$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa File: a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa (raw, json) Hash identifier: nnprOlrl9dXtDeT07gXTlIaNE7CGw5E7tsC90dVQdh4= Subject key identifier: BD:F4:C5:FC:7B:F3:A6:AB:7C:6C:42:C0:77:F6:F1:E0:C8:D4:54:83 Certificate issuer: /CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Certificate serial: 010D0C9F4328584AF5212F3E5270D9725A52C860 Authority key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 64272 IP address blocks: 23.134.64.0/24 maxlen: 24 2602:fecb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:2f:3e:52:70:d9:72:5a:52:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=ea14a171-c2c2-40cb-860f-e8c2de3e872c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:aa:22:ec:55:39:ad:35:50:cc:6a:12:e5: 0b:3e:cf:08:11:c3:7c:3b:43:96:ff:fd:9b:59:c8: 58:f0:7d:ef:7d:bc:fd:01:cf:c7:7e:d1:4f:51:2a: c3:73:68:ac:3e:4f:de:52:42:e8:46:87:f5:34:37: f0:ec:76:42:a4:09:cb:d8:28:54:58:d0:30:3c:33: 4e:5c:72:62:40:f6:7c:18:b0:6a:9a:67:ed:39:8e: c3:2f:86:0d:07:65:92:31:9f:ab:5b:48:e1:93:fb: 44:3f:d2:93:e2:ae:c6:81:e1:f2:1f:44:cc:22:f9: f4:78:44:b9:2f:b3:b5:30:ae:a9:46:eb:d6:77:df: 76:ea:3b:93:0b:73:00:89:2d:c4:6d:bc:ab:6f:be: 52:4c:c1:8e:5c:b9:2a:9f:78:2d:9d:b7:04:b4:c5: a4:89:24:f9:31:ce:db:67:ec:47:6a:f3:9e:07:f5: ed:57:fa:25:a5:a5:5f:d4:20:56:f4:67:b6:ad:aa: 7f:78:af:0c:83:6a:65:9f:94:e3:c2:b1:ef:53:0c: 7a:32:10:bb:60:04:85:5d:b9:06:ea:df:36:14:8b: f0:b9:07:2d:6b:4e:09:4d:72:cc:41:68:53:9f:ce: 44:8b:04:1f:42:f0:86:09:42:fd:d5:5c:be:ca:29: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F4:C5:FC:7B:F3:A6:AB:7C:6C:42:C0:77:F6:F1:E0:C8:D4:54:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/a9b090ba-4e2e-3fd0-bda2-f5b0e738e762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.crl X509v3 Authority Key Identifier: keyid:23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer sbgp-ipAddrBlock: critical IPv4: 23.134.64.0/24 IPv6: 2602:fecb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:b8:bd:9f:43:ee:d0:ea:8c:bb:3d:04:c3:0c:7a:fc:9b:d5: ac:d2:ca:2e:a1:55:5c:b8:6a:6e:e0:37:32:a6:79:4f:e1:02: c3:f9:74:a5:a4:ca:f3:47:a4:3c:e0:73:83:7e:e9:9c:9e:27: 17:4d:18:04:f9:ce:67:b1:f4:0a:d6:13:7a:49:ef:80:6b:77: c1:52:0e:59:c6:0c:ab:4f:72:ac:ce:14:cb:f7:54:74:23:5b: f0:79:e0:c3:e6:a9:a6:46:1d:af:26:9e:b0:19:c8:7c:20:84: 12:ec:b4:0d:b5:8c:0d:ab:7d:de:dc:04:ae:62:ec:52:62:2a: 2e:a4:6a:68:d4:09:89:14:6b:2a:4b:33:88:d1:ab:e1:9f:88: 9c:1b:ee:5e:6b:0f:9e:55:89:45:db:2e:3b:86:75:b5:2c:e9: 7c:40:09:00:58:34:34:9c:66:0e:f6:29:5f:cf:e1:92:c8:33: 42:ca:af:57:5a:2d:96:51:26:96:5d:7a:3e:8d:84:2d:cc:ff: 59:18:53:23:5c:e5:b9:cb:b9:e2:c5:7a:18:ac:6a:22:40:7e: bd:57:79:82:3c:36:9d:db:b4:76:64:31:55:0f:47:59:b0:06: a4:32:e5:6a:f6:b6:31:3f:63:b3:e2:da:c0:01:1d:bd:ec:d0: a7:51:6d:d7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr1IS8+UnDZclpSyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2Fj ZDc0MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZWExNGExNzEtYzJjMi00MGNiLTg2MGYtZThjMmRlM2U4NzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom2qIuxVOa01UMxqEuULPs8IEcN8O0OW//2b WchY8H3vfbz9Ac/HftFPUSrDc2isPk/eUkLoRof1NDfw7HZCpAnL2ChUWNAwPDNO XHJiQPZ8GLBqmmftOY7DL4YNB2WSMZ+rW0jhk/tEP9KT4q7GgeHyH0TMIvn0eES5 L7O1MK6pRuvWd9926juTC3MAiS3Ebbyrb75STMGOXLkqn3gtnbcEtMWkiST5Mc7b Z+xHavOeB/XtV/olpaVf1CBW9Ge2rap/eK8Mg2pln5TjwrHvUwx6MhC7YASFXbkG 6t82FIvwuQcta04JTXLMQWhTn85EiwQfQvCGCUL91Vy+yikcCwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFL30xfx786arfGxCwHf28eDI1FSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Nzcy N2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvYTliMDkwYmEtNGUyZS0z ZmQwLWJkYTItZjViMGU3MzhlNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDc3MjdlOGYtNWVhMC00YWQ3LWE4 NTMtNWNhZGU5M2FjZDc0LzQ3NzI3ZThmLTVlYTAtNGFkNy1hODUzLTVjYWRlOTNh Y2Q3NC5jcmwwHwYDVR0jBBgwFoAUI8we9JDvAQaHf902uUnPcKOi95MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2Fk ZTkzYWNkNzQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZAMA4E AgACMAgDBgQmAv7LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDCuL2fQ+7Q6oy7PQTDDHr8m9Ws0souoVVc uGpu4DcypnlP4QLD+XSlpMrzR6Q84HODfumcnicXTRgE+c5nsfQK1hN6Se+Aa3fB Ug5ZxgyrT3KszhTL91R0I1vweeDD5qmmRh2vJp6wGch8IIQS7LQNtYwNq33e3ASu YuxSYioupGpo1AmJFGsqSzOI0avhn4icG+5eaw+eVYlF2y47hnW1LOl8QAkAWDQ0 nGYO9ilfz+GSyDNCyq9XWi2WUSaWXXo+jYQtzP9ZGFMjXOW5y7nixXoYrGoiQH69 V3mCPDad27R2ZDFVD0dZsAakMuVq9rYxP2Oz4trAAR297NCnUW3X -----END CERTIFICATE-----Generated at Fri Oct 17 11:28:56 2025 by rpki-client