$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa File: fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa (raw, json) Hash identifier: aBC9mt2dGIeEG5Wbky9hmzTy6smKD9NvF/T9PAZqd4c= Subject key identifier: DC:CE:13:2F:89:2B:B9:77:77:B1:5A:AE:36:57:70:BB:A7:CD:60:67 Certificate issuer: /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Certificate serial: 010D0C9F4328584B3556E2D9E01D564632A7F400 Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 393224 IP address blocks: 23.128.98.0/24 maxlen: 24 2620:137:e001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e2:d9:e0:1d:56:46:32:a7:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=980fa8a9-a861-450a-a084-b7e9060f26bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e8:a6:fe:e3:ab:89:a8:2d:39:a4:b5:4f:e8: a5:5f:36:fa:55:e7:e0:8a:b6:21:27:89:e2:12:4f: df:35:11:4c:a7:1f:b8:75:16:bf:a1:3c:27:19:5c: ee:16:50:f5:60:9c:88:c7:e4:4e:c9:02:8e:29:60: 7e:7a:19:e8:55:c7:12:ee:b7:a3:22:6f:4c:9c:a9: 9a:f6:5a:c2:c5:d0:1f:ab:b6:2b:2f:fe:0c:57:bb: 04:38:1d:e7:4b:05:3f:99:9b:9c:3e:f8:63:4b:fb: 56:36:b5:be:ab:5b:72:9d:54:2f:37:6e:ac:e8:00: 08:41:94:ff:91:53:d9:51:7e:81:70:10:e0:ee:d8: 01:da:7a:9b:0b:cd:0e:ef:33:e3:be:6b:51:7f:b2: 84:34:dd:27:04:32:ef:9f:51:8a:21:a8:d8:e1:0f: 6e:b6:df:91:e4:c4:f5:3c:f2:9d:39:e3:91:b3:46: f6:12:a1:8d:da:1f:83:47:60:00:b8:ee:82:01:18: b1:a6:24:42:b6:1e:e5:6a:9b:49:41:c1:6e:65:ba: 4b:d0:fb:80:d6:b5:dd:97:52:a8:a4:34:49:f3:da: 95:54:fc:39:a5:91:a0:0a:aa:9d:f3:f2:ca:a5:32: 0e:02:0d:16:62:72:27:c8:0f:d6:8d:d7:c1:ff:45: a1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CE:13:2F:89:2B:B9:77:77:B1:5A:AE:36:57:70:BB:A7:CD:60:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl X509v3 Authority Key Identifier: keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer sbgp-ipAddrBlock: critical IPv4: 23.128.98.0/24 IPv6: 2620:137:e001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ca:01:24:99:fa:f9:c2:b6:3a:76:58:12:ab:c8:4f:5f:7e: be:a8:8d:0e:62:97:4a:10:33:93:21:82:42:54:ce:aa:eb:1b: 94:d9:ee:d1:e8:a6:8c:a1:03:24:6c:36:9e:4e:1a:a5:30:c4: 38:3b:c1:2f:9f:94:bb:01:e0:06:d3:ae:e3:0a:81:40:7f:f4: 87:64:8f:e3:8f:d1:43:33:23:d2:9e:dd:43:e9:34:75:43:20: a5:9f:ab:e3:c0:25:ea:0f:f5:fb:10:86:2b:f1:3d:a0:7f:48: c4:a8:ba:d4:f8:2e:0d:87:c2:5b:49:78:f2:ae:07:c6:51:a1: f8:66:db:87:b7:79:10:b1:ab:f2:d3:0d:d2:ff:86:92:ec:4c: d7:1a:32:1a:1d:81:f5:40:a4:ab:e5:9f:6b:c5:e3:96:00:5d: bb:e8:88:a5:04:c2:2d:8b:ad:44:9c:19:da:9d:59:d2:64:5c: 93:b5:33:8a:88:d5:3a:2e:ab:74:f2:12:97:96:af:f1:80:3a: 84:b1:23:b0:c3:74:38:64:93:d7:11:fa:49:53:2f:43:64:be: 4c:d4:cd:06:3d:4e:d5:d2:fc:a3:49:83:34:78:2c:25:27:f0: 09:15:67:f3:55:0d:57:83:ca:37:13:1f:45:40:e9:f4:13:1f: c1:5a:33:0c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEs1VuLZ4B1WRjKn9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3NTM1ZjQtZDNmMS00ZTdmLWIzNzktMDgzNWUwMmZi MjgwMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk OTgwZmE4YTktYTg2MS00NTBhLWEwODQtYjdlOTA2MGYyNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9eim/uOriagtOaS1T+ilXzb6VefgirYhJ4ni Ek/fNRFMpx+4dRa/oTwnGVzuFlD1YJyIx+ROyQKOKWB+ehnoVccS7rejIm9MnKma 9lrCxdAfq7YrL/4MV7sEOB3nSwU/mZucPvhjS/tWNrW+q1tynVQvN26s6AAIQZT/ kVPZUX6BcBDg7tgB2nqbC80O7zPjvmtRf7KENN0nBDLvn1GKIajY4Q9utt+R5MT1 PPKdOeORs0b2EqGN2h+DR2AAuO6CARixpiRCth7laptJQcFuZbpL0PuA1rXdl1Ko pDRJ89qVVPw5pZGgCqqd8/LKpTIOAg0WYnInyA/WjdfB/0WhCQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNzOEy+JK7l3d7FarjZXcLunzWBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1 MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1ZTAyZmIyODAvZmI5ZjdmMTUtNjQ3Ny0z ZjdhLWI2ZmQtZmI2NjNlNDE4MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2M3NTM1ZjQtZDNmMS00ZTdmLWIz NzktMDgzNWUwMmZiMjgwLzNjNzUzNWY0LWQzZjEtNGU3Zi1iMzc5LTA4MzVlMDJm YjI4MC5jcmwwHwYDVR0jBBgwFoAUanWY7hD2PKRz8peL4giaAPDi2ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1 ZTAyZmIyODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4BiMA8E AgACMAkDBwAmIAE34AEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJcoBJJn6+cK2OnZYEqvIT19+vqiNDmKX ShAzkyGCQlTOqusblNnu0eimjKEDJGw2nk4apTDEODvBL5+UuwHgBtOu4wqBQH/0 h2SP44/RQzMj0p7dQ+k0dUMgpZ+r48Al6g/1+xCGK/E9oH9IxKi61PguDYfCW0l4 8q4HxlGh+Gbbh7d5ELGr8tMN0v+GkuxM1xoyGh2B9UCkq+Wfa8XjlgBdu+iIpQTC LYutRJwZ2p1Z0mRck7UziojVOi6rdPISl5av8YA6hLEjsMN0OGST1xH6SVMvQ2S+ TNTNBj1O1dL8o0mDNHgsJSfwCRVn81UNV4PKNxMfRUDp9BMfwVozDA== -----END CERTIFICATE-----Generated at Wed Oct 22 02:46:52 2025 by rpki-client