$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa File: 65b4ebf4-2826-3053-8d95-46485d6fea90.roa (raw, json) Hash identifier: WXRWmbevljob7HkFTfnK+6Y2/+SH0/pYPo5Xf9DwahU= Subject key identifier: BD:08:30:52:A7:C9:B5:AD:53:C0:C6:FF:6A:AC:FE:D0:C5:02:85:E4 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F4328584B7F520A1130B1F1713A00D640 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 19468 IP address blocks: 23.134.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0a:11:30:b1:f1:71:3a:00:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1550a595-bd32-484a-aea2-66d16899f57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:1d:4e:12:7b:1b:59:b3:42:26:60:d1:84: 70:a6:0a:00:dc:64:21:0e:dd:a3:bc:48:45:dd:c0: 81:7e:cc:2e:45:20:72:3d:bb:6c:04:99:1b:09:df: 5b:d0:39:93:7b:db:45:3f:84:ad:88:0c:2a:8e:1a: 55:e7:25:b1:ec:9e:30:0c:69:87:d2:23:ca:e7:e3: 7a:0a:bc:0c:ab:98:e6:bc:fc:95:da:59:a7:62:ad: bc:cc:90:58:ba:43:6b:4b:91:1c:24:8c:5f:e9:eb: d3:2d:f4:60:48:a4:df:48:0d:d7:94:8e:b7:6c:8a: 27:02:37:8c:6b:90:2a:6f:d5:43:76:9d:07:fc:ee: f5:cd:a8:e1:dd:33:f3:e3:03:89:25:f1:f9:66:4e: 70:8c:6e:df:72:fb:0a:88:13:23:b4:e3:37:72:b3: eb:b0:4b:0a:7f:54:7a:cf:30:47:b9:fc:3c:c7:6a: 28:4e:e2:f7:10:c6:be:37:5c:32:0d:aa:11:bd:99: d5:0c:72:59:95:d4:c2:61:a9:3b:03:f1:b5:ce:3f: 43:2d:9c:fa:40:15:f1:3d:87:a7:b0:1d:76:d8:dc: 53:21:fc:2f:64:7c:21:f9:6d:0d:c4:b3:46:03:97: 76:97:44:70:8a:87:55:d0:74:ee:f0:a9:61:54:eb: ff:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:08:30:52:A7:C9:B5:AD:53:C0:C6:FF:6A:AC:FE:D0:C5:02:85:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/65b4ebf4-2826-3053-8d95-46485d6fea90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:65:26:84:73:5a:85:ec:cd:6f:70:40:b3:94:50:49:df:6e: 58:e0:85:3e:28:c6:b5:26:e1:ea:1e:e3:fd:21:e6:e2:96:74: 67:8a:32:30:99:8e:97:1f:0f:2f:36:81:68:78:19:fb:53:7f: 32:c6:70:1e:68:fd:90:a9:67:7b:f0:89:59:b7:f2:6a:67:80: e7:4d:c3:67:5b:09:bf:43:52:67:cf:a3:e2:b9:ef:e2:58:c8: ae:a4:8d:1e:e5:d3:97:c7:d3:9f:de:9d:b6:71:77:f9:b7:8f: 15:a1:55:67:c3:ca:a1:9b:0d:2d:55:c1:be:29:ef:d3:d9:0f: 32:c5:91:07:53:14:d0:a0:98:1d:40:d9:7b:9d:32:23:00:a3: 9c:0e:af:c0:19:f7:95:0f:64:76:36:c7:1d:f1:89:b4:68:58: fa:5f:ac:fb:d1:4d:ed:bc:b3:74:7a:ba:59:f7:c5:47:d8:d0: ec:ab:19:88:7e:08:dd:a2:5f:4f:b1:8a:f8:2f:9a:94:31:d2: 95:68:02:f8:82:89:c6:83:e3:5d:8a:bd:77:36:1d:ea:5b:dd: d8:46:61:3e:a3:00:a3:57:83:53:47:69:c2:d7:0c:35:23:79: 50:3a:1d:03:0d:1b:b0:97:1c:a4:78:32:95:b0:91:56:ae:16: 7a:f1:85:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgoRMLHxcToA1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTU1MGE1OTUtYmQzMi00ODRhLWFlYTItNjZkMTY4OTlmNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6sdThJ7G1mzQiZg0YRwpgoA3GQhDt2jvEhF 3cCBfswuRSByPbtsBJkbCd9b0DmTe9tFP4StiAwqjhpV5yWx7J4wDGmH0iPK5+N6 CrwMq5jmvPyV2lmnYq28zJBYukNrS5EcJIxf6evTLfRgSKTfSA3XlI63bIonAjeM a5Aqb9VDdp0H/O71zajh3TPz4wOJJfH5Zk5wjG7fcvsKiBMjtOM3crPrsEsKf1R6 zzBHufw8x2ooTuL3EMa+N1wyDaoRvZnVDHJZldTCYak7A/G1zj9DLZz6QBXxPYen sB122NxTIfwvZHwh+W0NxLNGA5d2l0RwiodV0HTu8KlhVOv/1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0IMFKnybWtU8DG/2qs/tDFAoXkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvNjViNGViZjQtMjgyNi0z MDUzLThkOTUtNDY0ODVkNmZlYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtlJoRzWoXszW9wQLOUUEnfbljghT4oxrUm4eoe4/0h5uKWdGeKMjCZ jpcfDy82gWh4GftTfzLGcB5o/ZCpZ3vwiVm38mpngOdNw2dbCb9DUmfPo+K57+JY yK6kjR7l05fH05/enbZxd/m3jxWhVWfDyqGbDS1Vwb4p79PZDzLFkQdTFNCgmB1A 2XudMiMAo5wOr8AZ95UPZHY2xx3xibRoWPpfrPvRTe28s3R6uln3xUfY0OyrGYh+ CN2iX0+xivgvmpQx0pVoAviCicaD412KvXc2Hepb3dhGYT6jAKNXg1NHacLXDDUj eVA6HQMNG7CXHKR4MpWwkVauFnrxhQc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:48:55 2025 by rpki-client