$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa File: 707771ce-afb7-360a-9819-67b62be7adc9.roa (raw, json) Hash identifier: w99fJBqksbdcR8qlGLd15NFa6OKZMty71iMGAdWI6IY= Subject key identifier: 64:17:85:72:4C:9B:3D:39:2B:A7:9F:BE:46:25:42:32:55:DB:FB:2B Certificate issuer: /CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0 Certificate serial: 010D0C9F4328584B0A118E8D15730E1168B26680 Authority key identifier: 65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 46161 IP address blocks: 23.135.28.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:8e:8d:15:73:0e:11:68:b2:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=4cfd22d3-496a-4a0c-b4c0-30357aa4e8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:36:76:64:32:f3:f1:0c:c3:48:52:d4:91: 82:f2:d8:71:7c:1c:99:52:2e:46:9c:a5:a3:8c:b8: 39:53:5f:dc:ea:3d:5e:10:ae:17:cd:89:9f:99:c4: d6:5f:17:ec:2b:2a:a1:9c:b2:d6:9e:71:85:2d:dd: ee:72:5a:db:cd:b0:ac:be:2c:b2:de:1a:6a:5e:5c: aa:d2:c0:ce:eb:70:05:23:91:00:f2:bf:78:42:ee: 86:f4:3c:1f:66:f4:43:c5:ec:64:ac:fa:57:eb:8c: 4b:8a:f1:59:37:ef:ec:35:c3:2f:bf:c1:2b:30:e9: 7d:7d:34:af:c6:15:d3:5f:4e:fd:59:9e:ac:04:37: ae:e9:3a:79:f8:46:06:d5:ea:d0:db:59:f1:f1:f2: ab:ff:c8:eb:eb:ab:1f:09:cc:94:ec:d7:d8:8f:ac: 26:9c:ab:f1:ec:0f:de:9e:da:8f:b7:0b:a1:45:93: f0:fd:83:8f:d3:46:82:9c:04:f7:78:4d:55:ca:e8: dc:e9:79:3c:7e:94:c3:91:7c:3c:c6:46:19:65:8a: 62:1a:e3:af:c4:c5:19:98:6d:5d:1f:da:4d:20:06: 7e:b8:54:be:b5:94:79:04:49:cd:bd:c0:f2:cd:06: c2:42:ec:ef:4a:58:69:b6:8c:56:60:cc:60:01:1a: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:17:85:72:4C:9B:3D:39:2B:A7:9F:BE:46:25:42:32:55:DB:FB:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl X509v3 Authority Key Identifier: keyid:65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer sbgp-ipAddrBlock: critical IPv4: 23.135.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f4:1d:14:3c:e8:04:32:8e:4e:db:e9:7d:ee:5e:c0:90:ac: 13:23:9f:13:5f:fe:0b:89:5a:e2:bc:b3:a6:16:c7:e3:44:fc: c0:4d:40:8d:1a:79:44:bc:db:00:53:9f:31:8a:a1:b6:49:b0: df:04:dd:83:ba:88:67:78:04:1a:81:de:8c:d3:34:7c:22:fb: 4a:e8:0b:90:e6:b1:c3:e9:d5:2d:fd:16:2c:fb:76:f6:cc:42: 24:64:ee:8a:02:94:77:2f:e5:51:0e:7a:8a:41:00:c8:8f:af: 9c:19:8d:7e:f3:32:69:e1:cc:6b:43:2e:1c:64:27:db:32:08: f5:b3:00:08:86:94:de:df:19:ec:ea:03:b0:8b:02:76:17:08: bb:6b:38:b7:8f:87:82:e7:fc:15:73:38:06:0c:34:b8:a5:26: 99:e9:38:15:a1:0f:51:0d:56:f4:77:18:da:02:38:07:46:81: 72:d6:fe:38:6c:71:12:e9:d8:84:46:7b:f6:8a:e4:b0:44:7b: 14:2e:12:e7:89:14:fd:b8:16:79:1f:d9:f8:99:bc:43:d0:1d: b6:0a:86:60:46:67:34:db:c8:4c:5f:3a:88:19:55:d6:f5:c1: cb:54:55:1a:60:87:4e:ab:ce:d7:7a:1f:c6:19:62:5b:dc:4e: aa:e8:8b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEY6NFXMOEWiyZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MzY4YjAtMWVhYy00ZmViLTgxY2QtZjBlNGU3MWZj ZGMwMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NGNmZDIyZDMtNDk2YS00YTBjLWI0YzAtMzAzNTdhYTRlOGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo702dmQy8/EMw0hS1JGC8thxfByZUi5GnKWj jLg5U1/c6j1eEK4XzYmfmcTWXxfsKyqhnLLWnnGFLd3uclrbzbCsviyy3hpqXlyq 0sDO63AFI5EA8r94Qu6G9DwfZvRDxexkrPpX64xLivFZN+/sNcMvv8ErMOl9fTSv xhXTX079WZ6sBDeu6Tp5+EYG1erQ21nx8fKr/8jr66sfCcyU7NfYj6wmnKvx7A/e ntqPtwuhRZPw/YOP00aCnAT3eE1Vyujc6Xk8fpTDkXw8xkYZZYpiGuOvxMUZmG1d H9pNIAZ+uFS+tZR5BEnNvcDyzQbCQuzvSlhptoxWYMxgARqSbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQXhXJMmz05K6efvkYlQjJV2/srMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzgz NjhiMC0xZWFjLTRmZWItODFjZC1mMGU0ZTcxZmNkYzAvNzA3NzcxY2UtYWZiNy0z NjBhLTk4MTktNjdiNjJiZTdhZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM4MzY4YjAtMWVhYy00ZmViLTgx Y2QtZjBlNGU3MWZjZGMwLzEzODM2OGIwLTFlYWMtNGZlYi04MWNkLWYwZTRlNzFm Y2RjMC5jcmwwHwYDVR0jBBgwFoAUZa7z344nMTe3V6INVL1Suu5ygPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzgzNjhiMC0xZWFjLTRmZWItODFjZC1mMGU0 ZTcxZmNkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL0HRQ86AQyjk7b6X3uXsCQrBMjnxNf/guJWuK8s6YWx+NE/MBNQI0a eUS82wBTnzGKobZJsN8E3YO6iGd4BBqB3ozTNHwi+0roC5DmscPp1S39Fiz7dvbM QiRk7ooClHcv5VEOeopBAMiPr5wZjX7zMmnhzGtDLhxkJ9syCPWzAAiGlN7fGezq A7CLAnYXCLtrOLePh4Ln/BVzOAYMNLilJpnpOBWhD1ENVvR3GNoCOAdGgXLW/jhs cRLp2IRGe/aK5LBEexQuEueJFP24Fnkf2fiZvEPQHbYKhmBGZzTbyExfOogZVdb1 wctUVRpgh06rztd6H8YZYlvcTqroi/o= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:32 2025 by rpki-client