$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa File: ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa (raw, json) Hash identifier: c3doIrVi1hbcBvrkbPbHVR8xYgAKBaCSoxf22QoHOtw= Subject key identifier: 6E:1A:0B:7F:98:3F:0F:4C:E6:93:1D:7E:1D:3E:8C:0A:D4:7F:EE:50 Certificate issuer: /CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5 Certificate serial: 010D0C9F4328584B56D72FD3586BE27222DE9900 Authority key identifier: A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 32797 IP address blocks: 23.156.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:2f:d3:58:6b:e2:72:22:de:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b72935c-ac1b-4aa0-b408-9c3271a8a2a5 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=73c0e4ee-61ad-4fbb-bc6a-c1c4b8288b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:48:39:58:6a:fe:14:a6:c0:a5:18:3d:73: a8:98:3a:e0:5a:fb:ed:ae:d7:ca:ca:69:a7:cf:1c: ab:a6:25:47:bf:f3:80:64:cb:ad:4d:64:11:a9:bd: ef:14:73:47:40:bd:dd:be:07:f4:43:4c:43:0d:bb: 20:df:48:f0:c2:f3:6c:7c:61:a6:79:3b:e6:f6:01: ea:cd:dc:b6:c3:5c:cb:c2:41:e2:cb:33:0e:51:a7: ff:47:4d:af:0e:be:1b:f1:31:6c:43:33:69:f7:8a: 3c:5a:94:be:16:12:ca:48:8f:9a:16:ce:9f:b7:79: 6a:5b:5a:61:4d:7d:00:e3:f1:4a:24:26:26:7b:39: f6:b7:c0:7b:03:4c:5b:39:93:b1:36:54:10:b0:c9: a9:cc:fd:c4:36:15:17:b1:0d:d3:9b:a7:2f:44:35: 38:b0:8c:5d:55:10:0b:d6:97:12:74:d2:36:bb:d8: 03:e1:af:dc:9a:63:08:26:95:6e:9c:19:f6:6b:df: 5a:94:06:0a:d5:29:71:97:a6:86:7a:43:c4:2f:bd: 78:2b:71:20:f3:1e:a4:ad:0d:a1:37:89:d3:d4:4e: 9d:63:36:b9:09:e0:ca:a1:d4:16:01:e3:65:a3:53: 69:4f:e1:56:10:b5:85:a0:ee:1d:d9:fa:8f:52:e1: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1A:0B:7F:98:3F:0F:4C:E6:93:1D:7E:1D:3E:8C:0A:D4:7F:EE:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/ed71e57c-2bfb-34de-8a9e-8e53c9586f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.crl X509v3 Authority Key Identifier: keyid:A0:9C:62:3B:6D:64:FD:4F:08:01:60:97:F8:DB:8F:44:DF:97:B9:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8b72935c-ac1b-4aa0-b408-9c3271a8a2a5.cer sbgp-ipAddrBlock: critical IPv4: 23.156.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b4:34:91:9d:92:e2:8f:88:dc:a4:de:01:6a:d7:35:c2:9a: 7b:78:ce:a5:d0:a4:d9:b6:0d:ba:68:12:b2:84:a2:3b:5c:15: 82:5e:e4:7e:41:d0:fe:57:0a:74:a4:2c:d2:46:9f:62:cb:d3: 0b:99:ba:61:34:80:0f:c0:4a:c9:10:22:a8:2d:3a:0a:34:e3: 20:e9:74:cc:66:9a:ae:77:72:78:68:03:6d:f6:4a:aa:bb:16: 6c:8e:f6:8c:e2:c4:62:ad:69:1c:8e:63:b3:fe:c4:3e:f9:c9: 84:eb:bb:c9:ab:ee:fa:17:f1:c1:3d:7c:01:7d:63:1b:09:31: 5a:eb:b3:ff:6a:ed:98:fe:5c:b9:70:51:db:b4:cd:aa:d5:bc: ae:47:cd:bf:7a:b8:cd:90:5b:4b:2a:8f:79:d3:1b:fc:76:80: c6:23:87:48:4b:eb:ae:8a:2f:75:42:9c:69:d9:7a:12:e5:21: 96:01:35:ad:d3:91:40:06:86:a5:1b:b7:c3:d0:4d:9d:91:c5: 77:4a:d0:24:7b:d3:d6:e1:6f:03:24:5c:ff:7b:99:b6:cf:4e: 81:19:9a:e2:11:96:69:39:23:63:b8:bf:a6:43:d9:60:77:75: f7:a4:1f:84:0e:c2:20:b8:d4:06:3f:d2:3c:93:d3:5e:3c:b4: 6c:f0:78:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1y/TWGviciLemQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3MjkzNWMtYWMxYi00YWEwLWI0MDgtOWMzMjcxYThh MmE1MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NzNjMGU0ZWUtNjFhZC00ZmJiLWJjNmEtYzFjNGI4Mjg4YjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlehIOVhq/hSmwKUYPXOomDrgWvvtrtfKymmn zxyrpiVHv/OAZMutTWQRqb3vFHNHQL3dvgf0Q0xDDbsg30jwwvNsfGGmeTvm9gHq zdy2w1zLwkHiyzMOUaf/R02vDr4b8TFsQzNp94o8WpS+FhLKSI+aFs6ft3lqW1ph TX0A4/FKJCYmezn2t8B7A0xbOZOxNlQQsMmpzP3ENhUXsQ3Tm6cvRDU4sIxdVRAL 1pcSdNI2u9gD4a/cmmMIJpVunBn2a99alAYK1Slxl6aGekPEL714K3Eg8x6krQ2h N4nT1E6dYza5CeDKodQWAeNlo1NpT+FWELWFoO4d2fqPUuEqmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4aC3+YPw9M5pMdfh0+jArUf+5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84Yjcy OTM1Yy1hYzFiLTRhYTAtYjQwOC05YzMyNzFhOGEyYTUvZWQ3MWU1N2MtMmJmYi0z NGRlLThhOWUtOGU1M2M5NTg2ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGI3MjkzNWMtYWMxYi00YWEwLWI0 MDgtOWMzMjcxYThhMmE1LzhiNzI5MzVjLWFjMWItNGFhMC1iNDA4LTljMzI3MWE4 YTJhNS5jcmwwHwYDVR0jBBgwFoAUoJxiO21k/U8IAWCX+NuPRN+Xud8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YjcyOTM1Yy1hYzFiLTRhYTAtYjQwOC05YzMy NzFhOGEyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE60NJGdkuKPiNyk3gFq1zXCmnt4zqXQpNm2DbpoErKEojtcFYJe5H5B 0P5XCnSkLNJGn2LL0wuZumE0gA/ASskQIqgtOgo04yDpdMxmmq53cnhoA232Sqq7 FmyO9ozixGKtaRyOY7P+xD75yYTru8mr7voX8cE9fAF9YxsJMVrrs/9q7Zj+XLlw Udu0zarVvK5Hzb96uM2QW0sqj3nTG/x2gMYjh0hL666KL3VCnGnZehLlIZYBNa3T kUAGhqUbt8PQTZ2RxXdK0CR709bhbwMkXP97mbbPToEZmuIRlmk5I2O4v6ZD2WB3 dfekH4QOwiC41AY/0jyT0148tGzweJU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:42 2025 by rpki-client