$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa File: c0888bfe-5f4f-3e00-83d8-b424d973531e.roa (raw, json) Hash identifier: 43vbZIP5hpFeWH3LjU4lgQrQi0pcsoQSHO9ZhqJkQJc= Subject key identifier: 08:73:FC:D2:3B:5C:54:75:4B:80:94:E6:02:D6:67:C0:8F:32:46:26 Certificate issuer: /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Certificate serial: 010D0C9F4328584B99D785DBECDD88F2619D3A80 Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 53758 IP address blocks: 23.128.96.0/24 maxlen: 24 2620:137:e000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:85:db:ec:dd:88:f2:61:9d:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=04c68ee4-7f8b-4438-94d6-bbaf18ea4ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:69:1f:fb:4a:96:e7:ce:5e:26:57:00:af: 12:fb:21:70:57:21:46:69:7b:c4:7b:83:41:51:1e: ec:08:29:8d:26:08:74:aa:76:80:23:1b:fc:a5:52: 9a:2c:5e:3d:db:01:15:0b:0c:26:ef:4d:73:f2:48: bd:50:64:ce:28:65:81:27:0f:ae:1c:5a:bd:98:b7: e6:72:f4:26:49:01:88:99:65:c3:9e:8b:1b:61:59: f0:f5:48:54:57:47:30:c0:fd:73:16:ea:cf:4d:d2: 11:4d:e6:4e:39:a2:30:54:3c:40:f3:74:94:7c:bf: 06:b3:0b:b4:70:62:19:28:fb:1a:e3:ae:df:e3:dc: 15:27:cb:b5:1e:c5:58:1c:34:52:94:fb:1f:b3:93: 1d:f4:9a:07:06:ad:8d:9b:cc:d4:4a:f0:d5:de:e0: c4:a2:9b:97:aa:8e:5a:51:3b:40:80:ef:05:bc:62: 03:93:9d:11:16:9f:1b:97:22:50:89:92:82:3d:ef: 56:39:3c:de:8e:f6:23:a7:d4:26:1f:43:46:88:5d: 9b:4f:76:9b:50:8f:e0:2f:2b:bb:d5:6a:1d:2f:5f: 49:c6:53:d3:69:e2:ff:50:da:ad:39:02:1e:c6:ed: 17:14:cc:a0:64:12:f5:f0:6c:0e:50:0a:07:e3:ac: 14:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:73:FC:D2:3B:5C:54:75:4B:80:94:E6:02:D6:67:C0:8F:32:46:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/c0888bfe-5f4f-3e00-83d8-b424d973531e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl X509v3 Authority Key Identifier: keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer sbgp-ipAddrBlock: critical IPv4: 23.128.96.0/24 IPv6: 2620:137:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d2:64:18:72:6d:39:ad:e2:99:68:eb:f5:29:40:db:26:e4: b0:df:c8:ee:28:cb:9e:b7:0a:5a:d2:79:70:27:72:c1:97:b5: fd:9a:11:9d:22:f8:fd:75:2c:18:00:a0:f0:5b:df:23:96:9a: 11:eb:a8:5f:93:88:94:c4:64:4f:a1:6c:42:d0:96:7e:35:ca: ff:77:85:f9:7c:89:7c:c8:0c:4e:f4:05:f8:3b:7f:de:0a:81: 3a:93:60:05:4e:3a:0f:8e:39:cb:34:92:ac:65:4a:e5:c2:e1: 3d:e0:2d:99:cf:56:cb:63:c1:5a:10:9b:5b:43:20:85:5b:ed: 8d:e5:6c:21:61:20:9d:88:c8:2c:7f:85:fe:62:1a:f7:fd:bb: 06:97:f5:05:86:02:c2:fe:9f:02:23:5f:f2:ca:a6:8e:a3:b9: bd:80:71:4b:1a:53:80:ca:2d:a7:d9:97:5f:68:1b:29:32:84: e0:0a:08:d2:60:ca:99:cf:9a:10:00:09:7d:4a:3f:8f:d6:ef: e6:92:2a:ee:63:6e:52:cd:58:e8:be:de:01:96:18:23:a7:38: 43:90:23:0e:71:aa:9c:38:07:34:4d:ab:11:f6:71:ff:93:3a: f6:fe:c7:ed:e7:1d:71:2a:5a:ae:a2:4e:7f:3d:53:43:38:7a: 30:7b:7c:73 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuZ14Xb7N2I8mGdOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3NTM1ZjQtZDNmMS00ZTdmLWIzNzktMDgzNWUwMmZi MjgwMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MDRjNjhlZTQtN2Y4Yi00NDM4LTk0ZDYtYmJhZjE4ZWE0Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyxpH/tKlufOXiZXAK8S+yFwVyFGaXvEe4NB UR7sCCmNJgh0qnaAIxv8pVKaLF492wEVCwwm701z8ki9UGTOKGWBJw+uHFq9mLfm cvQmSQGImWXDnosbYVnw9UhUV0cwwP1zFurPTdIRTeZOOaIwVDxA83SUfL8Gswu0 cGIZKPsa467f49wVJ8u1HsVYHDRSlPsfs5Md9JoHBq2Nm8zUSvDV3uDEopuXqo5a UTtAgO8FvGIDk50RFp8blyJQiZKCPe9WOTzejvYjp9QmH0NGiF2bT3abUI/gLyu7 1WodL19JxlPTaeL/UNqtOQIexu0XFMygZBL18GwOUAoH46wUdwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAhz/NI7XFR1S4CU5gLWZ8CPMkYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1 MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1ZTAyZmIyODAvYzA4ODhiZmUtNWY0Zi0z ZTAwLTgzZDgtYjQyNGQ5NzM1MzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2M3NTM1ZjQtZDNmMS00ZTdmLWIz NzktMDgzNWUwMmZiMjgwLzNjNzUzNWY0LWQzZjEtNGU3Zi1iMzc5LTA4MzVlMDJm YjI4MC5jcmwwHwYDVR0jBBgwFoAUanWY7hD2PKRz8peL4giaAPDi2ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1 ZTAyZmIyODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4BgMA8E AgACMAkDBwQmIAE34AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAidJkGHJtOa3imWjr9SlA2ybksN/I7ijL nrcKWtJ5cCdywZe1/ZoRnSL4/XUsGACg8FvfI5aaEeuoX5OIlMRkT6FsQtCWfjXK /3eF+XyJfMgMTvQF+Dt/3gqBOpNgBU46D445yzSSrGVK5cLhPeAtmc9Wy2PBWhCb W0MghVvtjeVsIWEgnYjILH+F/mIa9/27Bpf1BYYCwv6fAiNf8sqmjqO5vYBxSxpT gMotp9mXX2gbKTKE4AoI0mDKmc+aEAAJfUo/j9bv5pIq7mNuUs1Y6L7eAZYYI6c4 Q5AjDnGqnDgHNE2rEfZx/5M69v7H7ecdcSparqJOfz1TQzh6MHt8cw== -----END CERTIFICATE-----Generated at Wed Oct 22 04:34:26 2025 by rpki-client