$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa File: 9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa (raw, json) Hash identifier: 3e2CQEoSS1ypTp/aAE96Bo3fc3Vks6hQyZ74j5RsG3Y= Subject key identifier: B2:1E:6E:28:3E:53:05:9D:BB:A5:85:FF:86:AD:C1:8D:80:57:07:03 Certificate issuer: /CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306 Certificate serial: 010D0C9F4328584B4BAC545143D01F635DEC4D00 Authority key identifier: 63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 399870 IP address blocks: 23.137.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:54:51:43:d0:1f:63:5d:ec:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=9d4a0db7-07a6-40e6-acd3-89093ab740f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3e:bd:dc:95:38:34:88:75:1f:5a:90:7b:74: af:a0:08:b7:01:42:f9:19:06:a7:4a:d0:f6:6e:42: b0:f9:fe:ef:28:3f:71:a6:cb:2f:5d:33:85:4b:60: 8c:ea:73:79:da:0c:81:52:c0:dd:b9:43:7d:d7:01: eb:3c:0d:9c:d3:f8:4e:8f:48:98:90:7d:07:99:59: 12:e5:6a:55:04:c3:74:4e:1e:11:76:de:f6:b3:c8: 0b:e2:b5:59:14:6e:63:d0:c9:cc:48:4c:c9:89:92: 73:db:6e:5b:b5:57:55:77:32:0f:c0:12:7d:6d:47: de:2e:19:da:65:39:69:fb:dc:8e:b5:c2:50:aa:4c: c1:8f:52:ec:2b:c0:31:63:90:4a:d2:a1:d2:68:40: 0f:f0:c7:44:b8:d3:8c:e3:9d:24:7c:46:7f:4e:ff: d5:3f:b6:99:51:f1:d0:5a:42:22:1d:67:03:73:c3: 34:eb:58:2b:30:52:25:9e:8d:14:ed:2e:93:77:e4: ff:7a:d6:3a:4b:83:81:ce:ba:2b:15:55:1b:3f:ed: 41:1e:26:3a:c8:1e:b1:f6:0e:67:a8:42:6b:84:80: 17:2b:cd:f4:08:f0:d2:f9:0b:29:62:89:d6:87:70: bd:53:65:08:9f:a5:66:bf:0f:98:e0:c2:53:d6:2d: d7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:6E:28:3E:53:05:9D:BB:A5:85:FF:86:AD:C1:8D:80:57:07:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl X509v3 Authority Key Identifier: keyid:63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer sbgp-ipAddrBlock: critical IPv4: 23.137.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:92:02:d0:55:65:d6:14:87:f4:b2:09:99:be:4a:5e:13:8f: 69:a9:de:cd:d8:b7:0e:c7:2d:b9:01:e5:e0:b6:54:34:e7:14: 9c:71:ab:c4:81:25:0f:5d:7a:ac:03:6e:db:b7:8e:df:90:2e: 33:9b:31:c4:af:dd:8f:9d:be:29:d6:12:40:e3:91:58:f1:e1: ac:d4:58:80:75:f8:bf:99:a6:89:98:d6:e5:39:23:c3:f2:18: ef:e0:ce:d1:19:af:6d:56:8a:e4:34:7b:40:6b:7f:35:e2:01: 12:36:99:0b:c4:28:73:b7:41:f0:51:b1:aa:10:44:0d:6b:89: 5a:17:d5:84:9d:de:85:9e:39:97:df:7e:f2:e7:0a:a1:a7:de: 39:de:b4:df:66:5b:bd:8b:f3:07:67:29:b6:03:0f:3c:3c:de: 89:de:28:74:ad:33:63:d2:77:b4:0d:f9:3b:00:d9:e1:b7:16: c9:06:95:ac:40:8a:2c:3d:68:6e:6c:99:0f:e2:fc:61:51:9e: bc:c3:f6:cb:92:39:5c:b6:24:de:e2:b7:d8:2f:cf:c2:01:34: a0:06:d5:86:86:87:ce:83:19:e2:69:4b:18:20:a4:f4:ba:68: 43:02:03:1e:08:4c:97:39:c9:fe:64:88:d1:c3:3d:d6:5d:04: 25:c6:a1:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrFRRQ9AfY13sTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IwYmJkN2UtY2VjZi00ZjEyLTkwMDktMDQ4YzBjZmJm MzA2MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk OWQ0YTBkYjctMDdhNi00MGU2LWFjZDMtODkwOTNhYjc0MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD693JU4NIh1H1qQe3SvoAi3AUL5GQanStD2 bkKw+f7vKD9xpssvXTOFS2CM6nN52gyBUsDduUN91wHrPA2c0/hOj0iYkH0HmVkS 5WpVBMN0Th4Rdt72s8gL4rVZFG5j0MnMSEzJiZJz225btVdVdzIPwBJ9bUfeLhna ZTlp+9yOtcJQqkzBj1LsK8AxY5BK0qHSaEAP8MdEuNOM450kfEZ/Tv/VP7aZUfHQ WkIiHWcDc8M061grMFIlno0U7S6Td+T/etY6S4OBzrorFVUbP+1BHiY6yB6x9g5n qEJrhIAXK830CPDS+QspYonWh3C9U2UIn6Vmvw+Y4MJT1i3XEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIebig+UwWdu6WF/4atwY2AVwcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBi YmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhjMGNmYmYzMDYvOWExYTMyNDktNzFkYy0z N2EyLWE3ZWQtNjMzZDJmNmQxYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2IwYmJkN2UtY2VjZi00ZjEyLTkw MDktMDQ4YzBjZmJmMzA2LzNiMGJiZDdlLWNlY2YtNGYxMi05MDA5LTA0OGMwY2Zi ZjMwNi5jcmwwHwYDVR0jBBgwFoAUY9+yo6uZoJShuuid+Uf9EijBrBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjBiYmQ3ZS1jZWNmLTRmMTItOTAwOS0wNDhj MGNmYmYzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4mUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuSAtBVZdYUh/SyCZm+Sl4Tj2mp3s3Ytw7HLbkB5eC2VDTnFJxxq8SB JQ9deqwDbtu3jt+QLjObMcSv3Y+dvinWEkDjkVjx4azUWIB1+L+ZpomY1uU5I8Py GO/gztEZr21WiuQ0e0BrfzXiARI2mQvEKHO3QfBRsaoQRA1riVoX1YSd3oWeOZff fvLnCqGn3jnetN9mW72L8wdnKbYDDzw83oneKHStM2PSd7QN+TsA2eG3FskGlaxA iiw9aG5smQ/i/GFRnrzD9suSOVy2JN7it9gvz8IBNKAG1YaGh86DGeJpSxggpPS6 aEMCAx4ITJc5yf5kiNHDPdZdBCXGoRk= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:39 2025 by rpki-client