$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa File: 46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa (raw, json) Hash identifier: u6sHmdQ6YArSD05Xela7Wtw9l43I8P/KbjJJl4E6E84= Subject key identifier: E9:54:12:79:B1:5E:FA:DB:5D:95:C4:E0:28:3C:33:99:EB:4B:DD:92 Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Certificate serial: 010D0C9F4328584B4FDC7E327C3ECF2335D1C400 Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 23.153.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7e:32:7c:3e:cf:23:35:d1:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=e780e54b-3e5e-4d48-9dbb-f0230aba775f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:78:94:84:82:0e:6b:e5:4a:ab:97:31:41: bc:95:bf:ee:c8:b7:db:40:da:85:70:74:9b:1f:96: 8e:09:b4:6f:f3:21:53:bf:6d:7f:54:b0:e2:17:16: ca:67:86:a5:d4:b2:5a:b3:c4:0c:97:3d:83:60:65: 18:43:af:ae:45:98:25:34:d2:8f:1d:d4:df:3b:8c: 59:a2:63:85:04:df:61:f8:21:ac:e5:e6:75:c5:92: 33:5f:6c:f1:8a:8d:6c:21:ea:79:ed:ef:f5:18:32: 6d:9a:cf:49:89:d3:88:b6:53:e7:a5:34:01:d4:6f: 5d:ce:79:4a:44:0c:ef:c2:8d:13:0a:37:3f:0c:ab: 44:9a:31:a1:38:b9:57:33:5a:85:39:6f:64:1b:3d: 9c:d8:36:dd:83:c6:24:da:0b:ee:fa:8b:d1:c1:37: e2:89:eb:06:47:89:28:c6:3f:55:ce:4c:42:58:72: a9:49:c6:0b:d8:f3:d0:8d:6c:cd:6e:94:0b:30:fe: 07:28:c6:78:77:d5:ca:95:b7:cc:13:09:90:b5:f4: 96:3b:1c:6a:5d:da:29:4f:0c:ab:76:63:d4:7a:f8: aa:60:2c:b3:6a:e1:be:8a:97:66:e9:f9:b4:1c:6a: 66:4c:a4:e6:f6:18:8e:7e:27:fe:37:5f:64:ce:c3: 2b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:54:12:79:B1:5E:FA:DB:5D:95:C4:E0:28:3C:33:99:EB:4B:DD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl X509v3 Authority Key Identifier: keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer sbgp-ipAddrBlock: critical IPv4: 23.153.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:2b:7e:96:20:25:ed:10:6b:74:df:4a:66:72:e5:6f:05:3c: 5a:16:4a:9d:06:31:32:09:b6:42:69:8f:cb:d2:74:36:9c:1c: 3b:bf:a6:c3:86:85:0b:9a:e4:97:87:e4:f4:1c:89:12:b5:76: c2:77:97:0b:dd:53:aa:e8:af:c8:51:d1:78:d3:30:68:77:a8: c3:91:93:45:19:a9:57:30:0c:a6:20:0f:78:b6:ea:15:67:2d: 51:39:ce:4e:3e:e7:13:9b:ca:19:29:1d:9f:58:f6:fa:f2:b9: 3d:cf:af:52:53:9f:16:ca:2a:e0:b5:6b:76:18:34:d4:72:dd: 2a:27:4c:60:3d:ec:c6:12:d4:b9:ac:4a:33:97:44:5d:50:47: b2:d4:93:64:60:f2:d8:d7:6d:97:51:cc:3e:28:db:fc:19:d2: 2e:67:27:f7:95:52:dc:6f:b1:98:ae:96:1c:6f:4d:01:b0:41: 2e:94:b6:e2:99:63:9f:6d:f4:09:ec:ab:bc:92:84:71:77:0d: 1a:b8:1c:29:97:d8:70:0f:e8:b1:35:6f:ca:9f:08:97:61:d4: ed:aa:9a:c6:5d:85:21:52:13:f2:e5:4d:b8:ae:53:43:2e:43: e8:6f:80:6d:b1:ad:74:f8:e1:fa:c1:51:83:48:4d:15:c4:0b: 03:c9:75:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3H4yfD7PIzXRxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3 MDBjMB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZTc4MGU1NGItM2U1ZS00ZDQ4LTlkYmItZjAyMzBhYmE3NzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwN4lISCDmvlSquXMUG8lb/uyLfbQNqFcHSb H5aOCbRv8yFTv21/VLDiFxbKZ4al1LJas8QMlz2DYGUYQ6+uRZglNNKPHdTfO4xZ omOFBN9h+CGs5eZ1xZIzX2zxio1sIep57e/1GDJtms9JidOItlPnpTQB1G9dznlK RAzvwo0TCjc/DKtEmjGhOLlXM1qFOW9kGz2c2Dbdg8Yk2gvu+ovRwTfiiesGR4ko xj9VzkxCWHKpScYL2PPQjWzNbpQLMP4HKMZ4d9XKlbfMEwmQtfSWOxxqXdopTwyr dmPUeviqYCyzauG+ipdm6fm0HGpmTKTm9hiOfif+N19kzsMraQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlUEnmxXvrbXZXE4Cg8M5nrS92SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3 MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvNDY4NTFlZDItMDliOC0z ZDlhLTkxODUtOGRkYWM5Y2FjZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0 MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2 NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy N2E5NjcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALErfpYgJe0Qa3TfSmZy5W8FPFoWSp0GMTIJtkJpj8vSdDacHDu/psOG hQua5JeH5PQciRK1dsJ3lwvdU6ror8hR0XjTMGh3qMORk0UZqVcwDKYgD3i26hVn LVE5zk4+5xObyhkpHZ9Y9vryuT3Pr1JTnxbKKuC1a3YYNNRy3SonTGA97MYS1Lms SjOXRF1QR7LUk2Rg8tjXbZdRzD4o2/wZ0i5nJ/eVUtxvsZiulhxvTQGwQS6UtuKZ Y59t9Ansq7yShHF3DRq4HCmX2HAP6LE1b8qfCJdh1O2qmsZdhSFSE/LlTbiuU0Mu Q+hvgG2xrXT44frBUYNITRXECwPJdcs= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:39 2025 by rpki-client