$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa File: d2f04f8c-515d-3df4-8344-ef2648f062f4.roa (raw, json) Hash identifier: 5rTPLFisj3UhWO48zIWJ5aFWlTY1ItO9ljTfKTZPVJ0= Subject key identifier: 33:8B:26:BB:34:C9:D3:AA:47:3B:11:35:92:DA:33:71:D9:AF:18:B5 Certificate issuer: /CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Certificate serial: 010D0C9F4328584B4FDC76FE36D3B64A33EFCC40 Authority key identifier: C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 401461 IP address blocks: 23.128.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:76:fe:36:d3:b6:4a:33:ef:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d575d3fa-017d-4991-9edf-39101e5d78b5 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=6d59e8fb-84eb-458e-b00a-626aad088628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:86:85:87:f0:c8:e4:42:a4:fc:31:f5:00:8d: af:3c:10:2a:b9:d5:d9:2f:41:b6:58:4f:bd:9b:49: 36:df:5c:94:a2:b1:2a:b4:06:b0:30:3f:ac:af:5d: 37:28:de:d9:98:fd:97:c4:8b:4c:30:47:63:71:80: 4a:ac:71:55:ae:98:e0:59:06:b4:90:72:97:90:e4: 82:23:9c:e2:bf:28:3f:8e:66:ff:37:18:7e:15:83: 59:c6:50:b6:aa:d4:97:e1:59:5b:39:06:50:4f:dd: b8:c6:ce:6c:81:6e:0c:d1:2e:8a:f5:a7:02:85:39: 6a:b3:32:0f:81:7d:00:8b:fb:88:9d:09:98:f4:4d: 36:08:62:f6:9f:61:ce:5d:7b:2e:07:e0:63:bd:c9: 70:69:15:ff:d2:d7:43:ad:9c:b2:9f:8b:e4:2f:24: 86:c6:0f:cc:bb:d9:2a:6d:97:31:0a:69:db:32:3f: 85:2b:97:a4:65:96:d7:a9:8c:ae:22:70:de:cd:6b: f5:57:71:8e:88:a8:a9:16:d3:bc:91:d4:76:e4:4f: 32:5c:a1:42:bd:99:ef:ff:88:7b:57:47:59:3e:e1: 72:ca:73:f4:57:74:58:2c:be:e3:32:2b:c9:f5:f8: 1c:15:a9:39:a3:14:e5:c3:9d:62:1c:08:b1:28:7c: fb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8B:26:BB:34:C9:D3:AA:47:3B:11:35:92:DA:33:71:D9:AF:18:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d2f04f8c-515d-3df4-8344-ef2648f062f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5/d575d3fa-017d-4991-9edf-39101e5d78b5.crl X509v3 Authority Key Identifier: keyid:C2:41:8E:88:B9:1B:DD:01:9C:03:04:B5:4A:04:B2:CC:F9:4E:2D:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d575d3fa-017d-4991-9edf-39101e5d78b5.cer sbgp-ipAddrBlock: critical IPv4: 23.128.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a4:93:bb:55:d4:cc:c9:0b:98:01:47:aa:e4:43:38:6e:0f: cc:f7:b1:df:28:eb:14:2b:98:b2:01:ac:9a:4e:30:5a:1f:be: c8:7a:cf:be:3c:6f:b2:1d:14:c7:95:07:33:5e:8e:d0:d3:5d: 4c:03:e2:93:56:9b:c5:d2:61:67:8c:f3:1d:f1:73:04:e3:0d: e1:7d:d8:cb:81:c0:18:ab:97:a5:02:e9:fb:98:b7:32:48:d6: 0b:ae:7e:7c:2a:7c:40:72:19:31:b0:9c:46:cd:1d:12:41:5b: db:a8:83:8e:af:fa:97:79:f4:2e:82:f3:6c:c9:80:f3:83:ef: ba:1a:6c:fb:26:7e:4c:4b:5b:5a:b2:72:f5:f4:b6:93:42:58: 18:c2:16:90:22:a0:c9:0c:f6:95:6e:85:0b:31:d0:8a:08:53: 0e:02:02:6d:ac:12:f5:98:c2:4d:68:6a:70:a9:9f:ad:28:42: 97:80:31:04:ce:f3:e0:49:71:c9:6f:ec:81:5d:ee:29:13:d8: 97:2b:2c:d2:63:11:a5:7e:33:34:c0:97:3d:65:3a:f9:b0:b7: 6a:69:76:0f:a7:31:77:26:3a:c2:c4:d9:1c:51:e4:b0:21:d3: 42:36:1f:02:d2:7c:0c:c1:f0:98:6e:ca:e2:fa:fd:15:ef:d2: a3:f4:f5:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3Hb+NtO2SjPvzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3NWQzZmEtMDE3ZC00OTkxLTllZGYtMzkxMDFlNWQ3 OGI1MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk NmQ1OWU4ZmItODRlYi00NThlLWIwMGEtNjI2YWFkMDg4NjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94aFh/DI5EKk/DH1AI2vPBAqudXZL0G2WE+9 m0k231yUorEqtAawMD+sr103KN7ZmP2XxItMMEdjcYBKrHFVrpjgWQa0kHKXkOSC I5zivyg/jmb/Nxh+FYNZxlC2qtSX4VlbOQZQT924xs5sgW4M0S6K9acChTlqszIP gX0Ai/uInQmY9E02CGL2n2HOXXsuB+BjvclwaRX/0tdDrZyyn4vkLySGxg/Mu9kq bZcxCmnbMj+FK5ekZZbXqYyuInDezWv1V3GOiKipFtO8kdR25E8yXKFCvZnv/4h7 V0dZPuFyynP0V3RYLL7jMivJ9fgcFak5oxTlw51iHAixKHz7WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOLJrs0ydOqRzsRNZLaM3HZrxi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1 ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEwMWU1ZDc4YjUvZDJmMDRmOGMtNTE1ZC0z ZGY0LTgzNDQtZWYyNjQ4ZjA2MmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU3NWQzZmEtMDE3ZC00OTkxLTll ZGYtMzkxMDFlNWQ3OGI1L2Q1NzVkM2ZhLTAxN2QtNDk5MS05ZWRmLTM5MTAxZTVk NzhiNS5jcmwwHwYDVR0jBBgwFoAUwkGOiLkb3QGcAwS1SgSyzPlOLfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTc1ZDNmYS0wMTdkLTQ5OTEtOWVkZi0zOTEw MWU1ZDc4YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFukk7tV1MzJC5gBR6rkQzhuD8z3sd8o6xQrmLIBrJpOMFofvsh6z748 b7IdFMeVBzNejtDTXUwD4pNWm8XSYWeM8x3xcwTjDeF92MuBwBirl6UC6fuYtzJI 1guufnwqfEByGTGwnEbNHRJBW9uog46v+pd59C6C82zJgPOD77oabPsmfkxLW1qy cvX0tpNCWBjCFpAioMkM9pVuhQsx0IoIUw4CAm2sEvWYwk1oanCpn60oQpeAMQTO 8+BJcclv7IFd7ikT2JcrLNJjEaV+MzTAlz1lOvmwt2ppdg+nMXcmOsLE2RxR5LAh 00I2HwLSfAzB8JhuyuL6/RXv0qP09aU= -----END CERTIFICATE-----Generated at Fri Oct 10 03:56:56 2025 by rpki-client