$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/325c49cf-ad04-3c83-b116-23285190c11e.roa File: 325c49cf-ad04-3c83-b116-23285190c11e.roa (raw, json) Hash identifier: TdReN8yYl7VmXIhRNKrqIP6Y90030YXJXdt5OpfThzU= Subject key identifier: 1B:CD:28:AF:55:EF:07:47:5D:09:C8:E6:07:35:D4:3C:7A:AB:EF:10 Certificate issuer: /CN=6213b5ae-ce34-4898-bd87-dec0995e7d16 Certificate serial: 010D0C9F4328584B80B76353F41C6D1A76C7A500 Authority key identifier: 21:80:EF:97:B8:26:8F:9D:BC:71:5F:64:E2:C0:18:03:EA:37:89:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/325c49cf-ad04-3c83-b116-23285190c11e.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 4556 IP address blocks: 23.159.0.0/24 maxlen: 24 2606:db80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/6213b5ae-ce34-4898-bd87-dec0995e7d16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/6213b5ae-ce34-4898-bd87-dec0995e7d16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:63:53:f4:1c:6d:1a:76:c7:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6213b5ae-ce34-4898-bd87-dec0995e7d16 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=6e8ebf5b-549c-4c82-a4e4-d8442c6aa525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:bc:24:6f:30:2b:ac:f3:99:cc:5a:ed:ed:17: e0:58:11:74:a3:7d:14:ba:e7:6f:92:cf:09:87:ab: c3:04:24:85:21:ee:d3:5a:3d:06:98:07:bd:d0:64: 1d:2d:c6:ea:2e:f2:e0:53:67:5c:a8:26:e4:20:99: 07:0c:7f:35:47:a0:00:b4:57:95:99:cb:e3:15:8f: cb:f4:29:49:db:38:1d:f4:89:8a:af:9b:b1:76:96: 6b:e8:e8:90:a3:ca:bd:07:27:9b:15:6a:a7:d2:3e: 48:e8:12:6f:53:54:e5:59:59:c7:36:8c:f8:b2:61: e3:9a:05:e6:c1:27:db:83:b3:33:b7:a0:fd:51:06: 42:22:9f:9b:dd:38:58:bc:e5:8d:bc:44:1d:8d:55: 06:31:59:a8:2a:ed:a9:60:a6:6a:73:7c:db:92:bb: b4:d5:5f:d5:47:c6:e2:02:6a:84:ad:7c:34:75:e6: c9:7b:df:4a:83:c6:71:49:33:34:59:c4:8c:e7:9c: ad:6a:ec:7e:32:2d:fe:ce:73:ae:50:66:a0:f0:aa: 2c:7a:99:d5:9c:15:76:63:f1:c2:60:b3:34:3a:16: 48:d6:68:d7:35:ef:2c:7d:60:e8:8c:00:ce:e6:7f: 11:f0:28:05:0b:90:2e:6a:85:fe:cf:32:19:5c:ad: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:28:AF:55:EF:07:47:5D:09:C8:E6:07:35:D4:3C:7A:AB:EF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/325c49cf-ad04-3c83-b116-23285190c11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16/6213b5ae-ce34-4898-bd87-dec0995e7d16.crl X509v3 Authority Key Identifier: keyid:21:80:EF:97:B8:26:8F:9D:BC:71:5F:64:E2:C0:18:03:EA:37:89:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6213b5ae-ce34-4898-bd87-dec0995e7d16.cer sbgp-ipAddrBlock: critical IPv4: 23.159.0.0/24 IPv6: 2606:db80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:70:91:e0:6e:c2:40:bc:56:34:b1:8c:08:c5:57:8d:66:82: 37:9a:c8:80:0f:34:47:79:69:b1:13:d3:61:6b:24:0f:a6:45: ae:af:9d:10:a6:5c:a4:84:3a:66:49:91:eb:85:56:cb:5e:0b: 53:98:16:59:99:2a:7b:9c:04:c7:f8:9e:7c:eb:5b:95:f0:7b: fc:eb:08:b1:c3:7d:e2:58:58:02:95:1a:2d:c1:1a:05:21:8c: c0:b7:9a:6a:be:4c:41:92:5d:18:32:35:5a:69:ab:67:83:4f: 2a:54:45:27:6c:11:d3:b2:a3:7f:6b:26:8e:11:9e:ed:ae:de: 5d:a4:2f:ab:17:5f:27:66:a9:b1:c3:4f:6b:0b:da:45:af:48: 02:f8:08:33:a9:8f:cb:be:92:68:c0:d3:f2:0f:c5:d5:22:18: 8e:91:20:89:71:78:80:5b:d4:63:41:bb:15:ec:3a:60:ac:7e: e9:f0:9f:2b:0b:52:3b:57:7a:cb:5d:f8:e0:18:8a:32:2f:75: cf:2a:4b:5a:a1:60:c6:08:7b:49:d5:0a:56:79:9a:42:aa:49: 58:c0:2d:8e:c9:e3:d6:9c:17:41:3c:bf:1d:6b:17:a6:3d:15: a1:75:71:47:b4:3d:f3:28:0e:16:e7:fd:91:4c:97:ba:d1:86: 30:29:e3:5e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEuAt2NT9BxtGnbHpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIxM2I1YWUtY2UzNC00ODk4LWJkODctZGVjMDk5NWU3 ZDE2MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NmU4ZWJmNWItNTQ5Yy00YzgyLWE0ZTQtZDg0NDJjNmFhNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLwkbzArrPOZzFrt7RfgWBF0o30Uuudvks8J h6vDBCSFIe7TWj0GmAe90GQdLcbqLvLgU2dcqCbkIJkHDH81R6AAtFeVmcvjFY/L 9ClJ2zgd9ImKr5uxdpZr6OiQo8q9ByebFWqn0j5I6BJvU1TlWVnHNoz4smHjmgXm wSfbg7Mzt6D9UQZCIp+b3ThYvOWNvEQdjVUGMVmoKu2pYKZqc3zbkru01V/VR8bi AmqErXw0debJe99Kg8ZxSTM0WcSM55ytaux+Mi3+znOuUGag8KosepnVnBV2Y/HC YLM0OhZI1mjXNe8sfWDojADO5n8R8CgFC5AuaoX+zzIZXK1H+wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFBvNKK9V7wdHXQnI5gc11Dx6q+8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MjEz YjVhZS1jZTM0LTQ4OTgtYmQ4Ny1kZWMwOTk1ZTdkMTYvMzI1YzQ5Y2YtYWQwNC0z YzgzLWIxMTYtMjMyODUxOTBjMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjIxM2I1YWUtY2UzNC00ODk4LWJk ODctZGVjMDk5NWU3ZDE2LzYyMTNiNWFlLWNlMzQtNDg5OC1iZDg3LWRlYzA5OTVl N2QxNi5jcmwwHwYDVR0jBBgwFoAUIYDvl7gmj528cV9k4sAYA+o3iVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MjEzYjVhZS1jZTM0LTQ4OTgtYmQ4Ny1kZWMw OTk1ZTdkMTYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF58AMA0E AgACMAcDBQAmBtuAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAN5wkeBuwkC8VjSxjAjFV41mgjeayIAPNEd5 abET02FrJA+mRa6vnRCmXKSEOmZJkeuFVsteC1OYFlmZKnucBMf4nnzrW5Xwe/zr CLHDfeJYWAKVGi3BGgUhjMC3mmq+TEGSXRgyNVppq2eDTypURSdsEdOyo39rJo4R nu2u3l2kL6sXXydmqbHDT2sL2kWvSAL4CDOpj8u+kmjA0/IPxdUiGI6RIIlxeIBb 1GNBuxXsOmCsfunwnysLUjtXestd+OAYijIvdc8qS1qhYMYIe0nVClZ5mkKqSVjA LY7J49acF0E8vx1rF6Y9FaF1cUe0PfMoDhbn/ZFMl7rRhjAp414= -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:33 2025 by rpki-client