$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa File: 4098e103-d04a-3465-a7e1-f3debf7a9e61.roa (raw, json) Hash identifier: pyp5BAcW1PU4Iso8Ylxo2882O6J7xnoIl4YPGVrzQdc= Subject key identifier: 64:43:06:68:8C:2A:0A:FC:31:EF:07:EF:33:8D:A0:96:D4:D5:D8:61 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B1F016947E74E99275D91C740 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 23.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:69:47:e7:4e:99:27:5d:91:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=41e83910-f0cd-4320-9450-3e5432e63a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:03:3c:13:6c:a2:ca:36:88:25:9e:7d:73:61: 44:30:d1:a1:f2:66:a0:4a:6b:66:7a:27:23:cc:eb: ba:dc:d7:d1:7a:86:d8:67:b8:05:54:3d:e1:c5:ca: 17:21:1e:c9:46:b5:31:78:ee:d8:79:7b:1d:88:71: fd:fc:f4:72:ec:e3:26:70:37:a9:09:6d:c0:b8:35: 76:83:c1:ea:09:1b:c4:33:1d:49:e7:52:59:68:15: 4f:0e:bb:6e:a8:5c:81:40:fc:2b:39:60:ec:0c:f7: 90:27:08:d2:b0:ca:0c:2e:26:e8:1a:fb:70:ed:f0: 65:7b:c5:3b:4e:9e:52:eb:c3:d9:35:d7:5b:63:89: 78:6c:0b:af:a5:fa:26:e2:04:07:4b:b1:9d:a3:4d: 43:f9:5c:0c:c5:90:7b:11:58:45:20:85:30:e6:49: 2c:80:17:a2:f6:7e:ec:3c:75:7f:8a:45:6b:b2:3e: 8f:6a:aa:b1:7e:91:fc:c4:de:1d:94:5c:8d:8d:6d: 75:14:64:bc:6d:46:38:3d:48:cf:ad:28:75:63:5f: 5e:7e:4e:30:37:52:70:11:03:af:0b:ed:da:29:59: c7:d9:7b:93:56:7a:c3:9b:72:82:ca:34:69:a3:96: 61:39:b9:19:28:64:7b:74:7e:90:bd:cd:50:12:90: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:43:06:68:8C:2A:0A:FC:31:EF:07:EF:33:8D:A0:96:D4:D5:D8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:24:b6:17:8b:a3:e4:6c:3b:1a:cd:48:c5:7f:70:10:aa:de: 0d:17:ba:44:1e:11:65:f4:2f:00:82:50:16:f5:da:96:c8:29: 07:79:d1:51:13:34:a8:10:b5:80:31:b8:9f:70:4d:5a:68:e7: 66:50:86:e9:dc:57:88:5d:5e:f9:95:3c:de:39:41:e3:11:f5: d5:aa:f1:f5:d8:69:d2:3d:3d:ed:58:16:cb:78:63:53:1d:05: 96:29:c7:ae:90:ac:9c:75:9c:d0:b7:c6:c4:1c:ee:14:09:de: e7:f2:bb:45:14:b9:a6:bd:8d:ca:7b:f8:8d:f6:f6:2d:4d:bb: 1d:4b:ac:68:15:b2:98:f7:2b:85:a3:21:1a:d6:0a:a3:54:d3: 21:e5:09:8f:91:2d:8f:a1:47:a9:f2:d8:e5:82:d8:ce:fc:29: b9:9f:a3:c1:3a:d3:80:9d:83:27:87:4e:7d:d3:0e:af:cb:0a: 72:42:1d:ee:07:4d:eb:66:59:80:71:76:71:b9:90:44:14:0d: 63:2a:1b:bc:5e:45:22:be:1e:d9:96:b6:52:c2:27:88:ff:fc: b9:f5:9b:83:fa:41:4b:db:70:6e:78:10:2f:00:c9:61:bb:cf: 51:b9:a0:57:c9:cd:c6:06:43:c3:71:d1:fd:0b:ca:24:aa:af: 59:13:1a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWlH506ZJ12Rx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk NDFlODM5MTAtZjBjZC00MzIwLTk0NTAtM2U1NDMyZTYzYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQM8E2yiyjaIJZ59c2FEMNGh8magSmtmeicj zOu63NfReobYZ7gFVD3hxcoXIR7JRrUxeO7YeXsdiHH9/PRy7OMmcDepCW3AuDV2 g8HqCRvEMx1J51JZaBVPDrtuqFyBQPwrOWDsDPeQJwjSsMoMLiboGvtw7fBle8U7 Tp5S68PZNddbY4l4bAuvpfom4gQHS7Gdo01D+VwMxZB7EVhFIIUw5kksgBei9n7s PHV/ikVrsj6PaqqxfpH8xN4dlFyNjW11FGS8bUY4PUjPrSh1Y19efk4wN1JwEQOv C+3aKVnH2XuTVnrDm3KCyjRpo5ZhObkZKGR7dH6Qvc1QEpDPIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRDBmiMKgr8Me8H7zONoJbU1dhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDA5OGUxMDMtZDA0YS0z NDY1LWE3ZTEtZjNkZWJmN2E5ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANMktheLo+RsOxrNSMV/cBCq3g0XukQeEWX0LwCCUBb12pbIKQd50VET NKgQtYAxuJ9wTVpo52ZQhuncV4hdXvmVPN45QeMR9dWq8fXYadI9Pe1YFst4Y1Md BZYpx66QrJx1nNC3xsQc7hQJ3ufyu0UUuaa9jcp7+I329i1Nux1LrGgVspj3K4Wj IRrWCqNU0yHlCY+RLY+hR6ny2OWC2M78Kbmfo8E604CdgyeHTn3TDq/LCnJCHe4H TetmWYBxdnG5kEQUDWMqG7xeRSK+HtmWtlLCJ4j//Ln1m4P6QUvbcG54EC8AyWG7 z1G5oFfJzcYGQ8Nx0f0LyiSqr1kTGt8= -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:04 2025 by rpki-client