$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa File: 50fd98fa-196b-389a-897e-310945d94333.roa (raw, json) Hash identifier: 8FuYlFaGhR2TiHt0qdkaLgi3ngvRLyxxa6bqsFbzQ48= Subject key identifier: C6:E8:8D:15:47:C8:8E:D0:44:5D:91:59:68:51:82:83:EA:5E:B4:14 Certificate issuer: /CN=dc81e524-050d-4a15-9043-39314922cc81 Certificate serial: 010D0C9F4328584B48E1B78B12D90D6D5BE60100 Authority key identifier: 12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 400146 IP address blocks: 23.136.136.0/24 maxlen: 24 2606:d240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b7:8b:12:d9:0d:6d:5b:e6:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc81e524-050d-4a15-9043-39314922cc81 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=9dce0988-1a67-4302-8347-690aa4733f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:05:f0:36:9c:3a:ae:a9:c4:89:ea:f4:cf: e0:73:9d:e7:5e:bd:6f:3e:ae:cf:d6:1e:e5:fa:96: f3:b5:fc:b6:c7:cf:8b:50:ae:d8:7d:22:96:8f:1d: 03:47:e4:22:b6:df:12:4f:c2:47:60:4f:8e:9e:82: f3:06:22:d1:2a:f4:ce:9a:10:96:c5:3b:e3:68:08: ed:45:1e:41:1b:a2:6c:aa:1d:9f:c0:79:c2:2b:77: 37:b3:01:49:ff:c8:78:54:ea:26:46:59:2f:69:de: 93:44:03:d9:6d:da:48:35:e0:ca:4c:38:34:bf:de: f1:46:bc:14:88:c4:a0:54:a5:8b:9c:a3:13:73:41: e9:00:88:22:86:ee:47:10:52:0e:f0:bd:95:29:d6: 0d:d5:18:1b:c6:51:5d:f1:1f:c4:e2:26:59:68:c3: 02:c8:c0:2b:14:97:c9:cd:79:6f:f3:e6:8e:1f:c5: 8e:ba:26:37:51:60:16:98:99:ce:0e:9f:89:73:69: 0f:a9:fe:60:fd:de:10:ae:9d:9b:07:47:ac:b0:6e: 83:40:6e:8b:21:11:2c:bd:12:d4:22:23:52:72:c1: 99:6f:ee:55:11:30:a3:26:2c:9c:93:d1:c6:14:41: 33:7e:da:1d:cd:45:6b:2a:32:17:7a:4e:7a:33:67: 6b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:8D:15:47:C8:8E:D0:44:5D:91:59:68:51:82:83:EA:5E:B4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/50fd98fa-196b-389a-897e-310945d94333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.crl X509v3 Authority Key Identifier: keyid:12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer sbgp-ipAddrBlock: critical IPv4: 23.136.136.0/24 IPv6: 2606:d240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b3:9f:9d:24:10:41:a2:4e:52:5a:2c:02:9a:d4:32:42:a6: 88:e1:61:ac:91:ce:73:3d:00:7b:6d:92:ae:32:73:86:32:be: f0:8d:25:2b:f0:ed:33:c8:bd:39:e2:a6:9c:6a:b3:29:6c:27: 60:0f:38:48:97:46:df:c7:a7:07:1c:43:3f:d3:c4:7f:9d:26: b9:3d:ab:41:9d:00:7b:c0:bf:ce:5c:5f:41:ae:3f:30:23:b4: 6d:3d:c8:c7:a4:3f:6e:3e:6f:85:3a:5a:39:ab:c6:a1:1a:63: 84:af:36:61:63:79:e0:a0:bc:ca:a6:bb:a8:60:09:dd:98:39: b5:f9:89:e1:af:09:c2:29:1b:e1:80:69:09:92:61:ab:00:f2: ee:5f:85:ff:1e:b8:5c:dd:c8:18:89:03:17:c0:a7:f8:be:06: cb:14:79:61:95:63:35:e1:24:48:b5:3e:f7:6a:5f:c5:85:96: 59:b3:f8:19:a4:d7:38:dd:c3:48:5e:3c:9d:b5:40:43:c6:58: 2a:83:a0:37:7a:61:52:0c:33:fc:12:c4:66:20:60:d6:01:68: 1d:9d:57:49:1a:ca:8e:3b:b0:1c:5e:d5:cb:df:dc:bf:3c:2d: 54:c4:36:ec:99:7c:8b:ab:b4:25:45:10:32:f6:e4:5b:8b:c0: 0d:d1:f5:a5 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtI4beLEtkNbVvmAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4MWU1MjQtMDUwZC00YTE1LTkwNDMtMzkzMTQ5MjJj YzgxMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWRjZTA5ODgtMWE2Ny00MzAyLTgzNDctNjkwYWE0NzMzZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWIF8DacOq6pxInq9M/gc53nXr1vPq7P1h7l +pbztfy2x8+LUK7YfSKWjx0DR+Qitt8ST8JHYE+OnoLzBiLRKvTOmhCWxTvjaAjt RR5BG6Jsqh2fwHnCK3c3swFJ/8h4VOomRlkvad6TRAPZbdpINeDKTDg0v97xRrwU iMSgVKWLnKMTc0HpAIgihu5HEFIO8L2VKdYN1RgbxlFd8R/E4iZZaMMCyMArFJfJ zXlv8+aOH8WOuiY3UWAWmJnODp+Jc2kPqf5g/d4Qrp2bB0essG6DQG6LIREsvRLU IiNScsGZb+5VETCjJiyck9HGFEEzftodzUVrKjIXek56M2drwwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMbojRVHyI7QRF2RWWhRgoPqXrQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzgx ZTUyNC0wNTBkLTRhMTUtOTA0My0zOTMxNDkyMmNjODEvNTBmZDk4ZmEtMTk2Yi0z ODlhLTg5N2UtMzEwOTQ1ZDk0MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM4MWU1MjQtMDUwZC00YTE1LTkw NDMtMzkzMTQ5MjJjYzgxL2RjODFlNTI0LTA1MGQtNGExNS05MDQzLTM5MzE0OTIy Y2M4MS5jcmwwHwYDVR0jBBgwFoAUEirDPp0cLJshVn/ps+gDh/3GVlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzgxZTUyNC0wNTBkLTRhMTUtOTA0My0zOTMx NDkyMmNjODEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4iIMA0E AgACMAcDBQAmBtJAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADizn50kEEGiTlJaLAKa1DJCpojhYayRznM9 AHttkq4yc4YyvvCNJSvw7TPIvTnippxqsylsJ2APOEiXRt/HpwccQz/TxH+dJrk9 q0GdAHvAv85cX0GuPzAjtG09yMekP24+b4U6WjmrxqEaY4SvNmFjeeCgvMqmu6hg Cd2YObX5ieGvCcIpG+GAaQmSYasA8u5fhf8euFzdyBiJAxfAp/i+BssUeWGVYzXh JEi1PvdqX8WFllmz+Bmk1zjdw0hePJ21QEPGWCqDoDd6YVIMM/wSxGYgYNYBaB2d V0kayo47sBxe1cvf3L88LVTENuyZfIurtCVFEDL25FuLwA3R9aU= -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:55 2025 by rpki-client