$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa File: 4006a66d-6da1-3667-95e8-2ae868c8c68e.roa (raw, json) Hash identifier: hFbAsW1eXdImNYANSoboEGImsyyZPi9MQJPu+A7y8C4= Subject key identifier: 36:E8:3C:87:E9:AC:D6:8F:3E:FC:32:6B:3D:88:EC:9D:EF:E0:D1:89 Certificate issuer: /CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Certificate serial: 010D0C9F4328584AF52171EE2AD1EEF9B56A8908 Authority key identifier: 14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 399587 IP address blocks: 23.139.228.0/24 maxlen: 24 2602:f623::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:71:ee:2a:d1:ee:f9:b5:6a:89:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96f592a-8fa9-4ec8-a272-b56c2537919c Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=155571bd-03c2-4302-b9b9-1f1c80105bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a5:7e:b5:13:e0:72:4c:a4:71:06:88:4f:ce: 10:32:8a:f6:b4:9e:3e:6e:80:3a:ed:07:32:bb:10: b4:b2:76:25:93:71:12:db:f0:06:24:fe:a8:2d:0e: 18:61:44:11:12:f4:6b:f8:11:a3:bc:9b:21:5e:38: 4a:46:4a:8d:c6:a5:23:3d:4f:e6:53:c7:63:29:39: 04:44:af:35:a2:f8:8c:a0:9b:26:e0:fa:b0:0c:d3: 01:ad:64:00:76:93:d3:1c:f4:06:ae:84:2c:fa:ff: f4:48:10:15:e4:5b:29:65:9c:d1:5a:1c:55:33:bd: da:d5:05:bd:a2:74:17:35:42:6d:48:3a:b8:44:a3: 5a:6e:37:f5:6a:df:da:30:48:7b:8e:a8:38:c0:20: 54:2c:3a:4d:40:54:99:1f:33:4d:e2:5d:f4:6e:bb: 0a:a0:87:f5:d7:90:e2:e5:db:b8:32:76:83:2c:df: 31:e9:1d:31:da:a9:54:26:11:16:cd:1c:0b:2e:b6: 8b:08:64:7d:aa:29:aa:e0:46:b1:8a:11:a0:18:19: 83:1d:60:23:81:b9:ef:17:94:ed:bd:61:f6:10:bd: 98:18:e8:eb:a3:7a:3a:0f:57:53:cc:8b:82:5d:96: 06:1b:e8:f5:08:3d:5a:ba:d6:a6:ee:cc:33:69:73: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E8:3C:87:E9:AC:D6:8F:3E:FC:32:6B:3D:88:EC:9D:EF:E0:D1:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/4006a66d-6da1-3667-95e8-2ae868c8c68e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c/d96f592a-8fa9-4ec8-a272-b56c2537919c.crl X509v3 Authority Key Identifier: keyid:14:9E:FE:BF:6A:D9:01:28:3A:16:7E:4C:70:D3:63:41:47:80:42:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d96f592a-8fa9-4ec8-a272-b56c2537919c.cer sbgp-ipAddrBlock: critical IPv4: 23.139.228.0/24 IPv6: 2602:f623::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9d:61:8b:1e:80:ae:dd:53:88:94:46:87:49:eb:e4:a7:67: c5:9e:bf:a9:e2:25:64:8c:0f:80:b4:58:72:8f:d1:37:5e:4a: 29:cf:34:07:eb:02:93:d2:29:5a:05:83:ec:e4:fb:dc:f4:3f: 2f:08:ab:ea:a7:9c:a2:9d:da:c4:d5:1c:89:42:3a:30:7f:52: 76:1b:20:43:a9:c5:68:b8:97:8b:9f:23:10:0f:a7:eb:f0:1d: fc:e0:e0:e1:63:0f:b7:fb:59:a9:46:68:85:7f:25:2f:e5:11: fc:a0:31:e8:6a:fa:d7:7c:dd:87:26:84:ca:07:d1:47:1c:aa: 29:34:15:e8:75:ca:71:87:87:56:3a:da:78:e0:5c:88:92:2f: ba:7a:0c:c3:b3:45:c1:31:9b:44:88:52:e7:72:29:62:61:c9: aa:71:70:79:03:c9:42:11:9f:2e:ec:d1:1c:60:5f:90:f2:d8: a3:26:69:ac:ca:b1:b8:fb:42:f8:c7:00:3c:7e:bc:e5:e1:67: 4d:63:4b:af:35:b2:f8:5c:a0:7d:6f:d0:66:63:7c:30:75:a1: ad:08:d0:a9:32:10:1a:66:60:42:3d:7f:28:39:6e:89:40:22: c5:e1:9c:7c:0d:9f:d2:95:b4:7c:c1:84:b2:7b:f9:10:d7:92: 2c:94:7b:e4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr1IXHuKtHu+bVqiQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZjU5MmEtOGZhOS00ZWM4LWEyNzItYjU2YzI1Mzc5 MTljMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTU1NTcxYmQtMDNjMi00MzAyLWI5YjktMWYxYzgwMTA1YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqV+tRPgckykcQaIT84QMor2tJ4+boA67Qcy uxC0snYlk3ES2/AGJP6oLQ4YYUQREvRr+BGjvJshXjhKRkqNxqUjPU/mU8djKTkE RK81oviMoJsm4PqwDNMBrWQAdpPTHPQGroQs+v/0SBAV5FspZZzRWhxVM73a1QW9 onQXNUJtSDq4RKNabjf1at/aMEh7jqg4wCBULDpNQFSZHzNN4l30brsKoIf115Di 5du4MnaDLN8x6R0x2qlUJhEWzRwLLraLCGR9qimq4EaxihGgGBmDHWAjgbnvF5Tt vWH2EL2YGOjro3o6D1dTzIuCXZYGG+j1CD1autam7swzaXO4jQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDboPIfprNaPPvwyaz2I7J3v4NGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZm NTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZjMjUzNzkxOWMvNDAwNmE2NmQtNmRhMS0z NjY3LTk1ZTgtMmFlODY4YzhjNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZDk2ZjU5MmEtOGZhOS00ZWM4LWEy NzItYjU2YzI1Mzc5MTljL2Q5NmY1OTJhLThmYTktNGVjOC1hMjcyLWI1NmMyNTM3 OTE5Yy5jcmwwHwYDVR0jBBgwFoAUFJ7+v2rZASg6Fn5McNNjQUeAQvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kOTZmNTkyYS04ZmE5LTRlYzgtYTI3Mi1iNTZj MjUzNzkxOWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4vkMA4E AgACMAgDBgQmAvYjADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXnWGLHoCu3VOIlEaHSevkp2fFnr+p4iVk jA+AtFhyj9E3XkopzzQH6wKT0ilaBYPs5Pvc9D8vCKvqp5yindrE1RyJQjowf1J2 GyBDqcVouJeLnyMQD6fr8B384ODhYw+3+1mpRmiFfyUv5RH8oDHoavrXfN2HJoTK B9FHHKopNBXodcpxh4dWOtp44FyIki+6egzDs0XBMZtEiFLnciliYcmqcXB5A8lC EZ8u7NEcYF+Q8tijJmmsyrG4+0L4xwA8frzl4WdNY0uvNbL4XKB9b9BmY3wwdaGt CNCpMhAaZmBCPX8oOW6JQCLF4Zx8DZ/SlbR8wYSye/kQ15IslHvk -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:30 2025 by rpki-client