$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa File: 29949da6-8cb5-3545-95c6-65e47a0cc103.roa (raw, json) Hash identifier: TuOApts/Ya6buEhv705ElSFgBI/TtaVqg4Ngc5Z3hlU= Subject key identifier: 60:24:24:8D:54:10:4F:0B:FD:AF:AC:F8:67:86:85:0D:CF:35:9A:D4 Certificate issuer: /CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Certificate serial: 010D0C9F4328584B328C50F0260E006FF9F3CAC0 Authority key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 26886 IP address blocks: 23.167.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:50:f0:26:0e:00:6f:f9:f3:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=1272d3d3-75db-4ca0-93d6-a0d49db9a51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f8:b9:cb:df:50:8a:14:5a:d6:92:34:83:05: ef:8d:49:da:9a:81:64:39:89:f5:8f:a5:a3:65:7a: 52:62:7d:e2:1d:29:c2:c0:5e:1c:db:8e:54:75:9c: 5d:00:8b:fd:88:39:c4:a0:3e:36:2e:de:65:2e:4e: 5a:73:51:d6:14:7d:03:c6:5e:87:1f:60:05:cc:a4: 69:c3:58:03:8b:73:50:a0:ac:86:e3:23:19:ab:7a: 36:3d:17:2b:90:c4:13:04:9d:8f:c1:18:bd:2a:a2: b4:1e:8e:c7:fc:6c:d1:5d:9c:6f:f0:96:63:82:87: 5f:ae:09:2f:7d:2a:33:b5:2c:84:b1:95:6a:31:f4: e2:76:72:89:f1:c5:3b:f9:4a:f1:0b:49:42:7c:df: b1:cb:81:bf:04:9e:2e:48:a0:f0:dc:65:4f:de:3a: d3:29:43:66:ff:a1:6f:9c:5e:45:73:f8:67:c1:76: b4:c3:e2:e3:d5:85:db:df:74:59:cd:46:37:c5:1e: ef:e9:e3:ac:45:78:5d:e4:96:9e:a4:3a:92:af:95: d7:d9:ee:80:ab:02:52:8e:3b:99:eb:4e:95:dc:8a: 04:2e:d0:3a:f2:2d:1a:3b:a1:61:73:79:80:09:38: 32:2f:1e:44:91:6b:74:41:93:b5:ad:60:64:0e:4d: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:24:24:8D:54:10:4F:0B:FD:AF:AC:F8:67:86:85:0D:CF:35:9A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl X509v3 Authority Key Identifier: keyid:4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer sbgp-ipAddrBlock: critical IPv4: 23.167.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:6a:8f:58:7f:06:4e:c8:8c:03:79:78:4a:2c:35:f5:1c:d5: 3c:14:64:24:d3:d1:f1:65:ac:53:c5:02:42:05:38:8c:03:31: bb:8f:51:a0:de:60:21:44:0f:b8:c5:35:61:07:ac:17:a2:19: fc:d9:0a:5f:2a:0c:61:ee:e1:b9:fa:b9:38:e4:29:9b:9c:7a: 35:0d:d2:77:8c:59:65:00:1d:0a:70:1d:d5:ff:db:7b:d3:1b: a2:89:6e:5a:dc:92:84:32:9c:c6:73:6a:cf:d6:6b:ce:b4:d8: 59:cb:36:d8:c0:f8:8e:46:a4:98:46:d6:f5:24:ed:36:3f:b5: 4a:51:17:98:af:4c:ae:98:da:d9:64:a4:d2:76:bd:57:f2:ed: bd:91:8a:cf:56:6d:65:6c:97:3c:81:ea:97:d6:e8:ae:1b:8c: bc:41:15:ef:50:47:0b:9a:05:b4:45:40:f2:e6:3c:a4:48:85: db:09:44:9f:a8:59:77:e6:86:03:f5:05:51:d5:3f:59:54:3b: ac:2c:67:3d:53:8e:14:b3:98:b9:33:32:60:fc:e6:c6:5b:79: ef:e9:6e:4a:4d:ff:13:82:8a:d4:ba:08:05:a2:91:64:fd:8d: d8:ac:0f:65:84:03:42:6c:33:b1:cd:d7:71:ae:b4:2e:f6:8e: a1:eb:11:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjFDwJg4Ab/nzysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlMjczYzEtZTM5Zi00NjRiLThjMWYtYjQ1YzhkZjJi MTQ4MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MTI3MmQzZDMtNzVkYi00Y2EwLTkzZDYtYTBkNDlkYjlhNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPi5y99QihRa1pI0gwXvjUnamoFkOYn1j6Wj ZXpSYn3iHSnCwF4c245UdZxdAIv9iDnEoD42Lt5lLk5ac1HWFH0Dxl6HH2AFzKRp w1gDi3NQoKyG4yMZq3o2PRcrkMQTBJ2PwRi9KqK0Ho7H/GzRXZxv8JZjgodfrgkv fSoztSyEsZVqMfTidnKJ8cU7+UrxC0lCfN+xy4G/BJ4uSKDw3GVP3jrTKUNm/6Fv nF5Fc/hnwXa0w+Lj1YXb33RZzUY3xR7v6eOsRXhd5JaepDqSr5XX2e6AqwJSjjuZ 606V3IoELtA68i0aO6Fhc3mACTgyLx5EkWt0QZO1rWBkDk21SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAkJI1UEE8L/a+s+GeGhQ3PNZrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUy NzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVjOGRmMmIxNDgvMjk5NDlkYTYtOGNiNS0z NTQ1LTk1YzYtNjVlNDdhMGNjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhlMjczYzEtZTM5Zi00NjRiLThj MWYtYjQ1YzhkZjJiMTQ4LzY4ZTI3M2MxLWUzOWYtNDY0Yi04YzFmLWI0NWM4ZGYy YjE0OC5jcmwwHwYDVR0jBBgwFoAUTS+LfVGd0REBVTtzG9uaer5iv6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGUyNzNjMS1lMzlmLTQ2NGItOGMxZi1iNDVj OGRmMmIxNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6eIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFqj1h/Bk7IjAN5eEosNfUc1TwUZCTT0fFlrFPFAkIFOIwDMbuPUaDe YCFED7jFNWEHrBeiGfzZCl8qDGHu4bn6uTjkKZucejUN0neMWWUAHQpwHdX/23vT G6KJblrckoQynMZzas/Wa8602FnLNtjA+I5GpJhG1vUk7TY/tUpRF5ivTK6Y2tlk pNJ2vVfy7b2Ris9WbWVslzyB6pfW6K4bjLxBFe9QRwuaBbRFQPLmPKRIhdsJRJ+o WXfmhgP1BVHVP1lUO6wsZz1TjhSzmLkzMmD85sZbee/pbkpN/xOCitS6CAWikWT9 jdisD2WEA0JsM7HN13GutC72jqHrEZw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:38 2025 by rpki-client