$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/9b0f38bc-bd63-393c-91f7-e9232c34f1bc.roa File: 9b0f38bc-bd63-393c-91f7-e9232c34f1bc.roa (raw, json) Hash identifier: Xsz/YUVXoh1m8AZePjvLIjOXdTufbnf4rW/b4BHD6mc= Subject key identifier: AD:85:25:BC:B2:54:37:72:8D:E2:C5:13:33:FD:6D:B6:AB:5B:29:D9 Certificate issuer: /CN=2e218182-d880-48fb-baed-8c63f1bc8249 Certificate serial: 010D0C9F4328584B4E771662653BAD267CF79800 Authority key identifier: C6:85:47:30:B6:5C:97:13:CE:68:0F:0C:5D:C3:9A:80:41:D6:E7:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/9b0f38bc-bd63-393c-91f7-e9232c34f1bc.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 22951 IP address blocks: 23.152.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:16:62:65:3b:ad:26:7c:f7:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e218182-d880-48fb-baed-8c63f1bc8249 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=6d0cf270-f56b-4f90-a34f-c66907e7e497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e4:fe:07:92:ba:db:f2:28:75:04:63:45:ac: 56:b0:6b:72:f0:d8:a4:34:b3:ab:03:ff:d8:67:70: dc:52:8b:00:3a:a4:43:b6:f5:33:77:cb:e3:59:3b: 60:80:0e:f7:30:fb:4c:72:ff:5f:07:19:6d:23:77: 68:34:e2:3c:b9:da:7e:66:26:f5:a4:7e:15:40:ca: 78:31:b5:75:e1:10:6e:83:f2:fc:f5:47:40:be:e1: 1e:0b:fe:f6:c1:d8:1e:26:74:e5:2f:8b:96:23:d2: 6a:c6:81:52:db:14:fb:65:19:4d:94:47:bf:74:ab: 86:cb:62:d8:86:c0:36:00:f0:31:30:80:e8:82:a8: b7:b7:07:ca:b3:6e:b0:74:b9:ec:95:f3:02:0f:7f: fb:37:22:0a:6d:ba:d4:e7:18:0c:5f:8a:84:e7:1f: 9f:4f:4f:18:22:64:37:15:be:15:01:8e:1c:17:47: fd:f1:63:82:b1:d3:39:93:dc:04:6d:eb:15:95:9a: 8c:4b:bc:81:97:25:ae:56:c1:bf:34:f1:bd:cd:ac: 9f:74:91:46:87:f5:71:cd:aa:fe:55:45:d6:5b:6e: 91:bf:5d:ba:da:73:a9:04:27:c4:f9:56:b5:b7:0f: 69:24:d8:ae:1a:9d:38:ef:00:50:3b:f7:18:fc:f5: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:85:25:BC:B2:54:37:72:8D:E2:C5:13:33:FD:6D:B6:AB:5B:29:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/9b0f38bc-bd63-393c-91f7-e9232c34f1bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249/2e218182-d880-48fb-baed-8c63f1bc8249.crl X509v3 Authority Key Identifier: keyid:C6:85:47:30:B6:5C:97:13:CE:68:0F:0C:5D:C3:9A:80:41:D6:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e218182-d880-48fb-baed-8c63f1bc8249.cer sbgp-ipAddrBlock: critical IPv4: 23.152.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:95:af:bd:38:db:8c:f8:3d:aa:55:76:41:e1:0c:30:b0:95: fd:a3:b6:5e:20:37:40:0e:da:ba:8b:70:9d:e4:cb:e6:07:39: a1:e0:00:64:67:c3:0b:2b:d4:2d:15:cb:b2:a3:4e:17:75:4e: 0c:67:d0:8d:ce:a2:81:70:87:72:c6:4d:da:df:01:71:ac:c3: 2b:16:37:40:c9:15:5a:8e:e3:4a:ff:a1:71:a4:52:e7:cf:ee: 7f:9e:b4:6a:be:0d:8e:03:3f:94:08:b0:ca:55:c8:b0:c0:19: bd:7a:95:fc:d4:cc:4c:58:a0:22:ea:cc:a2:d3:3b:73:48:4a: 04:a4:d9:e7:93:3c:03:46:2f:a7:2d:20:72:c1:54:e6:55:40: 06:5f:b1:2a:bb:01:ae:75:25:85:ca:ae:1d:d4:48:40:16:bf: 30:23:76:47:17:f7:ab:3f:a2:49:dd:05:48:a0:b1:fb:a0:aa: e3:89:35:38:cd:64:1f:f7:51:de:dc:a2:0e:19:db:9d:37:fe: 03:3a:12:5c:c7:c1:90:ed:6b:f8:46:11:19:df:a5:3a:11:b6: 71:32:fa:9c:be:65:b4:e4:20:db:65:59:ab:b6:6e:36:b8:30: c9:8a:b7:9b:8e:a7:4b:01:e0:5c:3e:1b:5f:f7:a2:a0:2b:2e: 89:53:bf:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdxZiZTutJnz3mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUyMTgxODItZDg4MC00OGZiLWJhZWQtOGM2M2YxYmM4 MjQ5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NmQwY2YyNzAtZjU2Yi00ZjkwLWEzNGYtYzY2OTA3ZTdlNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOT+B5K62/IodQRjRaxWsGty8NikNLOrA//Y Z3DcUosAOqRDtvUzd8vjWTtggA73MPtMcv9fBxltI3doNOI8udp+Zib1pH4VQMp4 MbV14RBug/L89UdAvuEeC/72wdgeJnTlL4uWI9JqxoFS2xT7ZRlNlEe/dKuGy2LY hsA2APAxMIDogqi3twfKs26wdLnslfMCD3/7NyIKbbrU5xgMX4qE5x+fT08YImQ3 Fb4VAY4cF0f98WOCsdM5k9wEbesVlZqMS7yBlyWuVsG/NPG9zayfdJFGh/Vxzar+ VUXWW26Rv1262nOpBCfE+Va1tw9pJNiuGp047wBQO/cY/PXimwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2FJbyyVDdyjeLFEzP9bbarWynZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZTIx ODE4Mi1kODgwLTQ4ZmItYmFlZC04YzYzZjFiYzgyNDkvOWIwZjM4YmMtYmQ2My0z OTNjLTkxZjctZTkyMzJjMzRmMWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmUyMTgxODItZDg4MC00OGZiLWJh ZWQtOGM2M2YxYmM4MjQ5LzJlMjE4MTgyLWQ4ODAtNDhmYi1iYWVkLThjNjNmMWJj ODI0OS5jcmwwHwYDVR0jBBgwFoAUxoVHMLZclxPOaA8MXcOagEHW5+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZTIxODE4Mi1kODgwLTQ4ZmItYmFlZC04YzYz ZjFiYzgyNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5iIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqVr70424z4PapVdkHhDDCwlf2jtl4gN0AO2rqLcJ3ky+YHOaHgAGRn wwsr1C0Vy7KjThd1Tgxn0I3OooFwh3LGTdrfAXGswysWN0DJFVqO40r/oXGkUufP 7n+etGq+DY4DP5QIsMpVyLDAGb16lfzUzExYoCLqzKLTO3NISgSk2eeTPANGL6ct IHLBVOZVQAZfsSq7Aa51JYXKrh3USEAWvzAjdkcX96s/okndBUigsfugquOJNTjN ZB/3Ud7cog4Z2503/gM6ElzHwZDta/hGERnfpToRtnEy+py+ZbTkINtlWau2bja4 MMmKt5uOp0sB4Fw+G1/3oqArLolTv6s= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:14 2025 by rpki-client