$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa File: b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa (raw, json) Hash identifier: OIn2UBBEnRRIOmV4p3/i1ldDGUc4f6jF1xU5zKT33xM= Subject key identifier: 26:0B:09:82:C3:17:C8:4F:B8:94:F5:6A:14:7E:64:DA:31:01:AA:93 Certificate issuer: /CN=b23daa11-4037-452a-934b-684edbefcbf9 Certificate serial: 010D0C9F4328584B6BC74FA3B3CB3EE10CA6F500 Authority key identifier: FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 40630 IP address blocks: 204.13.88.0/22 maxlen: 24 208.94.116.0/22 maxlen: 24 2607:ff18::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4f:a3:b3:cb:3e:e1:0c:a6:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b23daa11-4037-452a-934b-684edbefcbf9 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=ad2ca15b-b064-41ad-b51d-7753becee869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:6a:6d:a6:5b:76:19:b7:23:ab:71:a4:38: f7:13:51:04:82:f9:98:29:39:fc:a2:5f:5f:0e:e7: 88:c4:3b:43:08:74:7b:59:42:51:87:7e:60:4d:e6: e4:bb:e9:02:7f:b8:35:54:62:07:17:1f:30:64:6a: a8:a8:a4:de:9f:75:70:11:c8:e5:59:55:55:5e:4d: 5f:7a:f6:82:c4:2b:9a:a3:2c:a2:a5:e6:f8:e5:7a: 6c:b7:85:5b:c9:41:25:7e:78:ba:d5:1d:4c:50:52: d0:dc:d8:c2:dc:1d:4a:e9:60:a2:0d:64:8c:52:39: 6b:36:43:c7:dd:8a:d9:95:1d:23:61:f4:b9:8a:dc: 8b:36:4c:b3:26:4a:1c:09:de:52:56:c8:f0:12:36: 20:b8:45:2e:c0:36:49:7e:04:fb:73:34:79:c0:16: 84:31:d0:02:17:31:23:03:c2:a7:ee:3c:13:d8:be: 70:38:00:15:57:ea:ae:ee:49:61:70:7b:5e:f3:c0: 2b:39:e3:3f:70:ba:fc:cf:71:59:44:a4:4f:74:90: ca:ee:8e:d9:f4:a5:9e:61:5c:2e:ed:e3:d6:d2:e8: 3c:09:80:78:5d:4a:01:20:83:fa:1c:8d:2f:6f:0e: 71:89:42:99:78:44:f9:cc:c9:96:65:3f:09:32:0e: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0B:09:82:C3:17:C8:4F:B8:94:F5:6A:14:7E:64:DA:31:01:AA:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b02a6d7a-d28d-3b6b-8751-feb644f7e685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9/b23daa11-4037-452a-934b-684edbefcbf9.crl X509v3 Authority Key Identifier: keyid:FC:30:9C:C3:3C:A6:E9:C9:D4:7A:91:03:88:4D:F0:1D:00:57:60:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b23daa11-4037-452a-934b-684edbefcbf9.cer sbgp-ipAddrBlock: critical IPv4: 204.13.88.0/22 208.94.116.0/22 IPv6: 2607:ff18::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e9:57:58:d0:b2:62:8d:f6:1b:e8:b6:00:c9:cd:0a:0a:2b: 2a:a9:0a:83:dc:d6:06:2b:0a:4c:38:02:15:91:e3:42:95:42: e2:4c:a6:da:a5:ba:c6:ea:aa:ed:55:4e:17:4a:40:ff:c7:51: 77:30:c2:4f:a5:68:0b:66:3d:b4:49:63:6a:22:66:f0:90:86: c9:3b:c6:ef:46:f7:02:16:07:8c:4a:5a:50:87:6d:4e:0e:5d: 05:f0:ab:f7:5d:67:3e:35:76:98:df:4a:fc:28:7d:2d:2a:ba: 9f:95:e2:9e:ba:25:44:df:5c:f7:2a:00:f5:59:45:ad:81:15: bc:81:f1:63:3e:ea:48:6a:69:45:b9:68:6e:00:07:c2:b2:91: ef:c2:09:e8:02:5d:e7:3a:18:68:d3:51:06:56:16:9a:4a:ad: 7b:b3:6c:54:88:a5:ab:6e:10:e6:33:15:cc:f1:d4:fb:85:b3: 98:3f:37:f3:81:b9:cb:17:f5:b4:7c:c6:95:bc:19:2d:ce:05: 02:f9:cf:fb:88:6e:60:91:24:5a:34:e9:96:9d:17:4b:bc:3f: b3:48:4a:bb:ec:95:d2:92:66:44:f3:74:64:1a:7f:91:e8:ac: 69:d7:f9:b1:bc:d2:69:4e:7b:b7:a5:ee:83:74:20:f3:a8:47: 40:17:66:1b -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEtrx0+js8s+4Qym9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjIzZGFhMTEtNDAzNy00NTJhLTkzNGItNjg0ZWRiZWZj YmY5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YWQyY2ExNWItYjA2NC00MWFkLWI1MWQtNzc1M2JlY2VlODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv1qbaZbdhm3I6txpDj3E1EEgvmYKTn8ol9f DueIxDtDCHR7WUJRh35gTebku+kCf7g1VGIHFx8wZGqoqKTen3VwEcjlWVVVXk1f evaCxCuaoyyipeb45Xpst4VbyUElfni61R1MUFLQ3NjC3B1K6WCiDWSMUjlrNkPH 3YrZlR0jYfS5ityLNkyzJkocCd5SVsjwEjYguEUuwDZJfgT7czR5wBaEMdACFzEj A8Kn7jwT2L5wOAAVV+qu7klhcHte88ArOeM/cLr8z3FZRKRPdJDK7o7Z9KWeYVwu 7ePW0ug8CYB4XUoBIIP6HI0vbw5xiUKZeET5zMmWZT8JMg4I/wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFCYLCYLDF8hPuJT1ahR+ZNoxAaqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNk YWExMS00MDM3LTQ1MmEtOTM0Yi02ODRlZGJlZmNiZjkvYjAyYTZkN2EtZDI4ZC0z YjZiLTg3NTEtZmViNjQ0ZjdlNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjIzZGFhMTEtNDAzNy00NTJhLTkz NGItNjg0ZWRiZWZjYmY5L2IyM2RhYTExLTQwMzctNDUyYS05MzRiLTY4NGVkYmVm Y2JmOS5jcmwwHwYDVR0jBBgwFoAU/DCcwzym6cnUepEDiE3wHQBXYFUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMjNkYWExMS00MDM3LTQ1MmEtOTM0Yi02ODRl ZGJlZmNiZjkuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA1YAwQC 0F50MA0EAgACMAcDBQAmB/8YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEDpV1jQsmKN9hvotgDJzQoKKyqp CoPc1gYrCkw4AhWR40KVQuJMptqlusbqqu1VThdKQP/HUXcwwk+laAtmPbRJY2oi ZvCQhsk7xu9G9wIWB4xKWlCHbU4OXQXwq/ddZz41dpjfSvwofS0qup+V4p66JUTf XPcqAPVZRa2BFbyB8WM+6khqaUW5aG4AB8Kyke/CCegCXec6GGjTUQZWFppKrXuz bFSIpatuEOYzFczx1PuFs5g/N/OBucsX9bR8xpW8GS3OBQL5z/uIbmCRJFo06Zad F0u8P7NISrvsldKSZkTzdGQaf5HorGnX+bG80mlOe7el7oN0IPOoR0AXZhs= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:09 2025 by rpki-client