$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa File: 5d22fed2-523a-322d-a47d-2db5b0e1e874.roa (raw, json) Hash identifier: L7NIOsWMTIrg8QXQHjwMVwvq7vW+DFqAPBKt7eCiyUg= Subject key identifier: 84:48:A6:49:09:90:0A:CB:98:28:93:C2:1C:E3:CD:04:17:E6:BA:D8 Certificate issuer: /CN=f471d673-d293-405b-9549-4421d0436152 Certificate serial: 010D0C9F4328584B21CC14B455372BD1E0781000 Authority key identifier: 30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 214483 IP address blocks: 23.136.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:14:b4:55:37:2b:d1:e0:78:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f471d673-d293-405b-9549-4421d0436152 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=7910771f-6019-4ec3-8f9d-645d32edb0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:67:c6:22:90:ed:5c:f6:43:fe:97:c7:34: c7:9c:e7:5c:bf:a1:36:0b:d2:bf:dd:c2:60:b2:05: 0b:33:84:e1:57:ed:7e:99:ce:bd:84:c3:0e:87:15: 31:a9:62:78:f2:f8:37:3a:e1:05:fe:d6:03:26:ae: ae:e0:f5:af:01:d7:5e:ae:cf:74:bc:27:80:d4:11: ad:c6:e0:e8:c1:e1:05:11:5e:a6:fb:dc:55:bd:ed: dd:bc:0d:68:87:67:cd:2e:f8:45:06:ce:9d:90:10: 09:c6:38:00:38:d7:39:ac:7e:5e:68:9e:ec:bb:64: d8:5d:27:16:ff:e9:15:53:39:c5:5e:ca:1e:df:64: 35:da:35:98:43:c3:39:5b:24:85:21:fc:0e:ef:5d: 6d:76:f2:48:e4:44:77:3a:c3:c7:fb:06:d2:b7:0b: 6e:2b:ac:47:77:1b:5c:1e:7a:28:5c:f7:2a:04:22: 97:4c:cf:d7:bc:06:31:45:3a:8d:39:cb:28:bc:f9: 86:a0:83:67:3e:66:ff:0c:80:8f:56:6f:7d:c3:64: b4:4c:e0:28:04:eb:3a:22:d3:7f:3a:c1:1b:20:97: 1d:ff:4c:48:d4:aa:28:5c:fd:03:fd:9f:42:01:33: 2a:48:df:b7:86:40:17:b3:58:d8:51:04:e4:4d:83: f7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:48:A6:49:09:90:0A:CB:98:28:93:C2:1C:E3:CD:04:17:E6:BA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl X509v3 Authority Key Identifier: keyid:30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer sbgp-ipAddrBlock: critical IPv4: 23.136.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:fe:76:b7:55:d3:23:de:91:b2:59:fe:4b:ea:5f:38:69:2b: f6:7c:c3:07:5b:9e:b2:63:6b:bf:2f:9b:59:57:29:e9:20:7e: 50:9a:83:62:0f:09:4b:d4:56:f9:f6:54:6f:3c:86:c2:34:c4: 26:30:21:35:52:ff:e3:bb:6e:c5:0a:ad:49:83:a8:eb:5d:59: 14:3c:9c:57:77:78:7e:20:c8:a6:4c:2d:fd:dc:7d:a8:e6:6f: 5a:cf:7b:a3:23:c6:08:22:92:dc:62:3e:7d:44:b5:30:af:32: 5d:8b:8c:10:cc:47:32:09:62:fa:7d:2d:68:e9:94:fc:5e:8b: 51:73:82:73:88:21:4b:6f:c6:69:f4:9c:2e:e3:de:20:a6:ef: a8:6f:f7:59:1e:44:e3:8f:6d:09:46:16:f9:81:75:6c:73:19: 91:5c:8f:a4:70:d6:a0:8c:94:ca:e9:58:1c:80:0c:d4:51:7a: a6:2e:e7:b7:9c:9c:ba:43:50:2d:1b:c1:0c:26:2b:28:af:c4: 3d:fa:27:5a:7e:0e:be:f2:1b:5a:e9:64:67:9f:8f:51:c4:0e: 1e:a1:81:83:9e:f6:97:5a:a4:53:b5:09:bc:0b:ee:22:9c:aa: 87:27:04:94:e3:55:a6:c9:c7:3f:39:22:3c:db:4f:ba:8f:a7: 3f:d6:ef:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBS0VTcr0eB4EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ3MWQ2NzMtZDI5My00MDViLTk1NDktNDQyMWQwNDM2 MTUyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NzkxMDc3MWYtNjAxOS00ZWMzLThmOWQtNjQ1ZDMyZWRiMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh1nxiKQ7Vz2Q/6XxzTHnOdcv6E2C9K/3cJg sgULM4ThV+1+mc69hMMOhxUxqWJ48vg3OuEF/tYDJq6u4PWvAdders90vCeA1BGt xuDoweEFEV6m+9xVve3dvA1oh2fNLvhFBs6dkBAJxjgAONc5rH5eaJ7su2TYXScW /+kVUznFXsoe32Q12jWYQ8M5WySFIfwO711tdvJI5ER3OsPH+wbStwtuK6xHdxtc HnooXPcqBCKXTM/XvAYxRTqNOcsovPmGoINnPmb/DICPVm99w2S0TOAoBOs6ItN/ OsEbIJcd/0xI1KooXP0D/Z9CATMqSN+3hkAXs1jYUQTkTYP3iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRIpkkJkArLmCiTwhzjzQQX5rrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNDcx ZDY3My1kMjkzLTQwNWItOTU0OS00NDIxZDA0MzYxNTIvNWQyMmZlZDItNTIzYS0z MjJkLWE0N2QtMmRiNWIwZTFlODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjQ3MWQ2NzMtZDI5My00MDViLTk1 NDktNDQyMWQwNDM2MTUyL2Y0NzFkNjczLWQyOTMtNDA1Yi05NTQ5LTQ0MjFkMDQz NjE1Mi5jcmwwHwYDVR0jBBgwFoAUMKAmCua1nzZrHHc/WjHX+++xJAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNDcxZDY3My1kMjkzLTQwNWItOTU0OS00NDIx ZDA0MzYxNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf+drdV0yPekbJZ/kvqXzhpK/Z8wwdbnrJja78vm1lXKekgflCag2IP CUvUVvn2VG88hsI0xCYwITVS/+O7bsUKrUmDqOtdWRQ8nFd3eH4gyKZMLf3cfajm b1rPe6MjxggiktxiPn1EtTCvMl2LjBDMRzIJYvp9LWjplPxei1FzgnOIIUtvxmn0 nC7j3iCm76hv91keROOPbQlGFvmBdWxzGZFcj6Rw1qCMlMrpWByADNRReqYu57ec nLpDUC0bwQwmKyivxD36J1p+Dr7yG1rpZGefj1HEDh6hgYOe9pdapFO1CbwL7iKc qocnBJTjVabJxz85IjzbT7qPpz/W76w= -----END CERTIFICATE-----Generated at Sun Oct 19 21:13:03 2025 by rpki-client