$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/adcf83d9-6a5e-3451-b6e2-9b68d1fe4b98.roa File: adcf83d9-6a5e-3451-b6e2-9b68d1fe4b98.roa (raw, json) Hash identifier: zYh3S9lLMDcS1Outx+FKGsI94XCXcXAsFgR5qsdc+9I= Subject key identifier: 95:8E:D1:C1:74:7E:4B:E6:2D:98:70:03:23:F6:E0:C1:A2:C9:71:0B Certificate issuer: /CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315 Certificate serial: 010D0C9F4328584B7C8759E55E0373A1C8EBD7C0 Authority key identifier: 4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/adcf83d9-6a5e-3451-b6e2-9b68d1fe4b98.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 27284 IP address blocks: 23.134.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:59:e5:5e:03:73:a1:c8:eb:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=2a9f09fb-5117-4320-9c84-78cad1a714fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:75:2b:11:02:41:1c:35:39:46:b3:6d:98:b2: e4:3d:8c:c4:4d:73:53:cf:c3:9e:db:43:a9:9d:a6: 87:c3:10:6e:57:3b:36:32:95:b3:80:0d:3d:cb:f6: b9:72:d5:8d:b6:bd:aa:b7:4b:bf:86:a7:2a:20:0b: 8e:18:b5:a7:16:55:10:44:15:4d:12:03:b2:9b:ec: 78:a8:6d:c9:58:91:6e:ce:b3:fb:cd:7f:44:29:5e: de:91:74:b9:8c:75:7d:ab:54:f0:1d:fe:b8:5b:cb: 04:12:fc:31:b9:9a:ba:24:af:4a:c3:38:71:33:91: 06:34:fb:3d:61:51:ef:3d:af:43:3a:1d:6b:bb:4b: 88:e8:de:c9:fe:c6:ce:b5:90:71:fe:90:0f:4c:49: b8:fa:00:27:6c:de:a1:7e:1e:1f:93:4b:8d:b5:a4: f0:43:ae:a4:a8:42:c4:2f:3d:ce:9d:d7:02:5c:71: cd:2b:b3:8d:83:1e:f1:98:c5:93:57:8a:32:cc:90: 14:44:39:10:a7:56:3c:39:dd:3f:48:a6:4d:f1:a4: c2:87:85:b7:3f:e5:72:99:bc:34:15:05:22:74:2c: 02:78:39:07:ca:bf:3f:16:60:c8:26:b8:6e:db:86: ca:c0:a2:90:20:08:6e:ab:23:2a:e0:ac:e3:b3:83: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8E:D1:C1:74:7E:4B:E6:2D:98:70:03:23:F6:E0:C1:A2:C9:71:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/adcf83d9-6a5e-3451-b6e2-9b68d1fe4b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl X509v3 Authority Key Identifier: keyid:4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer sbgp-ipAddrBlock: critical IPv4: 23.134.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:74:9b:e6:1f:b6:97:ae:9b:fb:d9:4e:f5:a5:7c:26:bb:81: bd:83:73:2c:c8:54:fe:42:55:ea:d6:dc:8a:bf:cc:66:61:0a: c3:0d:24:3e:4a:4e:f9:fa:26:26:16:a7:92:67:a1:e1:b0:0c: f9:bf:00:17:41:3b:c7:08:f2:fd:f3:24:e6:65:4c:36:62:22: 25:25:35:dc:29:d1:94:52:52:53:7e:32:7f:72:ec:ef:82:dd: 99:57:d3:d8:5c:86:05:67:ad:c0:f5:66:03:41:e6:34:55:02: f2:88:ec:a8:77:72:2c:bb:fc:a3:12:84:fc:ff:e8:7c:2a:be: 22:c3:44:86:6e:68:d9:46:bb:2b:8a:74:25:32:ae:91:76:87: af:d0:b4:87:11:56:c8:fb:39:c5:22:9c:ea:3d:ba:9c:d2:14: cc:dd:b6:de:51:97:d0:81:30:f2:9f:9d:b4:e9:3f:22:d3:ad: 22:5f:08:d4:e2:29:57:52:b9:ba:71:6f:c8:9d:85:9c:fb:9f: 42:e7:8f:ec:37:2c:d6:28:f8:32:47:97:94:aa:0e:e8:98:da: c4:cc:cb:b4:1a:c0:de:4c:07:01:04:e3:80:8a:14:d9:d9:16: 47:84:6e:39:d3:f7:52:90:2e:e2:53:eb:9e:a7:e5:c5:1d:e2: dd:59:b8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h1nlXgNzocjr18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5MGMyZDMtZDJlNC00NDNlLWI0NGUtZDUzMGZjN2Yz MzE1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MmE5ZjA5ZmItNTExNy00MzIwLTljODQtNzhjYWQxYTcxNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXUrEQJBHDU5RrNtmLLkPYzETXNTz8Oe20Op naaHwxBuVzs2MpWzgA09y/a5ctWNtr2qt0u/hqcqIAuOGLWnFlUQRBVNEgOym+x4 qG3JWJFuzrP7zX9EKV7ekXS5jHV9q1TwHf64W8sEEvwxuZq6JK9KwzhxM5EGNPs9 YVHvPa9DOh1ru0uI6N7J/sbOtZBx/pAPTEm4+gAnbN6hfh4fk0uNtaTwQ66kqELE Lz3OndcCXHHNK7ONgx7xmMWTV4oyzJAURDkQp1Y8Od0/SKZN8aTCh4W3P+Vymbw0 FQUidCwCeDkHyr8/FmDIJrhu24bKwKKQIAhuqyMq4Kzjs4PfAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWO0cF0fkvmLZhwAyP24MGiyXELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZTkw YzJkMy1kMmU0LTQ0M2UtYjQ0ZS1kNTMwZmM3ZjMzMTUvYWRjZjgzZDktNmE1ZS0z NDUxLWI2ZTItOWI2OGQxZmU0Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2U5MGMyZDMtZDJlNC00NDNlLWI0 NGUtZDUzMGZjN2YzMzE1LzdlOTBjMmQzLWQyZTQtNDQzZS1iNDRlLWQ1MzBmYzdm MzMxNS5jcmwwHwYDVR0jBBgwFoAUS0UBiQjBjieMPcnhaA+Aq/Dka6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZTkwYzJkMy1kMmU0LTQ0M2UtYjQ0ZS1kNTMw ZmM3ZjMzMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN0m+Yftpeum/vZTvWlfCa7gb2DcyzIVP5CVerW3Iq/zGZhCsMNJD5K Tvn6JiYWp5JnoeGwDPm/ABdBO8cI8v3zJOZlTDZiIiUlNdwp0ZRSUlN+Mn9y7O+C 3ZlX09hchgVnrcD1ZgNB5jRVAvKI7Kh3ciy7/KMShPz/6HwqviLDRIZuaNlGuyuK dCUyrpF2h6/QtIcRVsj7OcUinOo9upzSFMzdtt5Rl9CBMPKfnbTpPyLTrSJfCNTi KVdSubpxb8idhZz7n0Lnj+w3LNYo+DJHl5SqDuiY2sTMy7QawN5MBwEE44CKFNnZ FkeEbjnT91KQLuJT656n5cUd4t1ZuIo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:19:21 2025 by rpki-client