$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa File: a4696e90-da7b-3ac8-b1cf-2351e43df747.roa (raw, json) Hash identifier: RQpbq4g0eucLPbDK/UlJzlS0HTwDjUCLooTVcoexkAQ= Subject key identifier: 1A:2C:7E:B2:66:82:C5:B7:0D:0B:22:36:79:DD:BE:F6:12:9B:49:72 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584B110C035A1251D52171AC6200 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 46432 IP address blocks: 23.139.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:03:5a:12:51:d5:21:71:ac:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=2ca626d6-ef42-4349-bf76-6be675997d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:fb:33:ff:a7:32:50:03:28:ce:46:5e:df: a2:98:80:8e:64:9e:39:af:1e:07:8f:d8:f9:08:3d: 9f:36:49:69:ae:2a:64:9e:74:ee:0c:43:b6:46:d7: e9:4a:11:ea:57:90:ff:54:04:e4:a6:23:1e:41:37: c3:72:58:b2:79:70:48:ad:32:c5:75:63:4e:1b:1d: 6b:c9:8e:f5:ab:5a:83:7c:4b:eb:a8:35:b4:63:6f: d1:c2:0a:e8:a1:0f:1a:e1:05:18:cd:4b:e0:e3:5b: 9b:83:86:92:83:ec:8c:5a:38:62:6f:f5:35:ad:ba: 0b:c4:cb:8e:8e:4d:67:1c:f7:47:c0:5b:bb:86:aa: 93:a3:81:67:24:82:93:b5:21:6b:f2:01:89:3d:78: f4:5d:9b:0c:ba:f7:1b:e9:e6:2d:93:f1:b7:28:d8: c1:10:9d:66:94:2f:a0:a6:d4:24:ca:ba:ad:f3:34: a4:ca:f5:5d:30:75:7b:01:1c:e7:2a:5e:7b:0d:61: 85:09:0f:6b:c7:2a:09:9e:ab:53:e5:20:ed:45:90: 90:21:9d:f8:84:3b:22:5e:ab:ae:a1:6a:91:1d:55: 18:42:54:87:2c:b5:9c:ac:74:3b:73:80:bd:e8:82: b6:d6:46:87:a9:0e:2e:5b:f3:e1:ea:83:34:3b:6a: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2C:7E:B2:66:82:C5:B7:0D:0B:22:36:79:DD:BE:F6:12:9B:49:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a4696e90-da7b-3ac8-b1cf-2351e43df747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 23.139.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:da:ee:90:a1:9f:17:ff:c9:30:e6:20:e1:21:64:c8:4f:c5: 36:7c:fa:61:02:87:2a:b1:f7:f9:8a:63:10:eb:93:aa:3e:66: 28:21:33:e0:30:d2:9c:be:7f:12:db:37:3e:18:82:21:d4:4a: 0e:39:f7:b8:24:ac:9b:6f:94:bb:ca:bd:6e:4c:ef:6f:00:78: 50:90:80:81:a2:2e:30:a8:39:18:47:66:77:87:c1:87:ca:3c: fa:0d:85:be:3d:29:c6:3a:a2:4f:61:00:43:24:b0:7c:9e:fc: a2:f4:47:9b:a0:3b:55:e4:87:9c:31:5f:05:79:6a:95:7d:e1: ec:77:15:28:ac:dd:d7:63:24:79:f3:1d:5e:7d:81:48:49:16: 1a:0c:9a:44:e9:dd:a3:2a:bf:95:87:79:e9:d3:35:da:c9:8e: 00:61:9d:e5:98:45:ed:96:5e:80:6e:f5:21:15:fa:6a:96:99: 72:cc:f7:01:86:74:6f:e9:26:82:8e:66:44:94:f8:c3:6c:c1: a8:19:f2:51:fa:cf:7f:ef:c2:a9:f1:4e:9d:de:63:a5:61:47: 83:b8:e9:6e:36:50:9b:e6:b1:88:26:e4:41:80:93:05:50:8d: 12:2d:6d:87:81:01:2c:45:4d:4d:f1:6a:04:df:58:97:ac:fa: b4:94:a4:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDANaElHVIXGsYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmNhNjI2ZDYtZWY0Mi00MzQ5LWJmNzYtNmJlNjc1OTk3ZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5v7M/+nMlADKM5GXt+imICOZJ45rx4Hj9j5 CD2fNklpripknnTuDEO2RtfpShHqV5D/VATkpiMeQTfDcliyeXBIrTLFdWNOGx1r yY71q1qDfEvrqDW0Y2/RwgrooQ8a4QUYzUvg41ubg4aSg+yMWjhib/U1rboLxMuO jk1nHPdHwFu7hqqTo4FnJIKTtSFr8gGJPXj0XZsMuvcb6eYtk/G3KNjBEJ1mlC+g ptQkyrqt8zSkyvVdMHV7ARznKl57DWGFCQ9rxyoJnqtT5SDtRZCQIZ34hDsiXquu oWqRHVUYQlSHLLWcrHQ7c4C96IK21kaHqQ4uW/Ph6oM0O2pXQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBosfrJmgsW3DQsiNnndvvYSm0lyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTQ2OTZlOTAtZGE3Yi0z YWM4LWIxY2YtMjM1MWU0M2RmNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4tgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEja7pChnxf/yTDmIOEhZMhPxTZ8+mEChyqx9/mKYxDrk6o+ZighM+Aw 0py+fxLbNz4YgiHUSg4597gkrJtvlLvKvW5M728AeFCQgIGiLjCoORhHZneHwYfK PPoNhb49KcY6ok9hAEMksHye/KL0R5ugO1Xkh5wxXwV5apV94ex3FSis3ddjJHnz HV59gUhJFhoMmkTp3aMqv5WHeenTNdrJjgBhneWYRe2WXoBu9SEV+mqWmXLM9wGG dG/pJoKOZkSU+MNswagZ8lH6z3/vwqnxTp3eY6VhR4O46W42UJvmsYgm5EGAkwVQ jRItbYeBASxFTU3xagTfWJes+rSUpEY= -----END CERTIFICATE-----Generated at Sat Oct 11 07:30:59 2025 by rpki-client