$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d6e568aa-6005-3d6b-9310-47910619935c.roa File: d6e568aa-6005-3d6b-9310-47910619935c.roa (raw, json) Hash identifier: AzXrzJyW+B3mvGqRQoLnZpGymNWwlHnxNJ9KjH5W1+g= Subject key identifier: 18:D8:0F:1A:5F:F9:47:AE:E4:5E:4D:8A:F5:8E:0D:CB:61:52:DB:7C Certificate issuer: /CN=d190027d-4989-490f-90d8-74213ed3a98e Certificate serial: 010D0C9F4328584B28C6F132EFFBA4F5052BDB80 Authority key identifier: 41:5A:1D:48:72:6D:15:F2:14:92:BC:12:4B:A0:B7:8B:06:D6:25:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d6e568aa-6005-3d6b-9310-47910619935c.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 136160 IP address blocks: 23.140.100.0/24 maxlen: 24 2602:f612::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f1:32:ef:fb:a4:f5:05:2b:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d190027d-4989-490f-90d8-74213ed3a98e Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=c202bd36-b50e-4aff-a13e-ebcb57d31522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0a:64:82:85:f9:7e:76:c6:0a:da:83:ea:01: fc:3b:6d:45:40:5e:7d:89:b0:33:f5:82:1b:f3:09: 41:ed:de:96:7b:e0:ec:8c:3e:28:39:09:10:23:eb: fc:fb:22:86:de:6a:72:b9:3c:61:7f:ad:04:29:3a: ea:01:47:5b:2d:58:bc:06:f5:8a:87:b8:9d:c3:b9: 62:a8:2e:51:42:5c:9f:53:19:18:20:74:47:34:34: 19:81:e3:f6:e4:5c:79:fe:e5:7d:55:f2:0b:83:20: 56:4d:83:99:89:e0:76:56:98:a0:af:d1:40:1a:2d: d3:99:41:73:ed:24:89:77:ac:f2:18:1e:8f:e6:8b: 95:1c:70:dd:54:1e:ce:e3:cd:2f:70:cc:9f:f1:bb: 01:97:e9:32:14:b3:5e:7f:82:71:dd:be:fb:22:17: 13:35:8c:3c:9c:e2:35:86:7e:c0:98:eb:f6:8a:bf: ad:cb:0b:65:4f:75:38:ce:3d:14:b1:77:73:4c:99: e5:f5:d6:a6:d9:f9:1d:ae:a4:cc:d2:df:e1:7d:3d: ec:e6:65:5b:c7:97:5b:0c:52:ad:df:92:44:70:f1: 4b:ea:8f:b8:90:b6:77:ae:b4:76:aa:79:3c:ba:6a: 0b:45:59:6b:a8:5b:63:bc:09:45:d9:8b:37:25:7e: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D8:0F:1A:5F:F9:47:AE:E4:5E:4D:8A:F5:8E:0D:CB:61:52:DB:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d6e568aa-6005-3d6b-9310-47910619935c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.crl X509v3 Authority Key Identifier: keyid:41:5A:1D:48:72:6D:15:F2:14:92:BC:12:4B:A0:B7:8B:06:D6:25:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer sbgp-ipAddrBlock: critical IPv4: 23.140.100.0/24 IPv6: 2602:f612::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ce:b5:e4:d4:6c:34:48:a2:fc:35:11:4f:75:a9:8b:d5:14: 85:02:d5:f4:75:ce:60:f7:e9:57:42:ef:25:6f:a9:ea:d6:1e: 1b:a4:6d:b9:87:89:7b:c0:ae:4d:e6:92:f0:f9:de:82:c1:70: 79:0c:30:6a:a2:6c:7c:74:17:e2:0d:32:ec:a5:5b:5c:7f:06: ec:7d:b5:9f:16:d5:92:2c:26:be:24:d2:6d:61:c0:3f:af:3d: d6:5f:a2:4f:1b:d6:92:13:d8:c3:e1:a1:8b:33:06:c9:2b:92: 96:31:90:38:5e:67:8f:e0:9c:67:a9:a2:8b:a1:fb:cd:d1:73: 95:45:80:cb:d8:3a:b1:d4:03:a9:83:93:2b:58:bc:46:bb:cd: 94:79:4e:f4:ab:32:8d:df:ea:4c:68:0d:37:13:0f:ef:0a:ff: d7:73:fb:e8:52:78:7d:5a:c1:b8:c0:16:07:3f:cc:40:9f:a9: d0:15:df:ae:76:70:bb:9e:87:6a:b7:db:d8:34:a3:55:42:58: a1:41:fa:b4:90:72:ca:ea:62:bf:c4:4a:58:ad:7b:1e:3d:fd: d7:ec:f0:2d:14:2b:0a:16:2f:63:ff:20:02:5f:7d:76:9d:21: 3a:a8:64:11:4b:a1:4a:25:b4:3b:5f:d5:28:0d:21:89:69:c5: ac:86:d3:4a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsoxvEy7/uk9QUr24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE5MDAyN2QtNDk4OS00OTBmLTkwZDgtNzQyMTNlZDNh OThlMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YzIwMmJkMzYtYjUwZS00YWZmLWExM2UtZWJjYjU3ZDMxNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhApkgoX5fnbGCtqD6gH8O21FQF59ibAz9YIb 8wlB7d6We+DsjD4oOQkQI+v8+yKG3mpyuTxhf60EKTrqAUdbLVi8BvWKh7idw7li qC5RQlyfUxkYIHRHNDQZgeP25Fx5/uV9VfILgyBWTYOZieB2Vpigr9FAGi3TmUFz 7SSJd6zyGB6P5ouVHHDdVB7O480vcMyf8bsBl+kyFLNef4Jx3b77IhcTNYw8nOI1 hn7AmOv2ir+tywtlT3U4zj0UsXdzTJnl9dam2fkdrqTM0t/hfT3s5mVbx5dbDFKt 35JEcPFL6o+4kLZ3rrR2qnk8umoLRVlrqFtjvAlF2Ys3JX4nbQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBjYDxpf+Ueu5F5NivWODcthUtt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kMTkw MDI3ZC00OTg5LTQ5MGYtOTBkOC03NDIxM2VkM2E5OGUvZDZlNTY4YWEtNjAwNS0z ZDZiLTkzMTAtNDc5MTA2MTk5MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDE5MDAyN2QtNDk4OS00OTBmLTkw ZDgtNzQyMTNlZDNhOThlL2QxOTAwMjdkLTQ5ODktNDkwZi05MGQ4LTc0MjEzZWQz YTk4ZS5jcmwwHwYDVR0jBBgwFoAUQVodSHJtFfIUkrwSS6C3iwbWJecwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kMTkwMDI3ZC00OTg5LTQ5MGYtOTBkOC03NDIx M2VkM2E5OGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4xkMA4E AgACMAgDBgAmAvYSADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdzrXk1Gw0SKL8NRFPdamL1RSFAtX0dc5g 9+lXQu8lb6nq1h4bpG25h4l7wK5N5pLw+d6CwXB5DDBqomx8dBfiDTLspVtcfwbs fbWfFtWSLCa+JNJtYcA/rz3WX6JPG9aSE9jD4aGLMwbJK5KWMZA4XmeP4JxnqaKL ofvN0XOVRYDL2Dqx1AOpg5MrWLxGu82UeU70qzKN3+pMaA03Ew/vCv/Xc/voUnh9 WsG4wBYHP8xAn6nQFd+udnC7nodqt9vYNKNVQlihQfq0kHLK6mK/xEpYrXsePf3X 7PAtFCsKFi9j/yACX312nSE6qGQRS6FKJbQ7X9UoDSGJacWshtNK -----END CERTIFICATE-----Generated at Thu Oct 9 03:58:10 2025 by rpki-client