$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa File: 01307e7f-cc1e-3508-a44c-557b2e686d06.roa (raw, json) Hash identifier: joYjl8+3pr/1BIHb0A3gqEIPLKfh4XmNMFu/M1rtw8s= Subject key identifier: 60:1F:26:C1:FA:BD:24:E0:F5:A4:A9:58:94:E6:E1:F3:F8:C5:59:11 Certificate issuer: /CN=91a5f71b-bf1d-474c-b568-55393b7da475 Certificate serial: 010D0C9F4328584B78574E19D0C67E489E76C900 Authority key identifier: E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 401345 IP address blocks: 23.134.252.0/24 maxlen: 24 2602:f88e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:4e:19:d0:c6:7e:48:9e:76:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a5f71b-bf1d-474c-b568-55393b7da475 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=6d88adea-cae7-4873-a78a-82ff12f3fa25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:48:d8:53:94:2a:14:a4:33:4d:f3:68:6d: 0c:19:46:ac:da:7f:5d:a6:b4:7f:5b:a1:5a:e1:a8: 4e:be:9b:b8:45:aa:79:19:e8:ea:0b:19:32:65:dc: ce:bb:2b:41:f4:24:94:a3:67:ee:75:33:62:26:63: 52:77:76:04:10:ad:17:da:fc:0b:d4:e3:28:12:d0: c9:e6:3a:b4:78:21:b6:37:40:46:42:dd:aa:c6:94: 72:e4:10:ac:7c:5d:a4:d7:95:f7:e2:ab:30:7f:b6: 0e:42:18:6b:34:c8:e9:83:30:db:3b:6f:dd:ae:cf: 9e:ad:0b:e1:05:2b:40:9c:ca:5c:84:f2:68:2d:16: 1f:d9:08:74:c2:8a:9c:c7:f5:f2:e6:a5:3f:b4:48: 8e:85:6b:5d:13:d4:f4:01:44:97:47:ea:10:9b:9e: 8c:80:de:a2:ff:6c:49:20:ee:78:3e:89:aa:24:30: 3f:63:a6:42:88:e6:2c:0f:a3:12:c6:85:53:b5:62: 83:72:17:a5:11:84:ed:af:ab:e3:2b:f9:64:44:07: ac:f8:80:34:0a:d5:84:48:b0:0c:b4:8d:cb:e8:f9: a1:7a:12:4c:09:25:a0:11:93:5e:bf:75:d1:d5:9c: f5:7e:08:81:77:ae:9b:ed:41:d2:eb:f5:a2:4b:0b: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1F:26:C1:FA:BD:24:E0:F5:A4:A9:58:94:E6:E1:F3:F8:C5:59:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl X509v3 Authority Key Identifier: keyid:E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer sbgp-ipAddrBlock: critical IPv4: 23.134.252.0/24 IPv6: 2602:f88e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6f:c5:d2:59:ac:c8:8b:b0:76:91:50:8d:74:ab:92:ee:f2: 8d:9b:f2:c0:c7:b3:e6:93:57:dc:9b:2a:f8:ec:96:f1:a0:9d: 80:b5:28:b3:f6:04:5d:64:fd:f2:32:d6:36:4e:55:3e:b4:58: 3c:21:39:54:74:03:fc:30:b9:39:d4:ac:69:d2:91:09:55:ef: a0:94:cc:39:2f:fb:9c:64:d5:b1:a9:f8:d6:2e:07:fe:70:db: f1:ff:8a:82:bf:4f:d8:ef:38:f1:14:94:5a:cf:cd:fa:f7:5c: 9e:97:ac:82:fe:bf:85:f3:04:f8:0a:03:dc:c6:9e:f6:a4:c5: 05:bd:85:c3:12:a5:e5:2c:49:88:ab:7d:ce:8d:90:ca:3b:73: aa:f8:2e:26:df:2a:1d:42:37:46:b1:61:5b:53:dc:d2:34:51: de:a8:91:f1:ad:96:57:2c:49:9c:c5:f7:7f:b3:aa:17:1b:89: 10:42:f5:cd:59:cc:12:87:e0:08:6e:ea:b0:8c:a7:21:d8:9e: c2:4d:72:7f:d7:00:d8:9f:4d:44:53:01:b1:17:ed:b3:35:ee: ea:64:c5:8c:15:0e:a8:22:c8:a3:9f:e0:cc:5b:ad:e3:2e:5f: a0:02:f3:57:4a:b4:b9:ac:43:a4:58:33:8f:4a:30:5f:a5:5d: 1c:b9:92:b6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEt4V04Z0MZ+SJ52yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhNWY3MWItYmYxZC00NzRjLWI1NjgtNTUzOTNiN2Rh NDc1MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk NmQ4OGFkZWEtY2FlNy00ODczLWE3OGEtODJmZjEyZjNmYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvClI2FOUKhSkM03zaG0MGUas2n9dprR/W6Fa 4ahOvpu4Rap5GejqCxkyZdzOuytB9CSUo2fudTNiJmNSd3YEEK0X2vwL1OMoEtDJ 5jq0eCG2N0BGQt2qxpRy5BCsfF2k15X34qswf7YOQhhrNMjpgzDbO2/drs+erQvh BStAnMpchPJoLRYf2Qh0woqcx/Xy5qU/tEiOhWtdE9T0AUSXR+oQm56MgN6i/2xJ IO54PomqJDA/Y6ZCiOYsD6MSxoVTtWKDchelEYTtr6vjK/lkRAes+IA0CtWESLAM tI3L6PmhehJMCSWgEZNev3XR1Zz1fgiBd66b7UHS6/WiSwtC3wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGAfJsH6vSTg9aSpWJTm4fP4xVkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1 ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5M2I3ZGE0NzUvMDEzMDdlN2YtY2MxZS0z NTA4LWE0NGMtNTU3YjJlNjg2ZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTFhNWY3MWItYmYxZC00NzRjLWI1 NjgtNTUzOTNiN2RhNDc1LzkxYTVmNzFiLWJmMWQtNDc0Yy1iNTY4LTU1MzkzYjdk YTQ3NS5jcmwwHwYDVR0jBBgwFoAU5FS/Etvzhah6d8Es3YxHr6Tf3YQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5 M2I3ZGE0NzUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b8MA4E AgACMAgDBgAmAviOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6b8XSWazIi7B2kVCNdKuS7vKNm/LAx7Pm k1fcmyr47JbxoJ2AtSiz9gRdZP3yMtY2TlU+tFg8ITlUdAP8MLk51Kxp0pEJVe+g lMw5L/ucZNWxqfjWLgf+cNvx/4qCv0/Y7zjxFJRaz83691yel6yC/r+F8wT4CgPc xp72pMUFvYXDEqXlLEmIq33OjZDKO3Oq+C4m3yodQjdGsWFbU9zSNFHeqJHxrZZX LEmcxfd/s6oXG4kQQvXNWcwSh+AIbuqwjKch2J7CTXJ/1wDYn01EUwGxF+2zNe7q ZMWMFQ6oIsijn+DMW63jLl+gAvNXSrS5rEOkWDOPSjBfpV0cuZK2 -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:15 2025 by rpki-client