$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa File: cf57be58-bf9f-36ed-8c8d-829a5f932254.roa (raw, json) Hash identifier: J2dJ7qdyfBDdssScEmmTuYecaq1hUsgOtXX9y1wlEJE= Subject key identifier: 8D:0D:3F:A0:80:63:BB:40:26:B9:69:3B:5B:89:B2:FA:A2:80:1D:0D Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584B25FC2FC587841B23DF4D2100 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 23428 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:2f:c5:87:84:1b:23:df:4d:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=12878fa0-24a4-47eb-b6a8-e7fe5ddc9b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bd:75:00:59:9a:a9:20:5f:f3:6e:6d:51:30: 3a:b0:a1:74:c9:96:46:73:06:34:cf:2e:c8:c5:57: 2d:34:5b:7e:61:ef:5d:4a:f4:5f:bc:ac:ae:ce:30: d8:52:54:46:a6:bd:c2:f9:98:ed:bb:4e:9d:76:0e: c8:91:b9:91:7a:28:58:c8:55:cc:5b:b0:bf:60:e4: 82:6d:28:e5:34:6e:5e:0d:4a:cd:c7:fa:e6:89:f6: 4d:0e:79:9a:99:04:e4:a5:98:ba:4b:73:86:3d:b5: 45:d5:86:58:cd:23:12:ce:bc:ca:7e:11:c1:f3:4a: 3e:a3:d6:35:0c:05:01:9f:2e:31:66:8c:cf:5c:95: 8a:68:44:6e:4b:c3:f0:4a:59:6f:fa:52:d9:81:1a: fb:53:57:2e:52:3e:2e:1b:3f:1e:91:c2:53:95:1a: 17:a5:43:2e:0e:b8:3c:fd:e0:15:29:6f:ec:cd:ec: c5:23:91:67:7e:bd:1a:a7:86:e0:bd:eb:46:94:fe: e4:14:27:04:e5:5d:9b:23:87:36:b8:2b:2c:9a:85: 59:6f:f7:87:cf:7e:af:43:62:15:0f:8e:b9:8c:a9: 0c:aa:7c:8a:c6:9d:7c:2e:55:1c:8b:84:5b:13:4a: d3:e0:38:49:ad:10:8c:f3:8b:2f:79:03:b5:68:f0: ff:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0D:3F:A0:80:63:BB:40:26:B9:69:3B:5B:89:B2:FA:A2:80:1D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/cf57be58-bf9f-36ed-8c8d-829a5f932254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:64:53:1c:a0:01:97:15:b3:c6:0b:38:dc:7b:6c:eb:40:3e: c8:78:3f:2b:db:59:99:ba:1d:bc:e6:54:7d:f0:94:0f:67:5c: 26:cd:fa:88:37:6e:87:2c:02:eb:7c:3d:9f:4a:73:18:e8:f5: 82:f0:56:b4:64:e0:2f:a3:9c:79:96:ed:52:b4:c6:47:e7:50: 86:8c:68:4f:d5:70:02:31:ce:9f:46:f9:8a:a5:df:73:b3:b9: 32:6a:5a:67:03:e7:b8:ca:0b:aa:dd:05:7b:d6:97:87:9a:10: 74:71:2d:7f:33:5f:34:e8:01:d7:cc:be:00:d6:b1:37:80:28: dc:7f:ce:35:66:d0:aa:e5:21:3d:32:d3:7e:70:05:8f:01:8b: ff:4d:71:88:ce:01:5b:9a:2e:9b:a5:98:fc:1a:b5:dc:ff:0a: 77:63:dd:e3:ee:ef:fe:33:b6:51:57:5d:04:01:0f:d8:10:e9: b0:ab:1c:7f:38:1c:a2:32:be:05:ff:d4:c4:94:ac:8f:ba:d5: 73:28:11:1f:a5:23:96:6f:01:a2:85:c3:5e:3f:dd:43:02:80: b2:39:6e:72:07:55:dd:cf:3c:95:ad:6f:f9:18:12:b7:e8:b8: 88:eb:b1:26:b3:f4:2e:2c:cd:8f:e3:cd:96:85:89:f7:71:88: fa:03:21:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/C/Fh4QbI99NIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MTI4NzhmYTAtMjRhNC00N2ViLWI2YTgtZTdmZTVkZGM5YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r11AFmaqSBf825tUTA6sKF0yZZGcwY0zy7I xVctNFt+Ye9dSvRfvKyuzjDYUlRGpr3C+Zjtu06ddg7IkbmReihYyFXMW7C/YOSC bSjlNG5eDUrNx/rmifZNDnmamQTkpZi6S3OGPbVF1YZYzSMSzrzKfhHB80o+o9Y1 DAUBny4xZozPXJWKaERuS8PwSllv+lLZgRr7U1cuUj4uGz8ekcJTlRoXpUMuDrg8 /eAVKW/szezFI5Fnfr0ap4bgvetGlP7kFCcE5V2bI4c2uCssmoVZb/eHz36vQ2IV D465jKkMqnyKxp18LlUci4RbE0rT4DhJrRCM84sveQO1aPD/cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0NP6CAY7tAJrlpO1uJsvqigB0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvY2Y1N2JlNTgtYmY5Zi0z NmVkLThjOGQtODI5YTVmOTMyMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtkUxygAZcVs8YLONx7bOtAPsh4PyvbWZm6HbzmVH3wlA9nXCbN+og3 bocsAut8PZ9Kcxjo9YLwVrRk4C+jnHmW7VK0xkfnUIaMaE/VcAIxzp9G+Yql33Oz uTJqWmcD57jKC6rdBXvWl4eaEHRxLX8zXzToAdfMvgDWsTeAKNx/zjVm0KrlIT0y 035wBY8Bi/9NcYjOAVuaLpulmPwatdz/Cndj3ePu7/4ztlFXXQQBD9gQ6bCrHH84 HKIyvgX/1MSUrI+61XMoER+lI5ZvAaKFw14/3UMCgLI5bnIHVd3PPJWtb/kYErfo uIjrsSaz9C4szY/jzZaFifdxiPoDISY= -----END CERTIFICATE-----Generated at Tue Sep 16 04:26:44 2025 by rpki-client