$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/ffc72630-36fb-32c0-a9ad-048dde10b4e4.roa File: ffc72630-36fb-32c0-a9ad-048dde10b4e4.roa (raw, json) Hash identifier: YnDJ5P8duQZh4PWMTIbkTo02w6Gw1pCfCvJ3FT2o0Qc= Subject key identifier: 9F:30:BF:A4:DF:7F:B2:EC:54:E4:09:91:BE:08:49:5A:07:96:95:2C Certificate issuer: /CN=f936a1e1-90de-4d04-8bef-ca6fea25558c Certificate serial: 010D0C9F4328584AFC1C21801F816BBF03E5C8C0 Authority key identifier: 2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/ffc72630-36fb-32c0-a9ad-048dde10b4e4.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 401371 IP address blocks: 23.139.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:21:80:1f:81:6b:bf:03:e5:c8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f936a1e1-90de-4d04-8bef-ca6fea25558c Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=aa9a874a-2b13-4076-820e-8531898f54ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:e1:b2:83:56:0e:df:14:8e:bb:19:9d:77: 3c:55:ae:81:f2:b2:7c:d8:9e:da:f6:a8:6c:6f:db: 9f:6d:f1:d2:7b:8c:d5:55:4e:d0:d1:66:c4:fe:d6: 31:be:90:a8:1e:d8:62:dc:86:fe:c8:d1:e1:19:5e: b4:bc:c6:ef:1d:62:10:22:2b:04:2d:c0:5d:72:30: 8f:7c:f5:d0:6c:8c:d4:6d:83:db:c6:ce:fd:6e:9a: 0f:45:70:86:ee:b0:aa:d0:b0:fa:b5:34:59:a0:3d: 80:eb:8b:f4:4e:84:f8:67:3c:57:1a:b6:ef:0a:94: fd:2a:fd:fc:01:cb:0e:a9:57:05:6c:6e:bc:7b:07: fe:9d:ad:75:3b:86:de:1a:fd:21:1c:27:41:43:05: 5e:83:4b:5e:8e:66:35:75:fd:4a:78:03:12:fa:34: 96:13:9a:2e:c8:e9:10:5c:9b:bc:e0:00:4f:48:82: 0b:66:fb:47:fd:d4:95:bf:6f:73:52:00:27:74:63: dc:5a:53:53:7c:29:c6:d0:59:ca:f8:b0:21:ee:19: 2f:77:48:80:0d:ee:bc:9c:67:14:fa:f9:30:f5:d0: b4:63:98:14:14:ac:d6:c4:29:b1:51:04:12:87:ee: 41:0d:da:b5:b4:5f:e8:ab:1f:00:5f:a3:57:ca:c0: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:30:BF:A4:DF:7F:B2:EC:54:E4:09:91:BE:08:49:5A:07:96:95:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/ffc72630-36fb-32c0-a9ad-048dde10b4e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl X509v3 Authority Key Identifier: keyid:2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer sbgp-ipAddrBlock: critical IPv4: 23.139.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:7e:2f:5a:65:29:86:e5:e6:b7:f2:cc:dc:ea:7a:8c:f3:28: ef:4a:35:43:b3:60:45:88:37:2e:cf:11:51:40:52:64:96:50: ba:fa:aa:49:36:5c:e6:dc:85:fd:8f:86:55:88:9b:e4:68:81: d4:de:59:94:51:ff:24:75:08:30:c4:6a:19:2f:af:f8:6a:bb: 75:f4:11:53:90:95:73:f8:27:08:d0:2c:2b:03:bd:9b:65:bd: eb:df:eb:5b:29:a7:d5:e6:f6:c6:48:81:b8:11:31:60:5c:e6: f8:bb:c3:34:fd:78:38:11:a2:d9:4e:d5:e9:ff:49:08:b9:5d: 33:e1:68:98:9a:25:fb:0e:e3:d2:0a:d7:ff:23:07:07:f0:71: dd:11:c1:b1:57:c3:fd:1e:e3:a3:01:6a:5a:09:ec:9d:cd:0a: 85:a0:f7:4c:2a:38:c5:c5:d2:12:27:91:6f:c8:e7:e6:7d:4a: 27:cc:0f:f5:44:b5:56:04:b3:d7:de:46:3f:c5:41:c1:4a:2c: 6f:01:71:4b:2d:bb:3c:28:24:0b:3c:c4:85:91:81:9d:18:57: a2:03:88:4e:dc:1d:8e:cb:9e:bc:e7:0d:c7:36:bd:5d:61:6b: e9:55:68:59:f4:a8:73:82:4c:be:ac:33:06:5b:9e:c2:3e:44: 5c:5d:8c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HCGAH4FrvwPlyMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkzNmExZTEtOTBkZS00ZDA0LThiZWYtY2E2ZmVhMjU1 NThjMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YWE5YTg3NGEtMmIxMy00MDc2LTgyMGUtODUzMTg5OGY1NGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzHhsoNWDt8UjrsZnXc8Va6B8rJ82J7a9qhs b9ufbfHSe4zVVU7Q0WbE/tYxvpCoHthi3Ib+yNHhGV60vMbvHWIQIisELcBdcjCP fPXQbIzUbYPbxs79bpoPRXCG7rCq0LD6tTRZoD2A64v0ToT4ZzxXGrbvCpT9Kv38 AcsOqVcFbG68ewf+na11O4beGv0hHCdBQwVeg0tejmY1df1KeAMS+jSWE5ouyOkQ XJu84ABPSIILZvtH/dSVv29zUgAndGPcWlNTfCnG0FnK+LAh7hkvd0iADe68nGcU +vkw9dC0Y5gUFKzWxCmxUQQSh+5BDdq1tF/oqx8AX6NXysDeywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8wv6Tff7LsVOQJkb4ISVoHlpUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mOTM2 YTFlMS05MGRlLTRkMDQtOGJlZi1jYTZmZWEyNTU1OGMvZmZjNzI2MzAtMzZmYi0z MmMwLWE5YWQtMDQ4ZGRlMTBiNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjkzNmExZTEtOTBkZS00ZDA0LThi ZWYtY2E2ZmVhMjU1NThjL2Y5MzZhMWUxLTkwZGUtNGQwNC04YmVmLWNhNmZlYTI1 NTU4Yy5jcmwwHwYDVR0jBBgwFoAULeBEvcx/KhDOi9Ue+muzjntcfXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mOTM2YTFlMS05MGRlLTRkMDQtOGJlZi1jYTZm ZWEyNTU1OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4uEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF+L1plKYbl5rfyzNzqeozzKO9KNUOzYEWINy7PEVFAUmSWULr6qkk2 XObchf2PhlWIm+RogdTeWZRR/yR1CDDEahkvr/hqu3X0EVOQlXP4JwjQLCsDvZtl vevf61spp9Xm9sZIgbgRMWBc5vi7wzT9eDgRotlO1en/SQi5XTPhaJiaJfsO49IK 1/8jBwfwcd0RwbFXw/0e46MBaloJ7J3NCoWg90wqOMXF0hInkW/I5+Z9SifMD/VE tVYEs9feRj/FQcFKLG8BcUstuzwoJAs8xIWRgZ0YV6IDiE7cHY7LnrznDcc2vV1h a+lVaFn0qHOCTL6sMwZbnsI+RFxdjDs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:34 2025 by rpki-client