 Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 398900 IP address blocks: 23.134.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:a5:b9:2d:22:6c:07:91:ba:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=a16a6841-7445-4758-b903-ca1268df0b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:f9:43:05:51:3c:e1:c6:5e:f5:a6:38:fa: 04:23:db:8a:df:ac:27:f0:dd:b8:1f:59:06:d1:fa: ef:c2:aa:de:8c:aa:06:05:31:55:1b:97:36:b7:f1: 92:5f:61:a8:5a:69:f0:78:fc:70:f2:9d:3c:7d:53: 3a:e6:0f:66:ef:06:52:fd:a0:c9:99:2b:2f:40:eb: 2b:da:02:ef:43:33:10:d6:2d:44:d8:61:7f:a6:47: 64:ec:96:90:0e:9a:6e:4d:bc:7f:0b:9d:27:50:9a: 52:96:8e:5b:c0:1a:a7:90:43:b4:6a:60:7c:a3:dc: 12:16:5a:ba:12:d0:3a:09:ac:9a:85:0b:8c:10:ef: 42:be:37:5e:38:39:b2:e2:86:49:74:1f:4c:b8:80: 1b:cc:eb:e7:ea:71:0b:fa:70:a5:60:7e:9b:7d:f1: fe:f4:5b:a1:97:94:5e:43:23:d4:c2:46:19:16:7d: cd:0b:50:78:83:c7:1b:c9:73:ef:23:66:23:97:44: 28:72:cc:d5:3a:3b:9e:8b:99:dd:77:69:e1:bf:8c: 5f:94:3f:38:40:42:16:d1:cd:22:05:05:9c:4b:48: 52:2a:65:81:e9:41:29:12:b4:8c:98:a3:e3:8a:0e: 5f:e2:e1:df:c7:61:6d:7f:c7:27:9f:75:03:a3:bd: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9B:4C:C0:71:FA:F4:B2:D6:B1:80:11:FD:6A:AF:BF:44:58:97:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl X509v3 Authority Key Identifier: keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer sbgp-ipAddrBlock: critical IPv4: 23.134.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:38:0c:20:96:e7:a3:94:35:e1:60:f8:da:58:ea:56:af:5d: 87:4b:d9:9e:0c:f4:a8:bf:5d:94:76:b1:a8:32:91:42:3e:4a: 93:13:98:51:29:dd:ab:61:8d:78:a5:17:97:26:b7:83:6f:ff: 9a:e1:ee:3a:cd:b1:dd:da:a5:b6:d3:ff:d7:13:b6:8a:23:22: bf:f9:8e:38:73:ba:8e:4e:55:9e:5b:a8:6f:08:c1:f7:f4:12: f3:df:53:a2:fe:19:0d:94:9f:2e:50:8d:94:ba:5a:21:f3:49: 70:d0:e4:b3:89:05:16:cc:f5:39:13:ea:bf:1b:19:8e:83:eb: a1:21:a8:2a:35:8b:7b:93:a1:d3:75:96:06:96:7b:09:dc:4b: c8:36:c3:b5:b3:83:ea:cc:f5:83:0b:ac:69:ad:24:06:82:cf: a6:ad:33:3d:d3:bb:d4:3d:61:49:8e:33:8c:39:f2:1a:eb:c3: fa:01:62:fa:cb:30:3c:07:b9:f1:26:65:90:b3:55:21:d4:f1: c8:b9:ee:02:ed:e9:b9:39:e3:c3:ad:95:21:c9:bc:c5:79:b8: 53:70:be:d8:5c:e2:95:cb:3a:81:5a:2b:48:8b:c7:1c:57:38: 0e:f9:c6:c3:40:6f:55:e6:a2:5a:87:c4:9d:d5:37:48:01:30: 25:fc:2f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qW5LSJsB5G6RcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkOWZjN2EtZjM2Ni00ODVmLWEyYzgtNThjNGI0NzAz NjFhMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YTE2YTY4NDEtNzQ0NS00NzU4LWI5MDMtY2ExMjY4ZGYwYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWP5QwVRPOHGXvWmOPoEI9uK36wn8N24H1kG 0frvwqrejKoGBTFVG5c2t/GSX2GoWmnwePxw8p08fVM65g9m7wZS/aDJmSsvQOsr 2gLvQzMQ1i1E2GF/pkdk7JaQDppuTbx/C50nUJpSlo5bwBqnkEO0amB8o9wSFlq6 EtA6CayahQuMEO9CvjdeODmy4oZJdB9MuIAbzOvn6nEL+nClYH6bffH+9Fuhl5Re QyPUwkYZFn3NC1B4g8cbyXPvI2Yjl0QocszVOjuei5ndd2nhv4xflD84QEIW0c0i BQWcS0hSKmWB6UEpErSMmKPjig5f4uHfx2Ftf8cnn3UDo72ygQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+bTMBx+vSy1rGAEf1qr79EWJfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5 ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0YjQ3MDM2MWEvNzZkZDk5NzUtNzQ2YS0z NDRiLWI4MWEtNjc0ODUwYmNlMzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkOWZjN2EtZjM2Ni00ODVmLWEy YzgtNThjNGI0NzAzNjFhLzQ1ZDlmYzdhLWYzNjYtNDg1Zi1hMmM4LTU4YzRiNDcw MzYxYS5jcmwwHwYDVR0jBBgwFoAUlhKw563ZcfLlH1BW53pwJQ2Yt7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0 YjQ3MDM2MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4boMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo4DCCW56OUNeFg+NpY6lavXYdL2Z4M9Ki/XZR2sagykUI+SpMTmFEp 3athjXilF5cmt4Nv/5rh7jrNsd3apbbT/9cTtoojIr/5jjhzuo5OVZ5bqG8Iwff0 EvPfU6L+GQ2Uny5QjZS6WiHzSXDQ5LOJBRbM9TkT6r8bGY6D66EhqCo1i3uTodN1 lgaWewncS8g2w7Wzg+rM9YMLrGmtJAaCz6atMz3Tu9Q9YUmOM4w58hrrw/oBYvrL MDwHufEmZZCzVSHU8ci57gLt6bk548OtlSHJvMV5uFNwvthc4pXLOoFaK0iLxxxX OA75xsNAb1XmolqHxJ3VN0gBMCX8L+E= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:30 2025 by rpki-client