$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/0b696ea7-7910-34a0-95a4-03d356eda25b.roa File: 0b696ea7-7910-34a0-95a4-03d356eda25b.roa (raw, json) Hash identifier: xJ3UzXf5jmhyi5URjlvzLMw7P138ao56ZLi5qofelQ0= Subject key identifier: 53:67:D3:DB:0B:A1:3F:D0:47:57:EE:F0:48:50:80:26:89:42:24:2D Certificate issuer: /CN=a36c31cd-64fa-4048-853b-eaea17e56691 Certificate serial: 010D0C9F4328584B2FC1B93C570D1EE8601D2480 Authority key identifier: A5:13:77:4D:79:8F:E9:10:52:7B:6E:77:46:2D:CD:9F:FE:40:C0:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/0b696ea7-7910-34a0-95a4-03d356eda25b.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 64079 IP address blocks: 23.139.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:b9:3c:57:0d:1e:e8:60:1d:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36c31cd-64fa-4048-853b-eaea17e56691 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=21a25a54-0c44-4477-ba2a-ff88da0de313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3e:f5:ec:cb:18:b9:7b:b5:f3:15:6a:e9:4a: 61:78:e8:8e:a7:91:2b:ae:bf:f4:fb:a8:8e:f4:7b: 66:0a:40:3d:26:42:ea:01:7e:50:b7:01:6d:d0:9f: fc:c5:84:a3:09:09:0e:38:23:57:02:93:17:a5:52: 5d:f5:c5:21:eb:df:51:cc:50:fa:b9:6d:c3:41:86: d8:93:2d:98:3b:12:1d:ca:c6:90:30:c8:e6:64:31: 2f:d2:c0:40:30:a5:24:5a:69:17:db:04:55:70:27: 82:cd:48:43:19:bc:fd:11:8d:24:c3:f2:69:d7:1c: ed:22:44:d0:32:42:5a:a4:d9:f4:ba:df:fb:23:9e: da:b0:1b:25:1a:1e:c2:1c:dc:c4:03:83:0c:10:ee: 88:86:73:2f:87:95:b1:dc:ab:26:20:cb:e1:d0:80: d1:93:d9:3e:bd:78:c3:d2:cf:2f:2b:81:38:c6:21: 29:fe:48:57:cd:34:18:38:48:96:ca:a7:4e:c0:6f: 61:fd:02:6c:81:b5:26:bb:87:f9:7c:f8:40:a3:7d: 58:51:cf:df:c4:01:9f:cf:80:19:5a:77:41:0a:f2: f3:d4:57:1f:14:0d:83:07:45:73:40:c6:e8:4f:a4: 49:22:e8:b1:bc:7b:d5:c2:14:56:e9:b6:52:d7:72: 55:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:67:D3:DB:0B:A1:3F:D0:47:57:EE:F0:48:50:80:26:89:42:24:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/0b696ea7-7910-34a0-95a4-03d356eda25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691/a36c31cd-64fa-4048-853b-eaea17e56691.crl X509v3 Authority Key Identifier: keyid:A5:13:77:4D:79:8F:E9:10:52:7B:6E:77:46:2D:CD:9F:FE:40:C0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a36c31cd-64fa-4048-853b-eaea17e56691.cer sbgp-ipAddrBlock: critical IPv4: 23.139.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d7:72:d6:a3:1e:78:be:b7:f1:ec:bc:8a:fc:4e:8f:c7:b1: 4b:d5:d0:fe:a7:88:a0:6a:db:59:21:c5:df:c0:f6:08:5e:02: d7:a0:d7:a6:51:17:11:bb:2a:34:c6:3b:d9:fa:f5:d0:bf:20: 5e:fc:c9:66:63:8a:47:d9:5c:a3:f9:fb:95:b5:06:24:d7:27: 41:77:1b:12:dc:28:1d:df:39:b7:4b:eb:c4:7a:49:03:7f:2d: 75:74:2e:56:ef:74:79:e1:62:4f:68:e2:75:47:07:3b:f0:5d: 6e:3f:7e:4a:5a:72:f2:10:21:d3:d7:23:10:03:c3:16:be:04: 5e:97:ce:89:d4:91:fa:9c:30:bd:17:53:54:89:5f:e1:94:1c: 3e:f5:3e:f6:ba:d9:72:3e:3c:7d:de:70:fd:5d:50:a6:ba:2b: 22:fc:7e:28:10:64:ac:40:0e:f1:c8:86:d8:77:5d:58:3f:7e: ed:b4:7e:c5:8f:af:5b:0a:ea:f0:77:6d:87:ea:6d:d6:e1:eb: 42:5b:5d:13:55:21:a3:e2:f6:bc:42:c3:4e:f6:a7:50:02:79: 03:c6:29:2e:3d:91:b0:e9:ff:21:bf:07:f7:83:39:c0:61:59: da:4c:da:bb:c3:a5:1c:75:b1:32:d9:fc:09:c0:1c:6b:22:7a: 1c:16:b9:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwbk8Vw0e6GAdJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM2YzMxY2QtNjRmYS00MDQ4LTg1M2ItZWFlYTE3ZTU2 NjkxMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MjFhMjVhNTQtMGM0NC00NDc3LWJhMmEtZmY4OGRhMGRlMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5T717MsYuXu18xVq6UpheOiOp5Errr/0+6iO 9HtmCkA9JkLqAX5QtwFt0J/8xYSjCQkOOCNXApMXpVJd9cUh699RzFD6uW3DQYbY ky2YOxIdysaQMMjmZDEv0sBAMKUkWmkX2wRVcCeCzUhDGbz9EY0kw/Jp1xztIkTQ MkJapNn0ut/7I57asBslGh7CHNzEA4MMEO6IhnMvh5Wx3KsmIMvh0IDRk9k+vXjD 0s8vK4E4xiEp/khXzTQYOEiWyqdOwG9h/QJsgbUmu4f5fPhAo31YUc/fxAGfz4AZ WndBCvLz1FcfFA2DB0VzQMboT6RJIuixvHvVwhRW6bZS13JVyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNn09sLoT/QR1fu8EhQgCaJQiQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMzZj MzFjZC02NGZhLTQwNDgtODUzYi1lYWVhMTdlNTY2OTEvMGI2OTZlYTctNzkxMC0z NGEwLTk1YTQtMDNkMzU2ZWRhMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTM2YzMxY2QtNjRmYS00MDQ4LTg1 M2ItZWFlYTE3ZTU2NjkxL2EzNmMzMWNkLTY0ZmEtNDA0OC04NTNiLWVhZWExN2U1 NjY5MS5jcmwwHwYDVR0jBBgwFoAUpRN3TXmP6RBSe253Ri3Nn/5AwP0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMzZjMzFjZC02NGZhLTQwNDgtODUzYi1lYWVh MTdlNTY2OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4v0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDXctajHni+t/HsvIr8To/HsUvV0P6niKBq21khxd/A9gheAteg16ZR FxG7KjTGO9n69dC/IF78yWZjikfZXKP5+5W1BiTXJ0F3GxLcKB3fObdL68R6SQN/ LXV0LlbvdHnhYk9o4nVHBzvwXW4/fkpacvIQIdPXIxADwxa+BF6XzonUkfqcML0X U1SJX+GUHD71Pva62XI+PH3ecP1dUKa6KyL8figQZKxADvHIhth3XVg/fu20fsWP r1sK6vB3bYfqbdbh60JbXRNVIaPi9rxCw072p1ACeQPGKS49kbDp/yG/B/eDOcBh WdpM2rvDpRx1sTLZ/AnAHGsiehwWues= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:34 2025 by rpki-client