$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa File: 72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa (raw, json) Hash identifier: 2qAmzDrWkts9n2lFrcAop9xae9xjPpp6F1TVnzTvjms= Subject key identifier: 5C:B8:EB:75:BE:A6:F4:9E:A2:19:EC:08:78:CF:B3:C8:98:13:C5:AC Certificate issuer: /CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf Certificate serial: 010D0C9F4328584B83820E5F5932EAF3CD3B3140 Authority key identifier: B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 53850 IP address blocks: 23.147.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:0e:5f:59:32:ea:f3:cd:3b:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06d940b6-6c3d-4e96-991c-a7e64b8b09cf Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=5da60488-97b7-4260-b813-7f980dcfa264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:25:6f:f4:dd:e3:57:b9:4a:43:5d:32:3e: c6:19:31:c6:62:2b:98:f4:e9:56:ea:14:b0:74:e0: f3:58:e2:d2:52:8e:1c:c1:6c:bb:f9:cb:ff:56:f0: bd:67:62:ec:02:b2:f1:e9:16:48:d9:88:3d:5a:02: 4b:01:09:22:4f:ee:d8:88:9f:7f:1e:20:8e:15:e2: b5:17:2c:86:28:9a:60:8e:ba:c1:f2:47:88:8e:55: 0a:10:78:f8:99:e8:9a:29:f2:ff:f5:80:23:7d:5b: 1e:7c:24:0c:6b:dd:02:a5:5c:19:cb:fb:92:1a:fe: e5:7f:1c:b4:c3:25:27:51:f5:b7:1f:1c:4c:0c:fc: 69:a7:6d:52:87:cf:37:63:75:66:50:10:b2:70:7b: e4:77:ed:ee:b3:5e:97:27:f9:84:11:67:74:02:84: 26:33:02:da:b7:34:61:c5:3b:0d:62:d5:01:1d:a1: 31:f1:c4:de:a4:b6:2b:2b:94:b9:81:5c:76:c0:c0: 6d:2b:ca:cd:ee:13:e3:94:0d:11:f3:ab:33:b1:1d: 7a:4b:33:cb:93:df:1b:36:dd:ea:1e:60:32:e1:3e: 2c:60:06:23:a9:9c:44:fc:38:35:64:58:18:8a:7b: f5:54:95:9c:20:03:e4:cf:01:f3:01:63:19:b9:af: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B8:EB:75:BE:A6:F4:9E:A2:19:EC:08:78:CF:B3:C8:98:13:C5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/72c6b4c6-f58b-3fd9-a1b2-4ee9c9166246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.crl X509v3 Authority Key Identifier: keyid:B7:C5:27:52:39:A0:D0:24:7C:F6:DC:D0:4C:8B:26:2E:CC:E6:24:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06d940b6-6c3d-4e96-991c-a7e64b8b09cf.cer sbgp-ipAddrBlock: critical IPv4: 23.147.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:da:ea:3c:b9:4e:19:43:5c:19:a0:3a:08:f3:40:33:bc:b0: cf:cc:6f:c8:1f:ef:d8:ce:f2:d0:4e:4f:e5:e0:de:d2:29:30: b7:24:1b:9e:f4:6c:70:ae:dc:18:a8:2f:03:b9:47:44:a6:41: c4:66:70:5b:4e:cf:a3:9c:ea:9d:5e:5d:42:87:cb:5e:46:0c: cb:ed:ca:8d:91:c6:54:52:63:8d:ee:ae:72:7a:06:ac:ab:82: 15:1c:c8:52:68:aa:e6:5a:b4:83:36:5d:f4:8e:6d:75:8a:68: cd:5c:65:45:5b:1d:57:d3:1f:10:5b:3f:21:f2:c2:a8:99:3f: 10:51:1f:1b:20:6e:52:c0:88:fe:e7:0d:1c:2e:c9:ce:9b:76: a5:d2:c3:7a:72:48:fd:05:6a:e8:9b:43:4b:66:00:27:d4:f4: de:d2:e0:6c:f5:99:f3:a2:14:fb:8c:9c:88:e5:97:33:50:5d: eb:84:92:ab:fc:38:f8:3f:f6:45:e6:ad:ab:21:38:db:d1:93: 63:6f:31:5d:b9:e4:e4:ca:f4:7f:82:e1:f6:d7:f8:2f:ec:8a: ce:68:70:86:76:35:a9:a4:89:45:5c:18:d1:fc:bc:c0:67:c5: e1:b2:12:9c:8d:0b:86:20:35:cc:45:b5:a1:84:53:98:a0:59: b7:5e:71:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDgg5fWTLq8807MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZkOTQwYjYtNmMzZC00ZTk2LTk5MWMtYTdlNjRiOGIw OWNmMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk NWRhNjA0ODgtOTdiNy00MjYwLWI4MTMtN2Y5ODBkY2ZhMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC8lb/Td41e5SkNdMj7GGTHGYiuY9OlW6hSw dODzWOLSUo4cwWy7+cv/VvC9Z2LsArLx6RZI2Yg9WgJLAQkiT+7YiJ9/HiCOFeK1 FyyGKJpgjrrB8keIjlUKEHj4meiaKfL/9YAjfVsefCQMa90CpVwZy/uSGv7lfxy0 wyUnUfW3HxxMDPxpp21Sh883Y3VmUBCycHvkd+3us16XJ/mEEWd0AoQmMwLatzRh xTsNYtUBHaEx8cTepLYrK5S5gVx2wMBtK8rN7hPjlA0R86szsR16SzPLk98bNt3q HmAy4T4sYAYjqZxE/Dg1ZFgYinv1VJWcIAPkzwHzAWMZua9GvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy463W+pvSeohnsCHjPs8iYE8WsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNmQ5 NDBiNi02YzNkLTRlOTYtOTkxYy1hN2U2NGI4YjA5Y2YvNzJjNmI0YzYtZjU4Yi0z ZmQ5LWExYjItNGVlOWM5MTY2MjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDZkOTQwYjYtNmMzZC00ZTk2LTk5 MWMtYTdlNjRiOGIwOWNmLzA2ZDk0MGI2LTZjM2QtNGU5Ni05OTFjLWE3ZTY0Yjhi MDljZi5jcmwwHwYDVR0jBBgwFoAUt8UnUjmg0CR89tzQTIsmLszmJLkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNmQ5NDBiNi02YzNkLTRlOTYtOTkxYy1hN2U2 NGI4YjA5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5M4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/a6jy5ThlDXBmgOgjzQDO8sM/Mb8gf79jO8tBOT+Xg3tIpMLckG570 bHCu3BioLwO5R0SmQcRmcFtOz6Oc6p1eXUKHy15GDMvtyo2RxlRSY43urnJ6Bqyr ghUcyFJoquZatIM2XfSObXWKaM1cZUVbHVfTHxBbPyHywqiZPxBRHxsgblLAiP7n DRwuyc6bdqXSw3pySP0FauibQ0tmACfU9N7S4Gz1mfOiFPuMnIjllzNQXeuEkqv8 OPg/9kXmrashONvRk2NvMV255OTK9H+C4fbX+C/sis5ocIZ2NamkiUVcGNH8vMBn xeGyEpyNC4YgNcxFtaGEU5igWbdecZU= -----END CERTIFICATE-----Generated at Sun Oct 19 23:46:04 2025 by rpki-client