$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa File: 67e9a890-c640-3faf-80ae-71476177faba.roa (raw, json) Hash identifier: a0BrDUgbq43yGuXT+uISq5TpxvB/+DGyWqGHeYak2v4= Subject key identifier: CC:54:AA:8B:57:7D:CF:B7:F9:71:B9:78:99:48:CF:64:5E:1B:25:D2 Certificate issuer: /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Certificate serial: 010D0C9F4328584B5DD1F5EB98B650FC47366800 Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 401466 IP address blocks: 23.129.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f5:eb:98:b6:50:fc:47:36:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=8ee43f3c-7b82-4e06-911b-160b0a8505f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e1:95:dd:71:de:f4:61:57:ef:21:8a:03:18: e8:08:42:16:03:bc:df:ec:ff:9a:75:cb:07:d8:04: 63:2d:94:50:a6:b0:58:8a:b6:4d:28:18:e3:9e:c3: 93:17:fa:41:c3:24:25:23:67:10:f8:16:65:e0:81: 96:2a:d8:31:73:be:b6:39:18:c4:e1:10:d3:3e:bc: 9b:d9:f7:91:71:c9:ae:ba:b7:49:17:28:a3:ce:ce: eb:e3:95:32:52:41:6a:70:57:83:cc:80:98:fd:06: e4:9f:ea:d2:b8:79:f6:6a:3b:24:05:ab:8b:d7:00: 4e:fd:7e:ba:2e:02:c9:a0:88:20:d1:16:7d:4b:c2: ef:1a:4e:81:b6:0f:f9:ef:01:52:c6:6c:51:6d:90: 3d:c3:a0:0f:6e:28:d4:bb:4f:cb:17:aa:78:7c:57: fd:52:18:7d:45:a3:70:1e:85:93:4b:a1:01:6c:21: 0f:73:16:db:4c:9d:5a:40:4f:9d:c3:f8:c3:24:81: 11:79:33:ea:02:84:9c:82:65:c8:d5:be:74:c3:75: 0d:5a:23:bd:56:c6:1e:fd:d0:34:72:b8:43:5c:6c: 90:c7:0f:d3:21:38:da:16:d4:09:5b:9d:38:49:e0: da:0f:ce:1e:9f:1e:a9:4c:e4:2b:55:f6:a8:74:8a: ba:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:54:AA:8B:57:7D:CF:B7:F9:71:B9:78:99:48:CF:64:5E:1B:25:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl X509v3 Authority Key Identifier: keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer sbgp-ipAddrBlock: critical IPv4: 23.129.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d1:56:d3:32:39:82:93:1c:b2:7d:6e:8d:58:4e:cc:c3:65: 64:73:f4:1b:d9:13:07:47:0e:c5:fa:3b:a3:c8:01:0b:78:b8: 24:ef:8a:6a:83:cf:4a:60:a9:8c:c9:5e:ec:0b:e7:1a:e5:c1: 8d:88:28:e4:71:c3:6b:3f:36:0c:95:96:4a:99:02:17:d3:48: 08:68:28:83:09:7c:3e:f5:5a:c6:e0:75:df:02:f8:73:20:22: 8f:f7:de:7b:b0:f9:56:58:e9:93:20:9d:31:f3:7e:e2:2a:c6: 8c:0e:03:1d:64:8b:42:a8:6d:60:cb:e1:e2:f5:b1:1b:41:b0: 8d:69:a1:06:ca:8e:b7:7e:d9:0f:38:41:82:10:9e:f7:db:24: c3:11:90:af:ce:94:e3:fa:dc:a9:99:5d:ba:d5:93:41:b9:7f: c4:1f:b8:d6:6d:da:f8:d5:4d:bf:d7:01:8e:dc:c5:19:de:4a: 75:24:9e:f6:54:bf:8c:11:ba:d2:ce:34:a1:bb:eb:87:38:b0: b6:b4:c6:b1:81:e1:1d:ab:c4:58:5c:2b:d8:66:9d:34:d9:48: d0:52:a6:0d:aa:dd:a2:7b:6f:7f:fe:90:d8:91:84:fc:c7:70: 73:d5:2f:e1:df:c8:f7:06:b0:a4:86:f7:41:11:8e:f1:47:36: 4f:76:62:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fXrmLZQ/Ec2aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3ZmI3ZTAtMDBhNi00NTM3LTk4ZGQtODdhNWFjYmQx MjI1MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OGVlNDNmM2MtN2I4Mi00ZTA2LTkxMWItMTYwYjBhODUwNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOGV3XHe9GFX7yGKAxjoCEIWA7zf7P+adcsH 2ARjLZRQprBYirZNKBjjnsOTF/pBwyQlI2cQ+BZl4IGWKtgxc762ORjE4RDTPryb 2feRccmuurdJFyijzs7r45UyUkFqcFeDzICY/Qbkn+rSuHn2ajskBauL1wBO/X66 LgLJoIgg0RZ9S8LvGk6Btg/57wFSxmxRbZA9w6APbijUu0/LF6p4fFf9Uhh9RaNw HoWTS6EBbCEPcxbbTJ1aQE+dw/jDJIEReTPqAoScgmXI1b50w3UNWiO9VsYe/dA0 crhDXGyQxw/TITjaFtQJW504SeDaD84enx6pTOQrVfaodIq6HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxUqotXfc+3+XG5eJlIz2ReGyXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdm YjdlMC0wMGE2LTQ1MzctOThkZC04N2E1YWNiZDEyMjUvNjdlOWE4OTAtYzY0MC0z ZmFmLTgwYWUtNzE0NzYxNzdmYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3ZmI3ZTAtMDBhNi00NTM3LTk4 ZGQtODdhNWFjYmQxMjI1L2Q1N2ZiN2UwLTAwYTYtNDUzNy05OGRkLTg3YTVhY2Jk MTIyNS5jcmwwHwYDVR0jBBgwFoAUEp4euQeWpb0XZcnkKBFzj02ykcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTdmYjdlMC0wMGE2LTQ1MzctOThkZC04N2E1 YWNiZDEyMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETRVtMyOYKTHLJ9bo1YTszDZWRz9BvZEwdHDsX6O6PIAQt4uCTvimqD z0pgqYzJXuwL5xrlwY2IKORxw2s/NgyVlkqZAhfTSAhoKIMJfD71Wsbgdd8C+HMg Io/33nuw+VZY6ZMgnTHzfuIqxowOAx1ki0KobWDL4eL1sRtBsI1poQbKjrd+2Q84 QYIQnvfbJMMRkK/OlOP63KmZXbrVk0G5f8QfuNZt2vjVTb/XAY7cxRneSnUknvZU v4wRutLONKG764c4sLa0xrGB4R2rxFhcK9hmnTTZSNBSpg2q3aJ7b3/+kNiRhPzH cHPVL+HfyPcGsKSG90ERjvFHNk92Yg4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:37 2025 by rpki-client