$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa File: 97da6b9d-b639-35c4-87be-d3b486d7c07b.roa (raw, json) Hash identifier: ZC+ut1Qw/gMXXxNb5h/9RbkHGyoRh2f76JdZqVbKbso= Subject key identifier: 20:B0:A7:F7:BF:03:92:31:D8:14:21:1A:3F:62:E9:16:7E:76:00:14 Certificate issuer: /CN=a54e265f-d361-4245-843e-1e7cf61c9644 Certificate serial: 010D0C9F4328584B21CC3446814ABAB6CDB90E20 Authority key identifier: CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 401580 IP address blocks: 23.132.36.0/24 maxlen: 24 2602:f740::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:34:46:81:4a:ba:b6:cd:b9:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a54e265f-d361-4245-843e-1e7cf61c9644 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=ceae21b2-726a-489f-aab3-2e503e2607af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:c8:72:11:7d:9c:62:21:c0:63:c9:36:63: 72:31:73:ea:ac:e7:10:4a:48:8f:e4:10:a8:cd:0f: 88:e1:90:95:02:e5:e5:5c:59:74:e4:b0:91:2d:6d: 2e:65:53:e6:c6:c0:cd:5b:05:38:62:37:3b:15:21: a0:4d:01:41:f8:68:38:f2:9f:59:1c:bf:ec:b0:b3: 14:67:b9:59:25:0b:ba:ef:23:fb:6a:fb:f1:ce:51: b8:7f:76:ed:35:57:75:1c:77:d9:89:cb:97:e4:cb: 19:a3:9a:91:e8:26:d2:0d:84:e0:87:78:57:0f:6b: 84:8e:f3:85:c5:cb:b3:3d:b8:d1:45:2b:70:cd:1f: ee:42:e3:ca:54:ca:2f:be:f1:0f:f9:1c:a5:ab:8a: 1b:63:68:d5:f9:7c:97:53:8e:a8:9a:28:c6:78:cd: 7d:fb:eb:f3:e6:95:50:34:4f:a4:9c:5d:9a:63:9d: 06:7f:10:9d:02:1f:4a:65:05:eb:f3:9c:71:8d:4b: 13:e8:d1:60:d3:be:ef:92:4e:00:43:d5:2d:c1:91: bb:c7:51:ec:bb:d1:fb:5c:f8:d4:11:4d:71:07:cd: 67:f7:f2:aa:86:af:da:16:2f:de:ee:02:9e:d6:5d: ba:75:92:d1:b2:bb:9f:45:6a:7d:c4:8d:ae:d2:4f: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B0:A7:F7:BF:03:92:31:D8:14:21:1A:3F:62:E9:16:7E:76:00:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl X509v3 Authority Key Identifier: keyid:CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer sbgp-ipAddrBlock: critical IPv4: 23.132.36.0/24 IPv6: 2602:f740::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2f:25:ea:01:44:32:8b:b9:10:56:b8:1a:ea:d6:0b:7a:33: 00:a6:30:34:84:e0:8e:98:d4:ef:9d:12:77:d2:3e:16:07:c6: 75:d7:c2:39:ae:7d:4e:ce:6c:af:c6:d8:ed:d5:0c:27:60:ec: 41:34:c4:eb:aa:cb:35:4b:46:32:bb:36:f2:00:4d:40:49:54: b2:0f:cd:42:a9:48:28:6a:eb:48:17:97:1a:09:e0:67:a7:3a: 13:18:a0:a0:00:24:91:10:21:d7:72:8d:f1:50:7e:fb:64:19: 7a:3d:46:51:91:77:1e:f1:84:d4:08:dc:13:e1:d2:6e:ab:11: de:17:ab:aa:21:5f:6f:9e:bf:7a:35:55:65:6b:cf:c1:77:bd: 3d:32:b5:c4:ec:27:06:6a:b6:0f:77:e0:e4:4f:2d:56:3d:99: 87:98:9b:1d:7c:cd:46:46:90:40:40:25:38:e7:0d:72:a5:ea: b5:98:66:d6:25:f2:2a:d1:a9:f1:c2:44:e3:52:69:fe:79:49: f3:4e:ec:29:54:9c:dd:f5:6d:fe:f1:15:3d:06:a7:fc:c8:1e: 5e:fd:ed:76:42:1e:f4:0f:7a:2f:0b:0c:f7:71:7f:ec:f6:bd: cf:3c:c2:21:29:17:01:9a:04:f9:0d:9f:df:8d:de:75:75:f8: 26:41:c4:be -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEshzDRGgUq6ts25DiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU0ZTI2NWYtZDM2MS00MjQ1LTg0M2UtMWU3Y2Y2MWM5 NjQ0MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk Y2VhZTIxYjItNzI2YS00ODlmLWFhYjMtMmU1MDNlMjYwN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBjIchF9nGIhwGPJNmNyMXPqrOcQSkiP5BCo zQ+I4ZCVAuXlXFl05LCRLW0uZVPmxsDNWwU4Yjc7FSGgTQFB+Gg48p9ZHL/ssLMU Z7lZJQu67yP7avvxzlG4f3btNVd1HHfZicuX5MsZo5qR6CbSDYTgh3hXD2uEjvOF xcuzPbjRRStwzR/uQuPKVMovvvEP+Rylq4obY2jV+XyXU46omijGeM19++vz5pVQ NE+knF2aY50GfxCdAh9KZQXr85xxjUsT6NFg077vkk4AQ9UtwZG7x1Hsu9H7XPjU EU1xB81n9/Kqhq/aFi/e7gKe1l26dZLRsrufRWp9xI2u0k8SzQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCCwp/e/A5Ix2BQhGj9i6RZ+dgAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hNTRl MjY1Zi1kMzYxLTQyNDUtODQzZS0xZTdjZjYxYzk2NDQvOTdkYTZiOWQtYjYzOS0z NWM0LTg3YmUtZDNiNDg2ZDdjMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTU0ZTI2NWYtZDM2MS00MjQ1LTg0 M2UtMWU3Y2Y2MWM5NjQ0L2E1NGUyNjVmLWQzNjEtNDI0NS04NDNlLTFlN2NmNjFj OTY0NC5jcmwwHwYDVR0jBBgwFoAUzM/ruBaC+8/GDeSWV0BhayV2UUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hNTRlMjY1Zi1kMzYxLTQyNDUtODQzZS0xZTdj ZjYxYzk2NDQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4QkMA4E AgACMAgDBgQmAvdAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBILyXqAUQyi7kQVrga6tYLejMApjA0hOCO mNTvnRJ30j4WB8Z118I5rn1Ozmyvxtjt1QwnYOxBNMTrqss1S0YyuzbyAE1ASVSy D81CqUgoautIF5caCeBnpzoTGKCgACSRECHXco3xUH77ZBl6PUZRkXce8YTUCNwT 4dJuqxHeF6uqIV9vnr96NVVla8/Bd709MrXE7CcGarYPd+DkTy1WPZmHmJsdfM1G RpBAQCU45w1ypeq1mGbWJfIq0anxwkTjUmn+eUnzTuwpVJzd9W3+8RU9Bqf8yB5e /e12Qh70D3ovCwz3cX/s9r3PPMIhKRcBmgT5DZ/fjd51dfgmQcS+ -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:33 2025 by rpki-client