$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa File: a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa (raw, json) Hash identifier: QfmFa+S4pX9fdIrG+zjmIhj7uYDJ70S9kpoTBEbOWY0= Subject key identifier: F0:17:C6:97:FC:E5:75:B1:B0:46:43:97:1B:41:EC:91:6A:5A:91:35 Certificate issuer: /CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Certificate serial: 010D0C9F4328584B328C34FBDEE89C8329AC5CA0 Authority key identifier: 69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 22659 IP address blocks: 23.132.8.0/24 maxlen: 24 2602:fcea::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:34:fb:de:e8:9c:83:29:ac:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9227887c-706f-46d5-a5a6-f0db08bf46a0 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=7896e893-fad3-4978-aea2-53af3f02a3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:60:6d:5a:b9:ff:1f:26:1d:f2:03:c1:51: 20:c9:3f:6f:e9:3f:15:87:58:5e:b8:bd:c2:85:b3: 2c:5e:4b:f5:66:44:f5:00:fe:7d:10:e8:a3:df:7d: b8:ed:8a:d0:a5:71:f9:5f:01:bc:ca:fe:81:8e:9b: 7a:57:40:86:91:6f:9b:af:27:7e:36:bb:e6:4c:04: 47:49:09:ca:2c:0c:9a:05:bc:9b:2b:6f:54:03:67: 27:7d:75:63:57:eb:78:17:c7:78:2b:7c:c7:02:54: e0:23:0f:b2:0a:c3:59:8e:72:5d:ff:95:2f:6b:46: dd:ff:e0:f9:5b:b4:5e:8c:e6:75:9d:bb:c7:40:a4: 33:ab:c4:1e:a1:88:6e:67:e1:d5:b3:8e:67:03:c3: 9c:40:97:51:f1:bb:99:d6:c9:73:f2:2a:83:2c:38: 40:05:79:a1:18:19:53:b1:55:7b:c9:a5:d2:41:70: 0a:41:26:dc:19:13:8c:c0:37:4b:e4:bb:8f:52:1b: 77:6c:ed:08:fc:44:66:a2:1e:13:69:19:9d:31:82: fa:ae:cc:3c:c6:7e:15:8d:ff:e7:fd:74:04:be:c5: bd:87:68:a0:b8:ef:c0:69:81:18:01:26:7c:f6:95: 1f:4b:a3:b6:57:d5:aa:dc:b7:a2:40:9b:86:3f:c6: f9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:17:C6:97:FC:E5:75:B1:B0:46:43:97:1B:41:EC:91:6A:5A:91:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/a1276a9c-2d1b-3e1a-b8a2-e0924970962f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0/9227887c-706f-46d5-a5a6-f0db08bf46a0.crl X509v3 Authority Key Identifier: keyid:69:69:5A:17:AD:83:C2:A9:94:79:43:7F:05:57:28:00:0D:3A:80:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9227887c-706f-46d5-a5a6-f0db08bf46a0.cer sbgp-ipAddrBlock: critical IPv4: 23.132.8.0/24 IPv6: 2602:fcea::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e4:ad:ab:b7:45:f5:5e:11:57:a1:29:66:5e:61:8b:72:91: dc:84:c2:2b:bb:56:8b:df:58:d4:45:21:10:8c:02:53:de:a7: 3d:b1:df:5a:1d:dc:cb:77:a4:3e:eb:f9:e0:ab:09:66:97:4f: da:69:36:76:b4:b9:5d:09:fb:27:c5:29:fb:ee:6d:93:a4:ca: e0:43:40:02:1f:6c:60:72:bd:ca:f0:17:8f:55:ed:30:c4:00: e3:4a:5c:ba:2a:41:c4:b3:07:c5:d0:e1:24:b8:83:9b:35:ed: d5:0a:21:66:6c:28:66:9c:4f:5d:a7:1b:cc:f8:e4:17:f3:54: f2:3a:6b:2e:ee:af:cb:54:c4:f1:33:7b:3c:2b:f2:1a:22:dd: ec:ec:d9:bf:4d:55:80:ce:70:32:76:70:33:bc:ee:07:6f:66: 5d:3a:ee:c4:c6:b7:c0:f5:8b:de:8c:18:16:38:bd:ac:4d:e6: 43:85:ba:79:dc:75:50:30:a0:8f:98:0f:5e:ac:38:a5:b7:22: c1:cf:b2:af:a7:a8:6c:e6:e4:b6:b9:55:68:af:dc:07:59:bc: bb:1d:73:a7:36:4f:18:9a:0a:5b:4e:13:e6:76:16:5e:14:a5: 04:df:20:73:4d:f0:0c:17:59:be:1e:13:38:ff:dd:f8:aa:f6: 5d:dc:70:4e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsyjDT73uicgymsXKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNzg4N2MtNzA2Zi00NmQ1LWE1YTYtZjBkYjA4YmY0 NmEwMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk Nzg5NmU4OTMtZmFkMy00OTc4LWFlYTItNTNhZjNmMDJhM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf9gbVq5/x8mHfIDwVEgyT9v6T8Vh1heuL3C hbMsXkv1ZkT1AP59EOij33247YrQpXH5XwG8yv6Bjpt6V0CGkW+bryd+NrvmTARH SQnKLAyaBbybK29UA2cnfXVjV+t4F8d4K3zHAlTgIw+yCsNZjnJd/5Uva0bd/+D5 W7RejOZ1nbvHQKQzq8QeoYhuZ+HVs45nA8OcQJdR8buZ1slz8iqDLDhABXmhGBlT sVV7yaXSQXAKQSbcGROMwDdL5LuPUht3bO0I/ERmoh4TaRmdMYL6rsw8xn4Vjf/n /XQEvsW9h2iguO/AaYEYASZ89pUfS6O2V9Wq3LeiQJuGP8b5mQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPAXxpf85XWxsEZDlxtB7JFqWpE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3 ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRiMDhiZjQ2YTAvYTEyNzZhOWMtMmQxYi0z ZTFhLWI4YTItZTA5MjQ5NzA5NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTIyNzg4N2MtNzA2Zi00NmQ1LWE1 YTYtZjBkYjA4YmY0NmEwLzkyMjc4ODdjLTcwNmYtNDZkNS1hNWE2LWYwZGIwOGJm NDZhMC5jcmwwHwYDVR0jBBgwFoAUaWlaF62DwqmUeUN/BVcoAA06gKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MjI3ODg3Yy03MDZmLTQ2ZDUtYTVhNi1mMGRi MDhiZjQ2YTAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4QIMA4E AgACMAgDBgQmAvzqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA65K2rt0X1XhFXoSlmXmGLcpHchMIru1aL 31jURSEQjAJT3qc9sd9aHdzLd6Q+6/ngqwlml0/aaTZ2tLldCfsnxSn77m2TpMrg Q0ACH2xgcr3K8BePVe0wxADjSly6KkHEswfF0OEkuIObNe3VCiFmbChmnE9dpxvM +OQX81TyOmsu7q/LVMTxM3s8K/IaIt3s7Nm/TVWAznAydnAzvO4Hb2ZdOu7ExrfA 9YvejBgWOL2sTeZDhbp53HVQMKCPmA9erDiltyLBz7Kvp6hs5uS2uVVor9wHWby7 HXOnNk8YmgpbThPmdhZeFKUE3yBzTfAMF1m+HhM4/934qvZd3HBO -----END CERTIFICATE-----Generated at Sat Oct 11 19:03:12 2025 by rpki-client