$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa File: ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa (raw, json) Hash identifier: 4leRj4lKTau9w75KEnefkOvBa9o3kcUjKSxm8Jagph4= Subject key identifier: 96:75:71:43:DC:D4:B6:00:65:11:FF:FD:D7:CC:CC:03:9C:0A:E4:34 Certificate issuer: /CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e Certificate serial: 010D0C9F4328584B6D2C9449A22262C733E53680 Authority key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 35870 IP address blocks: 23.144.200.0/24 maxlen: 24 2602:fac0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:94:49:a2:22:62:c7:33:e5:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=a191869b-59c1-428d-857b-004268387613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:5b:12:bc:4f:b1:d2:ad:04:5d:56:c8:ad: f7:df:b4:6b:a8:37:a3:82:ce:df:63:9f:8e:12:45: bf:2d:ec:cf:a0:a5:2f:06:98:aa:f0:91:f7:3f:9a: 6a:3c:88:96:53:0b:4b:09:19:18:af:65:f8:26:d0: c6:c9:d0:40:41:80:04:bb:f8:bb:10:db:69:4f:07: 3c:df:9e:1f:74:f8:13:4c:d2:35:d7:1a:fa:03:00: 1d:70:1a:99:28:dc:24:10:18:9a:d1:30:7f:95:0b: 98:9f:25:5d:94:90:27:4f:0e:bf:c4:43:7d:09:4f: 46:2d:21:f1:42:ab:13:e3:6a:51:52:f6:8b:13:6b: 82:ae:d6:3f:c4:91:7e:bc:6f:d9:30:3a:a3:34:41: cb:b9:5b:a0:40:5b:4b:ea:74:68:52:81:c7:50:49: 1d:a7:01:f1:40:88:31:fb:52:fb:a1:ab:93:dd:9c: 7a:75:d5:71:62:a7:3c:c3:b0:19:21:98:b7:3d:0d: 83:1b:f9:78:5a:d3:43:54:24:63:26:60:d0:15:e5: 2b:47:c7:3a:81:47:79:97:aa:71:70:05:5a:5a:85: 96:04:23:b6:2c:35:bb:b5:32:92:c6:bd:74:76:0e: ea:b1:45:5f:a9:ee:a8:1d:5d:fa:db:d8:ff:d0:cb: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:75:71:43:DC:D4:B6:00:65:11:FF:FD:D7:CC:CC:03:9C:0A:E4:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl X509v3 Authority Key Identifier: keyid:A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.200.0/24 IPv6: 2602:fac0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1c:dc:94:9f:2e:91:e5:33:bc:e0:d2:c1:89:07:ff:f0:c2: 48:3e:03:39:54:2c:cc:4b:7a:ba:cf:76:b4:c3:d8:74:b4:22: 63:95:a8:29:fd:26:e7:cd:f6:fa:6e:4f:3a:95:96:66:7d:35: 91:d0:01:73:b7:44:8f:b5:45:a3:12:17:48:b3:ad:12:b6:08: 8f:69:ec:53:42:57:25:83:78:21:d7:42:a5:05:ad:7b:bf:dc: f6:77:4f:81:3f:ee:c2:6b:57:92:6e:ee:b3:e4:f9:17:92:8e: db:9e:82:24:ff:b0:24:bc:5c:a7:10:91:fd:7e:15:dc:fa:45: 42:3a:6b:db:fa:5f:63:93:b0:f8:94:61:d6:7f:0e:fe:ad:53: 75:a8:1b:15:b1:40:57:ab:7b:63:99:06:25:f5:98:87:c0:79: 2b:92:98:c0:54:c8:52:e8:bc:8c:75:20:28:85:19:87:c8:2f: 08:70:a6:74:d8:51:58:1b:01:86:ab:7d:b5:18:2d:af:23:bc: 0d:3d:8c:b8:5f:33:3d:01:34:d4:12:bf:ee:4b:0f:a7:7a:c7: 48:98:39:77:e3:00:5e:bb:96:66:c6:cc:13:fb:1d:52:92:d4: e1:fa:cc:8b:c9:a7:57:aa:c1:0f:34:ab:e9:a6:f2:81:5b:48: dc:4e:5c:fb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEttLJRJoiJixzPlNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY5Y2EwMmMtNzIxZS00Y2E4LTk2ZDQtNmViMTBkOGVh MzhlMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTE5MTg2OWItNTljMS00MjhkLTg1N2ItMDA0MjY4Mzg3NjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmClbErxPsdKtBF1WyK3337RrqDejgs7fY5+O EkW/LezPoKUvBpiq8JH3P5pqPIiWUwtLCRkYr2X4JtDGydBAQYAEu/i7ENtpTwc8 354fdPgTTNI11xr6AwAdcBqZKNwkEBia0TB/lQuYnyVdlJAnTw6/xEN9CU9GLSHx QqsT42pRUvaLE2uCrtY/xJF+vG/ZMDqjNEHLuVugQFtL6nRoUoHHUEkdpwHxQIgx +1L7oauT3Zx6ddVxYqc8w7AZIZi3PQ2DG/l4WtNDVCRjJmDQFeUrR8c6gUd5l6px cAVaWoWWBCO2LDW7tTKSxr10dg7qsUVfqe6oHV3629j/0MumNwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJZ1cUPc1LYAZRH//dfMzAOcCuQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85Zjlj YTAyYy03MjFlLTRjYTgtOTZkNC02ZWIxMGQ4ZWEzOGUvZWM0MmU1ZGItMTI5ZC0z ZTIxLWE2NzgtODViNGI1ZjNiYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWY5Y2EwMmMtNzIxZS00Y2E4LTk2 ZDQtNmViMTBkOGVhMzhlLzlmOWNhMDJjLTcyMWUtNGNhOC05NmQ0LTZlYjEwZDhl YTM4ZS5jcmwwHwYDVR0jBBgwFoAUpjsZbkwxCGd0VwVqrR0o478DyvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZjljYTAyYy03MjFlLTRjYTgtOTZkNC02ZWIx MGQ4ZWEzOGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5DIMA4E AgACMAgDBgAmAvrAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbHNyUny6R5TO84NLBiQf/8MJIPgM5VCzM S3q6z3a0w9h0tCJjlagp/Sbnzfb6bk86lZZmfTWR0AFzt0SPtUWjEhdIs60StgiP aexTQlclg3gh10KlBa17v9z2d0+BP+7Ca1eSbu6z5PkXko7bnoIk/7AkvFynEJH9 fhXc+kVCOmvb+l9jk7D4lGHWfw7+rVN1qBsVsUBXq3tjmQYl9ZiHwHkrkpjAVMhS 6LyMdSAohRmHyC8IcKZ02FFYGwGGq321GC2vI7wNPYy4XzM9ATTUEr/uSw+nesdI mDl34wBeu5ZmxswT+x1SktTh+syLyadXqsEPNKvppvKBW0jcTlz7 -----END CERTIFICATE-----Generated at Wed Oct 8 21:19:38 2025 by rpki-client