$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/b329773b-6a95-3c62-b698-ddb9bf294de9.roa File: b329773b-6a95-3c62-b698-ddb9bf294de9.roa (raw, json) Hash identifier: Rklg8oA5O+/o+YgfUeM0gB1YDDh/esoV4nDRw3hnbQE= Subject key identifier: 5E:C2:E0:12:49:C2:0E:CF:E6:9C:96:5C:8D:77:0D:77:6D:BA:2A:00 Certificate issuer: /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a Certificate serial: 010D0C9F4328584B48E1B74BACA472EC364B7B80 Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/b329773b-6a95-3c62-b698-ddb9bf294de9.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 398900 IP address blocks: 23.134.232.0/22 maxlen: 22 2602:fcfb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b7:4b:ac:a4:72:ec:36:4b:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=a230c53b-798e-40c7-9e17-4c7c551e6ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:a1:e6:28:50:c7:a9:60:dc:58:df:6e:2c: 3f:08:f4:f1:88:27:99:2b:d6:2e:0b:22:a8:f5:6c: 1f:0b:e9:3a:7f:a5:92:fc:b2:9b:ba:e4:29:43:1b: 64:81:8d:01:16:57:cb:c2:dc:d3:a8:92:5a:a3:5f: 3f:33:dc:ca:09:8a:9b:1f:38:c3:0f:fd:30:0c:5d: b9:dd:24:3b:16:c0:cb:f1:10:c7:fb:1e:99:e7:05: 0f:8f:70:fc:db:e5:59:c9:81:de:c8:e2:a3:b9:7e: 68:c0:8a:f5:67:b7:0e:6a:c2:9a:fb:c6:d3:32:5d: 7c:f6:b5:26:b0:7c:ae:9e:09:eb:fb:28:cf:09:e9: 1e:1e:ff:22:2c:53:86:e9:ac:15:d0:b5:02:c6:41: 0c:95:f1:5f:d1:ed:52:59:4b:74:56:ac:a3:4f:04: e8:e3:aa:2a:ec:37:12:03:ec:ed:fd:6c:32:96:15: 2a:9d:e1:fa:1e:68:b4:7c:1f:a5:4b:0a:83:fe:f6: f8:df:05:d4:e7:20:3f:2b:0f:a7:dd:d9:f8:25:0a: 37:a2:ce:9a:b1:2f:ae:f4:8d:b1:5d:dc:64:fe:56: 0b:2a:83:d1:1c:f0:64:22:a6:06:1e:4c:bd:a5:c1: b4:8f:fd:06:1b:df:4d:31:f5:cf:9c:31:ec:8b:b6: 92:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C2:E0:12:49:C2:0E:CF:E6:9C:96:5C:8D:77:0D:77:6D:BA:2A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/b329773b-6a95-3c62-b698-ddb9bf294de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl X509v3 Authority Key Identifier: keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer sbgp-ipAddrBlock: critical IPv4: 23.134.232.0/22 IPv6: 2602:fcfb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:83:fd:41:8c:0a:3d:02:ae:c2:1d:d4:17:5e:80:58:9c:57: 92:0d:87:5d:7d:ed:f7:d0:80:be:55:41:0e:c1:8e:3d:e3:60: 86:f5:62:fb:04:16:f0:fa:2b:d3:7e:14:19:a9:33:4d:f2:60: 32:b7:a1:f0:e5:53:e3:38:6e:76:2d:a4:71:62:8f:c9:b6:dd: 94:94:f2:b7:de:07:02:8e:90:fd:a9:94:94:d5:7e:79:51:db: 33:63:66:3b:74:85:15:d7:8d:37:db:09:0c:23:cc:85:d7:57: 11:98:1b:69:4a:4b:ac:01:68:19:58:c3:f4:4e:38:2c:7c:3a: bf:c4:c5:95:33:2a:0f:98:b6:e0:1e:a2:80:20:68:dd:26:46: cb:c7:ac:50:8b:96:13:30:53:77:03:0f:59:32:62:66:67:50: f3:be:ef:01:7b:90:d0:86:18:60:10:13:c4:be:51:eb:f3:83: 80:53:18:e5:28:7b:30:56:a4:6b:36:f0:1b:7c:bf:8b:a4:b8: 07:55:6c:cd:60:85:86:ab:62:8e:58:54:26:e2:f2:f3:86:a1: 15:87:df:e3:11:18:ed:ca:b9:28:06:32:85:90:94:49:7d:96: 24:93:e2:36:e1:64:a5:f9:99:6c:14:a7:62:21:eb:5d:a6:e4: 52:a8:99:cf -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtI4bdLrKRy7DZLe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkOWZjN2EtZjM2Ni00ODVmLWEyYzgtNThjNGI0NzAz NjFhMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTIzMGM1M2ItNzk4ZS00MGM3LTllMTctNGM3YzU1MWU2Y2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUih5ihQx6lg3Fjfbiw/CPTxiCeZK9YuCyKo 9WwfC+k6f6WS/LKbuuQpQxtkgY0BFlfLwtzTqJJao18/M9zKCYqbHzjDD/0wDF25 3SQ7FsDL8RDH+x6Z5wUPj3D82+VZyYHeyOKjuX5owIr1Z7cOasKa+8bTMl189rUm sHyungnr+yjPCekeHv8iLFOG6awV0LUCxkEMlfFf0e1SWUt0VqyjTwTo46oq7DcS A+zt/WwylhUqneH6Hmi0fB+lSwqD/vb43wXU5yA/Kw+n3dn4JQo3os6asS+u9I2x Xdxk/lYLKoPRHPBkIqYGHky9pcG0j/0GG99NMfXPnDHsi7aSAwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFF7C4BJJwg7P5pyWXI13DXdtuioAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5 ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0YjQ3MDM2MWEvYjMyOTc3M2ItNmE5NS0z YzYyLWI2OTgtZGRiOWJmMjk0ZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkOWZjN2EtZjM2Ni00ODVmLWEy YzgtNThjNGI0NzAzNjFhLzQ1ZDlmYzdhLWYzNjYtNDg1Zi1hMmM4LTU4YzRiNDcw MzYxYS5jcmwwHwYDVR0jBBgwFoAUlhKw563ZcfLlH1BW53pwJQ2Yt7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWQ5ZmM3YS1mMzY2LTQ4NWYtYTJjOC01OGM0 YjQ3MDM2MWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCF4boMA4E AgACMAgDBgQmAvz7ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZg/1BjAo9Aq7CHdQXXoBYnFeSDYddfe33 0IC+VUEOwY4942CG9WL7BBbw+ivTfhQZqTNN8mAyt6Hw5VPjOG52LaRxYo/Jtt2U lPK33gcCjpD9qZSU1X55UdszY2Y7dIUV14032wkMI8yF11cRmBtpSkusAWgZWMP0 TjgsfDq/xMWVMyoPmLbgHqKAIGjdJkbLx6xQi5YTMFN3Aw9ZMmJmZ1Dzvu8Be5DQ hhhgEBPEvlHr84OAUxjlKHswVqRrNvAbfL+LpLgHVWzNYIWGq2KOWFQm4vLzhqEV h9/jERjtyrkoBjKFkJRJfZYkk+I24WSl+ZlsFKdiIetdpuRSqJnP -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:11 2025 by rpki-client