$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa File: a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa (raw, json) Hash identifier: KoZOtLMX7a46hqoVWDZHVkBuv/LeTVvw8cms4RHI76I= Subject key identifier: E6:01:F5:1B:06:F8:F1:BC:CA:FF:26:3D:55:73:1B:47:EB:04:20:B3 Certificate issuer: /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Certificate serial: 010D0C9F4328584B33F1A19405C1F19348E1B4A0 Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 6145 IP address blocks: 23.157.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:a1:94:05:c1:f1:93:48:e1:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=1eb11fbb-c14c-4fbc-a4b4-03f6f55a4f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d4:e9:14:04:57:27:01:95:b2:ee:65:54:4a: 10:5a:49:e1:5b:6c:00:35:47:9d:c9:3e:24:91:82: d8:9e:1c:e9:01:0c:67:1e:e5:04:25:71:35:0a:98: 74:f1:c0:0e:a3:8b:f9:0f:07:97:f4:cf:68:61:6a: 9a:9f:2a:f2:de:74:32:75:55:f6:5e:c1:f5:80:97: 1a:9e:0d:47:38:3b:f2:81:47:43:02:ba:98:48:52: 4b:40:51:92:c7:0e:bd:bc:22:79:fb:ed:83:e3:f3: a2:4d:61:b8:71:d8:7c:ba:2b:e6:1e:d8:ff:4f:3e: 35:6a:28:6a:ec:5c:9d:0c:8b:00:9e:ed:ce:79:a2: 72:1e:bc:7e:0d:24:5a:87:76:4f:cb:5e:8d:20:01: c4:d5:94:28:82:d8:4a:89:16:1a:37:6a:4b:6d:0a: 5f:73:4b:0a:aa:32:4e:ea:ad:a6:69:af:e7:18:3d: 64:a2:21:03:7f:a5:32:b8:f8:d2:d0:b7:3a:8c:c1: 71:01:f2:b4:32:f4:b2:7f:29:ec:cb:a1:4e:cd:6e: b8:b7:d8:23:fe:b5:13:c9:6b:c5:16:2c:09:e5:21: 83:f2:05:cd:54:8b:dd:05:64:a0:80:05:71:06:6d: 39:a1:3e:e5:57:c9:68:18:ff:ad:3b:5c:09:27:c9: f3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:01:F5:1B:06:F8:F1:BC:CA:FF:26:3D:55:73:1B:47:EB:04:20:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a04d8a83-93e5-3aec-805e-bfecb3fc50a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl X509v3 Authority Key Identifier: keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer sbgp-ipAddrBlock: critical IPv4: 23.157.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9d:ea:1a:d4:ed:66:bd:e9:84:d4:a7:59:36:d3:ff:b9:54: 33:3a:47:3b:a6:7a:d8:56:6d:2a:22:d3:49:8d:ef:4e:7c:1e: 6b:c3:2d:6e:df:e2:db:d1:e5:b9:1b:fc:3c:39:99:5a:7a:25: 91:f1:75:97:70:3f:5c:2b:f1:e2:3b:ef:fd:46:dd:19:ef:a0: ca:c8:58:d9:e1:94:3c:9e:0b:28:cf:46:db:ed:b0:a1:9c:d2: 36:3d:9d:d2:aa:a5:33:41:03:3a:ce:c3:ee:f7:ee:b5:9d:e0: fa:59:7b:9e:25:f7:b5:69:91:3a:76:75:1b:0a:97:e6:53:88: e3:f6:f4:6f:e4:2d:94:0d:6b:95:95:cf:0f:ce:71:14:3b:35: 13:43:94:9d:1c:17:a0:26:66:5c:53:5e:45:64:a4:fa:e7:f6: 65:db:6d:34:bc:ff:7d:97:2a:c3:86:1c:93:01:ef:80:1c:3c: fe:e7:86:bd:2d:a2:53:cb:76:e2:16:cf:6f:2b:a1:60:1a:6b: a4:9e:4d:8b:9c:9b:48:62:d4:53:4e:a9:f1:56:60:f5:70:58: 2a:1a:ce:9d:54:b3:fc:bb:93:d8:31:d1:f3:e8:30:d1:6b:50: c5:4a:d7:f2:99:23:2e:7a:e7:a3:c4:65:6e:c6:3c:71:37:01: b0:bf:13:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8aGUBcHxk0jhtKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYyMDZiZDAtZTk3Zi00YmM0LTllMDYtZTFiYjliMzgz NjI0MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk MWViMTFmYmItYzE0Yy00ZmJjLWE0YjQtMDNmNmY1NWE0ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9TpFARXJwGVsu5lVEoQWknhW2wANUedyT4k kYLYnhzpAQxnHuUEJXE1Cph08cAOo4v5DweX9M9oYWqanyry3nQydVX2XsH1gJca ng1HODvygUdDArqYSFJLQFGSxw69vCJ5++2D4/OiTWG4cdh8uivmHtj/Tz41aihq 7FydDIsAnu3OeaJyHrx+DSRah3ZPy16NIAHE1ZQogthKiRYaN2pLbQpfc0sKqjJO 6q2maa/nGD1koiEDf6UyuPjS0Lc6jMFxAfK0MvSyfynsy6FOzW64t9gj/rUTyWvF FiwJ5SGD8gXNVIvdBWSggAVxBm05oT7lV8loGP+tO1wJJ8nzOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYB9RsG+PG8yv8mPVVzG0frBCCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIw NmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJiOWIzODM2MjQvYTA0ZDhhODMtOTNlNS0z YWVjLTgwNWUtYmZlY2IzZmM1MGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTYyMDZiZDAtZTk3Zi00YmM0LTll MDYtZTFiYjliMzgzNjI0L2E2MjA2YmQwLWU5N2YtNGJjNC05ZTA2LWUxYmI5YjM4 MzYyNC5jcmwwHwYDVR0jBBgwFoAUAxSBE7w8TnHynd1jBoL0eB9h75swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIwNmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJi OWIzODM2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqd6hrU7Wa96YTUp1k20/+5VDM6RzumethWbSoi00mN7058HmvDLW7f 4tvR5bkb/Dw5mVp6JZHxdZdwP1wr8eI77/1G3RnvoMrIWNnhlDyeCyjPRtvtsKGc 0jY9ndKqpTNBAzrOw+737rWd4PpZe54l97VpkTp2dRsKl+ZTiOP29G/kLZQNa5WV zw/OcRQ7NRNDlJ0cF6AmZlxTXkVkpPrn9mXbbTS8/32XKsOGHJMB74AcPP7nhr0t olPLduIWz28roWAaa6SeTYucm0hi1FNOqfFWYPVwWCoazp1Us/y7k9gx0fPoMNFr UMVK1/KZIy5656PEZW7GPHE3AbC/EyA= -----END CERTIFICATE-----Generated at Tue Sep 16 06:23:05 2025 by rpki-client