$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa File: 4e651070-49d3-379c-9ddb-1c9815e02a76.roa (raw, json) Hash identifier: LkrOWyBT+7ij8p8u6FR1N2FBlKeEi2gXU/v1UfTEuPI= Subject key identifier: 34:F2:EB:04:27:18:E3:7F:D4:26:2D:A1:A3:EB:0A:53:70:7C:89:CA Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584B0FA6BC51ABC9025686990470 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 30399 IP address blocks: 23.152.40.0/24 maxlen: 24 23.152.41.0/24 maxlen: 24 2602:fa82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:bc:51:ab:c9:02:56:86:99:04:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=12947883-7391-42d4-af48-9ed8b71b27e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a5:ac:9f:f2:9d:55:28:1b:8a:5c:87:ea:27: 3e:a0:05:b9:ce:dd:12:ff:c9:9f:01:84:27:c3:f9: f4:56:7b:50:a0:fa:d4:03:b6:89:df:af:5e:5d:ce: 71:8e:db:03:2b:26:78:d6:7e:b2:d0:bc:bc:01:5e: 7a:1b:21:13:60:9f:6f:80:af:a7:fd:ed:d4:36:ee: f3:18:7a:76:8f:75:c2:b9:eb:8a:de:d2:9e:28:7b: 29:4c:13:02:c6:b1:d6:d1:06:32:08:21:29:3a:3e: 33:5a:dc:dd:12:be:63:93:46:46:60:6b:dc:4c:88: 80:ef:e8:1a:39:8c:a5:06:7f:12:32:b8:46:4a:8f: 74:e6:3c:da:6f:27:39:80:2e:f8:12:2c:c2:81:4d: 9f:61:71:48:bc:5b:50:85:15:0e:bc:f8:76:cf:7d: 18:92:14:45:c4:f3:87:43:d8:38:d8:71:7b:da:1e: 8a:31:b1:b0:9c:75:24:c6:d9:02:72:29:ab:22:05: a8:50:be:76:85:8e:88:5d:05:cd:49:ab:b9:6f:70: 1a:1e:9d:a8:14:86:2b:fe:4b:da:45:c3:62:5d:41: 42:41:da:4f:41:11:97:90:10:b8:b9:02:f5:5a:03: 88:d7:ad:e9:50:68:64:21:2e:e5:c1:ee:93:45:6b: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F2:EB:04:27:18:E3:7F:D4:26:2D:A1:A3:EB:0A:53:70:7C:89:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/4e651070-49d3-379c-9ddb-1c9815e02a76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/23 IPv6: 2602:fa82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f0:18:f6:df:41:82:9f:5a:5f:d3:60:4d:8b:ac:01:00:4f: 80:5f:50:f1:d4:49:29:4d:bc:7b:c1:ff:c1:f1:b3:33:be:6e: 1d:b3:64:5c:4c:04:2b:8f:44:5a:76:55:7d:30:81:a9:e1:3b: 22:d7:2a:8f:82:a7:ca:d3:25:fb:e0:fc:41:2f:de:1a:75:2d: e5:18:c6:7f:39:82:15:12:ee:49:e4:f7:50:6d:5b:21:71:02: bd:e3:03:e8:47:df:49:71:66:9b:ef:16:57:02:24:78:49:a8: 2b:3c:db:73:a3:cc:a1:28:bd:dd:ef:f4:f0:3f:a6:2a:b2:bf: d7:52:62:ca:80:a1:62:2a:00:9b:42:a7:a7:6e:f7:0c:89:27: c0:e3:5e:00:94:94:56:ff:6c:3e:3a:79:fc:9a:8c:e1:e2:50: f2:36:f6:99:77:a9:26:9a:8c:b4:a7:05:58:74:b0:cb:69:02: b3:93:5f:62:f2:dc:d9:b1:60:71:61:08:54:fd:b5:33:1e:50: c9:c8:1f:a3:a3:94:9b:dc:34:6f:ad:92:93:54:78:64:98:63: 09:d0:b9:48:b6:52:c2:4b:26:75:ba:6a:dd:e5:e9:26:cb:51: cd:32:50:3c:a2:61:ed:31:a8:f7:7d:41:c2:eb:3d:2c:1c:fc: 3b:29:4e:52 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsPprxRq8kCVoaZBHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MTI5NDc4ODMtNzM5MS00MmQ0LWFmNDgtOWVkOGI3MWIyN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqWsn/KdVSgbilyH6ic+oAW5zt0S/8mfAYQn w/n0VntQoPrUA7aJ369eXc5xjtsDKyZ41n6y0Ly8AV56GyETYJ9vgK+n/e3UNu7z GHp2j3XCueuK3tKeKHspTBMCxrHW0QYyCCEpOj4zWtzdEr5jk0ZGYGvcTIiA7+ga OYylBn8SMrhGSo905jzabyc5gC74EizCgU2fYXFIvFtQhRUOvPh2z30YkhRFxPOH Q9g42HF72h6KMbGwnHUkxtkCcimrIgWoUL52hY6IXQXNSau5b3AaHp2oFIYr/kva RcNiXUFCQdpPQRGXkBC4uQL1WgOI163pUGhkIS7lwe6TRWt+KQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDTy6wQnGON/1CYtoaPrClNwfInKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvNGU2NTEwNzAtNDlkMy0z NzljLTlkZGItMWM5ODE1ZTAyYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5goMA4E AgACMAgDBgQmAvqCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAY8Bj230GCn1pf02BNi6wBAE+AX1Dx1Ekp Tbx7wf/B8bMzvm4ds2RcTAQrj0RadlV9MIGp4Tsi1yqPgqfK0yX74PxBL94adS3l GMZ/OYIVEu5J5PdQbVshcQK94wPoR99JcWab7xZXAiR4SagrPNtzo8yhKL3d7/Tw P6Yqsr/XUmLKgKFiKgCbQqenbvcMiSfA414AlJRW/2w+Onn8mozh4lDyNvaZd6km moy0pwVYdLDLaQKzk19i8tzZsWBxYQhU/bUzHlDJyB+jo5Sb3DRvrZKTVHhkmGMJ 0LlItlLCSyZ1umrd5ekmy1HNMlA8omHtMaj3fUHC6z0sHPw7KU5S -----END CERTIFICATE-----Generated at Sat Oct 11 06:23:10 2025 by rpki-client