$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/e9487e93-81a1-33df-85bb-341ba5cd5682.roa File: e9487e93-81a1-33df-85bb-341ba5cd5682.roa (raw, json) Hash identifier: L9H4pH1kCkQriX2hoU8WzErCFv6Suz2ucSa059dtraU= Subject key identifier: 16:41:AA:91:27:DD:53:85:04:35:D7:7C:3B:EE:3C:55:31:64:2E:D5 Certificate issuer: /CN=a1645882-ff21-425f-8a87-08ec6b0a30d0 Certificate serial: 010D0C9F4328584B609C8AC27CE663492A819BE0 Authority key identifier: 66:EF:4B:49:86:33:A8:73:E3:79:4A:3B:74:DF:E4:6F:DD:E2:29:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/e9487e93-81a1-33df-85bb-341ba5cd5682.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 401652 IP address blocks: 23.138.36.0/24 maxlen: 24 2602:f687::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/a1645882-ff21-425f-8a87-08ec6b0a30d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/a1645882-ff21-425f-8a87-08ec6b0a30d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:8a:c2:7c:e6:63:49:2a:81:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1645882-ff21-425f-8a87-08ec6b0a30d0 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=3c20d4ad-83b9-4283-ae87-7d1fc061de46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:00:7d:1b:73:4f:0c:5b:53:60:c0:c2:00:51: ae:1c:89:b9:b4:f7:cf:81:d5:d7:6e:7b:56:d0:ff: 12:f9:1a:79:49:27:c2:1c:48:0e:0d:54:d9:a5:2f: 39:93:7e:ed:d3:e3:47:c6:61:d0:91:ee:ef:6e:11: d6:e2:19:a9:f7:00:5f:d4:36:01:41:70:7f:cf:a7: 38:11:35:0c:bb:db:da:60:69:bb:07:c2:8e:24:d8: 91:c4:5a:a4:ea:5a:f2:79:98:d7:61:91:99:28:1e: 9c:a6:14:07:1f:f9:84:31:3a:27:3f:92:13:75:61: b1:46:ee:32:4b:74:fe:e3:5b:54:90:96:c5:67:d4: 20:0b:09:8a:70:dc:64:98:8f:e7:6a:94:43:ad:60: 78:49:a2:86:a7:44:e1:60:4a:53:c1:53:eb:d7:a0: a7:48:c4:9c:ce:ab:b9:88:85:52:5f:48:e0:69:fe: 59:ad:d0:e1:0b:77:5e:96:5a:d2:1e:fb:56:55:71: be:b5:f2:df:17:0c:ae:a3:f2:2c:a1:c7:01:bc:02: 94:0f:82:de:fc:8b:81:48:14:20:c6:93:5a:b3:ed: 68:aa:f6:3f:55:ed:15:79:19:29:f0:5e:be:82:e6: 95:a2:f6:bb:1c:16:74:c6:a5:15:80:ad:9c:46:52: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:AA:91:27:DD:53:85:04:35:D7:7C:3B:EE:3C:55:31:64:2E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/e9487e93-81a1-33df-85bb-341ba5cd5682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0/a1645882-ff21-425f-8a87-08ec6b0a30d0.crl X509v3 Authority Key Identifier: keyid:66:EF:4B:49:86:33:A8:73:E3:79:4A:3B:74:DF:E4:6F:DD:E2:29:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a1645882-ff21-425f-8a87-08ec6b0a30d0.cer sbgp-ipAddrBlock: critical IPv4: 23.138.36.0/24 IPv6: 2602:f687::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e0:8a:c4:a2:33:d3:32:33:5d:35:6c:23:c8:41:50:7b:a6: 6d:ca:03:2a:1d:1c:fc:06:35:10:19:b1:07:51:4c:83:23:6f: 4f:3c:c9:46:2e:f8:5f:61:10:fc:60:60:72:75:0b:3f:16:f7: a9:ea:52:52:1d:ac:7c:13:bf:ba:26:1b:0e:7d:41:89:5a:c5: 40:0b:0f:eb:3e:5e:f2:06:6f:2b:64:43:b1:6f:b3:90:6d:60: d4:bf:e9:ab:86:ee:68:58:f1:fb:ec:7a:74:c8:40:00:bc:10: 0f:58:cb:ab:57:49:fb:0b:d2:b0:33:b3:5b:11:cb:0f:bf:a0: d3:8a:eb:e8:ab:98:59:32:ed:23:40:20:24:9c:fe:03:71:ae: 77:7b:f0:c2:67:e1:6c:35:5e:76:1c:80:ca:2b:22:9e:29:5e: 12:fa:f2:cc:d8:95:63:9f:36:e6:9f:2d:32:ad:57:2b:be:ba: e4:45:be:d7:3d:90:ec:ff:99:ef:15:18:6c:b0:74:46:54:dc: e5:1a:b5:ad:d5:28:d4:22:8f:23:3c:6b:e8:b7:fd:0f:d2:24: 6d:90:ec:74:42:36:32:72:db:45:18:93:1d:21:8c:1d:77:57: 18:da:14:39:fa:37:7d:25:df:81:da:cc:42:a7:a4:37:bd:15: 7d:8b:55:ca -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtgnIrCfOZjSSqBm+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE2NDU4ODItZmYyMS00MjVmLThhODctMDhlYzZiMGEz MGQwMB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk M2MyMGQ0YWQtODNiOS00MjgzLWFlODctN2QxZmMwNjFkZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAB9G3NPDFtTYMDCAFGuHIm5tPfPgdXXbntW 0P8S+Rp5SSfCHEgODVTZpS85k37t0+NHxmHQke7vbhHW4hmp9wBf1DYBQXB/z6c4 ETUMu9vaYGm7B8KOJNiRxFqk6lryeZjXYZGZKB6cphQHH/mEMTonP5ITdWGxRu4y S3T+41tUkJbFZ9QgCwmKcNxkmI/napRDrWB4SaKGp0ThYEpTwVPr16CnSMSczqu5 iIVSX0jgaf5ZrdDhC3dellrSHvtWVXG+tfLfFwyuo/IsoccBvAKUD4Le/IuBSBQg xpNas+1oqvY/Ve0VeRkp8F6+guaVova7HBZ0xqUVgK2cRlLEHQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBZBqpEn3VOFBDXXfDvuPFUxZC7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMTY0 NTg4Mi1mZjIxLTQyNWYtOGE4Ny0wOGVjNmIwYTMwZDAvZTk0ODdlOTMtODFhMS0z M2RmLTg1YmItMzQxYmE1Y2Q1NjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTE2NDU4ODItZmYyMS00MjVmLThh ODctMDhlYzZiMGEzMGQwL2ExNjQ1ODgyLWZmMjEtNDI1Zi04YTg3LTA4ZWM2YjBh MzBkMC5jcmwwHwYDVR0jBBgwFoAUZu9LSYYzqHPjeUo7dN/kb93iKUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMTY0NTg4Mi1mZjIxLTQyNWYtOGE4Ny0wOGVj NmIwYTMwZDAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4okMA4E AgACMAgDBgAmAvaHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAN4IrEojPTMjNdNWwjyEFQe6ZtygMqHRz8 BjUQGbEHUUyDI29PPMlGLvhfYRD8YGBydQs/Fvep6lJSHax8E7+6JhsOfUGJWsVA Cw/rPl7yBm8rZEOxb7OQbWDUv+mrhu5oWPH77Hp0yEAAvBAPWMurV0n7C9KwM7Nb EcsPv6DTiuvoq5hZMu0jQCAknP4Dca53e/DCZ+FsNV52HIDKKyKeKV4S+vLM2JVj nzbmny0yrVcrvrrkRb7XPZDs/5nvFRhssHRGVNzlGrWt1SjUIo8jPGvot/0P0iRt kOx0QjYycttFGJMdIYwdd1cY2hQ5+jd9Jd+B2sxCp6Q3vRV9i1XK -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:25 2025 by rpki-client