$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa File: c084590b-3ab2-32dd-af28-d65751098d7b.roa (raw, json) Hash identifier: NHOreEXt03wSqzxd7GTejZ7z6HtH7Zl2aiq9VhptcqU= Subject key identifier: C3:A3:78:EB:F3:66:29:A2:8F:45:AF:0A:63:F0:2D:5C:93:CA:6C:3F Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584B355704C5D5772FEA94239A00 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 146806 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:04:c5:d5:77:2f:ea:94:23:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=147ee9a4-66f5-4af1-a76d-410a45c95eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:28:60:6c:25:58:b5:79:d7:01:fe:69:c1:ce: 8d:f9:74:db:af:2c:d7:9a:2c:79:c0:24:a5:23:8d: 23:7d:24:77:38:c9:9d:38:e4:70:2a:bb:cf:cd:f8: ab:d1:fa:39:1d:e3:8c:49:5f:db:d3:36:66:be:d9: 50:b7:12:2b:b4:8c:b8:f4:99:be:84:c7:c2:93:10: d4:6b:69:c7:57:44:46:e6:d6:50:c6:5b:3c:d5:6b: b0:ac:4f:11:4c:57:59:ec:17:46:4a:90:60:75:d6: e2:6d:ae:27:6c:47:5c:90:f1:69:9d:2e:34:7b:10: 1d:e3:b8:0c:e8:f5:98:4d:88:5f:cb:8d:6a:1e:b3: 54:06:19:86:67:9b:31:6f:9c:c8:25:db:4b:c0:18: 6f:c3:d5:fe:60:f3:e5:fb:00:9a:b5:ee:fc:4d:a9: 52:f1:21:80:3c:49:2d:72:b8:df:33:4e:1a:6e:f3: c0:13:fb:15:d0:4c:48:65:80:26:b2:8f:62:34:df: 08:b8:52:ee:ad:88:e5:b5:4a:8f:0b:7c:ec:20:2e: 64:f8:b8:9f:4f:f0:8c:70:5c:39:a3:8a:d7:ae:75: da:4d:4f:28:24:78:d3:e2:71:2a:93:40:68:3d:8d: ed:57:00:fa:20:6a:d0:9e:0e:6a:41:a4:04:d8:19: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A3:78:EB:F3:66:29:A2:8F:45:AF:0A:63:F0:2D:5C:93:CA:6C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/c084590b-3ab2-32dd-af28-d65751098d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:39:e4:fc:8c:7b:41:1e:0f:d8:9b:19:e1:1d:f2:f6:fa:6f: 15:bd:8b:9e:b8:21:b0:33:3a:6f:8f:35:67:62:92:62:c3:11: 4d:05:db:5c:44:0a:64:29:34:32:37:c8:47:bb:c5:05:52:ce: 1e:fd:56:95:d2:88:1f:dc:50:14:de:b0:db:4e:75:c5:f5:f2: e0:33:2f:97:a5:ee:af:23:1d:00:d9:82:50:d4:6b:68:3f:ae: 75:b2:4f:87:79:cf:8c:0e:08:2f:1b:57:83:21:4d:ae:87:6c: f8:8a:54:a1:94:5a:d6:1e:d2:42:a2:b0:94:28:bf:18:fc:7f: f4:69:a0:78:9e:35:fb:f8:86:c4:42:05:87:05:03:bd:ff:f6: 9f:ea:cd:77:d1:db:f1:33:6a:0f:4b:d3:e7:3e:7e:2f:ed:16: 71:b3:13:c3:59:3b:cc:d9:be:03:0f:05:04:83:c1:92:43:35: b2:91:69:16:95:24:58:9d:bf:a7:d2:5b:22:9f:c2:1e:ac:f5: a5:db:de:48:73:e2:ad:25:0a:e5:49:87:25:16:33:a7:d3:f5: 63:01:63:12:d6:f7:db:9d:a9:55:c2:37:90:7e:9c:f3:4a:d1: e8:12:82:24:e0:b2:57:33:f4:6d:05:10:f3:9d:2d:97:f4:1a: f6:d7:47:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VwTF1Xcv6pQjmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk MTQ3ZWU5YTQtNjZmNS00YWYxLWE3NmQtNDEwYTQ1Yzk1ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhChgbCVYtXnXAf5pwc6N+XTbryzXmix5wCSl I40jfSR3OMmdOORwKrvPzfir0fo5HeOMSV/b0zZmvtlQtxIrtIy49Jm+hMfCkxDU a2nHV0RG5tZQxls81WuwrE8RTFdZ7BdGSpBgddbiba4nbEdckPFpnS40exAd47gM 6PWYTYhfy41qHrNUBhmGZ5sxb5zIJdtLwBhvw9X+YPPl+wCate78TalS8SGAPEkt crjfM04abvPAE/sV0ExIZYAmso9iNN8IuFLurYjltUqPC3zsIC5k+LifT/CMcFw5 o4rXrnXaTU8oJHjT4nEqk0BoPY3tVwD6IGrQng5qQaQE2BlWRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOjeOvzZimij0WvCmPwLVyTymw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvYzA4NDU5MGItM2FiMi0z MmRkLWFmMjgtZDY1NzUxMDk4ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMI55PyMe0EeD9ibGeEd8vb6bxW9i564IbAzOm+PNWdikmLDEU0F21xE CmQpNDI3yEe7xQVSzh79VpXSiB/cUBTesNtOdcX18uAzL5el7q8jHQDZglDUa2g/ rnWyT4d5z4wOCC8bV4MhTa6HbPiKVKGUWtYe0kKisJQovxj8f/RpoHieNfv4hsRC BYcFA73/9p/qzXfR2/Ezag9L0+c+fi/tFnGzE8NZO8zZvgMPBQSDwZJDNbKRaRaV JFidv6fSWyKfwh6s9aXb3khz4q0lCuVJhyUWM6fT9WMBYxLW99udqVXCN5B+nPNK 0egSgiTgslcz9G0FEPOdLZf0GvbXR5w= -----END CERTIFICATE-----Generated at Mon Oct 20 05:12:51 2025 by rpki-client