$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa File: 42c863cf-672c-3dba-b238-a9738d249ba8.roa (raw, json) Hash identifier: ziY3w6xm02g4a/mG+b0QEY3v7hdqvozOgd7umv5KgME= Subject key identifier: F6:2E:C8:DE:26:50:F3:10:4A:44:5F:80:55:8A:65:83:72:11:D6:4E Certificate issuer: /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Certificate serial: 010D0C9F4328584B13D6B4F45A6328106FF88B00 Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 210630 IP address blocks: 23.137.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b4:f4:5a:63:28:10:6f:f8:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=0ac781dd-172e-4534-bc63-4ed8f0c2d6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:d5:17:d8:c5:c5:17:91:aa:ce:2a:a3:a8: d8:44:46:12:07:53:ed:73:be:d7:0c:1e:2e:12:47: 0e:43:94:9e:82:fa:44:3a:ba:48:cd:46:d7:e9:62: c7:84:f0:2f:c3:f0:3c:8e:45:00:fd:a4:25:34:5a: 2e:82:af:c2:75:3c:7a:88:98:d8:62:75:85:68:bc: 4d:02:de:95:3c:28:c4:48:43:af:43:2f:61:0a:95: 7b:0c:a7:e4:dc:25:ac:11:f4:80:bb:aa:e1:b1:78: 52:fb:22:fa:64:31:be:92:d1:26:b3:ff:97:53:d1: ba:31:36:ff:9c:66:6a:35:9b:08:0e:f5:55:0e:69: 85:43:04:aa:1e:43:d3:09:17:77:1b:75:3f:5e:5e: 0c:47:2f:24:89:58:26:a6:e9:75:23:70:a0:f1:21: 54:0d:a3:14:66:3f:ac:16:3b:f7:a9:b8:21:b0:33: 6a:a7:26:da:ef:7c:ce:9f:41:9e:6f:8b:83:f2:c3: b8:41:e0:61:5e:2c:be:7d:88:bb:49:9e:ba:27:91: 46:10:42:f1:ee:f2:bd:56:6a:45:39:db:4c:df:0b: e1:57:06:53:63:47:a5:f2:0f:cd:62:e2:f4:6f:ee: c2:13:66:fe:b0:2c:60:67:61:b6:ca:a1:a6:7a:0e: 6a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2E:C8:DE:26:50:F3:10:4A:44:5F:80:55:8A:65:83:72:11:D6:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/42c863cf-672c-3dba-b238-a9738d249ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl X509v3 Authority Key Identifier: keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer sbgp-ipAddrBlock: critical IPv4: 23.137.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d5:a1:98:db:c5:4a:06:f5:52:5c:ef:b5:b1:8c:f0:a2:e5: a5:2a:c2:e6:4b:dd:f6:c0:03:69:c1:38:c6:98:b8:08:bd:54: e5:23:b1:3e:30:f1:bc:28:c2:74:32:35:2d:df:9b:ed:9b:8e: e7:0e:ea:e2:2e:fe:0d:85:14:89:e2:c2:04:24:dd:95:d3:bb: 18:4f:31:18:72:57:ce:4d:0d:52:01:eb:c2:d8:b6:c9:68:f1: 42:d2:f8:24:35:5c:1d:f3:ae:fc:58:7a:b6:f4:d7:1b:ae:e6: 13:3b:52:59:1f:12:25:95:c1:bd:2e:fc:45:83:a9:1b:09:ae: 08:1d:36:2d:4a:b7:8e:a9:9c:80:e3:15:aa:d9:46:f1:8a:fb: c0:7c:5d:d7:6f:ca:f9:60:1c:a9:a8:2a:9c:49:69:68:47:6a: e1:94:63:3f:e3:00:c5:ce:a5:70:d9:60:97:68:37:ff:16:c3: 33:4c:b8:48:5b:11:1d:16:16:47:bf:dd:bf:2f:4f:5c:0c:51: 3f:d6:e6:c2:c2:b7:92:d7:52:a6:c0:7d:f9:34:e5:b1:47:57: f7:14:d9:df:ad:ad:9e:40:cf:5b:27:27:c2:78:92:48:0b:2c: c9:42:43:3f:92:dd:a1:7b:d9:85:a5:1a:cb:48:76:10:2c:46: f3:b2:50:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rT0WmMoEG/4iwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy YmVmMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MGFjNzgxZGQtMTcyZS00NTM0LWJjNjMtNGVkOGYwYzJkNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTPVF9jFxReRqs4qo6jYREYSB1Ptc77XDB4u EkcOQ5SegvpEOrpIzUbX6WLHhPAvw/A8jkUA/aQlNFougq/CdTx6iJjYYnWFaLxN At6VPCjESEOvQy9hCpV7DKfk3CWsEfSAu6rhsXhS+yL6ZDG+ktEms/+XU9G6MTb/ nGZqNZsIDvVVDmmFQwSqHkPTCRd3G3U/Xl4MRy8kiVgmpul1I3Cg8SFUDaMUZj+s Fjv3qbghsDNqpyba73zOn0Geb4uD8sO4QeBhXiy+fYi7SZ66J5FGEELx7vK9VmpF OdtM3wvhVwZTY0el8g/NYuL0b+7CE2b+sCxgZ2G2yqGmeg5q7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYuyN4mUPMQSkRfgFWKZYNyEdZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvNDJjODYzY2YtNjcyYy0z ZGJhLWIyMzgtYTk3MzhkMjQ5YmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2 ZjUwYzJiZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4n8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPVoZjbxUoG9VJc77WxjPCi5aUqwuZL3fbAA2nBOMaYuAi9VOUjsT4w 8bwownQyNS3fm+2bjucO6uIu/g2FFIniwgQk3ZXTuxhPMRhyV85NDVIB68LYtslo 8ULS+CQ1XB3zrvxYerb01xuu5hM7UlkfEiWVwb0u/EWDqRsJrggdNi1Kt46pnIDj FarZRvGK+8B8XddvyvlgHKmoKpxJaWhHauGUYz/jAMXOpXDZYJdoN/8WwzNMuEhb ER0WFke/3b8vT1wMUT/W5sLCt5LXUqbAffk05bFHV/cU2d+trZ5Az1snJ8J4kkgL LMlCQz+S3aF72YWlGstIdhAsRvOyUI8= -----END CERTIFICATE-----Generated at Thu Sep 18 12:08:04 2025 by rpki-client