$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/adaee9a8-3fae-398f-8a75-f2925243deb0.roa File: adaee9a8-3fae-398f-8a75-f2925243deb0.roa (raw, json) Hash identifier: /rBAMePJVbXL8sPRjj1m7HrW/auJC2r/n72tDHf7IAU= Subject key identifier: D7:38:B9:98:2E:89:1D:E6:DB:E1:2A:99:BF:EB:7D:23:CF:58:20:79 Certificate issuer: /CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef Certificate serial: 010D0C9F4328584B1F4B1AA94A24EF22E9441740 Authority key identifier: 62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/adaee9a8-3fae-398f-8a75-f2925243deb0.roa Signing time: Mon 08 Sep 2025 03:29:05 +0000 ROA not before: Mon 08 Sep 2025 03:29:05 +0000 ROA not after: Sun 07 Dec 2025 04:29:05 +0000 asID: 401561 IP address blocks: 23.133.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:4b:1a:a9:4a:24:ef:22:e9:44:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef Validity Not Before: Sep 8 03:29:05 2025 GMT Not After : Dec 7 04:29:05 2025 GMT Subject: CN=836d989e-bcd9-410e-9722-217f92127690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:51:f2:8c:4c:6d:ec:f8:d9:c5:03:84:89: 48:2e:ec:ec:df:71:43:f7:13:07:61:1d:50:ad:d3: 4a:23:b7:e7:98:1f:9b:80:e7:1d:ad:15:50:01:ac: ae:89:29:b2:58:2e:1b:f5:14:02:9b:cf:65:c4:0f: c1:39:f9:1a:c6:02:f2:2d:6e:c5:bf:43:3a:6f:4e: 12:e2:2d:b8:1b:50:91:46:99:47:8c:7e:b6:4d:54: 52:9a:4e:b6:30:66:d3:f8:b3:48:26:0b:9d:0e:97: 3e:7b:9d:a5:b1:a0:6a:59:28:40:72:e9:7d:40:04: ed:7e:d3:b6:50:aa:20:41:ee:e0:57:62:e7:37:f5: 9a:75:aa:3c:fa:13:03:73:a2:80:c5:61:28:49:2e: 33:e5:f5:b2:83:d3:49:18:1b:c4:31:3d:99:b9:3a: e2:e0:bc:5f:cd:ae:1c:1f:7c:98:0f:03:d9:1b:cd: e9:b9:3e:35:b3:87:07:e4:de:ca:35:5a:dd:41:e3: 31:78:4d:39:8b:93:84:10:9d:fa:45:2b:f5:d7:c5: 89:03:e5:67:c2:b1:02:95:c0:d3:45:ca:c4:bf:68: ad:49:7a:e5:7f:78:89:9c:2d:d7:5a:5f:40:a3:63: 1a:58:37:cd:f9:39:29:f2:b6:6a:f9:db:7d:b7:2a: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:38:B9:98:2E:89:1D:E6:DB:E1:2A:99:BF:EB:7D:23:CF:58:20:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/adaee9a8-3fae-398f-8a75-f2925243deb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl X509v3 Authority Key Identifier: keyid:62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer sbgp-ipAddrBlock: critical IPv4: 23.133.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:22:0d:c4:77:ec:34:c6:a2:1c:77:83:50:74:8b:2a:e8:05: 42:ef:f2:fd:f2:d9:d8:62:21:75:1b:e0:2a:94:f5:c4:ec:ad: 99:bc:99:09:41:0e:27:7c:9e:a3:24:2e:fe:72:f5:28:70:2f: 77:43:4b:dc:77:c7:f8:20:4c:58:d6:b4:09:8c:4e:0d:6a:38: 20:96:f2:df:eb:fa:81:cd:cd:14:6d:a1:87:bd:f6:3e:01:66: e9:c6:41:39:21:c5:f3:79:f2:83:fa:5c:60:f7:44:cb:ba:32: 46:a7:82:bd:d5:2a:cc:d0:ba:2b:4a:b9:6b:7a:c3:43:b0:38: 3d:48:1b:6c:54:17:c2:db:00:f7:b1:69:52:be:1f:e4:14:66: ba:83:5c:d5:a5:cf:d4:10:61:1a:83:5a:ef:da:f0:df:23:b5: db:7f:f0:e4:33:9b:2e:38:20:e5:2c:5a:e1:72:b9:f1:c2:87: 0b:b7:90:62:ee:c2:e4:35:5d:3d:0d:14:5e:83:59:90:8b:42: 8c:7d:80:b9:7c:21:11:fe:2c:68:0e:0d:f2:36:69:64:17:66: 7a:3b:13:16:b8:2a:57:09:5f:81:5b:64:b6:45:91:df:50:76: bf:11:65:0b:91:3f:8d:8a:b2:b9:7b:79:28:aa:13:aa:e3:60: 72:f0:b0:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfSxqpSiTvIulEF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZkZDc0ZTYtN2U2NS00MmQ0LWE0OWEtMDdlMGNjMThj MWVmMB4XDTI1MDkwODAzMjkwNVoXDTI1MTIwNzA0MjkwNVowLzEtMCsGA1UEAxMk ODM2ZDk4OWUtYmNkOS00MTBlLTk3MjItMjE3ZjkyMTI3NjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGJR8oxMbez42cUDhIlILuzs33FD9xMHYR1Q rdNKI7fnmB+bgOcdrRVQAayuiSmyWC4b9RQCm89lxA/BOfkaxgLyLW7Fv0M6b04S 4i24G1CRRplHjH62TVRSmk62MGbT+LNIJgudDpc+e52lsaBqWShAcul9QATtftO2 UKogQe7gV2LnN/Wadao8+hMDc6KAxWEoSS4z5fWyg9NJGBvEMT2ZuTri4Lxfza4c H3yYDwPZG83puT41s4cH5N7KNVrdQeMxeE05i5OEEJ36RSv118WJA+VnwrEClcDT RcrEv2itSXrlf3iJnC3XWl9Ao2MaWDfN+Tkp8rZq+dt9tyr/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc4uZguiR3m2+Eqmb/rfSPPWCB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wNmRk NzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2UwY2MxOGMxZWYvYWRhZWU5YTgtM2ZhZS0z OThmLThhNzUtZjI5MjUyNDNkZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDZkZDc0ZTYtN2U2NS00MmQ0LWE0 OWEtMDdlMGNjMThjMWVmLzA2ZGQ3NGU2LTdlNjUtNDJkNC1hNDlhLTA3ZTBjYzE4 YzFlZi5jcmwwHwYDVR0jBBgwFoAUYi13yGYulJlhcXxC8kNoQfFqT1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wNmRkNzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2Uw Y2MxOGMxZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEiDcR37DTGohx3g1B0iyroBULv8v3y2dhiIXUb4CqU9cTsrZm8mQlB Did8nqMkLv5y9ShwL3dDS9x3x/ggTFjWtAmMTg1qOCCW8t/r+oHNzRRtoYe99j4B ZunGQTkhxfN58oP6XGD3RMu6Mkangr3VKszQuitKuWt6w0OwOD1IG2xUF8LbAPex aVK+H+QUZrqDXNWlz9QQYRqDWu/a8N8jtdt/8OQzmy44IOUsWuFyufHChwu3kGLu wuQ1XT0NFF6DWZCLQox9gLl8IRH+LGgODfI2aWQXZno7Exa4KlcJX4FbZLZFkd9Q dr8RZQuRP42Ksrl7eSiqE6rjYHLwsMU= -----END CERTIFICATE-----Generated at Wed Oct 8 23:39:42 2025 by rpki-client