$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa File: 0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa (raw, json) Hash identifier: cWLOZnCA/CmRSb00t1zVvZpu2k6zmc/cVuu08UT3qb4= Subject key identifier: 0D:BC:3A:72:08:88:F0:35:8A:9D:69:B5:50:08:42:AB:3F:1B:23:01 Certificate issuer: /CN=dfc88768-1b58-474d-a340-376827992098 Certificate serial: 010D0C9F4328584B87B23E0B31BCC159B3578FE0 Authority key identifier: F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 21629 IP address blocks: 23.134.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3e:0b:31:bc:c1:59:b3:57:8f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfc88768-1b58-474d-a340-376827992098 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=eebd00fb-afd3-45ca-b87b-0aa9fff8cb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c4:23:b4:9c:c7:7e:f0:26:87:8e:fc:a4:4c: 94:24:b3:16:9f:59:c8:c7:67:bb:86:0a:39:9f:5e: 6e:95:54:1d:a0:7c:4c:98:ce:09:e7:24:6d:b7:f4: be:70:20:60:87:d6:7d:80:57:fe:d8:3e:d9:65:25: b4:f2:65:5c:ab:e0:7d:aa:b9:c6:4c:db:6b:ca:aa: 62:e7:73:03:5e:1e:c4:9d:15:71:8c:04:08:e8:0a: 8f:6a:e3:bc:bc:d5:54:af:eb:06:d3:68:8a:97:0c: 88:e9:ac:e4:7b:e2:36:79:a1:63:0e:74:1b:70:bf: 2c:4f:68:76:70:5c:a2:d1:99:ab:cf:de:27:f4:27: 66:f8:33:47:a1:6a:14:80:10:c8:4a:b6:e9:d8:bf: 98:5a:eb:27:90:8f:69:12:79:17:9a:44:6a:58:06: bb:36:51:bc:c9:4e:20:40:87:c9:90:68:e0:38:e7: af:da:87:17:32:20:9b:16:d1:be:61:23:9a:25:f9: 54:8e:e3:4a:ed:99:d9:f5:6c:e3:3c:91:cd:6a:f1: 0d:fb:20:f2:29:fa:1d:65:24:97:88:f5:91:0c:30: 06:c4:a8:c4:15:6d:2f:83:7b:b2:f9:3e:eb:7a:48: fd:24:8a:e5:33:33:bf:28:4b:bb:8f:d8:3e:0e:6a: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BC:3A:72:08:88:F0:35:8A:9D:69:B5:50:08:42:AB:3F:1B:23:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/0f5fcd2c-c115-381d-83bf-8bcfd33cbaaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098/dfc88768-1b58-474d-a340-376827992098.crl X509v3 Authority Key Identifier: keyid:F5:46:A9:11:86:D2:32:49:64:CE:BB:C0:06:FE:B1:E4:46:07:6A:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfc88768-1b58-474d-a340-376827992098.cer sbgp-ipAddrBlock: critical IPv4: 23.134.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:77:8c:40:42:9b:a1:37:18:67:c9:b8:5a:97:d1:55:4c:11: 88:e1:90:44:dc:18:09:45:db:7a:1b:02:57:0e:91:35:82:e4: 98:58:64:0f:e1:bb:06:ec:ff:04:90:a9:97:4c:aa:ff:4f:da: 61:bc:23:e3:f2:59:f6:75:b4:9b:36:97:17:d1:46:e2:bf:7d: 27:09:8e:eb:5e:bd:fd:f1:d2:0f:c0:c4:d9:b6:60:86:89:0d: 9c:d3:2d:ee:5a:6e:2e:94:b2:d6:98:1e:f9:b5:59:1b:b3:2d: c4:6d:10:22:aa:3a:30:9f:91:0b:d5:85:80:68:14:21:c2:f8: 75:2b:d2:48:b1:43:97:18:dd:c2:25:70:00:3c:42:28:39:b6: 09:ae:38:1f:ff:8d:5f:2d:4a:6f:40:66:19:56:04:25:31:43: 6f:d9:97:e1:05:06:30:1b:0f:05:eb:d6:1c:7f:e0:22:92:f7: 28:89:65:7d:2f:4c:05:7c:4d:44:5a:54:4b:75:3d:59:7a:52: b0:45:5b:d2:2f:f7:89:35:4d:00:88:74:9d:e7:38:dd:eb:e0: 7b:65:b7:4f:e7:10:96:b0:36:a3:b2:04:fa:14:00:8b:a8:93: b9:5f:3d:46:70:f7:c2:a4:0c:98:f5:79:bb:00:1d:0a:2e:f2: 09:d5:92:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsj4LMbzBWbNXj+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZjODg3NjgtMWI1OC00NzRkLWEzNDAtMzc2ODI3OTky MDk4MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk ZWViZDAwZmItYWZkMy00NWNhLWI4N2ItMGFhOWZmZjhjYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsQjtJzHfvAmh478pEyUJLMWn1nIx2e7hgo5 n15ulVQdoHxMmM4J5yRtt/S+cCBgh9Z9gFf+2D7ZZSW08mVcq+B9qrnGTNtryqpi 53MDXh7EnRVxjAQI6AqPauO8vNVUr+sG02iKlwyI6azke+I2eaFjDnQbcL8sT2h2 cFyi0Zmrz94n9Cdm+DNHoWoUgBDISrbp2L+YWusnkI9pEnkXmkRqWAa7NlG8yU4g QIfJkGjgOOev2ocXMiCbFtG+YSOaJflUjuNK7ZnZ9WzjPJHNavEN+yDyKfodZSSX iPWRDDAGxKjEFW0vg3uy+T7rekj9JIrlMzO/KEu7j9g+DmoVQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA28OnIIiPA1ip1ptVAIQqs/GyMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4 ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4Mjc5OTIwOTgvMGY1ZmNkMmMtYzExNS0z ODFkLTgzYmYtOGJjZmQzM2NiYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGZjODg3NjgtMWI1OC00NzRkLWEz NDAtMzc2ODI3OTkyMDk4L2RmYzg4NzY4LTFiNTgtNDc0ZC1hMzQwLTM3NjgyNzk5 MjA5OC5jcmwwHwYDVR0jBBgwFoAU9UapEYbSMklkzrvABv6x5EYHaoIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZmM4ODc2OC0xYjU4LTQ3NGQtYTM0MC0zNzY4 Mjc5OTIwOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp3jEBCm6E3GGfJuFqX0VVMEYjhkETcGAlF23obAlcOkTWC5JhYZA/h uwbs/wSQqZdMqv9P2mG8I+PyWfZ1tJs2lxfRRuK/fScJjutevf3x0g/AxNm2YIaJ DZzTLe5abi6UstaYHvm1WRuzLcRtECKqOjCfkQvVhYBoFCHC+HUr0kixQ5cY3cIl cAA8Qig5tgmuOB//jV8tSm9AZhlWBCUxQ2/Zl+EFBjAbDwXr1hx/4CKS9yiJZX0v TAV8TURaVEt1PVl6UrBFW9Iv94k1TQCIdJ3nON3r4Htlt0/nEJawNqOyBPoUAIuo k7lfPUZw98KkDJj1ebsAHQou8gnVkvE= -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:50 2025 by rpki-client