$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa File: fc1d422d-b307-38b9-a471-8551b35adec8.roa (raw, json) Hash identifier: jUZTsl5y8j3lJAbmRIRu4sGihPXhJyUJCRVWbnmm9ZU= Subject key identifier: 0A:0B:E8:AE:AB:93:AD:34:DC:EF:5C:64:55:A8:5D:4B:18:27:B4:4C Certificate issuer: /CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Certificate serial: 010D0C9F4328584B13D6A8C03BD77CF581A6E680 Authority key identifier: 2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 394106 IP address blocks: 23.136.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:a8:c0:3b:d7:7c:f5:81:a6:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2e669e-8d5d-4b39-a68f-4f536cc2f546 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=008e3f6f-5b21-4cbe-b562-5e2c5a946081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:8d:27:5f:6f:07:c3:12:02:e6:1a:1f:28: 24:5c:b0:fd:08:1f:ca:a5:d6:c5:72:60:f9:06:2a: fc:08:c5:50:5d:df:28:42:d4:07:34:00:a4:f5:4f: 75:6c:66:c9:c8:87:77:3b:58:ce:72:0e:00:b6:f9: 0e:45:45:50:f9:a0:cc:33:cb:d6:90:25:9c:6e:10: fb:47:b0:43:cf:27:97:c6:63:84:33:bd:cf:66:3e: 97:fc:6c:03:53:79:1d:70:46:a4:9f:cb:60:e3:a0: 88:ac:aa:f9:be:06:c8:65:03:b5:a0:80:36:e3:73: c0:74:b3:48:c5:18:0a:fc:fe:16:5e:f3:87:8d:8a: 94:96:cc:51:6a:21:aa:16:d9:f6:18:a1:85:e2:76: 46:00:cf:d1:b9:95:6e:b3:e8:4a:5f:12:b0:ed:8f: c5:21:f5:e4:3d:49:b5:0f:fe:ed:19:8a:aa:f8:72: 00:ca:97:68:ee:3b:ca:db:7a:b6:97:de:11:ea:cf: 06:55:6c:04:75:48:91:12:49:03:bf:58:bb:f5:c2: 72:9c:90:da:fb:85:eb:55:63:09:a8:c4:cd:aa:10: c3:60:0d:0c:e6:cd:5f:64:2e:8f:a8:e3:6d:cb:55: 34:93:06:ea:d6:5c:47:99:76:60:70:7d:e0:8a:b1: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0B:E8:AE:AB:93:AD:34:DC:EF:5C:64:55:A8:5D:4B:18:27:B4:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/fc1d422d-b307-38b9-a471-8551b35adec8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.crl X509v3 Authority Key Identifier: keyid:2B:3D:A3:1D:3A:7D:8E:17:DF:48:BD:6C:AC:4A:62:D2:5F:54:BE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d2e669e-8d5d-4b39-a68f-4f536cc2f546.cer sbgp-ipAddrBlock: critical IPv4: 23.136.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:19:cd:0a:56:e1:56:69:e6:02:c6:91:bc:13:8a:62:a5:6f: ce:15:7f:44:b6:98:ef:f0:75:00:da:a2:7e:10:12:a8:91:6d: a5:8e:39:3f:0c:33:74:56:38:fe:0c:39:1f:7b:1d:1d:35:35: f1:08:ab:e9:1e:98:cb:82:0a:a1:75:1e:d9:70:b1:9f:d8:e5: fb:ef:87:61:07:3b:83:d7:91:58:2b:75:f1:5f:21:6f:90:64: 02:85:d9:3c:26:35:b8:ce:cc:f3:11:2e:55:71:54:79:f7:70: 92:77:21:2a:03:0f:d2:05:e6:6c:c0:83:6b:3b:7f:18:65:bd: f8:1d:fc:71:de:49:70:5a:b7:89:2e:22:e2:fc:35:e0:cf:89: b6:a3:db:80:61:b3:c8:4c:32:0e:9e:40:8d:ff:d4:ce:3c:2b: 3d:ae:99:d7:df:6a:5d:03:d2:81:84:dc:ae:62:79:ff:f6:a3: 57:1d:e0:09:15:53:7f:60:96:5a:fd:84:9d:6a:25:94:ba:88: c4:86:57:90:8d:b7:2c:d2:c0:23:67:2c:73:33:97:fd:9f:46: 8f:35:f2:67:4b:fa:7c:66:c7:e0:87:bd:ac:43:3b:99:97:d2: d0:36:a3:8e:cf:f8:3f:22:02:5f:46:aa:9e:99:8a:5e:f9:a6: 8b:02:a7:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1qjAO9d89YGm5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZTY2OWUtOGQ1ZC00YjM5LWE2OGYtNGY1MzZjYzJm NTQ2MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MDA4ZTNmNmYtNWIyMS00Y2JlLWI1NjItNWUyYzVhOTQ2MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2waNJ19vB8MSAuYaHygkXLD9CB/KpdbFcmD5 Bir8CMVQXd8oQtQHNACk9U91bGbJyId3O1jOcg4AtvkORUVQ+aDMM8vWkCWcbhD7 R7BDzyeXxmOEM73PZj6X/GwDU3kdcEakn8tg46CIrKr5vgbIZQO1oIA243PAdLNI xRgK/P4WXvOHjYqUlsxRaiGqFtn2GKGF4nZGAM/RuZVus+hKXxKw7Y/FIfXkPUm1 D/7tGYqq+HIAypdo7jvK23q2l94R6s8GVWwEdUiREkkDv1i79cJynJDa+4XrVWMJ qMTNqhDDYA0M5s1fZC6PqONty1U0kwbq1lxHmXZgcH3girH80wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoL6K6rk6003O9cZFWoXUsYJ7RMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJl NjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUzNmNjMmY1NDYvZmMxZDQyMmQtYjMwNy0z OGI5LWE0NzEtODU1MWIzNWFkZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWQyZTY2OWUtOGQ1ZC00YjM5LWE2 OGYtNGY1MzZjYzJmNTQ2LzFkMmU2NjllLThkNWQtNGIzOS1hNjhmLTRmNTM2Y2My ZjU0Ni5jcmwwHwYDVR0jBBgwFoAUKz2jHTp9jhffSL1srEpi0l9UvhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZDJlNjY5ZS04ZDVkLTRiMzktYTY4Zi00ZjUz NmNjMmY1NDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4h8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUZzQpW4VZp5gLGkbwTimKlb84Vf0S2mO/wdQDaon4QEqiRbaWOOT8M M3RWOP4MOR97HR01NfEIq+kemMuCCqF1HtlwsZ/Y5fvvh2EHO4PXkVgrdfFfIW+Q ZAKF2TwmNbjOzPMRLlVxVHn3cJJ3ISoDD9IF5mzAg2s7fxhlvfgd/HHeSXBat4ku IuL8NeDPibaj24Bhs8hMMg6eQI3/1M48Kz2umdffal0D0oGE3K5ief/2o1cd4AkV U39gllr9hJ1qJZS6iMSGV5CNtyzSwCNnLHMzl/2fRo818mdL+nxmx+CHvaxDO5mX 0tA2o47P+D8iAl9Gqp6Zil75posCp18= -----END CERTIFICATE-----Generated at Thu Sep 18 02:48:04 2025 by rpki-client