$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa File: fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa (raw, json) Hash identifier: CckE705mWUAw+shSv3jT5dnW5SGOEQ4WHyzasvGWQHQ= Subject key identifier: 74:04:F2:9A:61:1F:AC:AA:47:BF:60:BA:44:91:B0:DE:0D:27:DC:C1 Certificate issuer: /CN=6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d Certificate serial: 010D0C9F4328584B233180954402B0643E765280 Authority key identifier: 9A:D4:E1:85:7A:C0:9C:F0:B5:60:82:97:F4:BA:8A:F1:AB:60:B6:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 401510 IP address blocks: 23.130.116.0/24 maxlen: 24 2602:f80d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:80:95:44:02:b0:64:3e:76:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=bf1e6f92-4c89-4383-a30c-e71c2c8a1d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:33:2c:70:52:8c:4c:07:0b:b1:2a:ba:aa: 03:73:23:38:6a:c4:b4:12:6a:63:06:29:e3:65:78: 3f:32:fc:ab:62:a0:4c:c1:e3:7e:6a:bc:0a:12:d8: f2:bd:c3:2b:5b:89:63:c0:c2:43:81:11:28:54:a6: 51:8f:ab:99:8a:c7:93:26:17:7a:cd:f6:ca:53:1c: a2:d1:51:fc:98:cf:fb:f1:4c:6e:29:5f:0d:17:70: 8b:0f:a2:30:0c:e1:aa:22:51:80:74:42:d8:86:54: 9c:ea:d5:bb:c7:0b:d5:ea:22:77:54:e7:ec:d0:77: 92:fc:09:f0:84:14:a1:db:49:a9:eb:5b:75:9b:e5: fd:b8:e4:61:bf:4c:cb:0b:5f:e3:15:24:04:b6:e7: d3:08:28:7e:b6:1c:49:e8:ba:2c:e0:c9:b9:08:dd: 52:5d:cf:56:ec:ba:0d:98:5c:7e:9a:21:b9:3e:58: 0e:f4:5d:1a:8b:45:82:d0:16:08:c0:93:59:06:fe: 80:3a:9a:d2:97:67:0b:c3:91:58:23:3c:45:cf:4a: 1d:72:38:eb:c9:9d:27:1c:17:fe:bc:1d:58:88:6a: df:70:fd:a7:27:3b:24:7d:11:60:08:ee:41:04:0a: 7f:a1:c6:ae:fe:6d:2b:e4:22:f1:92:be:12:69:8b: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:F2:9A:61:1F:AC:AA:47:BF:60:BA:44:91:B0:DE:0D:27:DC:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.crl X509v3 Authority Key Identifier: keyid:9A:D4:E1:85:7A:C0:9C:F0:B5:60:82:97:F4:BA:8A:F1:AB:60:B6:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.116.0/24 IPv6: 2602:f80d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9a:a6:cc:b2:d0:fc:6f:b2:ca:47:e3:94:7e:9a:ab:9c:0b: bd:93:69:c2:4b:d3:7e:75:c5:37:7c:be:a4:4c:15:85:1e:b5: 56:6e:e9:8b:10:63:84:03:92:a1:4c:2d:72:24:93:a0:34:54: 6e:ba:80:f3:55:a1:cf:12:5a:58:bd:9b:76:ef:b0:f6:54:02: 7e:cd:13:f0:df:1d:ad:c0:79:6b:5d:09:84:72:64:b2:9d:84: 25:d0:87:a4:92:b7:82:de:da:0e:21:03:1d:1c:50:f2:07:59: 16:ae:f7:f1:e5:58:32:ce:0e:4f:96:03:cb:7e:08:74:fb:f7: e4:3e:49:b6:5b:e3:c2:51:ab:43:d4:7b:4f:41:16:14:bd:44: df:09:1b:14:a6:2e:c3:93:f6:91:64:f4:cf:4b:4c:76:4d:eb: 19:a1:15:e2:f0:86:e0:13:f9:14:59:f4:85:e4:5e:15:f1:f2: 30:da:d8:08:26:5b:5a:0a:dd:cb:29:01:3b:c8:6b:73:bb:a6: 6e:5e:d7:32:87:2a:44:a5:2d:9d:af:d9:b4:29:44:22:e1:40: c1:63:aa:bb:bb:78:b1:60:59:64:fa:1b:0a:37:0a:2e:48:e6: a6:c3:fb:df:6d:92:cb:8a:c3:e8:24:c5:93:18:99:16:ba:0e: bd:99:96:42 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsjMYCVRAKwZD52UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3YTBhOGMtMmUxZi00OGE2LTg5NjAtN2NlMWFiYjFj NTNkMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YmYxZTZmOTItNGM4OS00MzgzLWEzMGMtZTcxYzJjOGExZDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWwzLHBSjEwHC7EquqoDcyM4asS0EmpjBinj ZXg/MvyrYqBMweN+arwKEtjyvcMrW4ljwMJDgREoVKZRj6uZiseTJhd6zfbKUxyi 0VH8mM/78UxuKV8NF3CLD6IwDOGqIlGAdELYhlSc6tW7xwvV6iJ3VOfs0HeS/Anw hBSh20mp61t1m+X9uORhv0zLC1/jFSQEtufTCCh+thxJ6Los4Mm5CN1SXc9W7LoN mFx+miG5PlgO9F0ai0WC0BYIwJNZBv6AOprSl2cLw5FYIzxFz0odcjjryZ0nHBf+ vB1YiGrfcP2nJzskfRFgCO5BBAp/ocau/m0r5CLxkr4SaYtGJwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHQE8pphH6yqR79gukSRsN4NJ9zBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZDdh MGE4Yy0yZTFmLTQ4YTYtODk2MC03Y2UxYWJiMWM1M2QvZmE4YjIxZTEtZWUxNy0z ZmZiLTljMzUtYjdjOGE0YTQ1ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmQ3YTBhOGMtMmUxZi00OGE2LTg5 NjAtN2NlMWFiYjFjNTNkLzZkN2EwYThjLTJlMWYtNDhhNi04OTYwLTdjZTFhYmIx YzUzZC5jcmwwHwYDVR0jBBgwFoAUmtThhXrAnPC1YIKX9LqK8atgtsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZDdhMGE4Yy0yZTFmLTQ4YTYtODk2MC03Y2Ux YWJiMWM1M2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4J0MA4E AgACMAgDBgAmAvgNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAomqbMstD8b7LKR+OUfpqrnAu9k2nCS9N+ dcU3fL6kTBWFHrVWbumLEGOEA5KhTC1yJJOgNFRuuoDzVaHPElpYvZt277D2VAJ+ zRPw3x2twHlrXQmEcmSynYQl0IekkreC3toOIQMdHFDyB1kWrvfx5Vgyzg5PlgPL fgh0+/fkPkm2W+PCUatD1HtPQRYUvUTfCRsUpi7Dk/aRZPTPS0x2TesZoRXi8Ibg E/kUWfSF5F4V8fIw2tgIJltaCt3LKQE7yGtzu6ZuXtcyhypEpS2dr9m0KUQi4UDB Y6q7u3ixYFlk+hsKNwouSOamw/vfbZLLisPoJMWTGJkWug69mZZC -----END CERTIFICATE-----Generated at Thu Sep 18 02:49:15 2025 by rpki-client