$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa File: 3703ae97-7694-31f8-a5e2-913a128e0be6.roa (raw, json) Hash identifier: stjxeinQLc/w/svO6Vs3j650kZGCCtyjRoAyeamoXpI= Subject key identifier: BD:1E:CB:A1:14:60:11:F2:C8:CE:05:41:02:DD:E5:66:C2:A9:18:C8 Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584B79BCBE528EBA93CF4A7FE0C0 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 5645 IP address blocks: 135.23.0.0/16 maxlen: 16 135.23.0.0/19 maxlen: 19 135.23.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:be:52:8e:ba:93:cf:4a:7f:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=62e99b80-e4cb-4f5d-b6ca-64bfa0635e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:42:22:8c:d2:88:c0:0e:9c:65:e1:04:8d:12: 9f:c5:aa:aa:b7:af:ec:2a:88:f0:cb:69:37:e3:8c: 26:25:72:88:f6:84:5f:5c:77:5d:cd:01:5e:82:da: 8d:92:6a:a4:69:54:0b:14:0e:b3:77:89:95:bb:cf: c3:9f:82:bb:b5:47:c4:5d:bf:15:19:1e:35:f7:79: d8:08:7d:87:f4:4d:16:80:3f:ec:90:ef:9b:8e:54: a5:0f:1b:bd:2a:7e:eb:96:9e:ab:98:b6:19:9a:b2: 83:76:88:26:62:e2:a1:6f:42:41:3b:5d:b7:d5:71: c3:46:fd:d5:cc:d6:25:c3:b1:b2:fc:73:48:0b:9c: e9:c1:9c:9a:b7:d4:d9:9f:21:1d:3d:71:e5:22:71: bd:0c:2a:44:78:b0:62:08:59:24:9d:75:81:e4:b6: 7b:47:f6:9f:d0:d7:ed:79:fd:3f:81:5f:1c:99:bd: f6:8c:29:5a:a4:81:5b:cc:b8:4f:ae:cf:22:16:c4: fa:25:4c:ab:19:79:7b:30:73:67:3a:1c:e7:e2:c6: ab:89:bc:ed:66:0c:08:20:fb:4c:ad:64:7f:0b:ce: 30:d6:b3:11:15:db:33:1b:5f:e6:18:2e:3d:a9:81: d3:bc:e5:c6:cf:b6:09:d0:e9:30:24:bc:f0:81:16: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1E:CB:A1:14:60:11:F2:C8:CE:05:41:02:DD:E5:66:C2:A9:18:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/3703ae97-7694-31f8-a5e2-913a128e0be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 135.23.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:19:f6:89:d1:86:0b:09:3f:12:f3:ed:dc:f1:a6:85:44:e8: 0a:18:7e:4b:88:d4:97:35:5a:0e:cb:1e:63:d3:ad:12:65:1b: d4:81:85:ff:83:d8:1f:2a:dc:ad:58:46:b5:0a:7a:bc:2f:94: 8f:54:65:f8:91:54:75:10:40:d4:6b:b6:12:5c:8c:6e:71:50: a3:9e:3d:8c:52:5f:9d:e8:45:c4:c3:59:25:2c:d9:0d:1c:48: 78:60:a8:f6:22:77:8d:e5:26:02:13:9f:79:13:e6:87:91:8b: 0f:d9:e3:f3:c6:23:0f:fd:56:65:66:fb:ec:56:1e:0d:83:6f: 1a:d8:a9:a4:32:54:82:27:52:e1:74:fa:28:26:d8:2a:81:54: 38:cd:4b:50:ab:4b:bc:6a:20:7f:7d:bd:8f:94:3a:27:ed:55: 3c:ef:27:2b:b5:80:89:ee:6f:32:26:38:20:ac:a8:b4:f4:26: 9e:aa:e5:cf:d5:e0:59:f7:c0:f3:38:cb:25:d7:93:e5:62:05: db:2e:1c:7b:7d:54:0f:04:1e:38:1e:5e:92:64:7c:b1:e3:48: ef:bc:9c:25:a0:9a:5d:ff:26:13:01:4e:38:c3:b7:70:70:77: 0b:2e:ea:46:73:e4:97:ea:d7:e4:e4:07:2f:76:c7:ac:83:fe: c3:52:91:83 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt5vL5SjrqTz0p/4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NjJlOTliODAtZTRjYi00ZjVkLWI2Y2EtNjRiZmEwNjM1ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EIijNKIwA6cZeEEjRKfxaqqt6/sKojwy2k3 44wmJXKI9oRfXHddzQFegtqNkmqkaVQLFA6zd4mVu8/Dn4K7tUfEXb8VGR4193nY CH2H9E0WgD/skO+bjlSlDxu9Kn7rlp6rmLYZmrKDdogmYuKhb0JBO1231XHDRv3V zNYlw7Gy/HNIC5zpwZyat9TZnyEdPXHlInG9DCpEeLBiCFkknXWB5LZ7R/af0Nft ef0/gV8cmb32jClapIFbzLhPrs8iFsT6JUyrGXl7MHNnOhzn4saribztZgwIIPtM rWR/C84w1rMRFdszG1/mGC49qYHTvOXGz7YJ0OkwJLzwgRZmSwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL0ey6EUYBHyyM4FQQLd5WbCqRjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvMzcwM2FlOTctNzY5NC0z MWY4LWE1ZTItOTEzYTEyOGUwYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhxcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAChn2idGGCwk/EvPt3PGmhUToChh+S4jUlzVaDsseY9OtEmUb1IGF/4PY HyrcrVhGtQp6vC+Uj1Rl+JFUdRBA1Gu2ElyMbnFQo549jFJfnehFxMNZJSzZDRxI eGCo9iJ3jeUmAhOfeRPmh5GLD9nj88YjD/1WZWb77FYeDYNvGtippDJUgidS4XT6 KCbYKoFUOM1LUKtLvGogf329j5Q6J+1VPO8nK7WAie5vMiY4IKyotPQmnqrlz9Xg WffA8zjLJdeT5WIF2y4ce31UDwQeOB5ekmR8seNI77ycJaCaXf8mEwFOOMO3cHB3 Cy7qRnPkl+rX5OQHL3bHrIP+w1KRgw== -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:46 2025 by rpki-client