$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/803425ff-9b24-3d04-9059-0cc3f2a853f1.roa File: 803425ff-9b24-3d04-9059-0cc3f2a853f1.roa (raw, json) Hash identifier: RpNVFC8tcQmlEDKKBZXPpL1mpE9KZUtJpb5LCC9G4nM= Subject key identifier: 90:B1:B5:B4:B7:AE:47:03:97:1A:F6:77:0A:7A:61:3C:87:51:7B:E1 Certificate issuer: /CN=01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf Certificate serial: 010D0C9F4328584B24970707F002D5C78DBF9BC0 Authority key identifier: 36:C2:32:DB:EF:7B:52:C2:E0:28:F4:9F:03:33:42:5E:C0:C0:A4:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/803425ff-9b24-3d04-9059-0cc3f2a853f1.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 401608 IP address blocks: 23.135.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:97:07:07:f0:02:d5:c7:8d:bf:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=b69a7219-995f-4b32-a262-f36cb80f688f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f3:7f:d7:a0:b0:71:22:3a:36:c0:80:a9:6f: 5d:ee:51:7d:92:e8:c2:e2:92:c9:ae:ed:42:23:10: 8c:72:f8:04:07:ec:59:f8:ef:94:fa:a1:c3:15:b1: 14:ab:96:22:e3:9b:6f:96:c9:36:07:47:fb:bc:68: d8:f5:50:97:65:fd:af:ed:87:e1:7a:2f:9f:a3:c2: 49:26:a8:c1:93:57:9b:6c:00:e5:07:bd:47:90:ff: 2d:62:dc:70:6a:69:76:c7:3d:b9:e5:01:f3:d2:b6: 45:ae:a3:d1:09:01:1e:7a:ad:42:2c:f9:66:93:a2: 57:15:46:ab:32:1f:e1:f7:4d:e9:5d:cb:19:60:98: ee:65:10:00:16:a5:d7:f4:e7:7d:f2:ec:b7:1c:ca: 9e:18:46:6b:cc:59:1f:2d:ce:49:ab:33:b3:3e:56: 23:c3:6d:2b:13:11:16:df:17:97:67:90:f0:39:51: 82:ed:51:45:ed:b9:92:a4:5c:fb:be:20:9b:64:68: 8f:36:c4:68:24:fe:d0:b7:b2:71:0e:fe:3b:22:41: bc:3a:95:93:17:43:8d:80:a4:74:4e:dc:ea:33:ba: 44:5c:19:7b:18:62:5b:86:7e:31:5f:1c:fc:22:4b: bd:0e:e8:5a:f2:10:1f:e3:ed:19:46:79:c8:37:3d: 5d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B1:B5:B4:B7:AE:47:03:97:1A:F6:77:0A:7A:61:3C:87:51:7B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/803425ff-9b24-3d04-9059-0cc3f2a853f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.crl X509v3 Authority Key Identifier: keyid:36:C2:32:DB:EF:7B:52:C2:E0:28:F4:9F:03:33:42:5E:C0:C0:A4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01c9fc17-cb7a-42d0-ad3c-ddaef90c8bbf.cer sbgp-ipAddrBlock: critical IPv4: 23.135.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b7:fc:bd:68:4f:f3:3f:89:38:5f:ba:6f:b1:9d:0d:e9:21: 18:a7:dd:30:0b:7e:00:c2:99:1d:a3:86:a5:f0:96:15:75:a2: b7:c9:aa:9a:a3:60:e2:b7:36:1f:04:71:a5:78:89:fc:7b:bb: 65:86:73:a3:b6:88:3c:f4:0d:aa:e3:d7:36:c2:32:6c:15:ba: 86:dc:45:f0:da:67:ab:fb:83:ad:e5:8c:34:31:5d:51:8c:fb: 25:f0:02:41:88:d4:b5:20:64:a4:8d:a3:86:7a:a7:11:ad:8a: f6:d6:11:3c:d7:6d:3b:69:14:7b:a2:37:45:9f:c0:a4:70:59: 1c:54:5c:ba:2b:af:d1:36:d4:94:20:ec:32:04:91:6e:54:87: 37:24:dc:83:0e:e7:04:37:6d:1f:71:ee:ae:03:cf:03:fa:81: f7:d3:e8:31:47:27:36:33:41:de:39:fd:6d:6c:38:c4:51:65: 50:34:69:d8:56:36:5e:28:b0:96:f2:4b:af:07:63:26:3b:30: e5:19:75:8f:b4:ff:e4:3f:23:6c:0e:f0:81:dc:20:c4:77:f3: 3c:d7:0e:86:e6:9b:df:2e:a5:b4:f6:72:17:2f:ab:5f:ad:e8: d2:54:9a:fe:fe:de:d8:a2:1d:42:73:d3:c9:2b:71:b3:26:2c: d9:38:78:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklwcH8ALVx42/m8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFjOWZjMTctY2I3YS00MmQwLWFkM2MtZGRhZWY5MGM4 YmJmMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YjY5YTcyMTktOTk1Zi00YjMyLWEyNjItZjM2Y2I4MGY2ODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvN/16CwcSI6NsCAqW9d7lF9kujC4pLJru1C IxCMcvgEB+xZ+O+U+qHDFbEUq5Yi45tvlsk2B0f7vGjY9VCXZf2v7Yfhei+fo8JJ JqjBk1ebbADlB71HkP8tYtxwaml2xz255QHz0rZFrqPRCQEeeq1CLPlmk6JXFUar Mh/h903pXcsZYJjuZRAAFqXX9Od98uy3HMqeGEZrzFkfLc5JqzOzPlYjw20rExEW 3xeXZ5DwOVGC7VFF7bmSpFz7viCbZGiPNsRoJP7Qt7JxDv47IkG8OpWTF0ONgKR0 TtzqM7pEXBl7GGJbhn4xXxz8Iku9Duha8hAf4+0ZRnnINz1dewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCxtbS3rkcDlxr2dwp6YTyHUXvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wMWM5 ZmMxNy1jYjdhLTQyZDAtYWQzYy1kZGFlZjkwYzhiYmYvODAzNDI1ZmYtOWIyNC0z ZDA0LTkwNTktMGNjM2YyYTg1M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDFjOWZjMTctY2I3YS00MmQwLWFk M2MtZGRhZWY5MGM4YmJmLzAxYzlmYzE3LWNiN2EtNDJkMC1hZDNjLWRkYWVmOTBj OGJiZi5jcmwwHwYDVR0jBBgwFoAUNsIy2+97UsLgKPSfAzNCXsDApAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wMWM5ZmMxNy1jYjdhLTQyZDAtYWQzYy1kZGFl ZjkwYzhiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4cUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK3/L1oT/M/iThfum+xnQ3pIRin3TALfgDCmR2jhqXwlhV1orfJqpqj YOK3Nh8EcaV4ifx7u2WGc6O2iDz0Darj1zbCMmwVuobcRfDaZ6v7g63ljDQxXVGM +yXwAkGI1LUgZKSNo4Z6pxGtivbWETzXbTtpFHuiN0WfwKRwWRxUXLorr9E21JQg 7DIEkW5Uhzck3IMO5wQ3bR9x7q4DzwP6gffT6DFHJzYzQd45/W1sOMRRZVA0adhW Nl4osJbyS68HYyY7MOUZdY+0/+Q/I2wO8IHcIMR38zzXDobmm98upbT2chcvq1+t 6NJUmv7+3tiiHUJz08krcbMmLNk4eD8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:33 2025 by rpki-client