$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa File: 6f593c08-3653-34e9-8e4d-e176f1d87536.roa (raw, json) Hash identifier: VBm2sXLeTcD50YPLxC5zPWHzsf6Fl82kjJYXt4qf7lA= Subject key identifier: D0:6E:C3:7B:D9:D8:5D:84:07:9A:AB:16:7F:80:70:57:06:65:20:E9 Certificate issuer: /CN=b673aad8-2248-407c-90e8-0781473d6616 Certificate serial: 010D0C9F4328584B52A7691A00FA41FB23A21980 Authority key identifier: F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 16509 IP address blocks: 23.138.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:69:1a:00:fa:41:fb:23:a2:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b673aad8-2248-407c-90e8-0781473d6616 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=f24bec86-667d-43d9-8e3e-652a1006db24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:dc:4a:69:e2:20:7c:5d:4a:b8:f8:d9:0e: c1:db:ee:e1:7e:2c:70:12:88:f8:f0:6b:ec:02:91: c6:dc:e5:cb:e9:8f:27:e6:4b:56:6b:cc:3e:6d:c1: e9:36:64:0a:e1:cd:fc:3f:32:61:e1:5f:49:c5:7b: db:bf:d0:db:6a:d0:4b:b5:d7:89:66:f6:b5:0a:eb: 78:56:58:35:42:61:ab:5e:ce:82:f6:5f:67:b6:c1: 74:05:a4:74:10:42:7d:5e:9b:92:69:a0:cf:a0:91: 1a:f1:f8:e8:e7:97:5b:33:1d:43:7b:46:fa:fd:e5: 2f:42:8a:cc:e7:dc:dd:b8:2f:95:5e:05:02:4a:91: dd:08:21:26:eb:29:8a:39:5e:96:4d:f3:47:18:07: 53:0d:01:b3:01:42:2f:8b:d0:48:84:03:cf:fe:3a: 4c:e0:88:60:98:b3:84:eb:7e:d3:1e:ab:00:a7:5a: 51:9c:fa:4d:75:73:cf:4e:e5:ed:4e:ee:be:d4:41: e9:51:d6:39:bc:7d:72:9c:c0:67:4d:16:43:93:5a: 66:49:5e:6c:6c:dc:1e:7d:e7:d2:ca:08:1c:eb:40: 23:a2:7b:1a:b4:56:13:dc:c6:cc:37:91:85:5c:ec: 37:7c:f8:76:d8:70:e9:34:a2:d9:9a:dd:47:58:99: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6E:C3:7B:D9:D8:5D:84:07:9A:AB:16:7F:80:70:57:06:65:20:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/6f593c08-3653-34e9-8e4d-e176f1d87536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616/b673aad8-2248-407c-90e8-0781473d6616.crl X509v3 Authority Key Identifier: keyid:F9:FD:FD:BD:A6:1D:EE:47:EC:43:95:41:41:00:B6:7D:0A:68:54:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b673aad8-2248-407c-90e8-0781473d6616.cer sbgp-ipAddrBlock: critical IPv4: 23.138.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:99:f4:aa:84:46:e7:87:1d:14:ae:9d:57:cf:9d:89:03:2e: 3b:aa:61:c8:f3:87:5b:25:f3:3c:d1:3b:00:92:6b:ce:cf:35: d5:69:58:02:32:e7:aa:a7:9a:52:38:01:92:71:ad:84:a7:60: 8c:34:96:48:fd:12:09:dc:fa:94:43:62:ee:ea:81:bd:4c:e5: 34:52:08:0b:17:30:c2:24:57:cb:6f:f0:a0:c2:97:77:22:71: 33:70:94:24:d2:6e:1a:51:17:7f:66:d8:8f:2d:64:b5:2b:22: 7a:73:1a:53:08:c4:a8:cc:cd:2f:87:05:64:a5:74:8b:c0:b8: 2d:e8:cf:a8:d6:16:0e:2d:7e:f6:67:45:3c:f7:c5:dd:e8:7e: 56:71:95:e4:9a:a0:30:84:f8:e1:a0:1c:a6:ae:78:c2:94:c0: a8:51:03:4f:8f:41:a6:06:59:30:10:65:f4:7e:d9:5e:6a:21: 9a:3b:bc:2c:66:80:55:34:aa:ea:5f:c1:b5:7a:5a:c6:14:61: fe:e0:39:0a:9a:a6:70:f9:44:f9:0f:2f:81:40:4e:34:a3:46: e4:53:49:8d:2b:d2:84:c9:4e:03:a4:3f:6e:86:49:89:75:d8: fc:da:0a:9e:a7:63:43:56:4b:46:13:6a:b1:8e:bc:8e:98:89: f2:a0:25:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp2kaAPpB+yOiGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY3M2FhZDgtMjI0OC00MDdjLTkwZTgtMDc4MTQ3M2Q2 NjE2MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZjI0YmVjODYtNjY3ZC00M2Q5LThlM2UtNjUyYTEwMDZkYjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAievcSmniIHxdSrj42Q7B2+7hfixwEoj48Gvs ApHG3OXL6Y8n5ktWa8w+bcHpNmQK4c38PzJh4V9JxXvbv9DbatBLtdeJZva1Cut4 Vlg1QmGrXs6C9l9ntsF0BaR0EEJ9XpuSaaDPoJEa8fjo55dbMx1De0b6/eUvQorM 59zduC+VXgUCSpHdCCEm6ymKOV6WTfNHGAdTDQGzAUIvi9BIhAPP/jpM4IhgmLOE 637THqsAp1pRnPpNdXPPTuXtTu6+1EHpUdY5vH1ynMBnTRZDk1pmSV5sbNwefefS yggc60AjonsatFYT3MbMN5GFXOw3fPh22HDpNKLZmt1HWJmnuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBuw3vZ2F2EB5qrFn+AcFcGZSDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iNjcz YWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgxNDczZDY2MTYvNmY1OTNjMDgtMzY1My0z NGU5LThlNGQtZTE3NmYxZDg3NTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjY3M2FhZDgtMjI0OC00MDdjLTkw ZTgtMDc4MTQ3M2Q2NjE2L2I2NzNhYWQ4LTIyNDgtNDA3Yy05MGU4LTA3ODE0NzNk NjYxNi5jcmwwHwYDVR0jBBgwFoAU+f39vaYd7kfsQ5VBQQC2fQpoVKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iNjczYWFkOC0yMjQ4LTQwN2MtOTBlOC0wNzgx NDczZDY2MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSZ9KqERueHHRSunVfPnYkDLjuqYcjzh1sl8zzROwCSa87PNdVpWAIy 56qnmlI4AZJxrYSnYIw0lkj9Egnc+pRDYu7qgb1M5TRSCAsXMMIkV8tv8KDCl3ci cTNwlCTSbhpRF39m2I8tZLUrInpzGlMIxKjMzS+HBWSldIvAuC3oz6jWFg4tfvZn RTz3xd3oflZxleSaoDCE+OGgHKaueMKUwKhRA0+PQaYGWTAQZfR+2V5qIZo7vCxm gFU0qupfwbV6WsYUYf7gOQqapnD5RPkPL4FATjSjRuRTSY0r0oTJTgOkP26GSYl1 2PzaCp6nY0NWS0YTarGOvI6YifKgJeM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:03 2025 by rpki-client