$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa File: c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa (raw, json) Hash identifier: /4nhE9ugYba5AcAbaXa90JR/BDSpXemI38vcKWOwsxU= Subject key identifier: 14:15:9B:83:87:5E:E8:B4:9E:8A:95:72:A1:9B:08:25:83:F5:E8:CE Certificate issuer: /CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Certificate serial: 010D0C9F4328584B36BC4D888CF96C42A55DEE00 Authority key identifier: 52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 11655 IP address blocks: 23.128.92.0/24 maxlen: 24 2602:f979::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4d:88:8c:f9:6c:42:a5:5d:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e97ddc1-e605-46cf-bcf5-048f8d8eb41a Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=cb3644a4-0143-457e-bd87-45738d73ab64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:d8:51:5a:25:c0:52:b6:8f:32:c9:c7:fd: 89:d4:66:19:75:dc:51:46:38:01:b1:bf:11:2f:d6: cd:be:76:d0:53:a4:4a:9f:b1:81:72:94:82:e3:d5: 52:71:94:f6:b1:08:3b:f1:fc:64:23:0f:82:21:d0: ef:f7:f1:58:f9:3a:7d:4b:13:20:87:89:1d:fa:80: 47:14:9b:67:8a:ab:78:60:56:15:95:69:14:26:4a: 1b:47:41:18:0f:68:cc:77:5b:8e:68:f8:2a:7f:66: 5f:2d:f3:4c:b6:0e:e8:ca:e7:a0:41:c1:6e:12:25: 6d:cb:02:78:5e:d6:a9:ae:35:02:58:d5:15:3a:53: 3d:f2:4d:c2:21:85:55:5e:42:75:8b:74:60:5f:a9: bf:36:b9:54:42:6a:5d:a7:43:f2:f6:25:d7:75:cd: 9f:91:d8:f0:90:98:8f:7f:fa:c8:83:f9:fa:76:69: e3:e3:9a:d6:f8:5f:6e:67:87:40:ef:6b:ee:55:f4: 04:49:a9:19:55:cc:3a:33:41:b7:36:37:3d:21:44: 98:54:e0:13:1c:11:37:50:3c:7e:6b:b1:3a:3a:fa: 63:95:12:96:2e:31:03:15:ec:04:23:9f:e0:f3:71: 91:23:85:01:68:d1:06:a6:3e:d1:44:d1:7c:94:73: f9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:15:9B:83:87:5E:E8:B4:9E:8A:95:72:A1:9B:08:25:83:F5:E8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/c6afc596-0b9b-3e43-b3b3-f7b83df310c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.crl X509v3 Authority Key Identifier: keyid:52:1A:57:8E:2A:C7:61:B5:E3:66:CB:74:74:61:80:E0:B1:16:4A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e97ddc1-e605-46cf-bcf5-048f8d8eb41a.cer sbgp-ipAddrBlock: critical IPv4: 23.128.92.0/24 IPv6: 2602:f979::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:09:e2:9e:65:73:86:ad:b8:38:5d:cb:00:64:8e:2d:17:47: ff:0b:a0:58:57:e2:d0:6c:0a:8b:5b:c2:19:16:26:c1:81:9c: 12:4b:59:85:7a:8e:b6:3e:32:1b:17:74:73:bc:80:1a:02:8f: b1:62:3e:6e:c6:cb:83:41:64:fb:59:5d:07:9f:9a:7b:0f:c5: 9a:57:0e:00:4b:31:52:88:85:e1:2f:f5:e9:f8:05:c8:dd:b1: 00:53:08:42:73:19:49:6e:e4:05:e0:7d:60:d7:0e:08:cf:9f: 6a:e7:24:fb:2c:98:94:79:c4:3d:4d:46:5f:40:5c:67:57:68: e5:e4:5c:57:80:a6:68:e4:fe:bd:c5:1c:05:bd:cf:7f:b4:19: fe:d2:ad:d3:9d:bb:19:7f:a7:32:4f:35:9e:99:41:11:a4:46: fa:84:de:6e:cf:39:ff:12:14:4d:ae:07:3b:a7:9b:f2:37:96: c8:df:36:09:9b:3c:11:8b:49:bf:34:95:42:30:ce:84:7f:c8: 1f:a5:b6:8d:76:98:8f:0c:9c:af:e0:ef:cc:c2:c6:5a:bf:6f: 0b:34:ce:15:9c:c7:56:54:b2:20:da:29:77:d6:ec:4a:68:97: 0a:f3:bf:08:33:1c:2c:62:c7:9a:19:ab:1f:3d:ed:f1:d6:ed: 5b:24:36:c9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEs2vE2IjPlsQqVd7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U5N2RkYzEtZTYwNS00NmNmLWJjZjUtMDQ4ZjhkOGVi NDFhMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk Y2IzNjQ0YTQtMDE0My00NTdlLWJkODctNDU3MzhkNzNhYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBLYUVolwFK2jzLJx/2J1GYZddxRRjgBsb8R L9bNvnbQU6RKn7GBcpSC49VScZT2sQg78fxkIw+CIdDv9/FY+Tp9SxMgh4kd+oBH FJtniqt4YFYVlWkUJkobR0EYD2jMd1uOaPgqf2ZfLfNMtg7oyuegQcFuEiVtywJ4 XtaprjUCWNUVOlM98k3CIYVVXkJ1i3RgX6m/NrlUQmpdp0Py9iXXdc2fkdjwkJiP f/rIg/n6dmnj45rW+F9uZ4dA72vuVfQESakZVcw6M0G3Njc9IUSYVOATHBE3UDx+ a7E6OvpjlRKWLjEDFewEI5/g83GRI4UBaNEGpj7RRNF8lHP59QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBQVm4OHXui0noqVcqGbCCWD9ejOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTk3 ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhmOGQ4ZWI0MWEvYzZhZmM1OTYtMGI5Yi0z ZTQzLWIzYjMtZjdiODNkZjMxMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2U5N2RkYzEtZTYwNS00NmNmLWJj ZjUtMDQ4ZjhkOGViNDFhLzNlOTdkZGMxLWU2MDUtNDZjZi1iY2Y1LTA0OGY4ZDhl YjQxYS5jcmwwHwYDVR0jBBgwFoAUUhpXjirHYbXjZst0dGGA4LEWSv8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTk3ZGRjMS1lNjA1LTQ2Y2YtYmNmNS0wNDhm OGQ4ZWI0MWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BcMA4E AgACMAgDBgAmAvl5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuCeKeZXOGrbg4XcsAZI4tF0f/C6BYV+LQ bAqLW8IZFibBgZwSS1mFeo62PjIbF3RzvIAaAo+xYj5uxsuDQWT7WV0Hn5p7D8Wa Vw4ASzFSiIXhL/Xp+AXI3bEAUwhCcxlJbuQF4H1g1w4Iz59q5yT7LJiUecQ9TUZf QFxnV2jl5FxXgKZo5P69xRwFvc9/tBn+0q3TnbsZf6cyTzWemUERpEb6hN5uzzn/ EhRNrgc7p5vyN5bI3zYJmzwRi0m/NJVCMM6Ef8gfpbaNdpiPDJyv4O/MwsZav28L NM4VnMdWVLIg2il31uxKaJcK878IMxwsYseaGasfPe3x1u1bJDbJ -----END CERTIFICATE-----Generated at Wed Sep 17 20:34:55 2025 by rpki-client