$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/87d5029e-74ad-3e1c-8dd1-7693349ca9d1.roa File: 87d5029e-74ad-3e1c-8dd1-7693349ca9d1.roa (raw, json) Hash identifier: oVLNzQZs/luPd+zAmGixCoDhR+rb7Op3xAoZ3ZmMHSI= Subject key identifier: 92:13:4F:C3:7F:CD:A2:FB:D5:36:CF:1A:61:CF:9E:33:C1:0A:78:E4 Certificate issuer: /CN=4b36fa3e-06ec-405c-acf7-72589e9511d3 Certificate serial: 010D0C9F4328584ADD6673717720FD848BACD540 Authority key identifier: 98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/87d5029e-74ad-3e1c-8dd1-7693349ca9d1.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 395734 IP address blocks: 23.128.128.0/23 maxlen: 23 23.128.128.0/24 maxlen: 24 23.128.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:73:71:77:20:fd:84:8b:ac:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b36fa3e-06ec-405c-acf7-72589e9511d3 Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=3ca41eab-080a-4e7d-8199-46e76d11e4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:26:6d:64:24:ca:2a:d3:eb:41:7f:3f:f7:13: 21:3e:6a:30:45:f0:a0:82:27:69:51:bc:81:74:74: 21:af:5b:44:ad:be:d0:61:18:57:c4:66:de:a3:c7: 96:ae:26:84:72:42:68:f3:17:fd:3b:b9:2d:5f:1c: 75:16:c4:11:4a:da:52:2f:89:e7:c8:a1:b1:e5:18: da:94:3a:84:c2:91:bb:59:7e:73:1f:6c:2f:ae:95: 00:84:d8:28:52:12:fd:16:f1:38:b6:96:7f:6e:c8: 62:52:ec:17:de:f0:d2:01:cd:68:0e:35:22:72:59: 0f:2a:8f:49:63:f1:51:cf:eb:bf:ae:97:70:e0:67: 78:09:dd:6d:68:51:c9:e3:d3:ff:80:67:e0:b9:db: 5d:f2:f7:03:44:0d:f0:27:34:de:1f:f3:01:0e:71: 10:12:5c:d2:9d:08:ab:13:c2:82:b0:6a:ec:66:32: e7:e2:9b:c5:2c:90:97:13:61:b7:aa:60:d5:44:ca: fd:da:45:7f:2d:66:5d:1b:f3:3e:2d:10:92:2a:2f: 37:ee:5b:56:14:3f:dd:34:ce:e2:38:e2:8e:37:35: d5:67:47:e9:a1:d8:59:65:74:a7:f7:20:ef:cc:00: 27:d1:5d:40:b8:31:95:5c:77:77:ca:b0:89:09:17: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:13:4F:C3:7F:CD:A2:FB:D5:36:CF:1A:61:CF:9E:33:C1:0A:78:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/87d5029e-74ad-3e1c-8dd1-7693349ca9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3/4b36fa3e-06ec-405c-acf7-72589e9511d3.crl X509v3 Authority Key Identifier: keyid:98:B2:D4:63:17:2E:11:B1:65:95:50:5C:CC:22:2D:E3:4B:59:95:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4b36fa3e-06ec-405c-acf7-72589e9511d3.cer sbgp-ipAddrBlock: critical IPv4: 23.128.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ff:44:bc:5a:4e:e1:10:c8:82:40:0a:0f:8d:31:d8:43:b5: ac:8e:86:89:66:1e:74:22:65:fc:d1:e0:e8:7a:96:5b:92:2d: 32:80:1d:60:76:ff:bf:15:7d:af:91:05:a2:eb:41:a3:40:29: 71:e4:3a:21:a4:9f:97:81:67:d2:a2:00:66:aa:07:86:d2:fa: b7:2e:3e:3c:d3:b2:63:8b:d1:59:94:2e:e5:e7:92:43:91:d2: 20:a9:86:2c:78:fe:5f:2d:3c:fb:eb:60:bb:ca:ff:b9:82:60: c5:e7:43:f1:02:20:f0:2a:d9:2d:b9:f5:f3:5d:8f:cf:bf:5c: 2b:1f:c1:1d:6d:65:a1:f4:7b:8b:c5:ee:2e:7c:b7:e8:aa:c3: 37:91:49:5e:52:3f:6b:98:06:06:03:47:94:eb:69:62:c9:6a: 48:a1:56:7a:8c:64:b6:a9:94:17:28:40:0f:07:1e:50:af:c4: 07:a8:41:8d:df:48:f1:31:d3:cd:1a:ea:ed:87:4e:62:c4:1c: 6f:24:8f:3b:d1:db:e5:cf:b2:94:e3:11:9a:8e:fb:29:11:4b: 76:4b:02:56:86:e9:5c:32:e5:7b:c4:d6:5f:29:24:b5:a7:59: 7b:27:6d:4e:02:d7:f7:50:2c:92:d1:98:22:fe:73:dc:0d:02: e8:33:bd:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZnNxdyD9hIus1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGIzNmZhM2UtMDZlYy00MDVjLWFjZjctNzI1ODllOTUx MWQzMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk M2NhNDFlYWItMDgwYS00ZTdkLTgxOTktNDZlNzZkMTFlNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSZtZCTKKtPrQX8/9xMhPmowRfCggidpUbyB dHQhr1tErb7QYRhXxGbeo8eWriaEckJo8xf9O7ktXxx1FsQRStpSL4nnyKGx5Rja lDqEwpG7WX5zH2wvrpUAhNgoUhL9FvE4tpZ/bshiUuwX3vDSAc1oDjUiclkPKo9J Y/FRz+u/rpdw4Gd4Cd1taFHJ49P/gGfgudtd8vcDRA3wJzTeH/MBDnEQElzSnQir E8KCsGrsZjLn4pvFLJCXE2G3qmDVRMr92kV/LWZdG/M+LRCSKi837ltWFD/dNM7i OOKONzXVZ0fpodhZZXSn9yDvzAAn0V1AuDGVXHd3yrCJCRczzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJITT8N/zaL71TbPGmHPnjPBCnjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80YjM2 ZmEzZS0wNmVjLTQwNWMtYWNmNy03MjU4OWU5NTExZDMvODdkNTAyOWUtNzRhZC0z ZTFjLThkZDEtNzY5MzM0OWNhOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGIzNmZhM2UtMDZlYy00MDVjLWFj ZjctNzI1ODllOTUxMWQzLzRiMzZmYTNlLTA2ZWMtNDA1Yy1hY2Y3LTcyNTg5ZTk1 MTFkMy5jcmwwHwYDVR0jBBgwFoAUmLLUYxcuEbFllVBczCIt40tZlacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80YjM2ZmEzZS0wNmVjLTQwNWMtYWNmNy03MjU4 OWU5NTExZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF4CAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz/RLxaTuEQyIJACg+NMdhDtayOholmHnQiZfzR4Oh6lluSLTKAHWB2 /78Vfa+RBaLrQaNAKXHkOiGkn5eBZ9KiAGaqB4bS+rcuPjzTsmOL0VmULuXnkkOR 0iCphix4/l8tPPvrYLvK/7mCYMXnQ/ECIPAq2S259fNdj8+/XCsfwR1tZaH0e4vF 7i58t+iqwzeRSV5SP2uYBgYDR5TraWLJakihVnqMZLaplBcoQA8HHlCvxAeoQY3f SPEx080a6u2HTmLEHG8kjzvR2+XPspTjEZqO+ykRS3ZLAlaG6Vwy5XvE1l8pJLWn WXsnbU4C1/dQLJLRmCL+c9wNAugzvS0= -----END CERTIFICATE-----Generated at Sat Aug 23 23:45:10 2025 by rpki-client