$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa File: 47d7fcfd-95fd-3503-adb6-67e323a7831f.roa (raw, json) Hash identifier: 0XAH0qZ+L3wuyz9Nq3xfcLYze4G7jLIG12LPuoywR+4= Subject key identifier: 95:88:A3:39:78:D5:D3:4B:57:6E:4F:45:4F:32:7A:36:81:E6:2D:E8 Certificate issuer: /CN=fe90a536-ade0-4ce0-ac99-a1c784d18816 Certificate serial: 010D0C9F4328584B84E777D7EFBB93821DC91700 Authority key identifier: 0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 397554 IP address blocks: 23.134.144.0/24 maxlen: 24 2605:40c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:77:d7:ef:bb:93:82:1d:c9:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe90a536-ade0-4ce0-ac99-a1c784d18816 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d11ac575-439f-4b18-9431-3c996fe551e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:bc:3b:7b:bf:84:c7:d2:5c:73:9f:f2:b7: 7c:fa:67:2e:b1:e3:86:5e:dd:8d:71:2a:9a:a0:cb: 07:94:0f:f5:a5:6d:b3:18:c9:5b:14:d2:66:3b:ba: 04:81:24:40:c8:86:83:d9:77:b6:61:80:5f:d2:8e: 66:be:3c:e2:5e:85:e3:af:02:80:e6:df:98:5a:90: 41:b3:d9:21:60:14:90:63:8c:78:a8:de:22:a8:3b: 51:55:e0:f2:bd:ad:85:ca:17:b4:23:60:6c:d2:9a: 4e:08:c8:9e:4f:74:ac:43:0e:67:a0:32:62:58:80: 5e:35:91:0c:1b:bf:53:f5:30:30:70:6c:12:6a:d7: 99:f0:17:3a:ae:a4:dd:9e:15:31:b2:81:7c:ad:3c: cb:39:14:71:fd:fe:1c:04:15:8a:21:74:7d:5c:19: 6c:1f:0b:65:28:6b:25:ee:12:7b:2d:8c:57:a4:4d: 7e:f0:ec:4e:3c:0b:2b:c4:ac:78:a9:8f:35:7a:e4: f4:0d:20:33:c9:f8:2a:0d:f2:10:70:0c:8b:dd:74: 9f:a6:d4:4d:c0:70:67:d0:b3:da:ff:6c:a9:ce:6b: ff:20:67:86:b9:ae:45:8d:f6:a7:2e:c3:4a:ee:c7: 05:ff:22:65:49:fa:ec:0e:68:0f:87:14:3e:f7:ca: 65:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:88:A3:39:78:D5:D3:4B:57:6E:4F:45:4F:32:7A:36:81:E6:2D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl X509v3 Authority Key Identifier: keyid:0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer sbgp-ipAddrBlock: critical IPv4: 23.134.144.0/24 IPv6: 2605:40c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:91:39:d1:27:59:ab:6d:59:27:92:62:ff:f0:b1:97:d9:6f: 7d:d0:3e:86:ac:5d:3a:b7:52:8f:0c:42:27:ae:dd:39:ed:9f: 0f:6b:8f:8a:82:ab:01:cc:df:af:a3:c6:65:b6:99:5a:57:9b: 94:4d:dd:05:b4:ca:59:2d:fa:3a:01:84:1e:1e:63:c2:ca:f1: f7:51:45:96:01:d7:4b:e6:0f:a9:1a:23:e6:4d:a2:44:d5:06: 19:68:4c:24:ba:dc:49:83:8e:56:68:82:9e:a1:d3:20:7d:66: 9b:3c:d7:f7:26:d3:f8:b7:ad:2e:bd:21:b8:b0:a7:96:e5:cf: 74:b3:30:03:b1:08:e8:16:b3:25:6e:92:2f:ab:86:47:9c:90: b3:f9:92:36:4f:dc:cd:80:e7:b1:4e:34:6d:79:6b:1f:c8:b1: be:45:23:e7:ae:ec:8d:b1:5f:7f:f8:3a:1e:ad:63:44:05:c5: f8:46:23:a1:bd:01:ed:1e:df:68:1b:33:9a:49:5c:fd:2a:e5: bf:e8:17:d9:b6:e1:26:f5:d1:43:18:70:46:3f:18:96:5a:b9: 6a:7c:6c:cd:22:67:80:c4:4b:39:84:e0:c5:1c:6a:40:9e:9c: c9:49:c5:81:59:e9:e1:a7:0d:22:24:2f:b2:26:6f:6b:e0:00: 0b:17:63:57 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEuE53fX77uTgh3JFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmU5MGE1MzYtYWRlMC00Y2UwLWFjOTktYTFjNzg0ZDE4 ODE2MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDExYWM1NzUtNDM5Zi00YjE4LTk0MzEtM2M5OTZmZTU1MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKS8O3u/hMfSXHOf8rd8+mcuseOGXt2NcSqa oMsHlA/1pW2zGMlbFNJmO7oEgSRAyIaD2Xe2YYBf0o5mvjziXoXjrwKA5t+YWpBB s9khYBSQY4x4qN4iqDtRVeDyva2Fyhe0I2Bs0ppOCMieT3SsQw5noDJiWIBeNZEM G79T9TAwcGwSateZ8Bc6rqTdnhUxsoF8rTzLORRx/f4cBBWKIXR9XBlsHwtlKGsl 7hJ7LYxXpE1+8OxOPAsrxKx4qY81euT0DSAzyfgqDfIQcAyL3XSfptRNwHBn0LPa /2ypzmv/IGeGua5FjfanLsNK7scF/yJlSfrsDmgPhxQ+98pl3wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJWIozl41dNLV25PRU8yejaB5i3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZTkw YTUzNi1hZGUwLTRjZTAtYWM5OS1hMWM3ODRkMTg4MTYvNDdkN2ZjZmQtOTVmZC0z NTAzLWFkYjYtNjdlMzIzYTc4MzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmU5MGE1MzYtYWRlMC00Y2UwLWFj OTktYTFjNzg0ZDE4ODE2L2ZlOTBhNTM2LWFkZTAtNGNlMC1hYzk5LWExYzc4NGQx ODgxNi5jcmwwHwYDVR0jBBgwFoAUDKe+NW7cG8+Lckspa4vYlb0KBfMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZTkwYTUzNi1hZGUwLTRjZTAtYWM5OS1hMWM3 ODRkMTg4MTYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4aQMA0E AgACMAcDBQAmBUDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABSROdEnWattWSeSYv/wsZfZb33QPoasXTq3 Uo8MQieu3Tntnw9rj4qCqwHM36+jxmW2mVpXm5RN3QW0ylkt+joBhB4eY8LK8fdR RZYB10vmD6kaI+ZNokTVBhloTCS63EmDjlZogp6h0yB9Zps81/cm0/i3rS69Ibiw p5blz3SzMAOxCOgWsyVuki+rhkeckLP5kjZP3M2A57FONG15ax/Isb5FI+eu7I2x X3/4Oh6tY0QFxfhGI6G9Ae0e32gbM5pJXP0q5b/oF9m24Sb10UMYcEY/GJZauWp8 bM0iZ4DESzmE4MUcakCenMlJxYFZ6eGnDSIkL7Imb2vgAAsXY1c= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:44 2025 by rpki-client