$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/13bfe39e-8a27-394c-9783-5ba2cad68de2.roa File: 13bfe39e-8a27-394c-9783-5ba2cad68de2.roa (raw, json) Hash identifier: yO8BAY5lHp9ApJhNEH168Zkdm9I7AIwVZ65s2xKmcEQ= Subject key identifier: 4F:2B:16:40:5E:57:27:38:98:0C:8E:00:0A:2A:DA:35:47:96:69:4F Certificate issuer: /CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487 Certificate serial: 010D0C9F4328584B8BE8872FB7269A130223E7A0 Authority key identifier: F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/13bfe39e-8a27-394c-9783-5ba2cad68de2.roa Signing time: Fri 17 Oct 2025 01:13:35 +0000 ROA not before: Fri 17 Oct 2025 01:13:35 +0000 ROA not after: Thu 15 Jan 2026 02:13:35 +0000 asID: 213159 IP address blocks: 23.139.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e8:87:2f:b7:26:9a:13:02:23:e7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487 Validity Not Before: Oct 17 01:13:35 2025 GMT Not After : Jan 15 02:13:35 2026 GMT Subject: CN=be7f1d59-c1be-4d01-9c9f-c6704362faa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dc:60:bb:06:43:e3:07:01:a8:03:77:a5:90: 36:24:a6:65:a2:69:65:09:39:b4:39:50:25:c8:7e: 3c:5e:58:d2:35:2d:e5:49:26:81:e6:16:5d:d7:b0: 87:d8:a1:b7:4e:80:09:0e:2c:86:77:5a:c2:6b:9b: 98:06:4c:f7:42:0a:f2:d7:2b:5b:db:f1:10:1b:34: 2f:be:07:c4:25:e3:fa:f1:ee:5b:c0:da:7e:e9:00: 37:d0:9f:94:23:17:ef:44:e0:5f:be:e3:7d:f9:0d: 43:03:c6:24:22:31:42:b6:2e:67:2b:14:0b:d7:93: 83:56:84:54:1f:60:12:23:43:18:6d:0c:f9:4f:8e: b5:0f:a0:f4:7d:94:9c:c4:c4:2d:ca:29:be:8b:fb: 84:c2:64:53:15:c5:f3:90:d2:e5:0b:7a:af:79:6f: e4:fd:43:74:88:38:a6:e3:75:bf:98:e3:52:65:11: 75:00:bc:b7:67:15:fa:d9:53:a8:4b:a3:a1:9b:bd: 3e:0f:ac:79:63:79:c2:c0:6a:4b:b7:4e:de:5d:e3: eb:92:fb:85:01:67:f8:3c:78:3a:80:d5:99:97:d6: d5:af:a7:4b:45:b7:28:41:08:fc:e2:7b:28:37:08: 97:77:bf:33:c5:01:4a:43:a6:af:3f:1b:54:70:0b: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2B:16:40:5E:57:27:38:98:0C:8E:00:0A:2A:DA:35:47:96:69:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/13bfe39e-8a27-394c-9783-5ba2cad68de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl X509v3 Authority Key Identifier: keyid:F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer sbgp-ipAddrBlock: critical IPv4: 23.139.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bb:26:1c:b1:2a:a8:ba:82:c2:78:e8:c0:1c:84:77:b3:18: b9:c5:5f:87:13:40:c8:44:90:cf:b8:9e:82:a4:a4:53:f1:e1: c2:bb:4c:c2:35:6c:7d:39:9c:3a:14:32:a8:c6:5d:bc:72:fd: 0b:63:21:65:45:5c:86:71:d5:70:8e:56:0d:e6:87:f6:81:84: 90:d3:ef:90:87:88:21:93:e8:fd:7f:a1:00:63:47:96:27:1e: 8b:26:10:e8:95:42:64:1f:3c:de:79:fc:b2:10:74:c3:6e:02: a6:9f:ec:29:bc:d3:80:73:2a:c1:59:43:49:8f:27:d9:9a:97: ac:be:16:28:55:81:7d:ed:89:c1:18:53:21:cc:b6:71:71:88: 4e:f9:eb:03:b8:f1:76:9e:57:ea:94:37:9c:c0:ba:66:43:93: 69:4f:cb:13:2a:e1:ec:b1:67:55:0a:95:6a:4d:e2:cf:8c:91: 6f:51:21:34:85:c6:ad:6b:0a:1d:b9:59:ba:ba:05:4f:86:f3: de:44:3f:aa:f9:52:44:bd:d3:86:1e:73:de:13:73:17:d7:fa: 3b:e4:97:78:93:30:f3:3b:ad:82:9d:cb:55:20:7c:4d:e7:6f: a3:d0:21:0a:a3:3f:50:23:85:0d:39:5a:a8:d9:b3:8b:2c:e4: 27:94:ac:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL6IcvtyaaEwIj56AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJjYmRhZjYtZTUyOC00YTE0LTllNDktZWJmZGQ1NjZj NDg3MB4XDTI1MTAxNzAxMTMzNVoXDTI2MDExNTAyMTMzNVowLzEtMCsGA1UEAxMk YmU3ZjFkNTktYzFiZS00ZDAxLTljOWYtYzY3MDQzNjJmYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdxguwZD4wcBqAN3pZA2JKZlomllCTm0OVAl yH48XljSNS3lSSaB5hZd17CH2KG3ToAJDiyGd1rCa5uYBkz3Qgry1ytb2/EQGzQv vgfEJeP68e5bwNp+6QA30J+UIxfvROBfvuN9+Q1DA8YkIjFCti5nKxQL15ODVoRU H2ASI0MYbQz5T461D6D0fZScxMQtyim+i/uEwmRTFcXzkNLlC3qveW/k/UN0iDim 43W/mONSZRF1ALy3ZxX62VOoS6Ohm70+D6x5Y3nCwGpLt07eXePrkvuFAWf4PHg6 gNWZl9bVr6dLRbcoQQj84nsoNwiXd78zxQFKQ6avPxtUcAuTRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8rFkBeVyc4mAyOAAoq2jVHlmlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zMmNi ZGFmNi1lNTI4LTRhMTQtOWU0OS1lYmZkZDU2NmM0ODcvMTNiZmUzOWUtOGEyNy0z OTRjLTk3ODMtNWJhMmNhZDY4ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzJjYmRhZjYtZTUyOC00YTE0LTll NDktZWJmZGQ1NjZjNDg3LzMyY2JkYWY2LWU1MjgtNGExNC05ZTQ5LWViZmRkNTY2 YzQ4Ny5jcmwwHwYDVR0jBBgwFoAU9FttUn2s37NqM4CuTn4NdkgwXlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zMmNiZGFmNi1lNTI4LTRhMTQtOWU0OS1lYmZk ZDU2NmM0ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy7JhyxKqi6gsJ46MAchHezGLnFX4cTQMhEkM+4noKkpFPx4cK7TMI1 bH05nDoUMqjGXbxy/QtjIWVFXIZx1XCOVg3mh/aBhJDT75CHiCGT6P1/oQBjR5Yn HosmEOiVQmQfPN55/LIQdMNuAqaf7Cm804BzKsFZQ0mPJ9mal6y+FihVgX3ticEY UyHMtnFxiE756wO48XaeV+qUN5zAumZDk2lPyxMq4eyxZ1UKlWpN4s+MkW9RITSF xq1rCh25Wbq6BU+G895EP6r5UkS904Yec94TcxfX+jvkl3iTMPM7rYKdy1UgfE3n b6PQIQqjP1AjhQ05WqjZs4ss5CeUrGg= -----END CERTIFICATE-----Generated at Mon Oct 20 23:45:03 2025 by rpki-client