$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa File: a9d6e5c9-bec2-395f-af08-83ce47190965.roa (raw, json) Hash identifier: BVLmWK0aXN3b5CWxNqtdoL9spSV/QPkKRMdaxZZ1/EA= Subject key identifier: 6F:3E:D2:1A:29:21:13:0C:32:AF:84:40:66:2C:BC:6B:19:F5:AF:8E Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa Certificate serial: 010D0C9F4328584B3F1C611B5160FF172FAA65C0 Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 398759 IP address blocks: 23.165.120.0/24 maxlen: 24 2602:f9eb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:61:1b:51:60:ff:17:2f:aa:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=40e6deca-856d-436d-a357-196997e27c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:4a:74:58:37:5e:d6:25:22:9f:1c:6a:8e: cd:88:35:ac:7d:30:82:f0:79:95:93:c0:ae:ea:9d: 11:8a:a4:0e:3e:94:46:d5:0f:24:a9:b1:e9:8e:bc: f4:d0:e6:17:3a:f1:55:4b:f3:1e:c5:4f:c5:95:13: 37:dc:f7:66:20:43:6b:8b:5c:0e:0f:db:50:ff:61: 2b:42:10:fd:8f:57:7b:06:d8:ea:29:5f:00:c3:7a: df:2d:f8:67:3e:81:f8:c4:6f:a2:4d:bd:1c:7b:5e: 48:63:ac:57:7a:b6:ed:e2:0c:b6:cb:b1:ed:bc:41: 00:3c:36:e5:be:ea:21:10:8f:b2:bd:41:fb:07:3a: cc:f1:6f:19:bf:ab:5b:df:83:b1:3e:10:c6:c7:cb: da:7d:47:bd:d8:4b:d7:e0:53:c0:dc:ea:c5:fd:40: 26:61:09:c2:c9:13:c2:ef:63:85:a6:d7:7e:a7:1d: 92:50:1e:c9:bf:ab:db:d9:1c:63:41:b8:ff:ca:89: d5:cb:ef:bb:65:7f:96:b9:2e:01:61:d7:bf:38:6f: e8:62:32:4d:63:ee:94:ab:a8:a4:f0:07:86:d9:e5: 83:34:87:15:19:e3:fe:0c:63:11:35:0a:9b:1f:d1: e8:bf:21:d4:bc:58:ae:56:bd:54:62:d9:d4:56:16: 92:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3E:D2:1A:29:21:13:0C:32:AF:84:40:66:2C:BC:6B:19:F5:AF:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl X509v3 Authority Key Identifier: keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer sbgp-ipAddrBlock: critical IPv4: 23.165.120.0/24 IPv6: 2602:f9eb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:55:70:e8:c0:36:d2:8a:6d:13:b5:1a:4d:55:ad:6d:67:2f: aa:25:cd:a9:8b:92:ac:1d:33:5a:68:19:ae:41:ba:46:85:b1: f3:8c:d0:5e:85:8c:b5:2f:6c:1c:dc:70:ac:2e:08:e7:39:8d: b4:12:69:38:09:82:f6:ef:d2:c2:31:6f:7d:5b:95:3c:81:d7: 55:ad:0c:2b:57:d1:80:e3:9a:32:df:94:2a:31:78:bc:4c:05: 6a:5b:19:e5:3c:01:34:6a:48:06:75:45:b2:df:a3:2f:93:ec: cf:47:aa:48:cc:c2:ce:8c:da:51:b9:49:d2:a0:59:4c:23:f0: 6e:0d:8b:ae:bc:5a:a0:5d:7b:42:e4:4d:93:c3:52:87:6b:cd: 48:47:c7:bd:ed:57:eb:1d:ac:d6:82:b3:2d:80:bc:13:ed:f4: 48:51:0f:06:43:93:d0:24:24:8b:92:ae:f4:40:bc:a2:42:e3: 40:34:93:f4:ae:7a:3f:e9:e7:96:7c:ba:0a:b9:9d:51:6e:1d: 50:d1:35:71:05:48:5f:a3:a3:1d:1c:88:77:f8:e2:89:42:20: 4d:43:82:75:11:4f:22:b8:87:ef:63:da:2b:9e:04:e5:dd:71: 2b:de:28:e8:70:13:8f:c8:77:d8:0c:33:13:c6:c9:0b:da:3c: 2d:dc:c5:3b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEs/HGEbUWD/Fy+qZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0 Y2ZhMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk NDBlNmRlY2EtODU2ZC00MzZkLWEzNTctMTk2OTk3ZTI3YzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNFKdFg3XtYlIp8cao7NiDWsfTCC8HmVk8Cu 6p0RiqQOPpRG1Q8kqbHpjrz00OYXOvFVS/MexU/FlRM33PdmIENri1wOD9tQ/2Er QhD9j1d7BtjqKV8Aw3rfLfhnPoH4xG+iTb0ce15IY6xXerbt4gy2y7HtvEEAPDbl vuohEI+yvUH7BzrM8W8Zv6tb34OxPhDGx8vafUe92EvX4FPA3OrF/UAmYQnCyRPC 72OFptd+px2SUB7Jv6vb2RxjQbj/yonVy++7ZX+WuS4BYde/OG/oYjJNY+6Uq6ik 8AeG2eWDNIcVGeP+DGMRNQqbH9HovyHUvFiuVr1UYtnUVhaSfwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFG8+0hopIRMMMq+EQGYsvGsZ9a+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3 NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvYTlkNmU1YzktYmVjMi0z OTVmLWFmMDgtODNjZTQ3MTkwOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDAzNzY0MWQtYWE5MC00ZWFiLTg2 NGUtYTczZTAzZTI0Y2ZhL2QwMzc2NDFkLWFhOTAtNGVhYi04NjRlLWE3M2UwM2Uy NGNmYS5jcmwwHwYDVR0jBBgwFoAUt7tDftH++/QIZeum6I89OeWGSBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNl MDNlMjRjZmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6V4MA4E AgACMAgDBgQmAvnrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeVXDowDbSim0TtRpNVa1tZy+qJc2pi5Ks HTNaaBmuQbpGhbHzjNBehYy1L2wc3HCsLgjnOY20Emk4CYL279LCMW99W5U8gddV rQwrV9GA45oy35QqMXi8TAVqWxnlPAE0akgGdUWy36Mvk+zPR6pIzMLOjNpRuUnS oFlMI/BuDYuuvFqgXXtC5E2Tw1KHa81IR8e97VfrHazWgrMtgLwT7fRIUQ8GQ5PQ JCSLkq70QLyiQuNANJP0rno/6eeWfLoKuZ1Rbh1Q0TVxBUhfo6MdHIh3+OKJQiBN Q4J1EU8iuIfvY9orngTl3XEr3ijocBOPyHfYDDMTxskL2jwt3MU7 -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:10 2025 by rpki-client