$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/6023380f-81e1-3c23-9a93-5a2487cd3da3.roa File: 6023380f-81e1-3c23-9a93-5a2487cd3da3.roa (raw, json) Hash identifier: yyxc4gcwil/CMB1qb7dWwPTRMT5JrGU2+3c8pUgmn9I= Subject key identifier: BA:73:55:4A:1D:77:73:A9:B5:BB:D1:95:F8:BF:2E:A0:6E:5A:36:F0 Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F4328584B456A6FB4F1A9438A7540B2C0 Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/6023380f-81e1-3c23-9a93-5a2487cd3da3.roa Signing time: Sun 21 Sep 2025 19:12:56 +0000 ROA not before: Sun 21 Sep 2025 19:12:56 +0000 ROA not after: Sat 20 Dec 2025 20:12:56 +0000 asID: 54416 IP address blocks: 23.130.156.0/24 maxlen: 32 2602:f766::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:45:6a:6f:b4:f1:a9:43:8a:75:40:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Sep 21 19:12:56 2025 GMT Not After : Dec 20 20:12:56 2025 GMT Subject: CN=d78dcce7-bf78-4440-b4de-66309a70c195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:ff:b6:5d:c0:66:a3:55:89:21:4c:c4:5d: 53:39:db:82:d0:75:45:81:09:75:44:b7:65:0d:8d: 15:3f:1b:c7:62:fa:50:f0:d1:db:18:7f:3f:27:04: 72:09:a9:83:f8:34:fc:a5:6b:e1:b1:99:ad:05:07: 40:b6:9b:6c:12:81:17:bb:7f:bd:ce:c5:5b:f0:8d: 22:36:1a:7e:fa:47:31:ef:fb:5c:58:65:fa:89:de: d5:2b:55:f2:aa:ff:5c:b5:de:6b:84:08:9f:ca:9a: 04:ad:56:d7:a0:72:2c:e8:62:28:18:9f:ae:12:59: 29:51:99:45:c6:6d:2e:bb:25:fb:cf:8a:0a:a0:5f: 95:d9:c3:09:74:27:5b:b1:7e:0f:bc:03:5b:ed:4d: ff:36:4e:56:3a:d8:cf:c8:94:9e:9d:b1:27:e2:b4: 04:bb:80:19:53:df:96:e9:97:1c:c2:fc:36:1a:d1: 63:c8:d0:e7:17:d0:4b:dd:f2:5c:0e:26:f9:9c:19: 51:0c:a6:d3:dc:05:b3:19:72:64:7f:42:af:5a:78: 07:f2:43:3a:1f:9f:7c:df:a3:6f:59:69:7c:da:45: 34:cb:31:d5:1a:53:00:0a:1b:ff:b9:86:cc:ea:07: 39:9b:77:a6:53:4f:16:4e:28:2a:59:c7:5e:ea:6e: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:73:55:4A:1D:77:73:A9:B5:BB:D1:95:F8:BF:2E:A0:6E:5A:36:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/6023380f-81e1-3c23-9a93-5a2487cd3da3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv4: 23.130.156.0/24 IPv6: 2602:f766::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:22:63:d8:0e:8d:78:36:78:30:46:f2:b7:31:5e:13:5a:d0: 01:6a:2b:92:15:98:c4:79:b8:8f:9a:4f:50:b2:53:8c:9a:3c: 9a:c6:85:d2:de:18:2d:16:bb:ed:d2:af:7a:ee:13:d3:ba:44: 4c:67:30:aa:2a:07:f7:f8:2f:a5:82:fe:df:cb:d7:ac:4a:8a: 92:76:28:de:46:1b:49:f8:8b:44:68:8c:c6:46:03:19:ad:b7: bc:de:83:21:c9:68:fc:09:e1:82:64:35:67:62:e7:2a:dc:11: 1d:b3:ef:fc:20:41:53:1c:e1:f0:a0:c2:aa:d9:3c:ef:ec:1a: a8:32:d5:ca:25:bc:53:b3:ac:a0:f0:d8:67:bd:37:91:97:76: 39:46:2a:b4:1a:d4:e3:93:7d:06:90:77:b0:11:d7:8f:ee:af: a1:2c:1e:bd:a9:f2:f6:82:e9:88:59:e2:53:b0:e0:80:2b:d0: 88:03:df:4a:00:11:93:89:cb:4b:35:47:3d:84:98:1d:91:46: cf:11:a0:43:62:aa:b7:31:33:b7:4d:aa:33:ef:79:0d:97:e8: 74:2b:3e:22:ec:96:34:af:7d:a8:a9:38:4b:9a:cd:cf:cf:cf: ab:31:2b:83:61:fc:ec:32:21:87:e5:fe:93:40:0a:75:c2:eb: f5:e8:15:09 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtFam+08alDinVAssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI1MDkyMTE5MTI1NloXDTI1MTIyMDIwMTI1NlowLzEtMCsGA1UEAxMk ZDc4ZGNjZTctYmY3OC00NDQwLWI0ZGUtNjYzMDlhNzBjMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+f/tl3AZqNViSFMxF1TOduC0HVFgQl1RLdl DY0VPxvHYvpQ8NHbGH8/JwRyCamD+DT8pWvhsZmtBQdAtptsEoEXu3+9zsVb8I0i Nhp++kcx7/tcWGX6id7VK1Xyqv9ctd5rhAifypoErVbXoHIs6GIoGJ+uElkpUZlF xm0uuyX7z4oKoF+V2cMJdCdbsX4PvANb7U3/Nk5WOtjPyJSenbEn4rQEu4AZU9+W 6Zccwvw2GtFjyNDnF9BL3fJcDib5nBlRDKbT3AWzGXJkf0KvWngH8kM6H59836Nv WWl82kU0yzHVGlMAChv/uYbM6gc5m3emU08WTigqWcde6m55fwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLpzVUodd3OptbvRlfi/LqBuWjbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvNjAyMzM4MGYtODFlMS0z YzIzLTlhOTMtNWEyNDg3Y2QzZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4KcMA4E AgACMAgDBgQmAvdmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArImPYDo14NngwRvK3MV4TWtABaiuSFZjE ebiPmk9QslOMmjyaxoXS3hgtFrvt0q967hPTukRMZzCqKgf3+C+lgv7fy9esSoqS dijeRhtJ+ItEaIzGRgMZrbe83oMhyWj8CeGCZDVnYucq3BEds+/8IEFTHOHwoMKq 2Tzv7BqoMtXKJbxTs6yg8NhnvTeRl3Y5Riq0GtTjk30GkHewEdeP7q+hLB69qfL2 gumIWeJTsOCAK9CIA99KABGTictLNUc9hJgdkUbPEaBDYqq3MTO3Taoz73kNl+h0 Kz4i7JY0r32oqThLms3Pz8+rMSuDYfzsMiGH5f6TQAp1wuv16BUJ -----END CERTIFICATE-----Generated at Fri Oct 10 17:47:30 2025 by rpki-client