$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa File: 8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa (raw, json) Hash identifier: XXlVf6jHgKywYxTJ2HmVm2wvirdjSRO9HZ8lIkABejc= Subject key identifier: A6:15:DD:52:EA:95:34:4D:E5:41:44:D7:1B:42:1A:5A:DE:DA:28:BE Certificate issuer: /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Certificate serial: 010D0C9F4328584B4FDC7E04EE0370B64B074AC0 Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 401463 IP address blocks: 23.128.140.0/24 maxlen: 24 2602:f7b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7e:04:ee:03:70:b6:4b:07:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=be3c34a3-e608-46a6-ac77-c14cef7be12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:fa:15:c4:b8:9b:01:74:3d:34:ad:47:fd:17: 52:23:06:a9:62:f1:2e:0e:28:0f:56:2b:51:1a:fb: 71:ca:89:a6:00:da:f3:cb:2f:44:a9:62:ce:2e:d8: 8b:aa:5a:b2:60:d3:15:05:68:20:ff:6b:bb:a2:cf: 25:b6:a9:19:58:3b:66:cd:7e:83:cd:32:84:e8:59: 1e:e4:fd:3d:8d:6e:d6:00:3d:af:97:3a:ed:74:18: 06:e5:50:f0:3a:07:94:64:68:dc:ac:7d:95:42:8f: 01:f5:3c:a7:55:e5:8b:c7:9a:b3:59:3d:79:3d:5e: 7e:bd:65:19:db:5f:09:79:bd:66:4f:ce:fa:42:b0: 71:6a:f6:49:c2:e7:ef:94:30:42:8b:20:19:37:66: 81:4f:1f:77:c0:26:d8:f7:ae:5c:ae:b1:1c:db:34: 08:20:e3:0f:35:0c:b6:c5:09:a1:9e:7d:3a:4c:6e: 4d:9f:05:6b:82:04:05:b6:a7:1c:1f:d9:c0:0a:35: f6:f5:eb:18:53:88:c2:d5:75:b3:7c:98:41:13:c8: 14:83:1a:55:89:c0:32:5c:bb:b8:df:7c:56:a0:99: 9e:3c:60:28:eb:50:2d:c2:97:9d:5a:b1:ad:70:d5: 3a:07:67:33:fa:94:82:f9:20:76:1c:48:0a:2c:7b: 64:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:15:DD:52:EA:95:34:4D:E5:41:44:D7:1B:42:1A:5A:DE:DA:28:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/8e4c3c52-d7cb-3c0d-a421-062e52f3aab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl X509v3 Authority Key Identifier: keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.140.0/24 IPv6: 2602:f7b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:10:55:2a:0d:22:ae:29:91:58:d1:41:3c:a7:8e:90:c9:58: 9e:9a:26:e1:14:d7:53:35:c3:af:29:99:c1:1b:91:d3:2f:ec: 34:cd:bf:f7:29:26:5d:8c:5d:cb:e8:33:ae:c5:5a:f2:67:79: 43:c6:07:8e:7b:91:b0:3b:b5:f7:95:ea:d8:3b:9f:cf:e9:06: df:af:ae:5c:22:15:18:3a:f4:a3:5f:b8:43:65:6f:bc:7a:fa: a5:87:97:b6:11:5e:3a:18:df:d3:52:62:81:13:b5:1e:7d:e4: 85:c8:a2:43:01:19:18:f0:6c:29:ff:ad:4f:66:00:82:2e:fd: d3:b8:dd:bc:19:53:b5:d5:c0:bc:a6:b4:81:3f:5a:4a:bc:a4: 58:3b:87:08:c0:54:1c:4d:a0:41:92:de:43:0f:68:b9:67:d6: 30:f8:ff:2b:7f:fd:1f:7a:49:76:c3:4b:c4:88:d3:f5:a3:f7: 9b:ca:99:79:27:d3:3c:3e:3a:2e:b1:ef:d4:4c:de:3a:69:e8: 26:c4:8d:33:fd:3a:c8:80:c5:f6:e5:8a:52:f5:09:8d:9f:21: d9:6a:54:50:93:3a:48:72:26:8b:f3:e3:1f:ac:35:ab:87:3c: 1b:4a:1e:98:2e:5f:3b:41:75:9e:17:41:67:45:49:2f:d4:55: f0:f8:77:9c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtP3H4E7gNwtksHSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxMjZiZDMtMzM3YS00NmVhLThhYWItYzJjZDc1OTRl ZGY5MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YmUzYzM0YTMtZTYwOC00NmE2LWFjNzctYzE0Y2VmN2JlMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PoVxLibAXQ9NK1H/RdSIwapYvEuDigPVitR GvtxyommANrzyy9EqWLOLtiLqlqyYNMVBWgg/2u7os8ltqkZWDtmzX6DzTKE6Fke 5P09jW7WAD2vlzrtdBgG5VDwOgeUZGjcrH2VQo8B9TynVeWLx5qzWT15PV5+vWUZ 218Jeb1mT876QrBxavZJwufvlDBCiyAZN2aBTx93wCbY965crrEc2zQIIOMPNQy2 xQmhnn06TG5NnwVrggQFtqccH9nACjX29esYU4jC1XWzfJhBE8gUgxpVicAyXLu4 33xWoJmePGAo61AtwpedWrGtcNU6B2cz+pSC+SB2HEgKLHtk2QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKYV3VLqlTRN5UFE1xtCGlre2ii+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYzEy NmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNkNzU5NGVkZjkvOGU0YzNjNTItZDdjYi0z YzBkLWE0MjEtMDYyZTUyZjNhYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2MxMjZiZDMtMzM3YS00NmVhLThh YWItYzJjZDc1OTRlZGY5LzNjMTI2YmQzLTMzN2EtNDZlYS04YWFiLWMyY2Q3NTk0 ZWRmOS5jcmwwHwYDVR0jBBgwFoAUHDl90qorw7uxOU2srEhzcFL5CnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYzEyNmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNk NzU5NGVkZjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CMMA4E AgACMAgDBgAmAvezADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7EFUqDSKuKZFY0UE8p46QyViemibhFNdT NcOvKZnBG5HTL+w0zb/3KSZdjF3L6DOuxVryZ3lDxgeOe5GwO7X3lerYO5/P6Qbf r65cIhUYOvSjX7hDZW+8evqlh5e2EV46GN/TUmKBE7UefeSFyKJDARkY8Gwp/61P ZgCCLv3TuN28GVO11cC8prSBP1pKvKRYO4cIwFQcTaBBkt5DD2i5Z9Yw+P8rf/0f ekl2w0vEiNP1o/ebypl5J9M8Pjouse/UTN46aegmxI0z/TrIgMX25YpS9QmNnyHZ alRQkzpIciaL8+MfrDWrhzwbSh6YLl87QXWeF0FnRUkv1FXw+Hec -----END CERTIFICATE-----Generated at Wed Nov 5 15:14:21 2025 by rpki-client