$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa File: 7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa (raw, json) Hash identifier: SMIf/aynQzUd/FMuemQzxPOVgi3ZmzdDokDun8k0WfM= Subject key identifier: CD:4B:12:9C:34:F2:BF:A3:30:00:30:22:04:22:5C:E9:AF:B2:47:40 Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584B5B073C95045684CB306CB140 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 23.156.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3c:95:04:56:84:cb:30:6c:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=1d9579a0-52eb-48fb-8cb0-709e7bfa9fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:98:33:9e:d5:3d:89:d8:ca:f7:fa:42:a9: 1b:8d:cc:fc:ea:05:a6:20:18:ab:bf:c8:c2:61:c0: 71:8d:f6:1c:e3:75:69:06:8e:93:18:7a:8c:83:ab: af:a1:ff:41:7e:20:c1:29:7d:7f:a1:8d:85:21:c2: a4:f0:13:5f:28:8d:1e:a7:21:6b:b0:e5:78:93:61: 0e:e4:ae:75:ce:75:65:ce:8d:22:11:42:9a:44:10: 2d:ca:57:22:a8:85:a1:4c:a2:59:c6:55:01:06:1d: fd:a9:0f:48:95:07:3e:6b:98:c2:9c:d6:d6:2f:b5: d4:2a:48:14:45:83:c8:ee:4d:2b:f9:fa:8c:55:67: b9:df:ff:be:f1:24:0e:18:d3:03:60:d0:95:16:69: bf:d7:10:e6:67:e5:1f:02:94:aa:4c:2c:da:9b:99: bf:b3:50:b4:be:8d:7a:ae:69:85:43:84:7a:2b:d5: 6f:bb:0e:cb:d1:28:95:b6:8e:65:59:60:72:b0:d4: 51:a0:73:b7:d6:cb:f5:b9:c8:37:b8:7f:31:d5:44: 67:f0:c9:9e:10:10:11:02:2b:c1:e4:9c:4e:1f:f6: 66:fb:f8:a5:e0:fa:97:1a:f6:f5:ef:e7:61:50:c1: 71:06:88:4e:72:b9:50:0d:54:cd:3d:17:72:39:38: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4B:12:9C:34:F2:BF:A3:30:00:30:22:04:22:5C:E9:AF:B2:47:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv4: 23.156.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:9e:6e:b9:ba:69:c5:29:23:0a:6a:a8:e0:39:09:34:e2:74: 5b:8f:f5:cc:6b:c1:53:74:fd:e1:13:bc:c0:e8:41:82:bb:b4: 2e:61:cd:9b:5f:20:4a:6c:91:23:31:4f:80:78:cb:d2:8f:b9: 25:31:e3:61:94:27:54:0c:df:df:c6:0a:1f:3a:71:2a:75:81: a9:48:0d:ed:35:71:ed:54:12:8d:fd:19:68:6d:06:2c:4c:26: c8:60:a3:83:c7:51:31:77:7a:56:7e:a1:de:e2:24:ac:64:21: 6c:3c:38:23:0c:f3:18:41:21:cd:ee:43:26:58:cc:e8:d7:ce: 09:e6:a5:86:58:dc:26:de:82:6c:db:57:47:82:05:a0:8c:03: 9b:36:8a:68:7b:7e:ae:e5:18:93:98:fd:1f:5f:d0:21:57:5b: 35:d2:84:51:b9:c4:03:27:9a:01:6c:03:dd:f9:98:da:f1:a8: 5d:74:33:b5:4a:c6:28:44:8d:b7:a6:a2:d2:c2:35:8c:7b:4d: 9b:3a:17:95:31:4a:13:d7:e8:41:3d:6f:b0:62:02:b6:12:d8: 05:aa:70:28:0a:bc:d6:09:0d:aa:28:9f:17:3e:85:15:d6:b9: 48:c1:e0:e8:26:18:10:5c:3a:d7:15:52:f4:2f:83:a0:06:13: 35:06:ce:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbBzyVBFaEyzBssUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MWQ5NTc5YTAtNTJlYi00OGZiLThjYjAtNzA5ZTdiZmE5ZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uOYM57VPYnYyvf6Qqkbjcz86gWmIBirv8jC YcBxjfYc43VpBo6TGHqMg6uvof9BfiDBKX1/oY2FIcKk8BNfKI0epyFrsOV4k2EO 5K51znVlzo0iEUKaRBAtylciqIWhTKJZxlUBBh39qQ9IlQc+a5jCnNbWL7XUKkgU RYPI7k0r+fqMVWe53/++8SQOGNMDYNCVFmm/1xDmZ+UfApSqTCzam5m/s1C0vo16 rmmFQ4R6K9Vvuw7L0SiVto5lWWBysNRRoHO31sv1ucg3uH8x1URn8MmeEBARAivB 5JxOH/Zm+/il4PqXGvb17+dhUMFxBohOcrlQDVTNPRdyOTidYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1LEpw08r+jMAAwIgQiXOmvskdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvN2YyMjQ5ZjYtNGJiMi0z MWI3LTlmMTQtYWEzZWU0ZDRhMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGebrm6acUpIwpqqOA5CTTidFuP9cxrwVN0/eETvMDoQYK7tC5hzZtf IEpskSMxT4B4y9KPuSUx42GUJ1QM39/GCh86cSp1galIDe01ce1UEo39GWhtBixM Jshgo4PHUTF3elZ+od7iJKxkIWw8OCMM8xhBIc3uQyZYzOjXzgnmpYZY3Cbegmzb V0eCBaCMA5s2imh7fq7lGJOY/R9f0CFXWzXShFG5xAMnmgFsA935mNrxqF10M7VK xihEjbemotLCNYx7TZs6F5UxShPX6EE9b7BiArYS2AWqcCgKvNYJDaoonxc+hRXW uUjB4OgmGBBcOtcVUvQvg6AGEzUGzgc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:50 2025 by rpki-client