$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa File: f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa (raw, json) Hash identifier: jXvXX2vbugMDJlE0DoU3aIdoxg9nYwH9Eam+6QoK5ek= Subject key identifier: 14:11:42:3C:42:9C:4B:6C:FF:93:C0:11:6A:3C:FB:AD:1B:02:7D:6D Certificate issuer: /CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58 Certificate serial: 010D0C9F4328584B328C3A672405002862726000 Authority key identifier: 70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 395648 IP address blocks: 23.143.200.0/24 maxlen: 24 2602:290::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:3a:67:24:05:00:28:62:72:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=47fa01ea-5247-4d49-a434-33f0990c5044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:30:63:6c:13:ae:df:91:7f:c0:fb:07:29: d3:d9:3c:a8:1d:63:46:69:f3:ef:8f:a8:6e:85:18: 51:e0:8e:9c:37:25:a0:37:6f:95:65:1b:a3:66:fa: 76:49:e0:a8:d5:46:d3:f8:25:d0:fd:9e:ab:13:28: d9:cf:db:51:80:4a:09:81:28:81:a7:45:bc:1e:94: 0e:fb:a9:dc:eb:85:af:ac:f0:37:9d:40:80:02:2d: 79:a1:ce:f7:eb:67:2a:b1:0f:5f:1d:b8:d8:14:d5: 2e:fc:c3:5d:f2:13:5c:94:76:02:a4:55:7a:5e:bc: 5a:1e:ed:e8:3e:76:29:fa:bf:34:48:e2:02:c6:7b: a6:cc:04:62:5c:c0:9b:cd:79:bd:75:91:f3:60:5d: c5:5c:29:22:6b:89:31:a8:a4:2a:e5:f0:7d:f5:9d: ab:1b:ec:82:49:37:6e:e3:56:43:8e:c6:cb:03:dc: 7f:ec:d8:34:10:d3:dc:4c:b7:c1:b9:6e:b0:68:2d: 36:42:f2:e6:5b:aa:e1:2c:40:36:5c:d3:66:24:1b: 96:c1:fb:a5:1d:88:69:a4:e8:8a:6f:9b:ef:f3:7e: 2f:3f:1e:63:69:74:4d:37:7b:ae:a7:39:0c:c9:ba: 77:13:91:38:c1:32:db:95:16:ab:c5:5e:e5:80:b3: 2c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:11:42:3C:42:9C:4B:6C:FF:93:C0:11:6A:3C:FB:AD:1B:02:7D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl X509v3 Authority Key Identifier: keyid:70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer sbgp-ipAddrBlock: critical IPv4: 23.143.200.0/24 IPv6: 2602:290::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:12:a7:a3:d5:ec:62:a7:21:16:5b:35:b9:b6:36:ce:e2:12: f1:a4:ce:bb:97:b5:9b:b6:ad:b5:09:b9:86:30:a5:4e:ae:c9: 05:e3:04:fa:40:05:1a:27:60:5a:59:84:e0:3d:f0:80:b5:fe: 96:9e:f0:27:d3:9f:21:53:9e:e7:97:a4:e1:be:10:5c:98:eb: 12:f0:80:38:be:bd:0e:3d:c8:77:85:ef:81:aa:1e:91:eb:20: 46:60:ec:ce:56:07:97:e6:a9:43:18:06:09:b6:30:f0:43:37: a7:ac:6a:ec:54:b7:1c:1d:1f:13:96:60:27:78:f8:ad:f8:16: bd:f7:fc:c4:d1:08:3c:da:ba:75:23:a4:ba:b5:d2:92:2e:69: 0b:7e:63:72:69:cb:f0:8b:69:32:7c:6e:31:2b:d3:9d:6a:f7: 95:32:f8:40:b3:6b:ec:f9:09:65:b7:ef:5f:12:46:d0:f8:3b: e3:86:78:1a:7d:be:f5:ef:67:9c:a8:40:b3:e6:49:a4:e4:e8: aa:26:73:9d:dc:95:57:21:19:63:b8:4b:82:41:d2:dc:12:9f: 7f:a4:78:b5:f7:3f:78:2a:7b:f0:78:35:4c:57:39:76:67:bb: 15:c6:ee:ce:98:c8:52:31:ef:f5:ee:90:18:a3:b4:b6:7c:74: 5b:59:f6:77 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsyjDpnJAUAKGJyYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcwNmM2Y2EtYjE5YS00NGE2LTk0ZTEtMzQwY2JmZDI5 YTU4MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NDdmYTAxZWEtNTI0Ny00ZDQ5LWE0MzQtMzNmMDk5MGM1MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAQwY2wTrt+Rf8D7BynT2TyoHWNGafPvj6hu hRhR4I6cNyWgN2+VZRujZvp2SeCo1UbT+CXQ/Z6rEyjZz9tRgEoJgSiBp0W8HpQO +6nc64WvrPA3nUCAAi15oc7362cqsQ9fHbjYFNUu/MNd8hNclHYCpFV6XrxaHu3o PnYp+r80SOICxnumzARiXMCbzXm9dZHzYF3FXCkia4kxqKQq5fB99Z2rG+yCSTdu 41ZDjsbLA9x/7Ng0ENPcTLfBuW6waC02QvLmW6rhLEA2XNNmJBuWwfulHYhppOiK b5vv834vPx5jaXRNN3uupzkMybp3E5E4wTLblRarxV7lgLMs/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBQRQjxCnEts/5PAEWo8+60bAn1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NzA2 YzZjYS1iMTlhLTQ0YTYtOTRlMS0zNDBjYmZkMjlhNTgvZjA2MDMzN2QtYjcxZC0z NzA0LWFkNGMtNjZlZjRiOGViYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDcwNmM2Y2EtYjE5YS00NGE2LTk0 ZTEtMzQwY2JmZDI5YTU4LzQ3MDZjNmNhLWIxOWEtNDRhNi05NGUxLTM0MGNiZmQy OWE1OC5jcmwwHwYDVR0jBBgwFoAUcBMVmzmEx0GS/n6O3sEUB6Bk5GswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NzA2YzZjYS1iMTlhLTQ0YTYtOTRlMS0zNDBj YmZkMjlhNTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4/IMA4E AgACMAgDBgQmAgKQADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBEqej1exipyEWWzW5tjbO4hLxpM67l7Wb tq21CbmGMKVOrskF4wT6QAUaJ2BaWYTgPfCAtf6WnvAn058hU57nl6ThvhBcmOsS 8IA4vr0OPch3he+Bqh6R6yBGYOzOVgeX5qlDGAYJtjDwQzenrGrsVLccHR8TlmAn ePit+Ba99/zE0Qg82rp1I6S6tdKSLmkLfmNyacvwi2kyfG4xK9OdaveVMvhAs2vs +Qllt+9fEkbQ+Dvjhngafb7172ecqECz5kmk5OiqJnOd3JVXIRljuEuCQdLcEp9/ pHi19z94KnvweDVMVzl2Z7sVxu7OmMhSMe/17pAYo7S2fHRbWfZ3 -----END CERTIFICATE-----Generated at Sat Oct 11 04:28:15 2025 by rpki-client