$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa File: 543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa (raw, json) Hash identifier: eOIaKGM8idAAbKnHC1ded9b6pp/cqZHw0UvBAnikmMc= Subject key identifier: AC:D1:C9:FB:B3:FB:A5:BC:CB:E1:46:89:6F:9A:1C:F4:E0:87:46:42 Certificate issuer: /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Certificate serial: 010D0C9F4328584B33F1A6E65BD37E87D76B2300 Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 46109 IP address blocks: 23.156.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a6:e6:5b:d3:7e:87:d7:6b:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=3a2badbd-f08b-4b03-8e6f-a6af86a5e50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:4f:73:cf:49:be:5b:e4:f3:10:7b:fc:cc: 18:ae:56:eb:60:d3:4b:b7:e8:82:6c:bb:08:89:67: 6b:30:93:ef:b2:a2:3e:25:71:11:9f:b5:25:cc:0a: 9f:a0:df:b2:60:3a:9a:e0:3e:b4:93:da:95:5d:36: d1:19:2d:23:85:c2:2b:5c:ba:44:ea:d5:a1:ad:b0: d1:a2:cd:23:94:db:f6:19:c9:fd:4b:2b:83:e3:6a: 0a:d3:94:a1:55:1d:26:32:3b:4c:1c:ce:4e:00:c0: 3c:c1:66:1d:79:4e:c2:81:d4:de:41:16:9c:53:22: ce:96:ce:b1:00:4a:7d:a7:0d:7d:8e:d8:0f:af:97: 3d:d7:8f:7b:44:14:14:5d:b8:67:35:35:7c:16:49: 55:d0:89:31:31:b2:6d:d1:2f:4d:e3:97:32:09:c0: 28:41:ca:b8:8e:f8:58:3d:63:fc:4e:f3:f0:b0:b6: 7e:63:43:e2:b6:eb:0b:15:bd:43:09:68:df:3f:cc: 07:e3:85:c0:a8:f1:2a:c2:3e:62:7e:a9:e1:75:90: 23:2b:e4:2a:6e:db:03:3d:f9:19:2c:37:31:b7:c3: 34:d6:17:39:92:1e:96:71:19:f6:91:35:e3:f3:f9: 76:c2:00:ed:97:2d:15:78:24:89:e8:5e:61:59:14: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D1:C9:FB:B3:FB:A5:BC:CB:E1:46:89:6F:9A:1C:F4:E0:87:46:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl X509v3 Authority Key Identifier: keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer sbgp-ipAddrBlock: critical IPv4: 23.156.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:3f:dd:32:63:a5:b2:75:f7:7d:82:1b:6e:47:df:45:e8:86: ed:a7:98:50:cb:43:ff:19:53:ca:5a:a6:31:2e:01:81:dc:72: 1b:98:55:e9:81:2b:9f:ee:03:70:fc:eb:d9:b1:24:97:0b:39: 3e:df:10:06:16:e8:1d:8d:f3:57:c0:fb:1c:d2:5d:e4:09:21: 6b:c4:29:33:a9:0b:14:f1:bf:36:28:03:7c:ed:56:76:5c:bb: 70:0f:00:c7:4f:87:bd:70:bb:63:b8:cd:1f:a2:62:d2:bf:5f: a5:bf:a4:0c:c1:24:aa:17:57:0f:24:2f:90:86:e4:ab:60:fe: e7:6d:6b:4e:8c:17:db:92:cd:f6:df:8b:4d:5f:20:df:00:41: 97:6c:d7:77:75:0c:b5:68:99:cb:e5:70:52:90:16:e3:39:1c: b3:14:32:06:06:66:d4:5e:17:ae:93:45:8b:eb:7c:0b:ce:1e: a9:ad:a1:8e:d3:cb:4a:b2:0b:59:32:52:90:b4:a0:af:4d:80: e7:e2:d9:d0:4a:a0:60:4f:d5:ea:b6:b7:9c:54:dc:46:c0:a2: 50:56:40:ac:69:0e:7b:e2:6c:36:a4:8b:97:0d:a9:7a:55:8b: 7c:1a:0b:87:22:30:a8:47:27:41:dc:4b:fc:60:59:7b:b3:56: 5a:fa:9b:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8abmW9N+h9drIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZmNDM4ZDItNDcxNy00MmMwLWJjYTUtOWIzYTJjZGQw OWVkMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk M2EyYmFkYmQtZjA4Yi00YjAzLThlNmYtYTZhZjg2YTVlNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeNPc89Jvlvk8xB7/MwYrlbrYNNLt+iCbLsI iWdrMJPvsqI+JXERn7UlzAqfoN+yYDqa4D60k9qVXTbRGS0jhcIrXLpE6tWhrbDR os0jlNv2Gcn9SyuD42oK05ShVR0mMjtMHM5OAMA8wWYdeU7CgdTeQRacUyLOls6x AEp9pw19jtgPr5c91497RBQUXbhnNTV8FklV0IkxMbJt0S9N45cyCcAoQcq4jvhY PWP8TvPwsLZ+Y0PitusLFb1DCWjfP8wH44XAqPEqwj5ifqnhdZAjK+QqbtsDPfkZ LDcxt8M01hc5kh6WcRn2kTXj8/l2wgDtly0VeCSJ6F5hWRQBDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzRyfuz+6W8y+FGiW+aHPTgh0ZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0 MzhkMi00NzE3LTQyYzAtYmNhNS05YjNhMmNkZDA5ZWQvNTQzZjJiOWEtMzUzOS0z ZDVjLTk1NTctOWI5MzdmYzlmN2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDZmNDM4ZDItNDcxNy00MmMwLWJj YTUtOWIzYTJjZGQwOWVkLzA2ZjQzOGQyLTQ3MTctNDJjMC1iY2E1LTliM2EyY2Rk MDllZC5jcmwwHwYDVR0jBBgwFoAUBq42m6IiDFcFNj+gveDl/fPwaNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNmY0MzhkMi00NzE3LTQyYzAtYmNhNS05YjNh MmNkZDA5ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5z5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEs/3TJjpbJ1932CG25H30Xohu2nmFDLQ/8ZU8papjEuAYHcchuYVemB K5/uA3D869mxJJcLOT7fEAYW6B2N81fA+xzSXeQJIWvEKTOpCxTxvzYoA3ztVnZc u3APAMdPh71wu2O4zR+iYtK/X6W/pAzBJKoXVw8kL5CG5Ktg/udta06MF9uSzfbf i01fIN8AQZds13d1DLVomcvlcFKQFuM5HLMUMgYGZtReF66TRYvrfAvOHqmtoY7T y0qyC1kyUpC0oK9NgOfi2dBKoGBP1eq2t5xU3EbAolBWQKxpDnvibDaki5cNqXpV i3waC4ciMKhHJ0HcS/xgWXuzVlr6m3w= -----END CERTIFICATE-----Generated at Fri Oct 10 23:38:50 2025 by rpki-client