$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa File: 384319c2-ef61-3659-8686-291dc872bee8.roa (raw, json) Hash identifier: u1ywh5pojbxjrR2K+RRmVWdntsvypOR934zECKQODwE= Subject key identifier: 3C:76:1A:AC:72:5D:8C:3A:D0:2F:DD:79:7C:53:29:50:20:02:D4:72 Certificate issuer: /CN=30fb0bda-102e-4ca8-b44c-98d347687a6c Certificate serial: 010D0C9F4328584B6E9202B9F324788A9DD47F70 Authority key identifier: 70:AB:24:32:19:BE:46:4B:46:3E:48:A9:52:8A:6A:51:E7:AA:C7:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 979 IP address blocks: 23.141.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:92:02:b9:f3:24:78:8a:9d:d4:7f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30fb0bda-102e-4ca8-b44c-98d347687a6c Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=b1fb274e-220c-4038-badf-2ba2d12e0dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:83:43:1e:06:89:64:db:e8:9d:64:ec:a9: cf:f9:65:dc:1d:97:26:e7:6f:61:f4:ef:61:3d:7a: 1b:16:b4:0c:af:fa:ed:bd:47:8c:88:e1:73:55:83: f0:f0:9d:cf:f4:89:34:94:58:6e:1d:f0:77:7e:52: 9e:10:fc:33:7c:b3:87:95:08:4b:36:2a:40:64:8c: 70:48:d3:75:36:46:18:eb:54:d2:79:e5:79:11:80: 4b:67:c3:df:88:49:4f:1d:bf:f5:44:7b:64:06:46: 82:96:e4:46:33:59:58:9b:96:7d:21:2a:23:e6:28: 6d:ac:a0:4a:69:5f:bd:84:4f:a5:5f:ce:4a:a2:2c: 58:01:39:a7:50:df:86:8d:37:26:9c:8a:71:89:c3: f0:6e:2f:40:c4:a9:b2:b5:a9:e5:ad:43:5a:23:c0: d2:dd:29:36:26:3c:07:f6:6e:15:03:2f:73:12:d9: 61:16:b1:77:0a:29:93:2f:60:5c:6e:cc:ee:fd:cb: d2:e1:82:9e:53:3a:09:15:8e:1d:ac:cd:16:9b:f5: ff:47:cf:bd:4a:b4:6c:3a:14:8f:8c:e4:d1:a2:f1: 5f:c6:5b:fd:50:3d:6b:e0:50:43:1b:79:5d:36:d1: 70:ea:7e:ed:f6:29:e7:e8:d9:29:b6:0d:7b:fe:d1: 62:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:76:1A:AC:72:5D:8C:3A:D0:2F:DD:79:7C:53:29:50:20:02:D4:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/384319c2-ef61-3659-8686-291dc872bee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c/30fb0bda-102e-4ca8-b44c-98d347687a6c.crl X509v3 Authority Key Identifier: keyid:70:AB:24:32:19:BE:46:4B:46:3E:48:A9:52:8A:6A:51:E7:AA:C7:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb0bda-102e-4ca8-b44c-98d347687a6c.cer sbgp-ipAddrBlock: critical IPv4: 23.141.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c8:b0:6d:2b:f0:90:35:75:f4:d1:24:60:ff:d1:7b:7f:58: 11:c9:ff:17:cb:5c:43:20:fc:e4:fc:3e:c5:23:58:0f:45:1c: d1:98:ec:e4:44:66:08:de:4a:64:c4:cd:67:98:4c:1d:58:bc: 97:a7:d6:9d:6c:a5:ea:61:97:d9:10:38:16:e2:96:a2:85:7a: f6:4c:c8:d6:c4:9a:bc:21:67:b6:bd:82:44:d5:4a:e4:39:01: f4:fe:72:39:29:00:be:04:11:03:c4:32:a2:f1:ff:b7:dc:48: 23:a2:33:b4:f5:cd:d7:87:61:7b:c3:4a:37:74:c5:9b:97:df: d6:86:fa:13:42:7c:e9:3e:66:e8:24:42:c6:5f:da:22:da:06: c8:91:af:29:8f:16:40:64:af:b8:72:ed:2f:c8:5d:b1:45:01: ea:4c:ff:30:0c:ee:62:04:e4:ac:d6:62:57:3d:d1:2d:ab:87: 10:12:96:3d:f2:03:cb:6d:ed:eb:99:af:ec:09:64:31:39:b7: 3b:8e:70:6c:66:e4:66:6e:e6:6a:49:a1:8b:8a:a8:35:29:91: f4:ad:0f:da:ff:69:27:9b:86:d6:90:63:d4:ec:6e:6d:e2:9c: 6e:87:23:6a:c2:7a:08:99:42:22:23:0a:90:58:e6:89:22:ee: 41:49:b4:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukgK58yR4ip3Uf3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBmYjBiZGEtMTAyZS00Y2E4LWI0NGMtOThkMzQ3Njg3 YTZjMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk YjFmYjI3NGUtMjIwYy00MDM4LWJhZGYtMmJhMmQxMmUwZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsSDQx4GiWTb6J1k7KnP+WXcHZcm529h9O9h PXobFrQMr/rtvUeMiOFzVYPw8J3P9Ik0lFhuHfB3flKeEPwzfLOHlQhLNipAZIxw SNN1NkYY61TSeeV5EYBLZ8PfiElPHb/1RHtkBkaCluRGM1lYm5Z9ISoj5ihtrKBK aV+9hE+lX85KoixYATmnUN+GjTcmnIpxicPwbi9AxKmytanlrUNaI8DS3Sk2JjwH 9m4VAy9zEtlhFrF3CimTL2Bcbszu/cvS4YKeUzoJFY4drM0Wm/X/R8+9SrRsOhSP jOTRovFfxlv9UD1r4FBDG3ldNtFw6n7t9inn6Nkptg17/tFicQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx2GqxyXYw60C/deXxTKVAgAtRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMGZi MGJkYS0xMDJlLTRjYTgtYjQ0Yy05OGQzNDc2ODdhNmMvMzg0MzE5YzItZWY2MS0z NjU5LTg2ODYtMjkxZGM4NzJiZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzBmYjBiZGEtMTAyZS00Y2E4LWI0 NGMtOThkMzQ3Njg3YTZjLzMwZmIwYmRhLTEwMmUtNGNhOC1iNDRjLTk4ZDM0NzY4 N2E2Yy5jcmwwHwYDVR0jBBgwFoAUcKskMhm+RktGPkipUopqUeeqx+owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zMGZiMGJkYS0xMDJlLTRjYTgtYjQ0Yy05OGQz NDc2ODdhNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLIsG0r8JA1dfTRJGD/0Xt/WBHJ/xfLXEMg/OT8PsUjWA9FHNGY7ORE ZgjeSmTEzWeYTB1YvJen1p1spephl9kQOBbilqKFevZMyNbEmrwhZ7a9gkTVSuQ5 AfT+cjkpAL4EEQPEMqLx/7fcSCOiM7T1zdeHYXvDSjd0xZuX39aG+hNCfOk+Zugk QsZf2iLaBsiRrymPFkBkr7hy7S/IXbFFAepM/zAM7mIE5KzWYlc90S2rhxASlj3y A8tt7euZr+wJZDE5tzuOcGxm5GZu5mpJoYuKqDUpkfStD9r/aSebhtaQY9Tsbm3i nG6HI2rCegiZQiIjCpBY5oki7kFJtOk= -----END CERTIFICATE-----Generated at Mon Oct 20 23:36:10 2025 by rpki-client