$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa File: 8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa (raw, json) Hash identifier: mGvohyuZEmOPfpU52gLOm2xKiwsbPND62NUR92cq/EY= Subject key identifier: 54:C2:52:CB:14:72:6C:9B:61:A3:32:B2:29:AB:EE:D4:DA:B5:DF:A8 Certificate issuer: /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Certificate serial: 010D0C9F4328584B25FC4562CC2C3098AE58F880 Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 401578 IP address blocks: 23.136.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:45:62:cc:2c:30:98:ae:58:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=7b90c869-8b2a-4068-9e62-61401c471be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:0a:50:33:de:82:fe:c6:99:f7:90:a1:bc: 0b:1d:8b:80:ab:00:b0:e7:2f:64:00:a4:ed:39:dc: 07:c7:6e:41:7d:a4:a7:fd:0e:d8:42:89:38:11:f9: 3e:0b:41:66:71:79:e1:b1:75:d1:29:56:f5:3b:7d: 7c:b2:bd:db:ad:88:69:ff:10:7d:35:cf:5a:f1:49: ec:a8:fc:77:84:de:22:dc:43:49:87:d7:f5:2a:83: 1a:6e:09:2c:22:20:5c:d6:cb:69:ad:95:ba:48:9e: 77:ea:e7:e6:bc:d6:ee:a0:8b:25:9f:09:e2:76:b0: 27:81:8b:66:72:55:4a:24:18:0b:78:f1:f9:09:df: 03:af:63:49:c3:d5:31:ab:38:c4:64:75:81:58:73: 1a:98:c1:8e:45:cf:76:1d:ce:4b:98:99:05:db:89: cc:10:67:00:01:98:8e:60:ab:49:29:78:ce:6d:f2: 07:d3:c2:87:4c:8f:07:6e:1b:a3:02:0a:24:9e:77: cd:7e:f6:7d:23:d0:89:1a:05:70:4c:25:64:08:5f: ed:ea:4a:e8:9a:04:74:04:63:67:7b:f8:13:38:5c: 9d:bc:50:08:8a:8c:c8:71:57:39:be:8c:ee:20:48: 86:0e:60:9e:ad:16:34:22:5d:f4:98:71:37:82:55: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C2:52:CB:14:72:6C:9B:61:A3:32:B2:29:AB:EE:D4:DA:B5:DF:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/8dc3e679-c464-3a7c-ae12-37071a5ab2e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl X509v3 Authority Key Identifier: keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer sbgp-ipAddrBlock: critical IPv4: 23.136.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5d:42:f1:4f:f4:df:e7:6c:42:e9:03:d3:5a:f2:09:ab:d3: 2a:18:54:24:33:13:62:c9:a8:14:51:25:a4:64:ac:43:36:7f: 61:4d:99:d4:a3:57:4e:69:7f:b5:ab:b9:bc:98:b0:96:c3:91: f4:b2:c8:dc:de:6c:63:f5:de:d9:3c:27:5d:fc:4b:bc:d3:c5: 24:2e:dc:59:58:33:e9:c4:b7:16:5d:a5:66:c5:57:82:73:6e: d1:6f:74:23:1a:70:ff:cc:26:0a:d9:d2:46:fb:e4:54:f2:14: ed:44:3c:5e:77:39:34:ef:e8:06:e8:1e:fb:3b:b7:b1:bd:64: dc:1d:e6:4f:19:de:0a:78:ca:f3:91:83:76:62:15:6b:39:19: a1:1e:53:7e:9c:77:17:6d:f4:97:b1:34:b9:34:4c:b7:89:5d: 9f:4f:3b:8b:24:aa:5e:b1:1b:31:2a:78:77:e1:30:e4:01:a7: 6c:74:81:95:8c:03:29:f0:93:08:a1:b5:e1:4b:c1:16:01:04: 82:30:0c:d4:0e:38:6f:35:ef:0c:0b:29:79:3a:cf:17:05:aa: b4:47:df:4d:53:19:e8:b4:16:9e:e6:94:07:76:b9:37:0b:be: 74:ce:04:07:f6:a9:97:1a:cf:06:ac:36:c9:fe:c1:78:a5:9f: 46:cc:c4:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EVizCwwmK5Y+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyM2E1ZjEtZTllNy00ZDUzLWI2MTUtZjhhZmIxN2Iy OWM1MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk N2I5MGM4NjktOGIyYS00MDY4LTllNjItNjE0MDFjNDcxYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS4KUDPegv7GmfeQobwLHYuAqwCw5y9kAKTt OdwHx25BfaSn/Q7YQok4Efk+C0FmcXnhsXXRKVb1O318sr3brYhp/xB9Nc9a8Uns qPx3hN4i3ENJh9f1KoMabgksIiBc1stprZW6SJ536ufmvNbuoIslnwnidrAngYtm clVKJBgLePH5Cd8Dr2NJw9UxqzjEZHWBWHMamMGORc92Hc5LmJkF24nMEGcAAZiO YKtJKXjObfIH08KHTI8HbhujAgoknnfNfvZ9I9CJGgVwTCVkCF/t6kromgR0BGNn e/gTOFydvFAIiozIcVc5vozuIEiGDmCerRY0Il30mHE3glVB+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTCUssUcmybYaMysimr7tTatd+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMTIz YTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFmYjE3YjI5YzUvOGRjM2U2NzktYzQ2NC0z YTdjLWFlMTItMzcwNzFhNWFiMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTEyM2E1ZjEtZTllNy00ZDUzLWI2 MTUtZjhhZmIxN2IyOWM1L2ExMjNhNWYxLWU5ZTctNGQ1My1iNjE1LWY4YWZiMTdi MjljNS5jcmwwHwYDVR0jBBgwFoAUyW18ReNNaaWN99LTwrp4KHA8TlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMTIzYTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFm YjE3YjI5YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEddQvFP9N/nbELpA9Na8gmr0yoYVCQzE2LJqBRRJaRkrEM2f2FNmdSj V05pf7WrubyYsJbDkfSyyNzebGP13tk8J138S7zTxSQu3FlYM+nEtxZdpWbFV4Jz btFvdCMacP/MJgrZ0kb75FTyFO1EPF53OTTv6AboHvs7t7G9ZNwd5k8Z3gp4yvOR g3ZiFWs5GaEeU36cdxdt9JexNLk0TLeJXZ9PO4skql6xGzEqeHfhMOQBp2x0gZWM AynwkwihteFLwRYBBIIwDNQOOG817wwLKXk6zxcFqrRH301TGei0Fp7mlAd2uTcL vnTOBAf2qZcazwasNsn+wXiln0bMxBk= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:18 2025 by rpki-client