$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa File: 9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa (raw, json) Hash identifier: VsAZ0/4usE5XLGtBg9f+uLZ9cxiWD0YGX7MeJVF4FWI= Subject key identifier: 4A:71:AD:4C:94:86:88:B5:98:FB:1E:D8:64:B1:4C:C8:59:88:FB:95 Certificate issuer: /CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Certificate serial: 010D0C9F4328584B87DD2EF5433F3DC0E764B5C0 Authority key identifier: BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa Signing time: Wed 15 Oct 2025 14:27:29 +0000 ROA not before: Wed 15 Oct 2025 14:27:29 +0000 ROA not after: Tue 13 Jan 2026 15:27:29 +0000 asID: 402037 IP address blocks: 23.146.132.0/24 maxlen: 24 2602:f539::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:dd:2e:f5:43:3f:3d:c0:e7:64:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Validity Not Before: Oct 15 14:27:29 2025 GMT Not After : Jan 13 15:27:29 2026 GMT Subject: CN=bf2fbc2c-13cb-4450-add4-fd8d7c40bf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:06:9d:96:90:bc:34:f3:e6:4b:99:3c:b5: 71:80:4d:84:6d:a6:2b:18:b4:b0:2f:96:64:83:58: 36:29:67:3c:cc:70:91:4c:ef:c0:a0:34:75:52:87: ad:55:a8:fd:8b:f0:37:c6:7a:7c:1c:e4:1e:90:e3: 4d:47:87:29:30:89:ab:93:27:7f:2a:6a:13:be:8b: 13:1c:98:4c:b8:da:6c:d9:ca:1c:be:fe:66:ec:34: 9d:a1:b6:ad:31:64:5f:65:9e:b3:5b:77:0b:88:b6: 5e:4e:f5:9f:91:6f:2d:d1:df:6e:f2:b2:ec:a4:16: 2a:ed:7e:13:18:d2:e2:b3:30:4d:55:bd:8f:63:9f: 8a:02:a6:f3:c2:5a:b6:83:ec:b8:2f:dc:f6:de:2f: 06:10:8a:68:f0:47:6f:3f:3b:76:8e:39:f9:aa:82: 00:f7:03:6e:7e:08:11:1c:3a:f0:a8:31:29:7a:88: 59:12:a2:a0:b9:ac:33:27:5e:80:35:90:73:c9:11: d8:5c:73:8a:b1:37:75:d7:bf:3f:30:e0:c4:f6:f0: 7b:e5:00:49:d5:54:55:5d:64:7a:e9:a3:be:f5:75: b6:3b:cf:cb:88:47:f7:8d:22:1f:23:47:5e:c1:e0: 35:65:94:78:fc:81:dd:47:cf:84:7c:d8:b5:52:a9: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:71:AD:4C:94:86:88:B5:98:FB:1E:D8:64:B1:4C:C8:59:88:FB:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.crl X509v3 Authority Key Identifier: keyid:BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer sbgp-ipAddrBlock: critical IPv4: 23.146.132.0/24 IPv6: 2602:f539::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a7:01:e0:df:7d:12:c4:e2:cb:f1:4a:76:5a:4c:a7:b3:12: bb:6e:3d:25:87:79:b9:1c:64:87:f0:2e:98:c3:2c:82:fe:9e: f7:45:a7:b6:c4:71:e0:8a:76:6a:46:19:9f:3c:8c:fe:94:73: 99:fd:8a:f5:c2:a6:be:79:d1:97:32:e8:15:ee:0f:3e:dc:6a: 6d:bc:e5:af:c4:26:62:14:df:e7:31:bf:5c:ff:4a:79:65:ae: cd:39:be:0f:f4:00:24:60:67:03:87:ba:55:0d:92:81:23:68: 22:44:fd:fc:7c:40:b1:13:75:1b:ca:d6:57:1d:eb:1c:6b:52: 6b:12:1b:52:2f:58:65:5e:a5:de:ae:aa:75:70:1e:a9:c2:eb: 81:9e:1e:87:6f:a5:e2:fe:72:49:fc:f4:a4:94:21:3f:a8:12: d0:c4:d6:79:cc:8e:04:1f:26:db:9f:fd:39:2b:a5:c0:aa:65: 04:0e:6f:93:9b:43:83:e2:a0:ee:74:9b:56:fc:74:0f:04:80: f6:b9:68:b3:e0:d9:c4:cc:20:7c:3d:23:3f:a6:14:e0:7f:7e: c3:84:93:38:0d:ed:3b:f6:4d:ee:0c:53:29:6a:2f:a9:e4:f8: d0:cb:2b:49:8d:ea:4b:a6:fc:7b:58:81:01:0a:df:d9:66:b4: 03:82:26:f9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuH3S71Qz89wOdktcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3YjJkOTItNDg3Yy00NzJhLWI2YzAtYTBkOWNmYzQ5 MGJhMB4XDTI1MTAxNTE0MjcyOVoXDTI2MDExMzE1MjcyOVowLzEtMCsGA1UEAxMk YmYyZmJjMmMtMTNjYi00NDUwLWFkZDQtZmQ4ZDdjNDBiZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ8GnZaQvDTz5kuZPLVxgE2EbaYrGLSwL5Zk g1g2KWc8zHCRTO/AoDR1UoetVaj9i/A3xnp8HOQekONNR4cpMImrkyd/KmoTvosT HJhMuNps2cocvv5m7DSdobatMWRfZZ6zW3cLiLZeTvWfkW8t0d9u8rLspBYq7X4T GNLiszBNVb2PY5+KAqbzwlq2g+y4L9z23i8GEIpo8EdvPzt2jjn5qoIA9wNufggR HDrwqDEpeohZEqKguawzJ16ANZBzyRHYXHOKsTd1178/MODE9vB75QBJ1VRVXWR6 6aO+9XW2O8/LiEf3jSIfI0deweA1ZZR4/IHdR8+EfNi1UqnU5wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEpxrUyUhoi1mPse2GSxTMhZiPuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDdi MmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5Y2ZjNDkwYmEvOWUwMGMxYWUtNDYwZC0z ZGNmLWJjY2YtMTM1ZjhiZWVlMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3YjJkOTItNDg3Yy00NzJhLWI2 YzAtYTBkOWNmYzQ5MGJhL2RkN2IyZDkyLTQ4N2MtNDcyYS1iNmMwLWEwZDljZmM0 OTBiYS5jcmwwHwYDVR0jBBgwFoAUv8GCxdXAmDkHG/FtP/Ocq9mj8GwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDdiMmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5 Y2ZjNDkwYmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5KEMA4E AgACMAgDBgAmAvU5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQpwHg330SxOLL8Up2WkynsxK7bj0lh3m5 HGSH8C6YwyyC/p73Rae2xHHginZqRhmfPIz+lHOZ/Yr1wqa+edGXMugV7g8+3Gpt vOWvxCZiFN/nMb9c/0p5Za7NOb4P9AAkYGcDh7pVDZKBI2giRP38fECxE3UbytZX Hesca1JrEhtSL1hlXqXerqp1cB6pwuuBnh6Hb6Xi/nJJ/PSklCE/qBLQxNZ5zI4E Hybbn/05K6XAqmUEDm+Tm0OD4qDudJtW/HQPBID2uWiz4NnEzCB8PSM/phTgf37D hJM4De079k3uDFMpai+p5PjQyytJjepLpvx7WIEBCt/ZZrQDgib5 -----END CERTIFICATE-----Generated at Mon Oct 20 23:42:18 2025 by rpki-client