$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa File: 6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa (raw, json) Hash identifier: mlR/0eLojOQJWPEOCsw5Rfr4ZA3+fAETADJ+U1dI6C0= Subject key identifier: 1B:32:0C:DA:6B:77:DC:6F:C6:C8:11:CD:97:C5:DA:2C:D5:3B:CD:AC Certificate issuer: /CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Certificate serial: 010D0C9F4328584B4FDC7767F5D37A63D62F7800 Authority key identifier: 9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 399619 IP address blocks: 23.128.156.0/24 maxlen: 24 2602:f7ad::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:77:67:f5:d3:7a:63:d6:2f:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=aa6b9080-8b07-49f2-8c2b-b2b23c6e7563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:2c:4e:da:b1:d1:cb:af:2c:88:c4:90:20: 25:06:fc:c4:e3:ec:fe:33:04:b5:6d:be:93:42:17: 53:12:45:59:e8:60:db:5d:e4:39:35:ae:7c:9d:96: 80:f1:0f:99:5f:99:eb:b3:40:f6:a1:0d:dd:8a:c4: 4e:9f:b0:94:ba:64:cc:03:62:61:7b:e5:db:d0:40: 7a:50:7b:01:52:54:bb:dd:a9:d9:9a:e2:0d:e5:c4: 46:3d:d8:da:c5:48:bd:87:87:76:98:87:23:15:03: 08:f3:86:46:b3:97:5d:50:b7:c4:81:26:d5:a9:47: 61:66:cc:2c:66:8a:f8:50:f9:3e:58:2d:1d:82:90: fd:ce:be:50:1f:b4:26:b8:9b:b7:3f:51:b8:6d:6c: 08:86:85:b2:79:8a:a4:c7:77:06:1d:e1:0c:18:ab: 21:e3:bd:a6:47:bd:7e:41:b5:cd:cf:b3:fb:05:d5: f0:05:fa:de:7e:35:93:11:1d:3e:a2:51:9f:25:20: c6:d8:eb:79:d5:49:07:69:1e:62:b2:47:96:0c:f0: d1:ce:a1:79:8e:6f:5d:cb:19:b5:6f:33:5b:38:a7: 18:99:f8:bb:53:3f:44:b6:32:25:c6:a4:79:d0:31: d9:61:e6:19:3e:17:17:9f:38:06:bc:cf:fc:39:f2: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:32:0C:DA:6B:77:DC:6F:C6:C8:11:CD:97:C5:DA:2C:D5:3B:CD:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/6128c351-c1a2-3aaf-bd5b-586a10f0ea48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl X509v3 Authority Key Identifier: keyid:9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.156.0/24 IPv6: 2602:f7ad::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3b:29:34:0d:f5:65:c6:26:4a:23:66:e5:e8:c4:38:3b:88: 52:80:e3:07:c5:bc:67:01:b8:70:2c:d0:01:d5:e4:ff:d4:d0: 31:59:97:9d:cc:b2:f5:23:c3:c7:65:76:44:80:40:18:29:b9: e6:b8:c8:4f:10:7b:0c:da:e4:f5:1d:22:07:2b:61:76:54:b0: c9:59:5b:06:e1:5f:e4:d5:02:09:8e:fa:8c:06:07:53:27:78: bc:dc:a0:49:25:03:e4:a2:52:ca:42:94:62:7b:57:ee:5a:8b: 2f:ca:16:61:64:69:34:13:f9:70:17:0c:91:95:5e:47:c5:e8: 51:54:dd:e0:9e:14:43:66:53:20:33:54:2b:c2:a1:82:d9:ba: 72:84:9f:49:49:9e:47:ed:4d:17:42:71:fb:b0:19:2e:fa:bc: 8e:30:ed:4a:ac:32:a7:dc:07:94:0d:82:ac:58:62:e3:3e:e5: 26:91:26:e7:5d:ae:d6:65:5f:f2:98:bc:46:1d:ac:6b:5f:a3: 20:fb:b5:48:ec:0e:69:85:da:f0:c5:08:3f:6c:4a:db:f3:d4: be:15:41:f8:d8:39:a0:4e:97:2c:54:0a:53:68:61:ad:29:8b: 3b:52:37:7e:a7:04:f2:81:49:3c:ea:5b:95:fd:76:45:14:08: 00:da:ee:30 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtP3Hdn9dN6Y9YveAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjMzdkM2QtMDVlMy00ZjViLTg1ZjItMzc0MjkyZDUw MDllMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YWE2YjkwODAtOGIwNy00OWYyLThjMmItYjJiMjNjNmU3NTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufYsTtqx0cuvLIjEkCAlBvzE4+z+MwS1bb6T QhdTEkVZ6GDbXeQ5Na58nZaA8Q+ZX5nrs0D2oQ3disROn7CUumTMA2Jhe+Xb0EB6 UHsBUlS73anZmuIN5cRGPdjaxUi9h4d2mIcjFQMI84ZGs5ddULfEgSbVqUdhZsws Zor4UPk+WC0dgpD9zr5QH7QmuJu3P1G4bWwIhoWyeYqkx3cGHeEMGKsh472mR71+ QbXNz7P7BdXwBfrefjWTER0+olGfJSDG2Ot51UkHaR5iskeWDPDRzqF5jm9dyxm1 bzNbOKcYmfi7Uz9EtjIlxqR50DHZYeYZPhcXnzgGvM/8OfLYwQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBsyDNprd9xvxsgRzZfF2izVO82sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMz N2QzZC0wNWUzLTRmNWItODVmMi0zNzQyOTJkNTAwOWUvNjEyOGMzNTEtYzFhMi0z YWFmLWJkNWItNTg2YTEwZjBlYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWZjMzdkM2QtMDVlMy00ZjViLTg1 ZjItMzc0MjkyZDUwMDllL2VmYzM3ZDNkLTA1ZTMtNGY1Yi04NWYyLTM3NDI5MmQ1 MDA5ZS5jcmwwHwYDVR0jBBgwFoAUn3ezGK3HCMBoxZf9nCsqNAP7K8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMzN2QzZC0wNWUzLTRmNWItODVmMi0zNzQy OTJkNTAwOWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CcMA4E AgACMAgDBgQmAvetADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaOyk0DfVlxiZKI2bl6MQ4O4hSgOMHxbxn AbhwLNAB1eT/1NAxWZedzLL1I8PHZXZEgEAYKbnmuMhPEHsM2uT1HSIHK2F2VLDJ WVsG4V/k1QIJjvqMBgdTJ3i83KBJJQPkolLKQpRie1fuWosvyhZhZGk0E/lwFwyR lV5HxehRVN3gnhRDZlMgM1QrwqGC2bpyhJ9JSZ5H7U0XQnH7sBku+ryOMO1KrDKn 3AeUDYKsWGLjPuUmkSbnXa7WZV/ymLxGHaxrX6Mg+7VI7A5phdrwxQg/bErb89S+ FUH42DmgTpcsVApTaGGtKYs7Ujd+pwTygUk86luV/XZFFAgA2u4w -----END CERTIFICATE-----Generated at Sat Oct 11 06:57:09 2025 by rpki-client