$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa File: 6af0c050-7612-319a-ad24-aec5eb373930.roa (raw, json) Hash identifier: sqijak7cWqxDj7EiVmVn0U2WKVJnXF8BG9fj6RtAe5Y= Subject key identifier: 7A:F4:D4:9C:BC:D9:AF:6E:B7:7C:F6:38:AE:E5:5F:5A:8D:56:BE:A7 Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584AF7EBE54CAFD2038546A6F480 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 54696 IP address blocks: 23.148.154.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e5:4c:af:d2:03:85:46:a6:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=36b3b832-2681-4ffe-9205-899057155d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:3b:59:3a:ee:66:a1:d6:a3:4e:ee:c3:69: be:0a:24:6c:f8:dd:46:c1:52:a5:e9:0c:e4:c8:2a: 53:6e:8e:82:56:ab:23:d1:23:32:03:85:e0:3b:75: c9:46:14:29:38:c3:ed:b7:df:8d:73:cb:8a:20:ec: e0:be:0f:df:b9:fc:8c:46:f3:ee:ad:b3:8a:c3:68: d8:7f:52:ee:82:af:e5:93:0e:94:0e:96:f0:d8:f7: ac:99:d9:6e:50:88:b6:b4:08:63:2d:61:0f:20:12: 75:35:2d:1f:c4:55:15:ff:c8:c8:aa:a6:3b:ee:66: 52:c3:44:af:a8:99:96:6b:44:f5:9a:1b:c5:8f:51: a3:bd:18:b7:90:08:ac:37:66:13:86:8d:34:4d:07: a3:ff:bb:29:d0:64:a4:13:8f:be:e2:11:b3:fd:c2: c4:fd:3b:d9:08:e1:fb:46:a5:b7:f8:45:87:95:e6: 92:1b:aa:38:8d:7d:ae:0d:77:01:1d:b6:df:58:10: 55:0e:1b:fa:34:0e:a8:93:28:e3:b9:23:e3:ce:13: 40:16:c2:a0:a0:42:eb:6e:bb:6a:d6:2a:9a:4b:dc: e0:cc:0e:c1:3f:ad:f7:54:f4:6e:2a:76:3f:6d:19: 8b:e4:ee:3b:8d:5f:60:4e:bd:94:a5:45:4d:8d:f9: cc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F4:D4:9C:BC:D9:AF:6E:B7:7C:F6:38:AE:E5:5F:5A:8D:56:BE:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:51:f6:47:47:6d:86:05:b1:f3:c5:3a:41:fe:e4:a4:9d:27: a9:2a:03:a7:6d:d9:88:2d:33:e9:58:ea:da:9b:e0:06:30:da: b8:7c:99:21:da:bd:64:2f:da:ae:aa:27:29:5f:a7:99:ea:5a: 0a:7d:bf:ce:2e:c0:93:25:28:8d:9a:02:51:65:04:6b:f1:17: 74:e1:3b:43:dc:6c:61:41:a1:11:c1:93:93:f2:5d:2d:1c:f7: 8e:cc:67:29:5e:88:33:d5:63:c6:a7:97:9a:5d:87:11:73:97: 25:86:5b:12:a6:de:93:c1:7a:88:20:4e:8f:69:1c:68:c2:5c: df:61:1c:8f:b9:a5:7b:3e:fe:16:7c:f2:82:48:f3:4f:c6:58: 8e:84:f1:1f:bc:ce:b5:9f:2f:6f:4f:06:5c:96:99:ae:22:75: 3f:c0:ac:47:27:98:bf:30:ec:46:79:7d:d6:47:17:72:6d:e3: a2:01:95:a2:db:b4:ba:ae:17:0f:80:f6:98:3a:a5:f5:4e:51: 63:66:cf:c0:a6:38:a5:59:76:96:40:5d:87:9b:e0:f4:3c:a8: e9:cc:91:61:b8:d3:0a:63:c7:46:5a:71:b5:62:c6:66:5b:5b: 25:58:10:4c:51:64:07:84:bd:10:8a:f0:fa:be:37:f4:21:41: 21:97:07:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+VMr9IDhUam9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MzZiM2I4MzItMjY4MS00ZmZlLTkyMDUtODk5MDU3MTU1ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfQ7WTruZqHWo07uw2m+CiRs+N1GwVKl6Qzk yCpTbo6CVqsj0SMyA4XgO3XJRhQpOMPtt9+Nc8uKIOzgvg/fufyMRvPurbOKw2jY f1Lugq/lkw6UDpbw2PesmdluUIi2tAhjLWEPIBJ1NS0fxFUV/8jIqqY77mZSw0Sv qJmWa0T1mhvFj1GjvRi3kAisN2YTho00TQej/7sp0GSkE4++4hGz/cLE/TvZCOH7 RqW3+EWHleaSG6o4jX2uDXcBHbbfWBBVDhv6NA6okyjjuSPjzhNAFsKgoELrbrtq 1iqaS9zgzA7BP633VPRuKnY/bRmL5O47jV9gTr2UpUVNjfnMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHr01Jy82a9ut3z2OK7lX1qNVr6nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvNmFmMGMwNTAtNzYxMi0z MTlhLWFkMjQtYWVjNWViMzczOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9R9kdHbYYFsfPFOkH+5KSdJ6kqA6dt2YgtM+lY6tqb4AYw2rh8mSHa vWQv2q6qJylfp5nqWgp9v84uwJMlKI2aAlFlBGvxF3ThO0PcbGFBoRHBk5PyXS0c 947MZyleiDPVY8anl5pdhxFzlyWGWxKm3pPBeoggTo9pHGjCXN9hHI+5pXs+/hZ8 8oJI80/GWI6E8R+8zrWfL29PBlyWma4idT/ArEcnmL8w7EZ5fdZHF3Jt46IBlaLb tLquFw+A9pg6pfVOUWNmz8CmOKVZdpZAXYeb4PQ8qOnMkWG40wpjx0ZacbVixmZb WyVYEExRZAeEvRCK8Pq+N/QhQSGXBxA= -----END CERTIFICATE-----Generated at Thu Nov 6 04:44:18 2025 by rpki-client