$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa File: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (raw, json) Hash identifier: E6ssGfxjE63xUyZOQCvfn4sBI03Uqyl6c/ubT9OgC3U= Subject key identifier: AA:A6:3C:0A:A3:A4:3A:29:7B:C5:2E:7B:55:74:A4:B8:EA:CD:89:51 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584AF52128BBEC47D31A47B1E380 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 400564 IP address blocks: 23.134.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:28:bb:ec:47:d3:1a:47:b1:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=0730d5d2-18f8-45ba-9554-8f1ecf4f9ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:38:59:e3:d6:4e:bd:43:fd:af:80:74:6a: ba:81:7d:db:2f:9c:7d:56:b5:ae:77:cf:85:3b:8b: d6:a5:e8:d3:ec:4d:aa:29:e1:02:e3:4f:2b:8d:4e: d2:09:2a:c3:26:ef:8e:76:80:2c:cf:20:f3:d0:4a: ea:81:a8:e2:30:99:94:c9:6b:47:99:0b:76:8a:aa: 64:85:6f:01:3d:88:f3:97:30:ec:7a:6e:86:2f:7e: 03:9f:a2:71:93:3e:9c:cf:26:6e:1d:d9:aa:73:95: 03:32:a7:04:9b:a0:a6:e3:71:32:b4:07:ed:23:07: c8:28:c2:74:0f:92:d5:dd:ee:44:02:f0:56:79:d5: 5a:ab:aa:d3:9c:80:d5:6b:ba:35:d5:1b:52:bc:b5: ce:fd:bb:bb:45:37:57:20:8f:53:6a:30:6d:00:0b: 45:64:2f:0a:db:cd:d3:1a:78:b6:15:f6:88:b7:04: 09:93:f1:6c:77:5d:5f:ea:78:cf:e6:d7:8b:56:92: 07:9a:ec:d4:4a:90:f7:8e:7b:49:3f:8e:c2:cf:e7: e4:ec:fd:e9:ec:f0:10:7c:d8:3a:a2:ff:89:02:f9: e6:3d:73:0a:8f:16:bc:2d:22:04:b7:ea:43:83:a5: 13:91:ff:eb:6a:88:ef:7c:ec:a6:2b:f4:9c:7e:38: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A6:3C:0A:A3:A4:3A:29:7B:C5:2E:7B:55:74:A4:B8:EA:CD:89:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/ed656f57-c876-3393-937a-7eabe0e6e42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 23.134.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b7:09:9e:06:18:78:01:83:a1:42:70:1f:d5:f6:f2:43:83: fb:a4:f2:bb:f1:67:d2:8f:54:73:ea:08:f4:f9:c8:71:91:db: 42:f0:7b:a5:cb:49:e0:83:63:1a:10:eb:74:a6:02:02:10:4c: 3f:a4:dd:41:d1:a1:fa:92:17:fd:20:00:b0:38:d4:10:a9:5d: b2:0c:68:3a:6c:6a:f8:3f:c4:7e:bd:a6:14:20:4d:23:68:eb: 52:83:70:70:51:b0:64:10:33:87:ea:a7:26:6f:4f:b5:4e:a4: 66:16:98:a8:0a:27:fb:3d:38:f4:da:06:d5:ca:c7:57:d5:92: 26:ab:e2:9c:31:ca:65:a7:33:31:29:d7:27:ad:f9:ae:cd:bf: 85:3e:f5:83:72:28:9b:54:cf:a5:ed:fe:51:48:63:3c:5a:85: 7c:3a:41:11:d0:df:51:70:b2:2a:72:bb:e9:0c:d3:00:12:73: d0:4e:0d:e2:7e:bd:28:cb:d7:ec:22:fc:92:a5:2e:38:f5:d1: 2d:51:26:a2:a1:79:cb:b1:57:aa:91:d9:a8:03:cf:17:ea:18: a1:cb:44:4b:0b:b7:4d:d9:0c:73:b9:60:c2:e4:67:a8:a7:2b: 31:7d:a2:d4:c8:7b:f4:6f:f6:bc:be:58:ab:fd:ce:05:46:8a: af:dc:c3:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ISi77EfTGkex44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDczMGQ1ZDItMThmOC00NWJhLTk1NTQtOGYxZWNmNGY5ZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBI4WePWTr1D/a+AdGq6gX3bL5x9VrWud8+F O4vWpejT7E2qKeEC408rjU7SCSrDJu+OdoAszyDz0ErqgajiMJmUyWtHmQt2iqpk hW8BPYjzlzDsem6GL34Dn6Jxkz6czyZuHdmqc5UDMqcEm6Cm43EytAftIwfIKMJ0 D5LV3e5EAvBWedVaq6rTnIDVa7o11RtSvLXO/bu7RTdXII9TajBtAAtFZC8K283T Gni2FfaItwQJk/Fsd11f6njP5teLVpIHmuzUSpD3jntJP47Cz+fk7P3p7PAQfNg6 ov+JAvnmPXMKjxa8LSIEt+pDg6UTkf/raojvfOymK/ScfjgtNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqmPAqjpDope8Uue1V0pLjqzYlRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZWQ2NTZmNTctYzg3Ni0z MzkzLTkzN2EtN2VhYmUwZTZlNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4aIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy3CZ4GGHgBg6FCcB/V9vJDg/uk8rvxZ9KPVHPqCPT5yHGR20Lwe6XL SeCDYxoQ63SmAgIQTD+k3UHRofqSF/0gALA41BCpXbIMaDpsavg/xH69phQgTSNo 61KDcHBRsGQQM4fqpyZvT7VOpGYWmKgKJ/s9OPTaBtXKx1fVkiar4pwxymWnMzEp 1yet+a7Nv4U+9YNyKJtUz6Xt/lFIYzxahXw6QRHQ31Fwsipyu+kM0wASc9BODeJ+ vSjL1+wi/JKlLjj10S1RJqKhecuxV6qR2agDzxfqGKHLREsLt03ZDHO5YMLkZ6in KzF9otTIe/Rv9ry+WKv9zgVGiq/cwwQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:56:35 2025 by rpki-client