$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa File: ebb0be46-5340-3989-b64b-7de27da0d802.roa (raw, json) Hash identifier: tH8Aq3vUqxPcclhinu2XTWRrAzRemO9TIJip69L2xRg= Subject key identifier: 2D:32:7C:83:E9:AE:B0:77:F7:BB:95:31:C1:98:6B:8E:8E:BC:1A:3C Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584B0CDC2AD005EAF377B444AD50 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 29803 IP address blocks: 23.136.100.0/24 maxlen: 24 2602:f6ab::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:2a:d0:05:ea:f3:77:b4:44:ad:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=0b867c00-475a-4a07-b878-4e22efa43148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:bf:8b:a0:be:e1:3a:3b:34:d6:1e:c7:99: 8e:d9:3b:b1:c3:5c:e7:5b:30:31:4c:66:eb:cb:a9: e0:a0:d0:e0:1a:04:64:55:21:3e:9c:17:3f:3d:34: 82:da:56:d6:25:56:e7:b7:0e:2c:b5:00:ea:21:41: 3a:5d:fd:c3:cf:18:e7:ff:98:41:c1:68:74:c6:a9: 07:e4:83:3f:7a:78:43:54:b4:f3:9e:9f:95:f7:98: e9:0c:16:fa:16:de:10:66:3d:dc:08:99:85:3e:30: 09:d0:7d:df:49:7e:59:7c:f2:28:73:3f:1b:79:88: d3:9e:32:3f:c1:cd:3f:bb:df:1e:5a:f7:45:a4:5c: 51:ec:bb:cd:84:bc:47:62:ab:2e:ca:15:78:66:cf: c0:b5:b9:04:a7:db:f1:ff:56:dc:cf:0d:35:af:aa: f9:4f:74:e5:75:16:4b:bd:e1:3e:4c:44:65:01:65: f5:3e:d3:92:79:f6:f1:38:02:95:57:bc:ad:c0:fa: ad:d5:9c:e6:6d:ba:2c:a2:8e:b0:f0:fa:42:33:5e: 2d:7d:db:4c:e9:7a:72:1c:1b:ed:b6:2f:16:03:5e: 3b:ef:ce:ce:4a:21:a1:c3:28:f5:2b:df:d7:36:6a: 52:13:d8:e0:26:42:2b:75:2d:14:10:7e:69:ad:37: b5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:32:7C:83:E9:AE:B0:77:F7:BB:95:31:C1:98:6B:8E:8E:BC:1A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/ebb0be46-5340-3989-b64b-7de27da0d802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.100.0/24 IPv6: 2602:f6ab::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:42:34:40:f6:50:fa:05:6b:57:03:4e:a2:44:6c:7d:4c:95: 9a:3d:21:58:7f:af:6d:cf:eb:0f:f8:05:22:f6:aa:62:d6:4f: 2b:78:1b:fc:d6:45:f5:23:8f:66:f2:3e:b0:07:36:af:a6:7c: 7f:92:40:23:aa:13:51:68:de:5a:c3:56:34:e3:3a:4c:c6:c7: d9:bf:93:a3:ae:aa:3d:b4:c6:c8:b9:f1:9f:47:cc:0b:41:e9: 61:e8:0b:23:df:41:3b:08:a4:6f:c8:6a:ad:af:e8:1c:15:b7: 74:07:11:3f:67:f8:b3:92:7d:ce:b8:f1:b5:10:8c:88:e4:c5: a0:b3:d4:ee:c8:6e:f4:f5:39:c3:46:be:81:37:7e:bd:72:4e: b0:12:ca:61:e0:f0:49:d9:14:86:72:48:31:40:9f:f0:cd:ff: ed:7e:33:f3:a5:5b:42:8f:22:e6:9e:b9:c1:f8:03:90:61:e0: cc:a8:ee:c6:a2:d0:38:93:1d:2f:de:28:ae:a5:8e:53:fd:73: 57:70:13:c7:68:bb:97:4c:43:b6:25:15:7f:20:5d:6c:aa:79: 41:e0:ab:fd:0c:db:1f:a7:e1:ab:15:69:c2:31:96:99:57:a2: 5d:cd:cf:18:99:96:2a:37:d7:d7:a8:ed:49:33:0a:19:15:d2: c1:d5:04:cc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsM3CrQBerzd7RErVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk MGI4NjdjMDAtNDc1YS00YTA3LWI4NzgtNGUyMmVmYTQzMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3O/i6C+4To7NNYex5mO2Tuxw1znWzAxTGbr y6ngoNDgGgRkVSE+nBc/PTSC2lbWJVbntw4stQDqIUE6Xf3Dzxjn/5hBwWh0xqkH 5IM/enhDVLTznp+V95jpDBb6Ft4QZj3cCJmFPjAJ0H3fSX5ZfPIocz8beYjTnjI/ wc0/u98eWvdFpFxR7LvNhLxHYqsuyhV4Zs/AtbkEp9vx/1bczw01r6r5T3TldRZL veE+TERlAWX1PtOSefbxOAKVV7ytwPqt1Zzmbbosoo6w8PpCM14tfdtM6XpyHBvt ti8WA147787OSiGhwyj1K9/XNmpSE9jgJkIrdS0UEH5prTe1iQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFC0yfIPprrB397uVMcGYa46OvBo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvZWJiMGJlNDYtNTM0MC0z OTg5LWI2NGItN2RlMjdkYTBkODAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4hkMA4E AgACMAgDBgAmAvarADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxQjRA9lD6BWtXA06iRGx9TJWaPSFYf69t z+sP+AUi9qpi1k8reBv81kX1I49m8j6wBzavpnx/kkAjqhNRaN5aw1Y04zpMxsfZ v5Ojrqo9tMbIufGfR8wLQelh6Asj30E7CKRvyGqtr+gcFbd0BxE/Z/izkn3OuPG1 EIyI5MWgs9TuyG709TnDRr6BN369ck6wEsph4PBJ2RSGckgxQJ/wzf/tfjPzpVtC jyLmnrnB+AOQYeDMqO7GotA4kx0v3iiupY5T/XNXcBPHaLuXTEO2JRV/IF1sqnlB 4Kv9DNsfp+GrFWnCMZaZV6Jdzc8YmZYqN9fXqO1JMwoZFdLB1QTM -----END CERTIFICATE-----Generated at Tue Oct 28 13:15:11 2025 by rpki-client