$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/40a2f6f1-6e98-3afc-b0b7-2dc9c6851b22.roa File: 40a2f6f1-6e98-3afc-b0b7-2dc9c6851b22.roa (raw, json) Hash identifier: KxGc64b1k0OYtwRng8QfWrqvgUvWXr2qsWVHFUCX1fw= Subject key identifier: 12:75:1B:0F:DF:9C:F7:39:2B:A2:A1:CD:E5:9D:27:2E:22:5B:0D:B9 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F4328584AF7EBE68D0A90737A13ACDD00 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/40a2f6f1-6e98-3afc-b0b7-2dc9c6851b22.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 36744 IP address blocks: 23.134.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e6:8d:0a:90:73:7a:13:ac:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=149fa491-f676-4926-9317-e6ad0cae093b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f1:46:df:2a:3c:1b:ff:fe:09:6e:e2:91:70: 57:0b:44:63:9f:73:4c:63:3b:b2:2e:4a:a8:e3:22: 27:50:d5:93:46:51:00:37:c0:a8:3a:22:13:eb:81: 93:d0:61:41:4e:59:57:42:01:00:a5:c3:4a:ab:8a: 5f:49:9a:c7:dc:11:51:c5:65:3a:05:93:90:4e:88: d4:be:a7:5b:39:e2:39:ec:c6:06:0d:e1:e2:5e:f8: 15:08:ea:55:11:ed:7f:85:a0:7e:55:6f:2f:5f:18: f3:95:56:6b:04:09:7b:35:d9:0f:1c:b4:99:b8:77: ca:eb:95:07:c6:29:1d:c9:84:5e:9c:8f:12:fe:3f: ac:92:23:89:34:a7:77:d7:b2:7a:f0:7a:5f:8b:d3: 85:1a:77:c2:0e:78:7f:c8:73:2b:31:1d:6f:c1:c7: af:25:15:ee:34:76:a5:e4:78:48:55:67:86:34:34: 33:16:a7:46:a4:f1:77:68:29:b7:3a:f2:a7:20:73: b1:5b:14:c6:94:22:30:26:a2:06:a4:aa:dc:fd:d7: a0:a9:c7:65:46:07:d8:8d:8c:2e:a0:af:c6:d8:e7: 72:60:d1:4e:c8:33:84:83:19:1f:65:c3:8d:8b:13: 8f:b9:29:1f:ac:7d:6d:05:e7:80:5e:da:56:c4:5b: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:75:1B:0F:DF:9C:F7:39:2B:A2:A1:CD:E5:9D:27:2E:22:5B:0D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/40a2f6f1-6e98-3afc-b0b7-2dc9c6851b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a1:c8:63:21:e9:7d:5f:ba:86:28:d4:3a:c1:a3:cb:1b:f1: 5c:d4:3e:bc:8e:86:89:a9:34:6a:76:ba:73:c5:3a:ef:f3:d3: be:bb:62:52:fd:23:e6:5b:30:39:70:38:7d:43:10:f8:45:a0: 35:10:57:43:f9:4b:14:6c:a4:28:6c:ef:ad:50:1e:45:17:71: 3b:40:52:4e:7d:23:bf:86:c1:18:0c:c2:73:9d:e7:1f:9e:a6: cc:40:f6:f1:38:17:e8:69:6c:75:f9:e4:7e:75:98:3c:d0:e3: 5a:7d:3b:e7:27:53:57:d9:2a:77:26:cb:d3:44:69:cb:8e:b7: cd:a8:a4:6a:eb:f6:77:7b:b5:2c:28:f0:8d:32:23:d8:aa:d3: ad:74:80:0f:fc:3b:3e:ab:11:b1:c7:0f:01:75:c8:7c:55:30: 61:7b:7d:e1:ad:e4:2f:b0:39:17:b2:8d:f9:f6:04:0d:96:1c: 59:04:f3:21:0d:da:17:b2:2b:a1:5e:43:f5:db:e9:2b:4a:6f: f4:9c:96:c3:8d:eb:7c:8c:51:01:ea:b1:84:aa:63:39:10:5c: 5d:45:83:1a:33:84:af:71:ff:ba:98:59:37:4d:b3:01:bd:90: 73:7b:b8:88:73:ac:d3:59:66:4a:35:a8:5a:6e:7a:d4:48:e3: 35:80:e1:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+aNCpBzehOs3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MTQ5ZmE0OTEtZjY3Ni00OTI2LTkzMTctZTZhZDBjYWUwOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPFG3yo8G//+CW7ikXBXC0Rjn3NMYzuyLkqo 4yInUNWTRlEAN8CoOiIT64GT0GFBTllXQgEApcNKq4pfSZrH3BFRxWU6BZOQTojU vqdbOeI57MYGDeHiXvgVCOpVEe1/haB+VW8vXxjzlVZrBAl7NdkPHLSZuHfK65UH xikdyYRenI8S/j+skiOJNKd317J68Hpfi9OFGnfCDnh/yHMrMR1vwcevJRXuNHal 5HhIVWeGNDQzFqdGpPF3aCm3OvKnIHOxWxTGlCIwJqIGpKrc/degqcdlRgfYjYwu oK/G2OdyYNFOyDOEgxkfZcONixOPuSkfrH1tBeeAXtpWxFsCQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ1Gw/fnPc5K6KhzeWdJy4iWw25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvNDBhMmY2ZjEtNmU5OC0z YWZjLWIwYjctMmRjOWM2ODUxYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+hyGMh6X1fuoYo1DrBo8sb8VzUPryOhompNGp2unPFOu/z0767YlL9 I+ZbMDlwOH1DEPhFoDUQV0P5SxRspChs761QHkUXcTtAUk59I7+GwRgMwnOd5x+e psxA9vE4F+hpbHX55H51mDzQ41p9O+cnU1fZKncmy9NEacuOt82opGrr9nd7tSwo 8I0yI9iq0610gA/8Oz6rEbHHDwF1yHxVMGF7feGt5C+wOReyjfn2BA2WHFkE8yEN 2heyK6FeQ/Xb6StKb/SclsON63yMUQHqsYSqYzkQXF1FgxozhK9x/7qYWTdNswG9 kHN7uIhzrNNZZko1qFpuetRI4zWA4bA= -----END CERTIFICATE-----Generated at Thu Sep 18 04:08:01 2025 by rpki-client