$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa File: f8dbe662-4178-3aea-90e2-4d5ab001b930.roa (raw, json) Hash identifier: ozOAzBcOmycWINrfmDMcXVtBRR1hdbbUYcrTyfWjCHc= Subject key identifier: AD:90:F7:6A:A2:15:3D:3C:00:67:63:08:37:06:06:A9:76:7F:E6:BE Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584BAA97A806FBF9A72D8DCBB536 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 50842 IP address blocks: 23.136.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a8:06:fb:f9:a7:2d:8d:cb:b5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=4a663a30-c8a1-432d-bbb1-2a89f0585c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:46:1c:5b:9d:43:46:3d:af:0b:d6:45:78: 88:d9:83:5d:86:e1:2d:c5:b2:a3:b3:d4:5b:59:c5: 97:3c:44:b1:0f:05:32:be:32:e5:b2:03:b7:b9:7e: 1b:5a:ef:c4:65:8e:5a:8e:41:46:46:59:7d:ab:fa: 4c:e6:a9:94:5f:41:fe:f1:9a:85:1d:55:56:02:7a: d7:97:b6:e4:03:d0:f5:a7:1f:aa:ff:e9:ba:0b:9d: b5:81:a4:4b:08:24:6b:d7:ff:14:56:ba:bf:c0:ed: f7:66:14:9e:c7:5c:9e:e9:5c:e9:d0:10:41:d7:4c: 4c:87:cf:89:9a:05:3d:87:fd:e8:28:a4:49:08:70: e7:b9:c1:c6:c9:b5:99:a3:bf:79:b8:d6:14:99:5f: 90:4f:46:25:4e:5a:6f:d2:74:48:7e:be:64:c1:5e: b4:dc:62:3d:e5:39:62:5c:4e:e0:03:c7:1d:7d:ce: 55:ce:dc:5c:63:3c:d1:71:b2:10:ca:75:03:d9:6f: bc:90:b3:11:c1:56:84:71:4d:ef:a9:27:56:aa:67: 7f:51:6e:09:e2:1c:ae:f3:60:21:3c:ae:48:60:7a: 15:8f:5a:a6:c2:92:4a:53:40:38:6f:fd:92:71:43: aa:a8:b1:c1:ff:54:41:71:c5:d7:7a:19:bd:39:7b: 02:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:90:F7:6A:A2:15:3D:3C:00:67:63:08:37:06:06:A9:76:7F:E6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:18:b8:51:e6:02:29:bd:59:e5:7e:e0:a9:f8:a9:fd:71:55: aa:33:72:cb:7b:ca:e4:e1:ee:49:a4:f6:e1:09:c1:73:5f:df: a6:9b:15:e7:02:04:dc:fc:d2:29:62:51:a6:bf:da:7f:bb:87: cc:78:87:67:a6:ad:7a:fd:2e:2f:ec:69:bb:6e:f2:75:02:b6: d9:12:47:c6:55:7d:ae:4c:57:d3:30:3d:a3:84:d9:bb:9a:ac: 74:da:76:76:46:f9:f0:7c:c9:87:3c:f4:5f:7b:7e:63:c3:49: 34:73:27:99:ac:1f:d2:2c:d9:0d:6f:f8:b2:d0:b1:fd:f9:27: cb:c2:3d:ee:e9:51:88:0a:fc:0d:3c:a1:ea:87:8e:19:40:b5: 9b:be:d7:5f:ef:b4:20:9c:bc:0b:0b:7b:67:f1:51:87:c1:7a: e9:fa:8d:a1:57:35:28:58:40:f2:0c:66:c0:5d:0d:ca:f9:6e: 01:5d:ef:1d:fd:4b:76:78:27:eb:51:43:21:0a:c9:61:37:f9: 48:a1:b1:01:3b:ee:4f:d0:ec:fd:9b:e9:31:2a:8f:25:f8:83: 7a:0f:5b:6e:0f:73:73:17:8e:ee:7f:56:2d:6e:53:cd:e6:03: 04:40:2a:24:4c:f9:43:10:0d:9e:bb:f5:e1:1e:ff:8f:4c:29: 60:f6:d0:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6gG+/mnLY3LtTYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NGE2NjNhMzAtYzhhMS00MzJkLWJiYjEtMmE4OWYwNTg1YzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmxGHFudQ0Y9rwvWRXiI2YNdhuEtxbKjs9Rb WcWXPESxDwUyvjLlsgO3uX4bWu/EZY5ajkFGRll9q/pM5qmUX0H+8ZqFHVVWAnrX l7bkA9D1px+q/+m6C521gaRLCCRr1/8UVrq/wO33ZhSex1ye6Vzp0BBB10xMh8+J mgU9h/3oKKRJCHDnucHGybWZo795uNYUmV+QT0YlTlpv0nRIfr5kwV603GI95Tli XE7gA8cdfc5VztxcYzzRcbIQynUD2W+8kLMRwVaEcU3vqSdWqmd/UW4J4hyu82Ah PK5IYHoVj1qmwpJKU0A4b/2ScUOqqLHB/1RBccXXehm9OXsCJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2Q92qiFT08AGdjCDcGBql2f+a+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvZjhkYmU2NjItNDE3OC0z YWVhLTkwZTItNGQ1YWIwMDFiOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4jpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUYuFHmAim9WeV+4Kn4qf1xVaozcst7yuTh7kmk9uEJwXNf36abFecC BNz80iliUaa/2n+7h8x4h2emrXr9Li/sabtu8nUCttkSR8ZVfa5MV9MwPaOE2bua rHTadnZG+fB8yYc89F97fmPDSTRzJ5msH9Is2Q1v+LLQsf35J8vCPe7pUYgK/A08 oeqHjhlAtZu+11/vtCCcvAsLe2fxUYfBeun6jaFXNShYQPIMZsBdDcr5bgFd7x39 S3Z4J+tRQyEKyWE3+UihsQE77k/Q7P2b6TEqjyX4g3oPW24Pc3MXju5/Vi1uU83m AwRAKiRM+UMQDZ679eEe/49MKWD20HY= -----END CERTIFICATE-----Generated at Mon Nov 3 06:55:47 2025 by rpki-client