$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/dbcba92f-5a5f-3858-b11b-9842497c7db4.roa File: dbcba92f-5a5f-3858-b11b-9842497c7db4.roa (raw, json) Hash identifier: cpwA/dlJ2CQ/b7y2B/ohOldBlR4kLywntqL2d/PNHEs= Subject key identifier: 16:DA:16:9B:18:94:E6:4D:CA:31:48:47:A0:CE:93:40:91:D7:ED:94 Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584BA7CD16B9F64A1E16C075A480 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/dbcba92f-5a5f-3858-b11b-9842497c7db4.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 63916 IP address blocks: 23.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:16:b9:f6:4a:1e:16:c0:75:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=b0fb5e47-15c0-4422-ba4b-bb1c70b491af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:92:91:7d:a1:b6:a8:55:a8:6e:82:1f:30: 44:80:ce:5e:a5:e1:94:51:ee:f5:e7:a5:75:54:47: 04:d5:5e:fc:5d:4d:28:f8:2b:69:79:0f:fe:f8:dd: 6f:fe:dc:f3:67:0e:7d:3a:14:17:46:7a:39:1a:6b: b7:14:27:5b:e5:dd:5a:56:3a:f2:84:24:7d:71:d0: 4d:86:7f:fd:0b:24:75:04:7f:b2:aa:44:b2:9a:73: 55:88:ca:84:73:4e:da:ba:6e:4d:4e:ea:60:14:02: 1f:6f:46:18:94:c2:17:4a:ff:5e:f7:59:b1:ed:e6: 29:ea:7f:c7:54:40:04:e6:fe:78:1a:c3:8c:dc:ce: cb:88:ed:30:51:4c:23:05:01:2c:8b:95:33:00:21: b8:0d:ce:89:f6:bd:d3:11:e2:2a:58:90:05:e2:48: c7:76:90:4d:d6:8e:4d:a6:95:65:39:8a:99:57:60: c9:c1:9d:d8:f9:52:92:c6:de:42:51:39:07:39:b0: 25:7b:26:00:72:ed:dc:b3:dd:9b:00:16:97:9b:9f: 6f:4b:90:1b:0e:d6:e9:3d:1e:8c:e3:02:2e:31:6e: d4:1e:41:a9:cc:f9:27:ba:71:a6:91:79:fb:e3:4b: d2:d7:dd:55:90:e3:4b:50:79:6f:4f:d5:5f:37:f2: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DA:16:9B:18:94:E6:4D:CA:31:48:47:A0:CE:93:40:91:D7:ED:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/dbcba92f-5a5f-3858-b11b-9842497c7db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 23.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ce:3b:ac:99:37:29:b9:d0:37:4f:a8:6a:35:82:6f:be:67: a0:ab:67:77:56:f0:84:d3:eb:cb:87:b4:94:df:c7:95:bd:4e: 32:28:2f:44:5c:55:79:42:e0:d2:4e:c3:e2:c2:13:e9:65:15: 82:73:4c:28:d8:1c:75:5c:4c:ef:cf:c5:e8:54:31:a1:1d:ad: 08:5d:32:a9:93:ca:bd:97:41:cf:09:ae:1d:0c:55:73:5f:a0: c9:3c:c6:28:37:e2:99:17:9c:b9:81:8f:4e:b1:a4:00:d5:0f: a0:2f:94:b7:cc:43:67:4f:90:9c:a6:09:28:80:de:f9:8a:8c: 95:2b:6b:a1:af:9e:22:d5:51:c9:ae:74:d0:10:bc:43:be:b6: 72:15:0d:28:4a:8a:53:9e:0a:45:20:80:53:c9:37:88:61:1b: 95:23:6e:bd:48:01:12:6a:9d:f5:9a:0a:30:1d:df:50:82:e9: 5b:e8:71:7c:8b:12:e6:9b:31:34:4e:1a:83:03:95:a5:4a:19: 25:01:db:0c:df:51:d3:2a:f9:00:54:46:47:21:8b:ef:83:c1: d8:6f:3c:71:87:47:80:e8:a6:a2:45:86:45:5f:25:d0:c2:0f: 83:62:7d:63:3e:ec:51:7d:74:a4:94:bb:d8:05:98:38:66:ee: 7f:b1:4f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRa59koeFsB1pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YjBmYjVlNDctMTVjMC00NDIyLWJhNGItYmIxYzcwYjQ5MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRWSkX2htqhVqG6CHzBEgM5epeGUUe7156V1 VEcE1V78XU0o+CtpeQ/++N1v/tzzZw59OhQXRno5Gmu3FCdb5d1aVjryhCR9cdBN hn/9CyR1BH+yqkSymnNViMqEc07aum5NTupgFAIfb0YYlMIXSv9e91mx7eYp6n/H VEAE5v54GsOM3M7LiO0wUUwjBQEsi5UzACG4Dc6J9r3TEeIqWJAF4kjHdpBN1o5N ppVlOYqZV2DJwZ3Y+VKSxt5CUTkHObAleyYAcu3cs92bABaXm59vS5AbDtbpPR6M 4wIuMW7UHkGpzPknunGmkXn740vS191VkONLUHlvT9VfN/K0+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbaFpsYlOZNyjFIR6DOk0CR1+2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvZGJjYmE5MmYtNWE1Zi0z ODU4LWIxMWItOTg0MjQ5N2M3ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnOO6yZNym50DdPqGo1gm++Z6CrZ3dW8ITT68uHtJTfx5W9TjIoL0Rc VXlC4NJOw+LCE+llFYJzTCjYHHVcTO/PxehUMaEdrQhdMqmTyr2XQc8Jrh0MVXNf oMk8xig34pkXnLmBj06xpADVD6AvlLfMQ2dPkJymCSiA3vmKjJUra6GvniLVUcmu dNAQvEO+tnIVDShKilOeCkUggFPJN4hhG5Ujbr1IARJqnfWaCjAd31CC6VvocXyL EuabMTROGoMDlaVKGSUB2wzfUdMq+QBURkchi++DwdhvPHGHR4DopqJFhkVfJdDC D4NifWM+7FF9dKSUu9gFmDhm7n+xT48= -----END CERTIFICATE-----Generated at Mon Oct 27 14:36:11 2025 by rpki-client