$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa File: 04579b92-c2ba-3e85-be33-ca6770cc41b1.roa (raw, json) Hash identifier: 1O7FMKmPA3fsyq+7OpqEHL0zXFLFBzfGRzSQsDgxkHM= Subject key identifier: F8:39:62:12:6A:F4:84:D2:9E:CF:52:33:02:6A:E2:0B:FE:9C:91:2F Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584B0B76B53BBFCC16C8E7443200 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 211392 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:b5:3b:bf:cc:16:c8:e7:44:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=31c287a1-5130-4bff-9ca6-79749586f960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:eb:1e:73:e1:24:63:40:b5:39:1a:73:e2:74: 03:cf:1b:63:52:c6:bf:41:be:f1:b0:2b:1b:97:43: 77:fd:56:7c:cf:2b:52:74:b2:a5:f4:f9:2a:5c:c7: f8:2f:fc:e3:77:59:82:f2:65:9f:0c:13:0c:47:e6: c1:c1:18:9f:5a:45:23:af:75:36:7b:0d:23:75:3d: 45:94:bb:be:2f:21:e9:5b:1b:12:02:57:98:ff:81: c1:ec:12:09:e3:ac:24:bd:ce:0d:99:e4:3e:38:30: f2:4e:27:b9:3c:e0:5d:b2:75:03:86:5a:ae:9d:62: 00:20:d0:36:46:9a:b5:e3:c0:05:7e:70:64:85:27: c0:08:72:62:9e:61:1b:cc:72:5e:33:21:61:ad:02: ec:2e:a7:8f:b3:a1:8c:5e:69:57:84:76:4a:44:17: 0d:d4:f7:65:8e:d7:33:e7:fa:1f:11:ed:5f:6c:1e: bc:54:7a:f5:c9:f1:37:b4:5d:31:d9:57:68:fd:93: 76:7a:be:e3:70:5b:7a:f9:f7:4f:72:4c:14:ca:c9: ce:d5:58:8c:96:ff:d8:bf:00:02:bc:83:a8:3b:87: f1:35:13:f8:24:b9:d8:b7:cf:10:de:4b:d3:6e:03: 61:23:d9:0a:59:1c:c9:3b:87:18:a5:ab:f7:99:70: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:39:62:12:6A:F4:84:D2:9E:CF:52:33:02:6A:E2:0B:FE:9C:91:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5c:f7:4b:39:56:bd:40:d6:d9:e0:72:43:94:0e:f8:f6:11: 5e:cd:55:12:36:31:15:62:7f:2e:7d:75:d2:df:eb:d5:83:cc: 47:0d:61:47:3c:5e:01:2c:1f:b1:b7:df:09:8f:8f:17:b5:bc: d4:88:a6:60:a0:98:a8:36:33:67:ec:e4:9b:68:07:0f:9a:b9: 7f:58:19:89:3c:c6:9b:0b:32:ff:03:b1:19:ac:46:fc:d6:a5: 3a:10:ae:9c:f9:d7:7e:91:ec:c6:31:13:01:2b:c8:79:48:f6: 03:50:5a:a0:9b:68:49:03:73:6f:ce:9a:91:77:92:4e:fb:e9: 57:e0:0d:36:1d:80:1a:bf:fc:33:11:06:ee:a9:20:c8:a7:92: 68:3d:41:85:e5:6f:2b:1f:b0:54:cc:26:8d:c2:86:5a:2b:f1: 57:1a:23:fd:25:c3:34:59:fb:d5:7a:64:c8:03:bb:94:0e:0d: f5:8a:c1:4e:62:03:49:96:d8:3a:b9:f4:b2:cd:f2:f4:ec:3c: fe:0c:cb:63:f0:7a:d4:5c:da:24:07:be:56:32:86:c0:73:13: 8f:17:5a:3c:8a:75:2b:c1:55:57:60:87:16:50:58:33:e2:53: 4e:ff:72:46:ad:af:ba:f4:ac:70:9b:0b:35:9f:39:fb:4a:5a: 0d:f0:ba:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdrU7v8wWyOdEMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MzFjMjg3YTEtNTEzMC00YmZmLTljYTYtNzk3NDk1ODZmOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhesec+EkY0C1ORpz4nQDzxtjUsa/Qb7xsCsb l0N3/VZ8zytSdLKl9PkqXMf4L/zjd1mC8mWfDBMMR+bBwRifWkUjr3U2ew0jdT1F lLu+LyHpWxsSAleY/4HB7BIJ46wkvc4NmeQ+ODDyTie5POBdsnUDhlqunWIAINA2 Rpq148AFfnBkhSfACHJinmEbzHJeMyFhrQLsLqePs6GMXmlXhHZKRBcN1Pdljtcz 5/ofEe1fbB68VHr1yfE3tF0x2Vdo/ZN2er7jcFt6+fdPckwUysnO1ViMlv/YvwAC vIOoO4fxNRP4JLnYt88Q3kvTbgNhI9kKWRzJO4cYpav3mXCLVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPg5YhJq9ITSns9SMwJq4gv+nJEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvMDQ1NzliOTItYzJiYS0z ZTg1LWJlMzMtY2E2NzcwY2M0MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpc90s5Vr1A1tngckOUDvj2EV7NVRI2MRVify59ddLf69WDzEcNYUc8 XgEsH7G33wmPjxe1vNSIpmCgmKg2M2fs5JtoBw+auX9YGYk8xpsLMv8DsRmsRvzW pToQrpz5136R7MYxEwEryHlI9gNQWqCbaEkDc2/OmpF3kk776VfgDTYdgBq//DMR Bu6pIMinkmg9QYXlbysfsFTMJo3Chlor8VcaI/0lwzRZ+9V6ZMgDu5QODfWKwU5i A0mW2Dq59LLN8vTsPP4My2PwetRc2iQHvlYyhsBzE48XWjyKdSvBVVdghxZQWDPi U07/ckatr7r0rHCbCzWfOftKWg3wunk= -----END CERTIFICATE-----Generated at Fri Sep 5 08:34:28 2025 by rpki-client