$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa File: 874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa (raw, json) Hash identifier: ZuFQuVH64GzHcW5DKFdFo3ST9tKRhJl1rsyPq1InUWg= Subject key identifier: 3D:2B:2B:E0:66:9F:B1:D8:C6:89:69:56:AB:46:FA:36:E0:88:68:51 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B64CD6F546EEA60A1D6D81380 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 396982 IP address blocks: 23.251.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:6f:54:6e:ea:60:a1:d6:d8:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=871024cb-769d-41fd-8421-3e62d0636c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:68:e8:f4:df:90:be:88:28:37:9b:72:bf: c8:9e:49:03:1c:06:9c:7b:4e:41:e5:56:10:a9:f3: 01:57:98:19:b8:bc:ea:2d:73:99:0c:c8:3e:83:c0: 5d:fb:65:a6:82:6e:e2:69:62:c3:37:d5:e5:fa:6c: 85:f4:27:08:a1:f3:da:51:b0:ea:31:98:e3:e2:f8: c0:8a:70:5e:c0:03:70:d3:0e:4f:61:b3:15:76:cc: f7:d9:42:6e:da:93:f4:30:42:da:0c:bf:8d:37:bf: 7c:fa:57:17:58:08:bd:fc:d6:cf:0e:a6:bd:a7:fa: c5:cd:53:75:c1:ce:5e:42:10:d4:55:a1:80:cc:6f: 94:f3:18:ef:72:d1:27:b3:4e:aa:7e:04:34:1e:54: 8b:11:03:9a:eb:30:51:a2:0f:e1:19:11:d2:e1:d8: bd:63:75:af:66:3f:79:03:ac:80:69:97:bb:54:11: 99:71:c2:9d:99:b0:0a:f7:5b:8d:d8:e5:84:1e:4e: 2b:72:73:8a:f2:32:d3:f0:8a:d1:1e:d6:d4:6b:10: 1d:42:5e:d9:1c:47:37:96:5d:fc:69:82:82:ff:1c: 0b:44:59:c8:67:20:41:99:c7:6c:7b:1a:c4:6a:ca: e3:5c:be:70:c3:17:09:4e:3d:1b:33:8e:50:f0:b4: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:2B:E0:66:9F:B1:D8:C6:89:69:56:AB:46:FA:36:E0:88:68:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.251.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:85:19:28:11:8c:b5:9e:a5:57:09:38:a9:31:8f:6c:29:32: 21:4a:25:11:10:ee:d6:32:9a:af:d8:b0:0d:eb:75:bb:7d:a2: e4:00:dc:89:ff:bf:37:bc:d4:3f:52:2b:13:0a:18:ef:83:3f: d1:c0:74:29:f7:b3:c4:9d:28:49:a5:12:8b:c7:d6:b5:c1:b1: b2:47:eb:5e:52:99:65:e8:44:93:1b:ef:c0:dd:ab:11:a1:c8: b9:91:3e:3b:c6:0d:2f:b0:1c:e6:53:bb:3e:29:7c:3e:34:e4: d5:15:b6:e2:c6:c5:62:7e:78:4b:99:f5:05:38:7a:52:f4:ce: 47:76:03:18:9d:b5:5e:a4:f0:ce:e0:4d:4d:6c:4d:f1:95:71: f7:9e:aa:1c:40:96:90:b6:46:e9:b8:20:3f:4a:fb:e7:8f:e1: 80:3a:87:b3:e3:7d:c8:ea:83:28:60:78:7a:6c:71:2f:83:e4: 21:c0:4f:60:04:06:5b:d2:29:5a:ae:9a:84:7b:fb:19:a4:97: a8:4c:41:56:14:00:6f:e9:5a:e2:81:29:75:7d:4f:66:fb:98: 4f:b5:a8:10:b9:58:c7:20:1c:89:35:87:bf:b6:66:3e:8c:3e: 30:0c:7e:dc:8b:3b:2b:79:02:fd:ab:2a:8c:f1:13:c7:a7:fd: 54:e8:b9:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzW9UbupgodbYE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODcxMDI0Y2ItNzY5ZC00MWZkLTg0MjEtM2U2MmQwNjM2YzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc9o6PTfkL6IKDebcr/InkkDHAace05B5VYQ qfMBV5gZuLzqLXOZDMg+g8Bd+2Wmgm7iaWLDN9Xl+myF9CcIofPaUbDqMZjj4vjA inBewANw0w5PYbMVdsz32UJu2pP0MELaDL+NN798+lcXWAi9/NbPDqa9p/rFzVN1 wc5eQhDUVaGAzG+U8xjvctEns06qfgQ0HlSLEQOa6zBRog/hGRHS4di9Y3WvZj95 A6yAaZe7VBGZccKdmbAK91uN2OWEHk4rcnOK8jLT8IrRHtbUaxAdQl7ZHEc3ll38 aYKC/xwLRFnIZyBBmcdsexrEasrjXL5wwxcJTj0bM45Q8LS46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0rK+Bmn7HYxolpVqtG+jbgiGhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODc0ZjVlNGUtZDQ1Mi0z ZGZlLThlOWItZGNmNjkyMDRhMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCFGSgRjLWepVcJOKkxj2wpMiFKJREQ7tYymq/YsA3rdbt9ouQA3In/ vze81D9SKxMKGO+DP9HAdCn3s8SdKEmlEovH1rXBsbJH615SmWXoRJMb78DdqxGh yLmRPjvGDS+wHOZTuz4pfD405NUVtuLGxWJ+eEuZ9QU4elL0zkd2AxidtV6k8M7g TU1sTfGVcfeeqhxAlpC2Rum4ID9K++eP4YA6h7PjfcjqgyhgeHpscS+D5CHAT2AE BlvSKVqumoR7+xmkl6hMQVYUAG/pWuKBKXV9T2b7mE+1qBC5WMcgHIk1h7+2Zj6M PjAMftyLOyt5Av2rKozxE8en/VTouaw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:38 2025 by rpki-client