$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa File: 1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa (raw, json) Hash identifier: 1HXgu6bg3nOcOpIGy/+YwP8QRpKUfldIKd9sYvrjnWE= Subject key identifier: 25:04:3E:3E:8A:8B:41:0D:E6:C4:5C:85:7C:C5:83:C5:DB:8D:A5:20 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F4328584B41E71250CBC3F04683728A80 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 23.131.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:12:50:cb:c3:f0:46:83:72:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=3d5d4083-9d7c-4ae8-8d03-2f26417796f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cc:3a:6b:23:d6:4b:b2:7c:b3:4b:25:30:3d: 7e:20:95:10:27:a8:16:ed:8a:0e:98:bc:20:b6:c8: 85:af:64:8a:85:b3:e0:81:e1:fd:5a:3e:a5:a3:7d: d1:e7:d6:17:b4:3d:c2:5d:38:2f:17:85:34:d2:78: 36:47:e7:79:39:c9:48:af:34:62:8d:e4:de:33:a3: ed:b7:32:81:b1:8f:22:e1:2b:bf:0a:ca:8e:22:67: 67:f8:da:d0:a9:d0:92:19:d9:a4:22:10:ac:8a:e6: ef:2e:2b:bb:f0:7c:b0:26:05:ec:ea:f0:b9:85:26: af:a3:d9:e8:63:43:c9:b2:be:4a:92:a4:79:1b:87: 4a:ed:cf:dc:84:c4:0e:1e:8c:93:e1:91:d0:56:d3: bf:e3:60:f2:c7:e9:be:93:f9:41:df:17:ab:5c:2a: 77:c0:4a:e9:6d:d5:10:1e:62:9a:0f:f8:68:82:17: a5:df:bb:ec:6c:62:3b:fe:c1:5c:46:68:48:06:65: 05:39:0e:e0:f2:c7:ba:d5:fb:fa:08:0c:9a:0a:65: 0b:1e:b8:64:87:2d:21:39:80:1a:29:94:ce:03:41: 0c:f3:95:47:d7:f0:5b:bb:e5:0d:39:56:f6:74:c2: 0d:c3:c0:69:2c:04:b9:31:35:f4:20:cf:0a:d9:55: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:04:3E:3E:8A:8B:41:0D:E6:C4:5C:85:7C:C5:83:C5:DB:8D:A5:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/1fc61e72-5b1c-358a-87b2-c4b81dedb809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:a1:7a:24:f8:7b:a9:c7:6c:7c:72:dd:b0:3e:c4:4a:5b:7d: 4b:d9:2e:14:28:58:a5:95:64:4d:04:3e:a5:df:80:b0:40:a0: d3:c3:ab:48:f4:b3:0e:e8:94:14:bd:b4:fb:79:ab:9c:52:9d: 1f:b2:b7:6f:0e:d8:95:17:b3:23:d4:a5:5d:9c:9a:5c:dd:b9: 6c:d9:27:34:c0:db:b1:ea:e2:76:42:5a:c4:53:27:5c:78:a1: d9:67:41:a4:e0:9f:fc:fd:66:ff:40:f9:b7:a8:64:15:6e:b1: ed:8b:e5:3a:83:df:2a:89:34:dc:e9:ba:f9:95:d7:e6:78:ee: ca:65:fe:dd:0e:bf:24:7f:46:7c:f1:82:52:04:3b:c5:bd:87: 4a:09:c7:26:10:3a:11:20:2b:01:e4:6f:3f:c6:df:3c:7b:17: 33:8b:e8:01:8c:35:21:df:13:60:ea:52:18:09:ad:ba:e3:e2: ad:f2:64:5b:1d:f5:7f:39:a9:63:a1:5e:a1:b0:ae:11:a9:29: 5e:83:fd:75:9d:92:6e:3f:8f:d1:82:98:1a:8c:ec:0d:42:c2: dd:a1:11:a1:40:1e:32:cf:14:27:eb:3f:43:b6:6b:93:16:f8: 12:99:d4:02:d0:38:68:d2:ad:4a:22:5c:1d:70:96:ca:d4:50: 47:a6:ad:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xJQy8PwRoNyioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk M2Q1ZDQwODMtOWQ3Yy00YWU4LThkMDMtMmYyNjQxNzc5NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Mw6ayPWS7J8s0slMD1+IJUQJ6gW7YoOmLwg tsiFr2SKhbPggeH9Wj6lo33R59YXtD3CXTgvF4U00ng2R+d5OclIrzRijeTeM6Pt tzKBsY8i4Su/CsqOImdn+NrQqdCSGdmkIhCsiubvLiu78HywJgXs6vC5hSavo9no Y0PJsr5KkqR5G4dK7c/chMQOHoyT4ZHQVtO/42Dyx+m+k/lB3xerXCp3wErpbdUQ HmKaD/hoghel37vsbGI7/sFcRmhIBmUFOQ7g8se61fv6CAyaCmULHrhkhy0hOYAa KZTOA0EM85VH1/Bbu+UNOVb2dMINw8BpLAS5MTX0IM8K2VUr5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUEPj6Ki0EN5sRchXzFg8XbjaUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvMWZjNjFlNzItNWIxYy0z NThhLTg3YjItYzRiODFkZWRiODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4NEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOheiT4e6nHbHxy3bA+xEpbfUvZLhQoWKWVZE0EPqXfgLBAoNPDq0j0 sw7olBS9tPt5q5xSnR+yt28O2JUXsyPUpV2cmlzduWzZJzTA27Hq4nZCWsRTJ1x4 odlnQaTgn/z9Zv9A+beoZBVuse2L5TqD3yqJNNzpuvmV1+Z47spl/t0OvyR/Rnzx glIEO8W9h0oJxyYQOhEgKwHkbz/G3zx7FzOL6AGMNSHfE2DqUhgJrbrj4q3yZFsd 9X85qWOhXqGwrhGpKV6D/XWdkm4/j9GCmBqM7A1Cwt2hEaFAHjLPFCfrP0O2a5MW +BKZ1ALQOGjSrUoiXB1wlsrUUEemraA= -----END CERTIFICATE-----Generated at Mon Oct 20 17:56:13 2025 by rpki-client