$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa File: e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa (raw, json) Hash identifier: mQRYMnl0JHyqrs0vQ8ukxbi8YdrwdrHNrMweLF0lxlY= Subject key identifier: 50:D3:51:5A:DC:B1:48:29:EB:BE:21:89:17:29:BB:62:FE:5C:5A:45 Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584B1D9C2C56A2193F6C05F975A0 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 213622 IP address blocks: 23.130.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:2c:56:a2:19:3f:6c:05:f9:75:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=3037d2e3-ce79-4ca0-b228-ad1fa3ecbcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:bb:16:26:37:c0:ef:ed:ee:e5:59:57:c8: be:41:f9:2d:99:4b:32:d2:26:3c:a4:e5:9f:3a:10: c5:81:d6:a5:38:57:d7:d1:44:cb:50:6e:ef:c9:36: b9:61:2e:23:a1:77:07:dd:46:75:8a:50:74:32:62: ba:ec:d8:26:ab:95:93:21:61:9a:de:2b:b1:4a:e6: 61:ab:53:67:b4:91:f1:13:14:75:a6:92:13:aa:e9: 1b:25:35:e7:64:3c:27:4e:43:59:95:46:13:c5:94: c9:62:13:62:d1:dc:81:3b:20:82:ac:74:6d:48:1f: ac:e4:37:73:68:f7:90:e9:48:df:73:90:da:5e:f9: 50:bb:e8:68:e5:0f:a3:ab:02:61:a9:54:48:a8:d7: b0:dc:cc:35:23:17:bb:cc:6d:f6:f2:8d:ec:3b:e8: 16:9c:59:e3:4f:db:d5:42:2b:aa:4d:ce:f8:57:f9: e1:e3:54:6b:3b:36:e9:de:7f:c6:cd:52:0f:95:e7: c0:16:c9:fc:fc:57:47:c9:a7:05:e3:b7:1c:bd:4c: ce:63:3d:72:14:13:c8:3a:09:4e:b9:03:62:ae:89: c8:35:ed:38:99:53:65:fc:e5:33:06:57:86:d8:1c: 28:d8:96:ea:80:21:d4:71:a5:5a:97:6d:08:92:64: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:51:5A:DC:B1:48:29:EB:BE:21:89:17:29:BB:62:FE:5C:5A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:71:bc:06:b2:7a:5a:31:1f:12:e8:6b:6d:55:02:5c:c2:72: 5d:13:08:d1:c7:20:a9:87:97:0c:5f:b5:a1:cf:bc:f7:39:bf: 24:8d:09:51:4d:38:13:e3:ed:96:25:a9:7c:32:5c:32:6d:23: 62:af:95:6d:9b:72:6f:39:3d:8a:83:67:32:35:e6:f9:da:c1: d2:42:16:68:31:bc:bd:d6:5f:52:1b:82:94:82:86:57:0c:16: 6c:6c:9a:48:c5:97:94:7a:4b:3b:ed:6c:a2:6b:de:0c:f2:ef: a3:db:8f:ac:7c:a9:90:e9:33:59:9f:6e:e1:d2:b9:74:6a:f0: 6f:bb:b1:49:84:a6:2c:a1:7d:ca:74:59:22:f6:da:9f:a8:0c: 62:74:a8:60:00:a4:6f:8f:ea:4d:f7:54:09:ba:9b:b1:fe:e8: 1f:65:22:6f:f1:fe:96:bc:37:3a:76:3e:9f:6b:01:86:27:a3: 80:ba:34:68:33:2b:20:ac:bf:ae:dc:cf:28:f6:5c:22:c6:e6: 6a:6d:1c:10:34:df:be:6c:87:e0:53:03:11:d6:95:bb:50:28: 2a:86:a0:12:e5:58:84:25:02:3d:29:ee:01:a5:d4:94:af:74: 9e:cb:6b:7b:5e:c7:a0:48:31:2d:2d:82:b1:64:05:53:01:f0: 4d:53:98:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCxWohk/bAX5daAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk MzAzN2QyZTMtY2U3OS00Y2EwLWIyMjgtYWQxZmEzZWNiY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn627FiY3wO/t7uVZV8i+QfktmUsy0iY8pOWf OhDFgdalOFfX0UTLUG7vyTa5YS4joXcH3UZ1ilB0MmK67Ngmq5WTIWGa3iuxSuZh q1NntJHxExR1ppITqukbJTXnZDwnTkNZlUYTxZTJYhNi0dyBOyCCrHRtSB+s5Ddz aPeQ6Ujfc5DaXvlQu+ho5Q+jqwJhqVRIqNew3Mw1Ixe7zG328o3sO+gWnFnjT9vV QiuqTc74V/nh41RrOzbp3n/GzVIPlefAFsn8/FdHyacF47ccvUzOYz1yFBPIOglO uQNironINe04mVNl/OUzBleG2Bwo2JbqgCHUcaVal20IkmTW9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDTUVrcsUgp674hiRcpu2L+XFpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvZTg1ZWEwN2ItZWYwYS0z NDU2LWEzN2QtYTIzZWMyYTI2MjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZxvAayeloxHxLoa21VAlzCcl0TCNHHIKmHlwxftaHPvPc5vySNCVFN OBPj7ZYlqXwyXDJtI2KvlW2bcm85PYqDZzI15vnawdJCFmgxvL3WX1IbgpSChlcM FmxsmkjFl5R6SzvtbKJr3gzy76Pbj6x8qZDpM1mfbuHSuXRq8G+7sUmEpiyhfcp0 WSL22p+oDGJ0qGAApG+P6k33VAm6m7H+6B9lIm/x/pa8Nzp2Pp9rAYYno4C6NGgz KyCsv67czyj2XCLG5mptHBA0375sh+BTAxHWlbtQKCqGoBLlWIQlAj0p7gGl1JSv dJ7La3tex6BIMS0tgrFkBVMB8E1TmEo= -----END CERTIFICATE-----Generated at Tue Sep 9 01:19:24 2025 by rpki-client