$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa File: a9736c2d-b353-3032-be0f-62272540e0ac.roa (raw, json) Hash identifier: /T4eh2bliCSbSZMcnAdws45RScjElSctU98gkFNngzg= Subject key identifier: D7:60:F3:2C:F2:2E:A6:F3:B1:7B:8D:AD:FC:27:6A:04:BF:24:C0:75 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584B25FC44E8CB29788A27E9CC80 Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 393373 IP address blocks: 23.136.180.0/24 maxlen: 24 2602:f69c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:44:e8:cb:29:78:8a:27:e9:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=e3603e06-2755-4504-ac07-1cdd3ac3785a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:7a:19:35:5a:7f:4c:b8:13:d9:71:99:e8: 84:11:ff:de:ee:ce:02:47:1e:59:57:09:a6:b4:40: c3:1b:02:af:2c:be:3b:34:bd:e4:c0:c1:6e:ad:18: f9:1c:2f:05:08:bd:40:6e:5a:d8:41:87:8b:6b:db: 8d:98:67:b3:8c:e7:e7:6a:1a:a0:61:61:26:b8:cf: 1e:ee:32:28:36:29:a5:71:14:3d:99:e7:c2:c6:3c: 80:ac:43:9e:dc:55:f3:60:7b:df:cd:72:f9:a1:b1: 54:6d:e8:08:70:80:69:8b:98:a9:72:05:4c:70:98: a4:f8:23:cd:8a:1f:fa:f8:7e:41:d0:cb:6a:85:38: 4e:5d:39:ea:ae:c4:ff:90:c2:cf:9f:84:f4:4c:c8: 49:c3:86:6e:82:32:75:32:39:c5:bf:2c:91:cd:b8: 72:f4:7e:df:22:ac:de:9f:23:ca:1f:6a:89:cd:29: 96:3b:dd:47:11:ed:ab:a3:c7:5c:00:bf:7c:47:61: d6:48:d4:f7:79:a7:55:ec:8f:97:b5:77:14:af:65: 77:61:76:ea:8c:3b:d9:22:49:3c:b8:95:3c:4b:81: 97:c2:9c:1c:82:c8:a4:f4:ff:8a:38:7d:7a:c3:42: 33:65:69:b3:11:11:20:95:d2:83:1d:1c:9c:5c:61: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:60:F3:2C:F2:2E:A6:F3:B1:7B:8D:AD:FC:27:6A:04:BF:24:C0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: 23.136.180.0/24 IPv6: 2602:f69c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3d:4a:37:18:4d:18:34:86:96:e8:41:e3:4c:7f:9c:d5:c7: 7e:8a:2a:da:49:8d:18:8b:64:94:4d:62:45:4c:35:1e:73:09: 26:b2:0e:fe:42:c3:bf:88:6e:93:44:fc:07:b9:56:e0:b7:57: 24:2d:4f:23:38:f2:65:17:c6:6c:47:8b:42:c6:d1:73:a0:39: fe:e3:32:27:9f:c8:b2:5b:dd:a1:30:85:37:99:02:51:76:a4: ce:49:7c:76:57:da:b0:52:8c:58:d7:e4:dc:44:dd:b5:92:f9: ce:cb:88:5c:3f:fe:e6:0b:c4:13:70:6f:a0:2c:8a:36:a6:f2: df:6a:7f:9c:d9:db:13:46:c7:2c:30:06:b9:f5:2b:bb:49:d7: 9b:16:3f:01:36:33:b2:66:c2:de:45:15:d2:82:a3:8b:57:10: f0:ce:7e:ac:ad:a5:ac:f1:5a:8d:fc:b5:fe:62:7f:79:57:5b: e7:89:9e:55:f3:75:da:2e:02:e3:73:61:c2:e1:32:ef:90:b9: 76:39:c7:91:3f:4a:0e:71:2d:4b:fd:cb:40:f8:f1:ae:f9:8d: 5e:c8:02:6b:22:36:34:03:3a:65:1c:81:24:96:31:d5:c8:4d: 96:5d:c0:22:a5:04:33:f3:bc:60:34:ae:ea:62:c3:32:d1:cd: 46:07:01:22 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsl/EToyyl4iifpzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTM2MDNlMDYtMjc1NS00NTA0LWFjMDctMWNkZDNhYzM3ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVd6GTVaf0y4E9lxmeiEEf/e7s4CRx5ZVwmm tEDDGwKvLL47NL3kwMFurRj5HC8FCL1AblrYQYeLa9uNmGezjOfnahqgYWEmuM8e 7jIoNimlcRQ9mefCxjyArEOe3FXzYHvfzXL5obFUbegIcIBpi5ipcgVMcJik+CPN ih/6+H5B0MtqhThOXTnqrsT/kMLPn4T0TMhJw4ZugjJ1MjnFvyyRzbhy9H7fIqze nyPKH2qJzSmWO91HEe2ro8dcAL98R2HWSNT3eadV7I+XtXcUr2V3YXbqjDvZIkk8 uJU8S4GXwpwcgsik9P+KOH16w0IzZWmzEREgldKDHRycXGGcuwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNdg8yzyLqbzsXuNrfwnagS/JMB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk3MzZjMmQtYjM1My0z MDMyLWJlMGYtNjIyNzI1NDBlMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4i0MA4E AgACMAgDBgAmAvacADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlPUo3GE0YNIaW6EHjTH+c1cd+iiraSY0Y i2SUTWJFTDUecwkmsg7+QsO/iG6TRPwHuVbgt1ckLU8jOPJlF8ZsR4tCxtFzoDn+ 4zInn8iyW92hMIU3mQJRdqTOSXx2V9qwUoxY1+TcRN21kvnOy4hcP/7mC8QTcG+g LIo2pvLfan+c2dsTRscsMAa59Su7SdebFj8BNjOyZsLeRRXSgqOLVxDwzn6sraWs 8VqN/LX+Yn95V1vniZ5V83XaLgLjc2HC4TLvkLl2OceRP0oOcS1L/ctA+PGu+Y1e yAJrIjY0AzplHIEkljHVyE2WXcAipQQz87xgNK7qYsMy0c1GBwEi -----END CERTIFICATE-----Generated at Tue Oct 28 13:12:10 2025 by rpki-client