$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa File: 7989b37d-2112-3094-a13a-f52f755aa5a8.roa (raw, json) Hash identifier: gMaSB0mp5TPTirKE9+pzJ0efsGqHS2UFjF3fgyJJdks= Subject key identifier: 86:31:69:07:24:DD:A2:51:5C:D2:6D:70:D4:EA:78:1B:50:28:DC:5D Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584B2FC1906E0DD028B4C36B8F80 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 23428 IP address blocks: 23.136.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:90:6e:0d:d0:28:b4:c3:6b:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=cf4dbc58-f0f8-40a7-a3dd-ddab1588ea32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4c:15:a3:0c:f9:16:e8:6b:8c:3f:2c:17:9a: ed:0d:0f:ec:8f:32:ff:23:db:9b:07:56:c7:8e:32: 02:2f:d4:a1:d6:7b:b6:4d:6f:7f:6d:2a:a8:5d:7a: e5:fe:bb:6d:de:15:e5:63:0b:61:8f:38:01:3d:36: 70:c2:59:9f:2e:e0:75:7c:c0:d1:3e:00:b0:af:2e: dc:fe:03:5e:b8:7b:7f:5e:dd:19:4d:46:a4:bb:8b: 90:25:0a:31:a3:26:da:94:89:15:d6:15:78:a7:b9: ab:ac:d8:0d:f5:a1:c0:22:74:d7:2e:5e:41:db:94: 48:75:1b:75:ab:50:26:69:27:5c:0a:1e:64:c4:07: 66:60:85:2b:47:6f:c7:10:15:5f:46:83:d2:d7:6d: 09:9f:5d:a7:ee:29:3f:4a:9a:1a:09:c8:e3:7b:52: e8:a9:aa:e5:63:80:04:1a:d4:e0:e7:e4:f8:3c:75: 4d:eb:1c:a7:37:5e:c7:31:a4:3d:0f:c7:93:81:db: 24:d7:ae:f0:5f:89:81:3c:db:da:6b:79:ca:b2:48: 7f:aa:40:5b:d2:74:67:e5:ee:ff:dc:c2:cd:78:b8: f3:6f:d4:4a:49:17:ef:37:ea:59:9d:7e:98:ae:c8: 8a:d4:48:cd:69:41:f4:f3:97:0a:57:4e:b0:5c:3b: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:31:69:07:24:DD:A2:51:5C:D2:6D:70:D4:EA:78:1B:50:28:DC:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:41:f6:b1:00:0c:24:ee:93:a2:a6:08:f4:05:95:cc:2b:4a: cc:f3:d8:86:61:6a:f8:ce:8c:4f:24:8d:2d:4f:f1:2b:14:09: ae:f9:f8:66:d0:35:a4:e8:ab:78:e1:4e:8a:6a:cd:45:79:5d: a0:27:77:e8:ce:f8:7b:de:98:fc:62:50:67:fa:fc:18:fc:7a: f5:48:c3:b7:f6:ea:51:4e:40:bb:a8:67:30:b7:c6:69:8c:76: fc:c4:e0:02:2b:21:91:6d:55:84:df:16:84:20:eb:4b:3d:ea: ba:c3:02:cc:d0:8e:da:71:a8:89:0f:79:57:2b:5c:1f:21:2e: 12:0f:01:02:a9:1a:f6:e2:a9:50:79:72:d6:72:78:6d:dc:19: 82:a4:7a:0a:0a:ab:6f:3b:08:52:fd:ea:ba:63:81:af:de:08: 7e:e7:e2:36:17:ee:59:94:4f:46:86:6a:1c:73:93:2b:f1:1a: e6:20:a5:c1:00:63:9e:45:90:ac:25:68:2c:16:69:ab:b8:f8: 3c:49:e4:9c:cd:63:3f:a0:38:0f:a9:db:55:df:da:20:71:14: 15:a2:05:27:df:ff:a5:80:c1:5b:c7:66:b4:c1:17:a6:89:fe: 7d:7a:14:d9:9d:4f:73:ee:af:38:03:6a:4f:eb:31:50:16:de: 76:1a:42:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZBuDdAotMNrj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y0ZGJjNTgtZjBmOC00MGE3LWEzZGQtZGRhYjE1ODhlYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kwVowz5FuhrjD8sF5rtDQ/sjzL/I9ubB1bH jjICL9Sh1nu2TW9/bSqoXXrl/rtt3hXlYwthjzgBPTZwwlmfLuB1fMDRPgCwry7c /gNeuHt/Xt0ZTUaku4uQJQoxoybalIkV1hV4p7mrrNgN9aHAInTXLl5B25RIdRt1 q1AmaSdcCh5kxAdmYIUrR2/HEBVfRoPS120Jn12n7ik/SpoaCcjje1LoqarlY4AE GtTg5+T4PHVN6xynN17HMaQ9D8eTgdsk167wX4mBPNvaa3nKskh/qkBb0nRn5e7/ 3MLNeLjzb9RKSRfvN+pZnX6YrsiK1EjNaUH085cKV06wXDt0SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYxaQck3aJRXNJtcNTqeBtQKNxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvNzk4OWIzN2QtMjExMi0z MDk0LWExM2EtZjUyZjc1NWFhNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4joMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZB9rEADCTuk6KmCPQFlcwrSszz2IZhavjOjE8kjS1P8SsUCa75+GbQ NaToq3jhTopqzUV5XaAnd+jO+HvemPxiUGf6/Bj8evVIw7f26lFOQLuoZzC3xmmM dvzE4AIrIZFtVYTfFoQg60s96rrDAszQjtpxqIkPeVcrXB8hLhIPAQKpGvbiqVB5 ctZyeG3cGYKkegoKq287CFL96rpjga/eCH7n4jYX7lmUT0aGahxzkyvxGuYgpcEA Y55FkKwlaCwWaau4+DxJ5JzNYz+gOA+p21Xf2iBxFBWiBSff/6WAwVvHZrTBF6aJ /n16FNmdT3PurzgDak/rMVAW3nYaQis= -----END CERTIFICATE-----Generated at Mon Nov 3 06:55:48 2025 by rpki-client