$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa File: 4b394ad3-feab-3d68-855a-82c3eb623e83.roa (raw, json) Hash identifier: VGqavK5oCHdwFYKjT6AFSP85LErVcWSPUdtTqzv/an4= Subject key identifier: 71:72:B9:A7:04:0E:1D:DE:4D:EA:7D:F8:18:9A:BE:DE:FF:AD:60:40 Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Certificate serial: 010D0C9F4328584B583C8C152A533AA85BEB18C0 Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 46824 IP address blocks: 23.172.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8c:15:2a:53:3a:a8:5b:eb:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=ea6de5f5-5e32-4178-9cff-3a4d7718140b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1f:46:73:87:33:7e:55:5a:0a:34:6b:0f:7f: 20:41:2b:0a:9e:8a:a4:dd:da:16:18:c8:8b:9d:24: 75:3c:42:e1:57:e8:97:42:76:24:a9:51:cf:32:9f: 3b:24:b3:1f:e4:9d:bf:70:c7:53:3f:33:53:99:fc: 64:db:23:60:34:c6:af:6d:31:24:82:50:22:39:39: 43:03:70:9e:01:20:65:00:b2:4c:5f:f5:5a:92:9b: 3c:90:0f:a3:78:fa:95:9d:5d:7a:85:f3:7f:06:2c: cc:58:77:b4:b8:ff:0b:86:56:c9:63:8c:a8:62:5e: 0a:d6:d0:1f:fd:ee:13:c1:4a:58:51:95:87:99:10: ca:89:ec:3f:44:26:25:03:e1:b3:47:5c:a8:03:22: 40:7d:18:b5:4e:9b:d4:1a:dd:45:05:2e:0b:5a:58: 44:05:6c:b5:32:2c:b9:b3:16:d6:33:b7:f7:2d:aa: 10:d0:93:f1:4a:64:b2:93:13:2a:eb:ee:5c:00:9f: 27:bc:d1:70:2d:7e:44:8b:ae:9b:e6:1f:9e:9d:fa: bd:63:e8:1e:27:6a:96:af:e9:04:be:12:20:f3:62: bc:38:99:e0:4c:97:ca:4c:1e:50:ab:1f:a9:13:1d: 65:60:9b:d0:ed:a2:3c:2c:6b:42:77:c9:db:7f:c5: 36:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:72:B9:A7:04:0E:1D:DE:4D:EA:7D:F8:18:9A:BE:DE:FF:AD:60:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/4b394ad3-feab-3d68-855a-82c3eb623e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl X509v3 Authority Key Identifier: keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer sbgp-ipAddrBlock: critical IPv4: 23.172.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7a:ab:47:a5:dc:f0:b2:95:cb:a0:3f:de:fb:b9:25:67:ec: a2:e2:ac:b0:6d:9b:e0:c7:85:8f:49:71:d3:97:7a:e4:08:7e: 52:d4:95:d2:45:2e:8c:06:92:c1:5b:ad:f2:97:1e:b4:af:95: ae:f5:59:10:63:d8:da:4d:b8:e0:22:01:d5:ea:44:fe:1f:ac: e4:18:bc:da:06:2d:f5:1e:7b:a0:1c:f2:71:10:8f:1f:c1:23: bc:35:e4:e3:6b:1f:49:06:24:00:e1:e4:04:13:86:5f:83:10: 5a:6e:82:e9:e5:2a:dd:ec:5f:62:45:6b:67:ce:b5:f7:73:5f: 6e:b6:6b:e6:9f:f2:f7:63:da:f2:da:ef:8d:af:d7:f5:61:c9: 42:cb:8d:23:ff:1c:9a:c2:39:17:e6:ca:7e:77:e1:ca:4f:e0: 4b:b7:0f:e9:f3:d4:72:b1:34:85:76:db:18:89:6f:de:bc:ad: 95:38:fb:ca:ad:a7:cb:74:73:5c:bf:f8:84:11:fc:41:88:08: 85:bc:f2:43:49:2c:4a:67:25:18:14:d6:85:88:fe:7f:01:d7: d4:6a:ff:fd:b4:00:e5:d6:bc:9c:73:cd:92:af:30:e7:3a:c8: 50:15:4f:11:cd:f7:13:37:a2:ec:28:64:99:e3:10:37:04:52: 52:d9:9c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIwVKlM6qFvrGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz OTk1MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWE2ZGU1ZjUtNWUzMi00MTc4LTljZmYtM2E0ZDc3MTgxNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R9Gc4czflVaCjRrD38gQSsKnoqk3doWGMiL nSR1PELhV+iXQnYkqVHPMp87JLMf5J2/cMdTPzNTmfxk2yNgNMavbTEkglAiOTlD A3CeASBlALJMX/Vakps8kA+jePqVnV16hfN/BizMWHe0uP8LhlbJY4yoYl4K1tAf /e4TwUpYUZWHmRDKiew/RCYlA+GzR1yoAyJAfRi1TpvUGt1FBS4LWlhEBWy1Miy5 sxbWM7f3LaoQ0JPxSmSykxMq6+5cAJ8nvNFwLX5Ei66b5h+enfq9Y+geJ2qWr+kE vhIg82K8OJngTJfKTB5Qqx+pEx1lYJvQ7aI8LGtCd8nbf8U2lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFyuacEDh3eTep9+Biavt7/rWBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNGIzOTRhZDMtZmVhYi0z ZDY4LTg1NWEtODJjM2ViNjIzZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl ZWVjYzM5OTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF6yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB16q0el3PCylcugP977uSVn7KLirLBtm+DHhY9JcdOXeuQIflLUldJF LowGksFbrfKXHrSvla71WRBj2NpNuOAiAdXqRP4frOQYvNoGLfUee6Ac8nEQjx/B I7w15ONrH0kGJADh5AQThl+DEFpugunlKt3sX2JFa2fOtfdzX262a+af8vdj2vLa 742v1/VhyULLjSP/HJrCORfmyn534cpP4Eu3D+nz1HKxNIV22xiJb968rZU4+8qt p8t0c1y/+IQR/EGICIW88kNJLEpnJRgU1oWI/n8B19Rq//20AOXWvJxzzZKvMOc6 yFAVTxHN9xM3ouwoZJnjEDcEUlLZnPk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:50 2025 by rpki-client