$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa File: cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa (raw, json) Hash identifier: eYLM7fuXDykwS4ZNKMsp3CMtFTMyZjiF8R66aQV8VbE= Subject key identifier: 39:91:9C:B7:29:06:61:0D:34:96:57:9C:89:7D:F3:D7:52:E8:EB:7D Certificate issuer: /CN=d884379a-447d-445c-b465-3fe894aa66ec Certificate serial: 010D0C9F4328584B249706D2455DC8A1D0F60F40 Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 399861 IP address blocks: 23.134.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:97:06:d2:45:5d:c8:a1:d0:f6:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=f152473b-2f78-4415-98b8-0e648fac5882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:ca:1e:45:af:c2:f5:c9:46:bb:b0:e6:a5: cb:13:f6:6b:f9:2b:d8:be:37:18:57:a1:a2:0c:98: 00:05:ba:62:9c:7e:c0:d8:ff:47:fd:d4:08:4e:52: 2f:a1:a3:d5:03:cf:55:22:18:97:60:d7:cf:d8:af: df:e7:f0:0c:36:c8:18:79:4c:1d:cf:88:a5:40:87: 41:9c:ef:32:d2:0b:f9:d0:e8:f0:3e:e2:d3:99:ca: 87:08:2d:29:20:3d:23:8b:bc:d3:5b:04:2d:f2:e1: e4:d1:e4:25:ed:2f:f1:52:07:09:cc:dd:a0:d2:5e: 2c:48:1f:3c:c1:0f:b7:22:6b:70:12:73:16:fb:6f: 34:17:95:7b:e5:9c:4c:78:81:8a:c6:17:72:a6:bc: 94:9f:1c:c2:b9:6e:92:9a:6a:37:20:7b:b5:c7:df: 77:3d:f9:0d:90:cd:94:a3:83:ba:ab:93:7d:c8:d3: 85:9e:a9:d9:9f:8b:15:9e:b8:bd:75:d8:38:2a:7f: 53:0a:7a:18:67:39:75:d1:62:ad:f7:5e:49:51:08: 4e:a1:47:a8:0f:0b:21:98:23:89:9f:18:a6:38:79: 15:bf:6a:ab:1f:43:33:dc:89:d2:19:92:9f:05:31: da:0f:e7:cf:18:9f:61:84:ea:6d:b7:68:d8:3c:a8: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:91:9C:B7:29:06:61:0D:34:96:57:9C:89:7D:F3:D7:52:E8:EB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/cfc32e8b-4d6d-3163-94a2-7ec1aff452a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl X509v3 Authority Key Identifier: keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:37:c9:13:72:5d:e7:09:06:b6:2b:c7:bf:35:da:0e:0b:9a: fb:d1:4d:53:77:5a:51:4d:a1:be:04:55:b7:46:8d:b4:89:b5: b3:e6:b1:fc:1a:ef:a4:7f:5f:dd:14:64:f3:1b:69:c8:ff:5f: f8:3e:0e:e0:e6:6c:3b:6f:bc:49:44:09:c0:35:85:4b:7a:37: 8f:39:5d:c8:8d:e9:af:53:3a:8e:f0:df:1b:d9:f5:ae:06:f4: a6:5a:4f:db:34:75:fd:30:07:58:3a:55:a1:22:03:64:c1:18: 2f:a1:6c:3a:52:f9:d0:35:67:9f:f1:78:21:b4:b6:b0:10:29: 70:32:35:ad:da:97:26:4f:9d:03:04:e3:c2:84:e2:da:fa:36: 23:41:2a:d2:74:29:7f:b2:7d:0d:1e:02:54:e6:09:f4:c8:da: 75:43:c7:ed:b5:30:a7:e6:75:bd:c1:63:e4:78:b4:ad:a4:fd: ff:79:02:50:13:41:e1:fc:60:76:47:4c:89:54:fc:e4:fb:e7: 16:06:68:f8:65:2b:cf:c8:a5:76:c1:1a:72:29:9e:14:0a:b7: 8a:53:c8:f2:e9:75:3e:9a:06:5f:49:db:0d:85:7b:37:7d:4f: 9d:ed:c9:7a:47:48:53:7a:7e:0e:f4:4b:44:36:a7:71:17:f6: b1:2a:09:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklwbSRV3IodD2D0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NDM3OWEtNDQ3ZC00NDVjLWI0NjUtM2ZlODk0YWE2 NmVjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZjE1MjQ3M2ItMmY3OC00NDE1LTk4YjgtMGU2NDhmYWM1ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAfKHkWvwvXJRruw5qXLE/Zr+SvYvjcYV6Gi DJgABbpinH7A2P9H/dQITlIvoaPVA89VIhiXYNfP2K/f5/AMNsgYeUwdz4ilQIdB nO8y0gv50OjwPuLTmcqHCC0pID0ji7zTWwQt8uHk0eQl7S/xUgcJzN2g0l4sSB88 wQ+3ImtwEnMW+280F5V75ZxMeIGKxhdypryUnxzCuW6Smmo3IHu1x993PfkNkM2U o4O6q5N9yNOFnqnZn4sVnri9ddg4Kn9TCnoYZzl10WKt915JUQhOoUeoDwshmCOJ nximOHkVv2qrH0Mz3InSGZKfBTHaD+fPGJ9hhOptt2jYPKgD4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmRnLcpBmENNJZXnIl989dS6Ot9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kODg0 Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4OTRhYTY2ZWMvY2ZjMzJlOGItNGQ2ZC0z MTYzLTk0YTItN2VjMWFmZjQ1MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDg4NDM3OWEtNDQ3ZC00NDVjLWI0 NjUtM2ZlODk0YWE2NmVjL2Q4ODQzNzlhLTQ0N2QtNDQ1Yy1iNDY1LTNmZTg5NGFh NjZlYy5jcmwwHwYDVR0jBBgwFoAUCaY/g3z0aM5v5uBZTUdBH5jhZpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kODg0Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4 OTRhYTY2ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4b0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF43yRNyXecJBrYrx7812g4LmvvRTVN3WlFNob4EVbdGjbSJtbPmsfwa 76R/X90UZPMbacj/X/g+DuDmbDtvvElECcA1hUt6N485XciN6a9TOo7w3xvZ9a4G 9KZaT9s0df0wB1g6VaEiA2TBGC+hbDpS+dA1Z5/xeCG0trAQKXAyNa3alyZPnQME 48KE4tr6NiNBKtJ0KX+yfQ0eAlTmCfTI2nVDx+21MKfmdb3BY+R4tK2k/f95AlAT QeH8YHZHTIlU/OT75xYGaPhlK8/IpXbBGnIpnhQKt4pTyPLpdT6aBl9J2w2Fezd9 T53tyXpHSFN6fg70S0Q2p3EX9rEqCek= -----END CERTIFICATE-----Generated at Fri Oct 10 19:58:31 2025 by rpki-client