$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa File: 2de66478-b3a7-3d96-906b-0f63430b0ee2.roa (raw, json) Hash identifier: 4wfvd915g5VYO0d2arLCTkZIAnEGvCItYB3mBEdk6QQ= Subject key identifier: 59:38:D6:71:09:5A:4E:95:F7:AC:48:F9:1B:BB:AE:D8:D6:E4:3F:82 Certificate issuer: /CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb Certificate serial: 010D0C9F4328584B328C506CFEE60FD6E78A6500 Authority key identifier: C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 138997 IP address blocks: 23.128.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:50:6c:fe:e6:0f:d6:e7:8a:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=2e9808a4-b3dc-4d6c-a745-a5b5635e0a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:e1:ad:0c:82:63:40:e8:66:4e:79:01:08: 8e:f3:51:3e:d1:b8:a9:5a:27:6d:36:ac:d4:d1:9a: 1c:54:16:eb:3f:52:10:c7:f1:0e:3b:40:af:43:4d: fe:24:9b:1d:ea:21:a0:25:63:f8:2d:b7:26:a0:50: b3:98:21:2f:b4:90:cd:9c:80:38:0e:c5:f7:10:71: 10:4c:f8:d8:eb:09:07:a8:db:c1:1d:e6:54:ec:b6: a6:b8:06:d3:b4:df:0f:ed:dd:5e:82:86:7a:fc:28: 89:82:75:93:64:bb:f7:ee:ab:fa:1c:76:cd:d4:4e: 96:28:d3:45:be:07:b9:13:3a:9f:d9:20:06:31:f1: 0e:9b:e2:c0:a8:38:96:80:ca:57:05:9a:3b:5b:c5: e3:55:83:f1:cb:1c:12:72:65:d7:98:b9:be:bb:d2: 94:0f:22:fb:01:9c:98:76:4e:a3:87:04:a0:87:5b: 1c:9a:2c:a1:6f:4d:0b:92:fb:38:9a:dc:46:9a:43: f7:5d:ec:67:35:d7:b2:4f:7f:c2:1a:e0:55:3b:1d: 93:8f:78:f9:b0:b0:28:78:74:b8:f3:7d:76:4f:6f: 72:eb:00:bf:c3:28:4d:2a:1b:73:e7:7c:0d:40:4a: dd:04:88:01:d7:0e:43:bb:b4:ee:e9:f3:4f:9e:6d: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:38:D6:71:09:5A:4E:95:F7:AC:48:F9:1B:BB:AE:D8:D6:E4:3F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl X509v3 Authority Key Identifier: keyid:C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer sbgp-ipAddrBlock: critical IPv4: 23.128.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ed:03:51:3c:bc:43:0a:c8:e8:5e:78:50:73:4e:9a:9b:9d: 71:23:e6:5f:e5:f2:69:0e:d6:13:8d:80:fc:e0:09:31:20:bd: 5c:bd:99:40:65:d0:b5:82:38:cd:0b:a8:29:3a:2c:a8:88:01: 7d:00:73:7f:d4:8f:7e:3d:b9:21:f8:a8:26:6f:d5:a1:35:d6: b7:68:95:c9:32:4f:6d:16:e2:eb:7a:bf:77:73:46:33:c5:d1: ee:15:b1:19:12:5b:83:87:4c:38:fc:af:43:d4:34:f2:64:c6: 5b:aa:ea:de:fa:e2:22:00:9e:74:c9:c7:af:f7:4d:11:67:aa: 85:ee:c1:26:e0:47:c8:9b:07:5e:b0:bf:f8:e8:6b:a0:fe:5d: c2:50:af:0a:4a:00:d1:40:64:45:68:59:10:84:c0:ec:a0:ad: f9:18:81:d0:fc:a4:29:6f:cd:28:68:9f:b5:ac:83:a4:8c:ab: 43:d8:aa:f2:83:5e:b7:0e:c1:84:b9:2f:34:cd:46:4c:36:2f: f6:19:ce:6b:11:93:46:83:ab:d8:ea:be:53:18:50:1a:1a:96: 1d:6c:6a:ea:ad:78:f4:a9:69:21:96:91:21:69:9d:8f:93:ee: 22:0a:83:3a:65:64:0c:fe:7b:4c:3b:3a:29:f6:99:1f:dd:1b: 47:9e:75:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjFBs/uYP1ueKZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI0ZDY1MTgtMDQxNS00ZTdhLWEwZTktNmVkODc1YjMy ZmRiMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MmU5ODA4YTQtYjNkYy00ZDZjLWE3NDUtYTViNTYzNWUwYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tDhrQyCY0DoZk55AQiO81E+0bipWidtNqzU 0ZocVBbrP1IQx/EOO0CvQ03+JJsd6iGgJWP4LbcmoFCzmCEvtJDNnIA4DsX3EHEQ TPjY6wkHqNvBHeZU7LamuAbTtN8P7d1egoZ6/CiJgnWTZLv37qv6HHbN1E6WKNNF vge5Ezqf2SAGMfEOm+LAqDiWgMpXBZo7W8XjVYPxyxwScmXXmLm+u9KUDyL7AZyY dk6jhwSgh1scmiyhb00Lkvs4mtxGmkP3XexnNdeyT3/CGuBVOx2Tj3j5sLAoeHS4 8312T29y6wC/wyhNKhtz53wNQErdBIgB1w5Du7Tu6fNPnm3ppQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFk41nEJWk6V96xI+Ru7rtjW5D+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMjRk NjUxOC0wNDE1LTRlN2EtYTBlOS02ZWQ4NzViMzJmZGIvMmRlNjY0NzgtYjNhNy0z ZDk2LTkwNmItMGY2MzQzMGIwZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTI0ZDY1MTgtMDQxNS00ZTdhLWEw ZTktNmVkODc1YjMyZmRiL2EyNGQ2NTE4LTA0MTUtNGU3YS1hMGU5LTZlZDg3NWIz MmZkYi5jcmwwHwYDVR0jBBgwFoAUyVxZkrmXLpqKw5T+UN6kAlVJX/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMjRkNjUxOC0wNDE1LTRlN2EtYTBlOS02ZWQ4 NzViMzJmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7tA1E8vEMKyOheeFBzTpqbnXEj5l/l8mkO1hONgPzgCTEgvVy9mUBl 0LWCOM0LqCk6LKiIAX0Ac3/Uj349uSH4qCZv1aE11rdolckyT20W4ut6v3dzRjPF 0e4VsRkSW4OHTDj8r0PUNPJkxluq6t764iIAnnTJx6/3TRFnqoXuwSbgR8ibB16w v/joa6D+XcJQrwpKANFAZEVoWRCEwOygrfkYgdD8pClvzShon7Wsg6SMq0PYqvKD XrcOwYS5LzTNRkw2L/YZzmsRk0aDq9jqvlMYUBoalh1sauqtePSpaSGWkSFpnY+T 7iIKgzplZAz+e0w7Oin2mR/dG0eeddw= -----END CERTIFICATE-----Generated at Fri Oct 10 17:28:46 2025 by rpki-client