$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa File: 21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa (raw, json) Hash identifier: dXb0F2J0+MgyUAkU97qApjHoA51dJOrPzeBkGGBQsIk= Subject key identifier: 49:35:7F:D1:BA:93:B0:8B:E9:16:EC:9B:88:33:0C:3D:E0:CA:D1:1F Certificate issuer: /CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Certificate serial: 010D0C9F4328584B7C876AC81AC211F4E8117800 Authority key identifier: A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 152918 IP address blocks: 23.141.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:6a:c8:1a:c2:11:f4:e8:11:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=9559aa3e-23eb-46f7-88e5-619a03276a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:92:eb:0a:f7:26:95:b9:78:d1:f8:8b:ac: 70:df:33:3e:55:1a:1b:90:01:b3:bc:2d:d2:bb:3f: d8:2b:4f:9e:50:22:1c:91:4c:7b:74:25:bf:31:12: b9:99:f5:f3:8c:46:6e:ce:b2:4d:9e:14:b3:35:c7: bf:61:ad:13:25:5f:9c:28:9d:5f:a2:47:cb:57:b2: ff:7d:09:78:d2:3d:8c:ac:49:10:04:14:6d:a0:25: ab:60:50:c4:1d:73:34:0c:76:4d:ff:b2:33:ef:94: 11:55:52:5b:ed:9e:ad:c4:31:24:b7:3f:7e:5f:f0: a1:10:8d:b7:82:66:c7:bd:37:39:99:f9:e0:3d:c4: ed:6b:29:fc:de:f1:0d:5e:50:06:3e:42:d5:4a:6b: 5f:0b:69:46:05:cb:f9:d7:61:7d:00:98:0d:1f:c0: e3:0f:ae:e4:be:2b:ca:53:1a:a2:35:57:de:93:2e: 54:14:86:ff:9a:88:97:75:9c:a2:eb:0d:f2:f3:6a: 66:d4:8e:bc:09:9e:b3:a4:d1:64:cb:4c:82:f8:08: eb:2b:62:21:80:58:a2:e5:29:7e:d9:0a:d6:98:7f: 21:0d:4e:2d:2b:d6:05:3d:81:34:d2:6c:a2:ca:47: e9:a9:aa:2d:d1:be:8c:63:28:c2:e6:c4:de:3b:1f: ce:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:35:7F:D1:BA:93:B0:8B:E9:16:EC:9B:88:33:0C:3D:E0:CA:D1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl X509v3 Authority Key Identifier: keyid:A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer sbgp-ipAddrBlock: critical IPv4: 23.141.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:eb:2f:1b:85:bb:c2:b7:98:21:6d:8c:0f:0c:4c:40:de:31: d2:b8:01:28:7f:7c:5c:5f:20:f6:5a:40:c3:05:92:8f:9a:f6: 45:20:da:82:5f:1b:4f:96:5d:65:eb:38:42:0d:56:c7:f2:2c: d7:c9:f2:eb:fc:c6:eb:c1:76:31:e0:8f:f0:60:7f:5f:6a:1d: 09:82:60:67:6e:cb:b2:1b:44:1e:e0:19:23:84:49:86:10:12: 2f:de:b8:e9:42:fd:e9:b9:78:d3:ef:1e:00:f9:7b:a8:de:f3: 02:92:3f:c2:5e:a5:75:66:bc:7e:02:d9:44:11:f0:26:a3:46: d0:bd:88:78:d5:c5:b6:1a:ef:20:eb:c1:50:df:14:03:78:bf: 58:e5:3c:79:a8:bb:bc:8b:a8:bb:e2:c6:7f:10:67:3f:b4:4c: f3:14:fd:f8:4d:a2:6d:c3:db:78:8b:73:e1:73:9b:cc:0b:e0: 66:4e:79:83:13:10:98:f0:e1:83:8a:bc:0c:f7:9f:b0:96:d4: 25:71:c6:c6:3f:a1:6f:e5:3a:fc:f9:3e:ad:0a:26:a5:7c:48: 81:67:2b:b4:3c:31:37:33:9a:52:ec:a1:52:a3:55:5f:74:e5: d1:89:ec:60:4a:b3:d6:b3:d8:7f:d1:5f:09:80:c9:73:bd:af: 27:09:f5:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2rIGsIR9OgReAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgwZGZiZDQtMDk0NC00YzI0LWE2NDUtYTIzOGQ5OTQ5 ZmI3MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk OTU1OWFhM2UtMjNlYi00NmY3LTg4ZTUtNjE5YTAzMjc2YTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJeS6wr3JpW5eNH4i6xw3zM+VRobkAGzvC3S uz/YK0+eUCIckUx7dCW/MRK5mfXzjEZuzrJNnhSzNce/Ya0TJV+cKJ1fokfLV7L/ fQl40j2MrEkQBBRtoCWrYFDEHXM0DHZN/7Iz75QRVVJb7Z6txDEktz9+X/ChEI23 gmbHvTc5mfngPcTtayn83vENXlAGPkLVSmtfC2lGBcv512F9AJgNH8DjD67kvivK UxqiNVfeky5UFIb/moiXdZyi6w3y82pm1I68CZ6zpNFky0yC+AjrK2IhgFii5Sl+ 2QrWmH8hDU4tK9YFPYE00myiykfpqaot0b6MYyjC5sTeOx/OxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk1f9G6k7CL6Rbsm4gzDD3gytEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kODBk ZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4ZDk5NDlmYjcvMjFmNzgwZTQtODgwNC0z YzNmLWEzMmYtYzNjMThjZTVmYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDgwZGZiZDQtMDk0NC00YzI0LWE2 NDUtYTIzOGQ5OTQ5ZmI3L2Q4MGRmYmQ0LTA5NDQtNGMyNC1hNjQ1LWEyMzhkOTk0 OWZiNy5jcmwwHwYDVR0jBBgwFoAUo997XFZGSaHviZ1tCZ96IV4ljtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kODBkZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4 ZDk5NDlmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF400MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLrLxuFu8K3mCFtjA8MTEDeMdK4ASh/fFxfIPZaQMMFko+a9kUg2oJf G0+WXWXrOEINVsfyLNfJ8uv8xuvBdjHgj/Bgf19qHQmCYGduy7IbRB7gGSOESYYQ Ei/euOlC/em5eNPvHgD5e6je8wKSP8JepXVmvH4C2UQR8CajRtC9iHjVxbYa7yDr wVDfFAN4v1jlPHmou7yLqLvixn8QZz+0TPMU/fhNom3D23iLc+Fzm8wL4GZOeYMT EJjw4YOKvAz3n7CW1CVxxsY/oW/lOvz5Pq0KJqV8SIFnK7Q8MTczmlLsoVKjVV90 5dGJ7GBKs9az2H/RXwmAyXO9rycJ9VE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:13 2025 by rpki-client