$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1/fc36f089-a0a8-39e6-8ad4-b0580ca4fcb6.roa File: fc36f089-a0a8-39e6-8ad4-b0580ca4fcb6.roa (raw, json) Hash identifier: hNdC4C6fhukIs/bnS29dpkLpgklb1W4QsWSFa2qF1o8= Subject key identifier: 7C:11:64:75:40:B0:86:F8:DB:10:38:57:99:2A:FA:01:B0:54:FB:20 Certificate issuer: /CN=0a6ed975-e97f-447c-b916-91372fa9dbe1 Certificate serial: 010D0C9F4328584B48E1AAE5A802A4C4184D7640 Authority key identifier: E0:4E:B7:2E:AE:14:97:DC:29:F6:29:B4:9E:24:9A:FD:26:FE:CB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1/fc36f089-a0a8-39e6-8ad4-b0580ca4fcb6.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 7018 IP address blocks: 23.132.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1/0a6ed975-e97f-447c-b916-91372fa9dbe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1/0a6ed975-e97f-447c-b916-91372fa9dbe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:aa:e5:a8:02:a4:c4:18:4d:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a6ed975-e97f-447c-b916-91372fa9dbe1 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=41e5be8b-6ef6-4941-8d7a-d57bfaf54697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:c4:bd:0d:42:f8:a9:87:f7:1b:0a:5c:f4: c5:27:ee:2c:24:99:92:67:07:0a:fe:82:08:41:5d: 40:46:7c:a6:f9:c8:98:d2:23:4c:37:c5:9a:ec:d2: 0b:a3:70:3b:8a:e3:f7:e7:32:16:ba:5f:a4:c3:03: 3e:c7:26:14:81:93:b6:89:7c:32:3a:32:8d:fe:85: 66:ec:78:95:58:19:1d:af:59:f5:6d:ae:26:8b:be: 38:d6:80:f0:03:65:f4:44:be:15:30:97:f7:4f:12: 83:e8:f7:4e:6c:df:eb:33:da:65:52:27:73:cb:ab: 5c:3f:85:d1:a8:da:f5:43:9d:c6:d3:16:8c:77:12: b5:50:e2:c0:c8:94:00:c3:08:85:17:fb:d8:e6:7e: 2b:f3:34:08:d4:01:4d:19:a9:4f:99:bf:93:4d:20: d2:a8:85:f8:ed:70:38:2d:b4:4f:4f:10:70:c4:d1: ab:6c:5d:d9:a4:23:c8:7e:e9:78:ce:fa:f0:d8:78: 50:9a:0e:f8:f2:ba:86:7e:a8:fe:dd:b6:b9:8f:aa: e4:2b:09:48:69:84:2a:88:dd:37:2a:bf:45:70:ce: da:52:08:00:c5:52:e8:24:8b:54:3c:c0:8a:94:26: af:b7:57:bf:bd:7f:06:a1:93:6c:ab:e3:ea:ad:1c: 39:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:11:64:75:40:B0:86:F8:DB:10:38:57:99:2A:FA:01:B0:54:FB:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1/fc36f089-a0a8-39e6-8ad4-b0580ca4fcb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1/0a6ed975-e97f-447c-b916-91372fa9dbe1.crl X509v3 Authority Key Identifier: keyid:E0:4E:B7:2E:AE:14:97:DC:29:F6:29:B4:9E:24:9A:FD:26:FE:CB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a6ed975-e97f-447c-b916-91372fa9dbe1.cer sbgp-ipAddrBlock: critical IPv4: 23.132.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e0:0d:5b:b4:c7:4d:b8:d5:4e:0d:94:a6:fa:32:82:e7:01: c8:de:20:df:04:c1:48:0c:24:29:ed:d5:0d:15:c8:f8:a1:b1: 23:89:dd:8b:9b:2b:61:aa:26:ca:59:e0:92:5f:c3:b9:2b:ab: 93:b6:67:ed:44:31:3b:44:59:c8:bd:d8:2c:3d:06:5e:5e:54: c5:fc:f8:73:43:2a:e9:c3:eb:7f:9d:7a:0e:19:29:ed:1e:72: 24:74:85:c2:43:ff:f9:85:30:88:e4:e8:52:a0:cf:47:c3:6e: 60:75:6e:40:97:9a:09:08:44:4a:1f:e5:68:2d:57:89:49:e4: 41:23:96:e3:39:fb:4b:7c:6b:c9:5c:7f:6c:f7:87:04:56:20: 72:86:a1:9a:10:47:71:26:9b:e1:5d:5a:4a:3e:6a:c4:b7:cc: 3b:94:9c:c1:bb:c0:a4:32:6d:33:74:00:57:2a:2c:9b:59:a0: 1e:d0:52:cc:e2:53:34:31:7b:4f:10:fa:a4:4b:1a:83:9b:3e: 98:51:71:e7:0b:ed:ef:e7:4b:c6:da:79:ab:03:ef:39:66:fc: 08:dc:7d:4a:35:c9:e6:fc:8f:0e:e4:a5:de:21:ab:88:eb:23: 88:be:8e:25:58:3b:8b:83:15:b1:83:bf:2e:ab:27:3d:f2:91: a6:18:65:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4arlqAKkxBhNdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE2ZWQ5NzUtZTk3Zi00NDdjLWI5MTYtOTEzNzJmYTlk YmUxMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDFlNWJlOGItNmVmNi00OTQxLThkN2EtZDU3YmZhZjU0Njk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+/EvQ1C+KmH9xsKXPTFJ+4sJJmSZwcK/oII QV1ARnym+ciY0iNMN8Wa7NILo3A7iuP35zIWul+kwwM+xyYUgZO2iXwyOjKN/oVm 7HiVWBkdr1n1ba4mi7441oDwA2X0RL4VMJf3TxKD6PdObN/rM9plUidzy6tcP4XR qNr1Q53G0xaMdxK1UOLAyJQAwwiFF/vY5n4r8zQI1AFNGalPmb+TTSDSqIX47XA4 LbRPTxBwxNGrbF3ZpCPIful4zvrw2HhQmg748rqGfqj+3ba5j6rkKwlIaYQqiN03 Kr9FcM7aUggAxVLoJItUPMCKlCavt1e/vX8GoZNsq+PqrRw55wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwRZHVAsIb42xA4V5kq+gGwVPsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wYTZl ZDk3NS1lOTdmLTQ0N2MtYjkxNi05MTM3MmZhOWRiZTEvZmMzNmYwODktYTBhOC0z OWU2LThhZDQtYjA1ODBjYTRmY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGE2ZWQ5NzUtZTk3Zi00NDdjLWI5 MTYtOTEzNzJmYTlkYmUxLzBhNmVkOTc1LWU5N2YtNDQ3Yy1iOTE2LTkxMzcyZmE5 ZGJlMS5jcmwwHwYDVR0jBBgwFoAU4E63Lq4Ul9wp9im0niSa/Sb+yy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wYTZlZDk3NS1lOTdmLTQ0N2MtYjkxNi05MTM3 MmZhOWRiZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4TMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzgDVu0x0241U4NlKb6MoLnAcjeIN8EwUgMJCnt1Q0VyPihsSOJ3Yub K2GqJspZ4JJfw7krq5O2Z+1EMTtEWci92Cw9Bl5eVMX8+HNDKunD63+deg4ZKe0e ciR0hcJD//mFMIjk6FKgz0fDbmB1bkCXmgkIREof5WgtV4lJ5EEjluM5+0t8a8lc f2z3hwRWIHKGoZoQR3Emm+FdWko+asS3zDuUnMG7wKQybTN0AFcqLJtZoB7QUszi UzQxe08Q+qRLGoObPphRcecL7e/nS8baeasD7zlm/AjcfUo1yeb8jw7kpd4hq4jr I4i+jiVYO4uDFbGDvy6rJz3ykaYYZV8= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:57 2025 by rpki-client