$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/3249973d-8cde-3a8e-91d4-2b173571dc02.roa File: 3249973d-8cde-3a8e-91d4-2b173571dc02.roa (raw, json) Hash identifier: Sjq78FLOP74ZyMVmciPYujGUdw7ay6xrhN7c2SlgcQ8= Subject key identifier: 09:CA:80:41:E5:D5:47:5C:A3:B1:EE:A1:85:CA:D9:D2:B2:40:F8:00 Certificate issuer: /CN=a50c3435-bf40-4cdc-9372-4ccf1ec7a091 Certificate serial: 010D0C9F4328584AE5C689E2D6CEA578A9AF1400 Authority key identifier: 91:4E:AC:24:AF:88:A2:A9:E1:D7:B2:16:1C:34:62:01:99:F5:6A:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/3249973d-8cde-3a8e-91d4-2b173571dc02.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 7029 IP address blocks: 23.139.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:89:e2:d6:ce:a5:78:a9:af:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a50c3435-bf40-4cdc-9372-4ccf1ec7a091 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=69740954-698e-4338-ab22-9a44ce9bbd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:b6:41:86:74:51:d2:67:49:61:af:48:45: 91:d9:51:69:23:3d:6d:46:aa:f8:3d:07:72:68:b8: 86:58:f1:9d:5c:43:f7:43:04:5f:34:97:9f:c5:37: f9:55:cb:7d:48:a7:70:76:8b:f2:24:12:50:a7:39: 3c:19:13:a7:44:0b:e9:cb:4e:86:9e:00:99:75:70: 52:91:e3:9e:6a:19:6c:9f:45:42:91:a8:99:90:57: 44:2e:69:a9:8a:b9:24:0c:81:1a:84:41:f4:d5:de: a4:a7:d2:31:b3:71:76:07:c8:b1:80:93:c1:81:23: c1:5d:9a:5d:6f:22:72:8e:42:d0:7b:24:28:82:d5: 36:df:31:2d:7b:78:47:81:f2:26:3a:4f:69:1f:48: e4:67:eb:38:d8:7c:55:e3:14:ac:77:77:9d:28:7f: c5:30:b4:e1:fb:13:78:67:bf:bd:c0:b2:88:a4:f9: e9:9e:de:39:a9:be:7a:96:cc:da:e2:6e:77:24:d1: a5:32:83:87:36:08:c6:ea:2b:00:b0:ea:5d:4f:23: ba:56:bb:6a:32:74:58:46:fd:15:f0:e6:ff:b1:9f: 8a:d6:ab:fc:cc:36:2e:6f:bc:c0:63:37:bb:ec:64: ca:a9:fc:34:46:ed:e6:b8:3e:2f:3b:a2:4d:4e:f4: 8b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:80:41:E5:D5:47:5C:A3:B1:EE:A1:85:CA:D9:D2:B2:40:F8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/3249973d-8cde-3a8e-91d4-2b173571dc02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.crl X509v3 Authority Key Identifier: keyid:91:4E:AC:24:AF:88:A2:A9:E1:D7:B2:16:1C:34:62:01:99:F5:6A:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a50c3435-bf40-4cdc-9372-4ccf1ec7a091.cer sbgp-ipAddrBlock: critical IPv4: 23.139.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:57:98:37:c1:84:10:ca:96:cc:05:57:ec:a5:f4:72:8a:fd: e0:04:98:61:cb:13:3d:f2:3f:05:3b:b3:28:1b:52:d5:f0:8a: 09:b2:e0:e9:34:0a:80:cd:91:f3:aa:5d:1f:59:cd:7b:8f:f8: 01:39:f7:6d:9a:0f:91:bc:b5:c5:1e:ab:27:0f:68:03:f1:94: af:27:f6:de:d7:7d:3c:92:ff:cb:86:00:79:4b:aa:f6:99:3a: c4:a6:72:b6:cc:fa:a3:11:3e:6c:f0:de:87:95:64:94:3d:7f: d4:4a:be:ca:4f:3a:30:98:c5:1a:a2:1a:09:1d:b2:22:7c:c6: cf:11:df:3e:de:12:ee:00:77:2a:8f:56:c9:1e:65:82:da:e1: 47:08:08:e8:07:01:91:93:f8:dd:90:9d:b3:26:4a:c5:1b:ff: 38:01:34:44:13:99:d1:3a:7b:0e:c7:22:62:eb:18:bb:ad:60: 3f:81:9e:20:86:27:f2:af:ed:f7:e6:32:83:21:a3:d2:9d:b6: a7:d3:01:90:bc:ff:a2:2b:f0:e3:81:96:71:22:4d:6d:aa:70: 9d:a1:30:a1:f0:e8:a5:17:61:b9:79:31:a2:48:58:96:6f:08: cb:13:54:0e:31:61:ea:7f:35:d0:1c:ac:14:84:41:8b:4f:68: f4:c6:da:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxoni1s6leKmvFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwYzM0MzUtYmY0MC00Y2RjLTkzNzItNGNjZjFlYzdh MDkxMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk Njk3NDA5NTQtNjk4ZS00MzM4LWFiMjItOWE0NGNlOWJiZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn62QYZ0UdJnSWGvSEWR2VFpIz1tRqr4PQdy aLiGWPGdXEP3QwRfNJefxTf5Vct9SKdwdovyJBJQpzk8GROnRAvpy06GngCZdXBS keOeahlsn0VCkaiZkFdELmmpirkkDIEahEH01d6kp9Ixs3F2B8ixgJPBgSPBXZpd byJyjkLQeyQogtU23zEte3hHgfImOk9pH0jkZ+s42HxV4xSsd3edKH/FMLTh+xN4 Z7+9wLKIpPnpnt45qb56lsza4m53JNGlMoOHNgjG6isAsOpdTyO6VrtqMnRYRv0V 8Ob/sZ+K1qv8zDYub7zAYze77GTKqfw0Ru3muD4vO6JNTvSLZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnKgEHl1Udco7HuoYXK2dKyQPgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNTBj MzQzNS1iZjQwLTRjZGMtOTM3Mi00Y2NmMWVjN2EwOTEvMzI0OTk3M2QtOGNkZS0z YThlLTkxZDQtMmIxNzM1NzFkYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTUwYzM0MzUtYmY0MC00Y2RjLTkz NzItNGNjZjFlYzdhMDkxL2E1MGMzNDM1LWJmNDAtNGNkYy05MzcyLTRjY2YxZWM3 YTA5MS5jcmwwHwYDVR0jBBgwFoAUkU6sJK+Ioqnh17IWHDRiAZn1aqswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNTBjMzQzNS1iZjQwLTRjZGMtOTM3Mi00Y2Nm MWVjN2EwOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4sMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNXmDfBhBDKlswFV+yl9HKK/eAEmGHLEz3yPwU7sygbUtXwigmy4Ok0 CoDNkfOqXR9ZzXuP+AE5922aD5G8tcUeqycPaAPxlK8n9t7XfTyS/8uGAHlLqvaZ OsSmcrbM+qMRPmzw3oeVZJQ9f9RKvspPOjCYxRqiGgkdsiJ8xs8R3z7eEu4AdyqP VskeZYLa4UcICOgHAZGT+N2QnbMmSsUb/zgBNEQTmdE6ew7HImLrGLutYD+BniCG J/Kv7ffmMoMho9KdtqfTAZC8/6Ir8OOBlnEiTW2qcJ2hMKHw6KUXYbl5MaJIWJZv CMsTVA4xYep/NdAcrBSEQYtPaPTG2mw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:02:22 2025 by rpki-client