$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa File: db0d49c2-07c6-353f-b407-3be87c24ae90.roa (raw, json) Hash identifier: RQH0NElxUB8TJRzHyBN2SyyyTeSu8bIeJRAMfqoCPBg= Subject key identifier: 3F:08:1D:EE:71:4A:F5:3B:89:DF:E9:31:6B:92:44:78:10:80:7C:EA Certificate issuer: /CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Certificate serial: 010D0C9F4328584B328C35AF4AAB7EE552F9291E Authority key identifier: 39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 400477 IP address blocks: 23.132.56.0/24 maxlen: 24 2602:fbc1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:35:af:4a:ab:7e:e5:52:f9:29:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=0780123d-63ec-46e0-a8d3-adcd37d25e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:25:0c:71:de:54:d7:f4:95:62:f9:7a:68: 98:72:2d:6b:1b:42:c1:91:0a:0e:f7:52:91:11:15: 8a:29:5e:0d:10:55:13:89:33:8b:5b:f4:9f:41:bf: a9:43:3d:55:db:02:c0:0b:6b:90:02:85:dc:98:a9: c0:91:5c:c5:2b:7d:b5:63:81:10:b1:4c:a1:8a:00: 36:7f:b7:00:9a:c3:6e:73:2c:a3:d9:35:03:df:78: e2:92:d2:da:1e:71:c5:14:4d:70:63:e6:d2:34:c7: 1f:da:bc:25:8d:c2:d1:7f:f5:c1:f2:f7:bc:d9:d0: 68:e8:71:d0:5e:23:c8:1c:07:a7:61:cd:cb:17:ec: 17:ec:8a:92:cd:44:99:0d:a1:69:67:99:0c:31:9c: 88:04:de:24:dd:bb:90:fd:bb:39:19:c0:79:23:2a: 3d:80:7e:9e:2d:1b:0f:fe:c0:c7:56:13:63:62:6c: fe:25:e1:a1:7c:cf:ee:a3:ab:5c:2c:74:b6:cb:6e: 1a:7b:2d:46:41:6f:a9:35:18:7b:ee:a9:30:1a:c5: cf:f9:99:3e:59:e8:2f:07:d5:2e:24:74:20:63:88: 34:af:6b:7b:02:8c:fc:ef:43:f2:ed:71:24:a5:64: 58:76:46:b5:66:a3:37:54:f0:79:b7:b4:b6:6a:e1: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:08:1D:EE:71:4A:F5:3B:89:DF:E9:31:6B:92:44:78:10:80:7C:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl X509v3 Authority Key Identifier: keyid:39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer sbgp-ipAddrBlock: critical IPv4: 23.132.56.0/24 IPv6: 2602:fbc1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d6:b5:ae:02:00:c1:65:9f:1f:5b:c2:e0:b2:0b:32:01:2d: 39:bc:04:21:9d:9a:b9:75:f5:9e:f1:f0:98:db:f6:16:03:36: 00:d1:32:e8:7b:38:ed:60:0a:f7:30:3b:3c:90:96:a1:f9:77: 10:ae:f2:2c:9c:11:8e:8e:ab:f9:d2:44:e7:af:9f:f2:61:2b: 65:fc:51:c2:05:11:ae:ad:68:ad:fb:3a:89:55:f5:09:23:63: 5b:68:1d:b3:2d:ae:cd:ca:0c:de:8d:11:4a:b3:1a:5b:31:ae: c3:4e:52:45:ab:ec:16:8e:86:31:80:68:fe:85:d6:6f:4d:c8: b6:14:bb:97:65:71:d3:d3:2c:e0:ea:f1:4d:25:18:c8:cb:58: 67:80:74:7a:fa:3e:55:f0:85:f3:a2:e0:4b:a8:76:8a:38:e8: 05:49:fc:fc:5a:e1:28:47:de:5d:fe:a4:e8:3d:d7:4e:3f:21: 3c:a9:e0:ea:ef:03:36:63:d3:c4:c4:11:3e:7b:c2:4a:c8:09: 17:5a:75:3a:bb:e6:3a:ad:4c:19:01:2e:a2:15:e4:0d:b3:f1: 87:c2:92:4b:c5:84:78:35:18:4c:d5:b6:3c:07:4c:de:c8:fe: 56:94:d0:f5:3e:4b:8a:83:39:c3:e4:29:75:9d:94:5f:4b:6c: df:01:da:c4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsyjDWvSqt+5VL5KR4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExYzNiMWEtZDExZS00NmYyLWI4YmEtMTk3NGI0NGM4 NGIyMB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MDc4MDEyM2QtNjNlYy00NmUwLWE4ZDMtYWRjZDM3ZDI1ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotclDHHeVNf0lWL5emiYci1rG0LBkQoO91KR ERWKKV4NEFUTiTOLW/SfQb+pQz1V2wLAC2uQAoXcmKnAkVzFK321Y4EQsUyhigA2 f7cAmsNucyyj2TUD33jiktLaHnHFFE1wY+bSNMcf2rwljcLRf/XB8ve82dBo6HHQ XiPIHAenYc3LF+wX7IqSzUSZDaFpZ5kMMZyIBN4k3buQ/bs5GcB5Iyo9gH6eLRsP /sDHVhNjYmz+JeGhfM/uo6tcLHS2y24aey1GQW+pNRh77qkwGsXP+Zk+WegvB9Uu JHQgY4g0r2t7Aoz870Py7XEkpWRYdka1ZqM3VPB5t7S2auE1uwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFD8IHe5xSvU7id/pMWuSRHgQgHzqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YTFj M2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0YjQ0Yzg0YjIvZGIwZDQ5YzItMDdjNi0z NTNmLWI0MDctM2JlODdjMjRhZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWExYzNiMWEtZDExZS00NmYyLWI4 YmEtMTk3NGI0NGM4NGIyLzVhMWMzYjFhLWQxMWUtNDZmMi1iOGJhLTE5NzRiNDRj ODRiMi5jcmwwHwYDVR0jBBgwFoAUOdNhbKOmiNMkAaTDppWETrMsJVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YTFjM2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0 YjQ0Yzg0YjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Q4MA4E AgACMAgDBgQmAvvBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCb1rWuAgDBZZ8fW8LgsgsyAS05vAQhnZq5 dfWe8fCY2/YWAzYA0TLoezjtYAr3MDs8kJah+XcQrvIsnBGOjqv50kTnr5/yYStl /FHCBRGurWit+zqJVfUJI2NbaB2zLa7NygzejRFKsxpbMa7DTlJFq+wWjoYxgGj+ hdZvTci2FLuXZXHT0yzg6vFNJRjIy1hngHR6+j5V8IXzouBLqHaKOOgFSfz8WuEo R95d/qToPddOPyE8qeDq7wM2Y9PExBE+e8JKyAkXWnU6u+Y6rUwZAS6iFeQNs/GH wpJLxYR4NRhM1bY8B0zeyP5WlND1PkuKgznD5Cl1nZRfS2zfAdrE -----END CERTIFICATE-----Generated at Mon Oct 20 18:20:21 2025 by rpki-client