$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/2a712fb7-e5da-37e0-b6ea-965140b7696b.roa File: 2a712fb7-e5da-37e0-b6ea-965140b7696b.roa (raw, json) Hash identifier: OZ340v7PiKVHFCL05SlV1QkNQd7wlOAhhJ+sRNWf6sE= Subject key identifier: 6F:F1:B2:81:02:2F:00:33:94:5A:DC:87:E8:D2:D6:79:E8:D9:37:2D Certificate issuer: /CN=f936a1e1-90de-4d04-8bef-ca6fea25558c Certificate serial: 010D0C9F4328584B033A5FE605BF9C5D0A01E260 Authority key identifier: 2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/2a712fb7-e5da-37e0-b6ea-965140b7696b.roa Signing time: Fri 29 Aug 2025 02:12:45 +0000 ROA not before: Fri 29 Aug 2025 02:12:45 +0000 ROA not after: Thu 27 Nov 2025 03:12:45 +0000 asID: 20387 IP address blocks: 23.139.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:3a:5f:e6:05:bf:9c:5d:0a:01:e2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f936a1e1-90de-4d04-8bef-ca6fea25558c Validity Not Before: Aug 29 02:12:45 2025 GMT Not After : Nov 27 03:12:45 2025 GMT Subject: CN=6d58e488-24a8-41db-930e-19edd349e1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:83:11:f3:5f:6b:5f:60:00:40:ac:73:ae:f3: a1:14:b6:f8:a0:d0:ac:72:2c:b2:a5:72:09:82:db: 66:39:28:14:7c:a0:81:87:77:81:b7:6c:a2:f3:fb: df:44:20:4c:62:b8:b2:92:93:7c:13:df:2f:89:39: 95:0d:d7:9e:bc:ee:a0:25:04:3a:48:12:4a:74:7e: 41:e6:e5:82:fe:a3:04:c2:b2:f4:f9:4f:e8:bc:00: d4:f1:c6:1a:92:4e:d6:33:3d:ad:e1:01:c4:4b:b7: 0c:08:c8:bb:3c:7c:c4:e7:78:6b:15:38:61:46:a0: 46:90:cd:ce:16:a8:56:21:46:1c:30:f2:7d:f1:5b: e8:7e:ba:54:f5:4b:4a:6e:07:26:ce:74:bd:41:64: 9b:c4:40:25:3a:54:a9:4f:dc:11:a4:e9:f5:b1:df: 1a:3a:0f:f2:cc:cb:e9:55:ef:16:83:8e:65:2b:7e: 67:aa:49:72:d7:43:84:83:78:e2:b0:10:ca:ae:f5: f3:ec:9a:48:d1:a8:01:9d:c1:28:0f:68:58:f9:9e: 9f:00:bc:b6:d5:f7:76:91:ce:57:71:ab:83:f9:a9: 59:79:87:41:f7:63:be:ac:ce:47:c1:f9:e8:a7:57: 03:a8:58:98:0d:d2:7a:dd:0a:20:17:b2:7c:53:14: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F1:B2:81:02:2F:00:33:94:5A:DC:87:E8:D2:D6:79:E8:D9:37:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/2a712fb7-e5da-37e0-b6ea-965140b7696b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl X509v3 Authority Key Identifier: keyid:2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer sbgp-ipAddrBlock: critical IPv4: 23.139.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:77:6f:c8:ba:44:d2:c6:93:e9:bf:6a:70:cc:eb:44:08:60: 63:24:24:42:a4:3a:fb:04:1e:7d:4b:8d:4e:03:a0:6d:94:dd: ac:77:d2:9f:aa:eb:e9:f8:bc:a2:4f:56:00:c6:83:f4:e6:06: 93:ef:b4:3b:c8:26:5b:44:58:aa:f7:9b:2c:e1:e3:5c:d1:82: da:15:a5:66:5b:99:a4:99:36:60:8c:93:e7:1a:99:dc:16:01: cb:91:89:e1:ae:77:57:50:44:72:65:95:f3:d8:db:8d:c2:06: ee:43:0f:0b:15:ff:f7:51:9a:ef:fe:4c:13:41:67:f7:9b:43: ee:08:ae:d7:03:bf:56:e0:a4:3b:3e:2d:1d:e0:40:57:bf:1f: 05:ed:84:78:cb:0b:5e:99:bb:5c:a5:83:3d:e9:f8:e7:92:31: fc:31:f0:52:d5:e8:4d:55:45:db:ed:3d:39:58:72:01:18:67: 2a:7e:19:88:b0:b6:f9:e4:b0:ba:af:67:b3:27:cd:08:63:de: bf:24:f8:33:9c:85:12:52:c7:2e:48:ac:c2:54:73:5d:6c:69: c7:d4:32:73:72:f1:08:b5:04:83:c2:05:cb:c6:56:78:55:96: d3:2e:97:16:65:e6:b0:94:56:42:cc:21:0c:1d:e0:31:97:ef: 0d:9b:3e:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDOl/mBb+cXQoB4mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkzNmExZTEtOTBkZS00ZDA0LThiZWYtY2E2ZmVhMjU1 NThjMB4XDTI1MDgyOTAyMTI0NVoXDTI1MTEyNzAzMTI0NVowLzEtMCsGA1UEAxMk NmQ1OGU0ODgtMjRhOC00MWRiLTkzMGUtMTllZGQzNDllMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYMR819rX2AAQKxzrvOhFLb4oNCsciyypXIJ gttmOSgUfKCBh3eBt2yi8/vfRCBMYriykpN8E98viTmVDdeevO6gJQQ6SBJKdH5B 5uWC/qMEwrL0+U/ovADU8cYakk7WMz2t4QHES7cMCMi7PHzE53hrFThhRqBGkM3O FqhWIUYcMPJ98VvofrpU9UtKbgcmznS9QWSbxEAlOlSpT9wRpOn1sd8aOg/yzMvp Ve8Wg45lK35nqkly10OEg3jisBDKrvXz7JpI0agBncEoD2hY+Z6fALy21fd2kc5X cauD+alZeYdB92O+rM5Hwfnop1cDqFiYDdJ63QogF7J8UxQWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/xsoECLwAzlFrch+jS1nno2TctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mOTM2 YTFlMS05MGRlLTRkMDQtOGJlZi1jYTZmZWEyNTU1OGMvMmE3MTJmYjctZTVkYS0z N2UwLWI2ZWEtOTY1MTQwYjc2OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjkzNmExZTEtOTBkZS00ZDA0LThi ZWYtY2E2ZmVhMjU1NThjL2Y5MzZhMWUxLTkwZGUtNGQwNC04YmVmLWNhNmZlYTI1 NTU4Yy5jcmwwHwYDVR0jBBgwFoAULeBEvcx/KhDOi9Ue+muzjntcfXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mOTM2YTFlMS05MGRlLTRkMDQtOGJlZi1jYTZm ZWEyNTU1OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4uEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR3b8i6RNLGk+m/anDM60QIYGMkJEKkOvsEHn1LjU4DoG2U3ax30p+q 6+n4vKJPVgDGg/TmBpPvtDvIJltEWKr3myzh41zRgtoVpWZbmaSZNmCMk+camdwW AcuRieGud1dQRHJllfPY243CBu5DDwsV//dRmu/+TBNBZ/ebQ+4IrtcDv1bgpDs+ LR3gQFe/HwXthHjLC16Zu1ylgz3p+OeSMfwx8FLV6E1VRdvtPTlYcgEYZyp+GYiw tvnksLqvZ7MnzQhj3r8k+DOchRJSxy5IrMJUc11sacfUMnNy8Qi1BIPCBcvGVnhV ltMulxZl5rCUVkLMIQwd4DGX7w2bPho= -----END CERTIFICATE-----Generated at Mon Oct 20 09:58:19 2025 by rpki-client