$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa File: 2269ef02-ea5a-3244-b8a9-793522bcb47c.roa (raw, json) Hash identifier: 0LKyggIwUSCCt8V6roI78z1cyjRuW6kgusmpeeVdgKY= Subject key identifier: F3:E1:D3:67:B4:4A:74:88:D5:71:31:7F:F5:A8:44:69:F6:48:79:78 Certificate issuer: /CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Certificate serial: 010D0C9F4328584B4A4730C1A1F22804C1708200 Authority key identifier: 9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 401469 IP address blocks: 23.128.156.0/24 maxlen: 24 2602:f7ad::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:30:c1:a1:f2:28:04:c1:70:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc37d3d-05e3-4f5b-85f2-374292d5009e Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=12528d95-013c-4b8f-a03c-02cec4b3fa99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a6:52:78:19:45:2d:75:09:7d:a8:d2:98:fb: e1:35:8d:a3:cd:1e:20:43:b3:a7:9b:aa:e4:66:31: a5:89:cf:8a:38:d7:18:02:18:ee:4d:87:05:73:da: b2:f6:be:39:5a:6e:10:d8:55:c0:e3:6c:e8:f7:6c: 7e:ef:08:e0:53:b8:58:dd:23:1a:27:3d:64:ae:31: 32:14:72:94:78:8c:6e:d3:17:15:28:78:6b:26:21: 57:f6:83:08:e6:c1:45:29:c5:a3:3f:4b:6a:51:9d: 82:46:df:64:09:32:78:57:a3:ab:8d:21:96:f5:4c: 0c:e7:22:7b:4b:ec:d4:d2:2c:a0:d5:8f:d5:46:0b: 16:5a:45:f0:51:96:ef:b6:59:01:3d:7a:49:fc:85: 15:1a:27:14:78:48:c7:ba:31:a8:02:6e:93:7a:1c: 74:71:1e:a7:ee:e8:6b:03:fc:27:8e:5e:c1:13:87: a9:a9:de:eb:05:c6:ce:19:6d:ae:dc:a7:86:60:ce: f5:05:da:17:16:6e:6c:2f:4b:53:08:7c:8d:40:8f: 45:86:27:79:0e:9b:ce:11:e5:32:f8:6a:e4:0a:73: 31:3b:06:14:40:3b:11:f5:1f:88:58:e7:94:fd:f0: cc:53:c0:d4:36:80:e3:91:75:be:02:d9:44:92:d7: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E1:D3:67:B4:4A:74:88:D5:71:31:7F:F5:A8:44:69:F6:48:79:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/2269ef02-ea5a-3244-b8a9-793522bcb47c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e/efc37d3d-05e3-4f5b-85f2-374292d5009e.crl X509v3 Authority Key Identifier: keyid:9F:77:B3:18:AD:C7:08:C0:68:C5:97:FD:9C:2B:2A:34:03:FB:2B:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/efc37d3d-05e3-4f5b-85f2-374292d5009e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.156.0/24 IPv6: 2602:f7ad::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4f:c8:92:27:c9:72:2f:31:9b:27:97:af:cd:f8:40:77:f6: 1d:fc:a3:93:ec:3b:a1:0d:12:96:28:6d:3f:38:82:09:02:9e: 1c:7e:4e:2c:2f:5a:66:0d:ff:79:c7:b8:3c:56:43:d7:97:12: 87:b9:17:29:ee:0a:e0:b0:9e:b2:af:94:40:9f:76:55:2b:d6: 0e:0b:28:39:65:0a:08:03:77:00:7d:e4:f6:49:6a:40:f9:55: 99:e6:61:88:b7:0d:86:0d:82:1d:cf:16:ae:d6:9d:20:73:b2: 1f:fd:89:a8:98:6b:a3:ca:d7:10:19:41:73:67:f9:c5:2c:29: e4:00:34:36:f4:3f:a5:ea:f4:fe:5b:cd:b3:45:b9:dc:d7:49: 97:a2:e0:57:43:0b:59:d1:cd:95:ae:5d:8e:0b:0d:82:9f:c6: 05:14:da:82:aa:15:c5:c1:33:f9:4e:04:ca:9c:2d:4b:7b:e4: 2f:75:2b:31:0a:7c:20:eb:54:5d:e8:e7:cd:bd:0d:64:a9:de: 09:f5:0c:74:f4:6f:b5:10:92:a6:d1:59:be:84:81:3a:e6:72: 90:49:48:55:0c:fa:dd:c4:33:3e:57:76:82:6d:45:f2:67:39: 75:b4:ee:3d:07:13:29:61:15:98:03:4c:6f:0b:02:68:51:ac: 66:eb:88:f9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtKRzDBofIoBMFwggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZjMzdkM2QtMDVlMy00ZjViLTg1ZjItMzc0MjkyZDUw MDllMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk MTI1MjhkOTUtMDEzYy00YjhmLWEwM2MtMDJjZWM0YjNmYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqZSeBlFLXUJfajSmPvhNY2jzR4gQ7Onm6rk ZjGlic+KONcYAhjuTYcFc9qy9r45Wm4Q2FXA42zo92x+7wjgU7hY3SMaJz1krjEy FHKUeIxu0xcVKHhrJiFX9oMI5sFFKcWjP0tqUZ2CRt9kCTJ4V6OrjSGW9UwM5yJ7 S+zU0iyg1Y/VRgsWWkXwUZbvtlkBPXpJ/IUVGicUeEjHujGoAm6Tehx0cR6n7uhr A/wnjl7BE4epqd7rBcbOGW2u3KeGYM71BdoXFm5sL0tTCHyNQI9Fhid5DpvOEeUy +GrkCnMxOwYUQDsR9R+IWOeU/fDMU8DUNoDjkXW+AtlEkte1awIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPPh02e0SnSI1XExf/WoRGn2SHl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMz N2QzZC0wNWUzLTRmNWItODVmMi0zNzQyOTJkNTAwOWUvMjI2OWVmMDItZWE1YS0z MjQ0LWI4YTktNzkzNTIyYmNiNDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWZjMzdkM2QtMDVlMy00ZjViLTg1 ZjItMzc0MjkyZDUwMDllL2VmYzM3ZDNkLTA1ZTMtNGY1Yi04NWYyLTM3NDI5MmQ1 MDA5ZS5jcmwwHwYDVR0jBBgwFoAUn3ezGK3HCMBoxZf9nCsqNAP7K8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZmMzN2QzZC0wNWUzLTRmNWItODVmMi0zNzQy OTJkNTAwOWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CcMA4E AgACMAgDBgQmAvetADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALT8iSJ8lyLzGbJ5evzfhAd/Yd/KOT7Duh DRKWKG0/OIIJAp4cfk4sL1pmDf95x7g8VkPXlxKHuRcp7grgsJ6yr5RAn3ZVK9YO Cyg5ZQoIA3cAfeT2SWpA+VWZ5mGItw2GDYIdzxau1p0gc7If/YmomGujytcQGUFz Z/nFLCnkADQ29D+l6vT+W82zRbnc10mXouBXQwtZ0c2Vrl2OCw2Cn8YFFNqCqhXF wTP5TgTKnC1Le+QvdSsxCnwg61Rd6OfNvQ1kqd4J9Qx09G+1EJKm0Vm+hIE65nKQ SUhVDPrdxDM+V3aCbUXyZzl1tO49BxMpYRWYA0xvCwJoUaxm64j5 -----END CERTIFICATE-----Generated at Wed Nov 5 19:27:21 2025 by rpki-client