$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa File: cfaae5c8-a32a-3937-8b38-0909380010e1.roa (raw, json) Hash identifier: 7qmlUG1fPUI2v8f0QEe0k3omUdClClcN+Pc/2XakMlg= Subject key identifier: 1B:13:70:1D:D7:E1:A9:25:05:56:EA:AC:B0:2F:5A:67:CE:47:76:E2 Certificate issuer: /CN=8deb6383-7043-43c4-b39c-395a97ee0114 Certificate serial: 010D0C9F4328584B2066D021E682509C8E7E2F00 Authority key identifier: E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 13925 IP address blocks: 23.131.160.0/24 maxlen: 24 23.131.161.0/24 maxlen: 24 2620:138:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d0:21:e6:82:50:9c:8e:7e:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8deb6383-7043-43c4-b39c-395a97ee0114 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=a75ff8c3-44f9-4096-87b9-b6350bac3974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:9a:27:2f:95:1d:08:31:fd:13:86:c0:81: 5a:4e:c6:7a:48:85:a5:51:0a:40:e4:6f:6c:ca:72: 6c:47:da:63:1b:05:b1:52:d1:9d:16:e5:f8:98:1e: da:e1:4f:76:de:e9:d0:18:54:3b:66:ae:62:58:b5: 81:30:38:05:1f:92:75:f4:48:c2:07:34:ac:dd:bc: 90:af:b2:b2:d7:c3:10:99:ba:3d:8e:a8:80:1c:95: 3e:81:ff:5f:48:32:3a:25:c0:8d:6c:d9:9f:36:1d: 93:17:23:58:d1:1e:f0:cf:8a:a1:dc:e3:27:f6:4f: 2c:bb:51:2e:a4:6b:64:2d:fa:a0:48:a7:73:56:76: 08:b9:0f:40:d1:b8:b2:fd:2f:d2:53:a8:69:ba:c9: a9:c5:09:4b:1a:bb:b5:4c:72:c9:c8:6c:22:a6:66: f4:dd:d4:60:74:37:3b:31:29:9a:67:97:0d:29:f7: 79:c1:bf:fe:8e:bf:1a:3a:59:b5:55:3b:f8:30:c1: bd:88:91:3c:d5:cd:f5:d0:ba:2b:aa:d3:3d:61:74: f3:1e:41:32:e3:7b:7f:24:85:8a:75:a0:e8:70:c6: 8c:f4:6b:51:36:d6:a3:c9:f0:77:be:4b:2a:1a:31: fa:f3:f4:fc:d0:30:97:a2:39:6a:73:91:46:6e:47: 3a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:13:70:1D:D7:E1:A9:25:05:56:EA:AC:B0:2F:5A:67:CE:47:76:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl X509v3 Authority Key Identifier: keyid:E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer sbgp-ipAddrBlock: critical IPv4: 23.131.160.0/23 IPv6: 2620:138:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:80:6a:54:53:1d:22:f5:f4:ef:d6:0f:49:aa:75:d5:26:c0: 63:77:5b:e0:c5:33:d0:ce:9a:12:a0:8c:77:e1:b4:28:16:fb: 2a:aa:4d:77:d6:a9:41:5a:43:42:d8:4a:a3:a2:92:61:80:e5: 50:ef:a2:b2:d8:2d:8f:88:81:b5:59:cb:d0:e1:db:4c:22:a9: d3:fc:c3:cf:6b:17:38:76:d4:51:c2:2c:ec:32:13:0e:3d:eb: b1:5d:7b:6e:75:60:34:7d:9e:a3:d0:d2:bb:70:62:42:89:2e: 4d:7e:d1:cf:f7:a9:eb:06:1d:0f:cb:89:0b:10:c3:88:e7:6d: 05:ef:8b:fa:69:54:fd:15:b2:08:7c:75:db:b3:2e:cf:ab:fd: 30:c8:3f:fe:af:1b:19:3a:fe:e8:e0:71:e2:65:e7:1a:b2:a2: c8:0a:99:bb:51:09:51:9a:6e:b4:0d:38:67:15:fe:f6:b6:65: 08:7d:04:4b:89:bd:b5:b0:4c:fc:f4:c4:71:cf:cc:cd:a3:19: a8:2f:9a:59:06:77:82:e2:7f:40:9e:88:4f:5f:10:22:9f:96: 3f:f8:24:dc:0a:a7:78:4b:fa:58:f4:61:70:d9:bd:df:2a:77: 56:55:93:03:7b:75:bd:18:5d:e0:75:23:0c:ed:7d:74:6d:3f: c6:46:fe:3c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsgZtAh5oJQnI5+LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRlYjYzODMtNzA0My00M2M0LWIzOWMtMzk1YTk3ZWUw MTE0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YTc1ZmY4YzMtNDRmOS00MDk2LTg3YjktYjYzNTBiYWMzOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5yaJy+VHQgx/ROGwIFaTsZ6SIWlUQpA5G9s ynJsR9pjGwWxUtGdFuX4mB7a4U923unQGFQ7Zq5iWLWBMDgFH5J19EjCBzSs3byQ r7Ky18MQmbo9jqiAHJU+gf9fSDI6JcCNbNmfNh2TFyNY0R7wz4qh3OMn9k8su1Eu pGtkLfqgSKdzVnYIuQ9A0biy/S/SU6hpusmpxQlLGru1THLJyGwipmb03dRgdDc7 MSmaZ5cNKfd5wb/+jr8aOlm1VTv4MMG9iJE81c310LorqtM9YXTzHkEy43t/JIWK daDocMaM9GtRNtajyfB3vksqGjH68/T80DCXojlqc5FGbkc6nwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBsTcB3X4aklBVbqrLAvWmfOR3biMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZGVi NjM4My03MDQzLTQzYzQtYjM5Yy0zOTVhOTdlZTAxMTQvY2ZhYWU1YzgtYTMyYS0z OTM3LThiMzgtMDkwOTM4MDAxMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGRlYjYzODMtNzA0My00M2M0LWIz OWMtMzk1YTk3ZWUwMTE0LzhkZWI2MzgzLTcwNDMtNDNjNC1iMzljLTM5NWE5N2Vl MDExNC5jcmwwHwYDVR0jBBgwFoAU6W//RnPZ9uE0VumNjwSN0GAc6KgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZGViNjM4My03MDQzLTQzYzQtYjM5Yy0zOTVh OTdlZTAxMTQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF4OgMA8E AgACMAkDBwQmIAE4UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj4BqVFMdIvX079YPSap11SbAY3db4MUz 0M6aEqCMd+G0KBb7KqpNd9apQVpDQthKo6KSYYDlUO+istgtj4iBtVnL0OHbTCKp 0/zDz2sXOHbUUcIs7DITDj3rsV17bnVgNH2eo9DSu3BiQokuTX7Rz/ep6wYdD8uJ CxDDiOdtBe+L+mlU/RWyCHx127Muz6v9MMg//q8bGTr+6OBx4mXnGrKiyAqZu1EJ UZputA04ZxX+9rZlCH0ES4m9tbBM/PTEcc/MzaMZqC+aWQZ3guJ/QJ6IT18QIp+W P/gk3AqneEv6WPRhcNm93yp3VlWTA3t1vRhd4HUjDO19dG0/xkb+PA== -----END CERTIFICATE-----Generated at Mon Oct 20 12:14:35 2025 by rpki-client