$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/9c707ed3-53fd-3946-83b1-61845f5db5c4.roa File: 9c707ed3-53fd-3946-83b1-61845f5db5c4.roa (raw, json) Hash identifier: CaPl70jm/SJiKtxS8Huc3MC2JYgyj0wOiZ46z3fGqOc= Subject key identifier: 18:16:46:C7:35:50:F2:4E:DA:13:D5:BC:4B:0E:A2:6B:47:5F:9C:3E Certificate issuer: /CN=6b488e71-24cf-4f65-b75b-178c0739ead9 Certificate serial: 010D0C9F4328584B84E768595C01C8495A5EF180 Authority key identifier: 6E:37:FF:26:81:A2:A8:EB:02:DE:AF:AF:39:E5:C2:03:AD:E6:04:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/9c707ed3-53fd-3946-83b1-61845f5db5c4.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 401619 IP address blocks: 23.132.108.0/24 maxlen: 24 2602:f736::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/6b488e71-24cf-4f65-b75b-178c0739ead9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/6b488e71-24cf-4f65-b75b-178c0739ead9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:68:59:5c:01:c8:49:5a:5e:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b488e71-24cf-4f65-b75b-178c0739ead9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=e51af517-c7ad-446b-a8df-af3d9b17a94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2f:84:68:e0:87:1b:a6:73:08:ac:03:0e:58: 31:9a:f4:16:d6:07:15:0f:be:ad:c4:c4:e5:b8:01: ca:fc:91:8d:73:5d:8b:f8:c8:c1:99:b6:28:d3:3f: f6:a3:a1:aa:dd:b5:fd:a8:0f:f1:7c:70:9c:ac:71: 75:ea:3f:14:25:4a:19:0f:bc:4a:13:26:31:3a:3e: 7a:53:02:ed:6c:0f:5b:3c:78:3d:bd:66:6e:26:f3: b6:39:5e:64:dc:aa:66:69:5d:14:6a:df:b6:cf:b3: 2f:81:92:3b:b6:09:1b:9f:33:39:e1:bb:b3:fc:ad: 3a:e7:a2:ef:93:18:f8:a2:04:19:f4:76:e9:49:9e: e6:b2:c1:12:6e:35:b4:70:9d:f2:34:95:72:7f:09: 9c:59:1f:5f:fe:71:94:67:5e:97:f6:75:53:9f:5f: 9c:bd:d7:bc:5e:7c:5a:3a:c6:dc:91:e5:95:6d:76: 6f:22:d2:ce:40:72:4d:39:5c:2b:47:9b:5d:f0:66: 99:2e:4a:0b:5b:43:85:8b:c0:8c:5b:90:17:e0:89: 98:a4:2b:f5:29:5b:96:22:a1:d2:ea:45:b6:4a:41: 0d:69:76:d2:a6:59:10:dd:d7:b3:73:26:96:2d:10: da:4c:ea:07:10:1d:4a:45:aa:a8:fb:9b:fe:7c:f8: fe:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:16:46:C7:35:50:F2:4E:DA:13:D5:BC:4B:0E:A2:6B:47:5F:9C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/9c707ed3-53fd-3946-83b1-61845f5db5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9/6b488e71-24cf-4f65-b75b-178c0739ead9.crl X509v3 Authority Key Identifier: keyid:6E:37:FF:26:81:A2:A8:EB:02:DE:AF:AF:39:E5:C2:03:AD:E6:04:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6b488e71-24cf-4f65-b75b-178c0739ead9.cer sbgp-ipAddrBlock: critical IPv4: 23.132.108.0/24 IPv6: 2602:f736::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6c:76:f2:1b:65:d5:8f:ba:89:d8:82:e4:d6:5d:78:f5:c0: 95:cd:16:2c:9a:48:7e:71:5b:8c:62:bc:7b:e2:57:4b:f7:6d: 7f:0d:8b:3f:47:0c:15:7b:fa:e8:c3:c1:b8:14:0a:e1:d5:9f: 1f:4b:61:11:c8:81:e3:8a:a0:f4:14:fb:f0:6c:24:16:53:8a: 5e:bb:30:27:8d:df:02:82:9f:cf:51:fc:08:77:c6:58:c7:2a: 5f:e8:50:86:e1:94:cf:0a:8b:1c:79:fa:14:df:fe:96:38:00: 3d:1b:6e:97:a4:2d:78:d2:0a:75:95:48:fe:bf:f8:59:7b:a7: 4c:da:8f:cd:f0:41:04:b7:79:59:e3:30:86:04:e1:1e:f2:44: 64:e5:7d:44:76:b8:40:11:79:7c:6c:2c:a3:c1:f4:8e:8b:39: 37:a9:78:20:09:ff:a2:35:47:5d:fb:d6:46:d1:ab:0f:58:a6: c9:79:de:69:37:31:6c:75:c6:bc:0d:ba:94:b7:8e:26:de:2d: 94:d8:ab:25:72:a7:7f:c2:ae:20:39:68:7c:e2:56:b1:c1:0e: b8:0d:b7:16:38:4c:67:c1:21:6a:fe:15:8a:59:b7:fe:ca:18: 95:06:93:80:b9:b0:a0:ed:0b:62:ae:e2:e6:49:89:70:e8:f6: 3c:77:c2:90 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuE52hZXAHISVpe8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI0ODhlNzEtMjRjZi00ZjY1LWI3NWItMTc4YzA3Mzll YWQ5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZTUxYWY1MTctYzdhZC00NDZiLWE4ZGYtYWYzZDliMTdhOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy+EaOCHG6ZzCKwDDlgxmvQW1gcVD76txMTl uAHK/JGNc12L+MjBmbYo0z/2o6Gq3bX9qA/xfHCcrHF16j8UJUoZD7xKEyYxOj56 UwLtbA9bPHg9vWZuJvO2OV5k3KpmaV0Uat+2z7MvgZI7tgkbnzM54buz/K0656Lv kxj4ogQZ9HbpSZ7mssESbjW0cJ3yNJVyfwmcWR9f/nGUZ16X9nVTn1+cvde8Xnxa OsbckeWVbXZvItLOQHJNOVwrR5td8GaZLkoLW0OFi8CMW5AX4ImYpCv1KVuWIqHS 6kW2SkENaXbSplkQ3dezcyaWLRDaTOoHEB1KRaqo+5v+fPj+tQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBgWRsc1UPJO2hPVvEsOomtHX5w+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82YjQ4 OGU3MS0yNGNmLTRmNjUtYjc1Yi0xNzhjMDczOWVhZDkvOWM3MDdlZDMtNTNmZC0z OTQ2LTgzYjEtNjE4NDVmNWRiNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmI0ODhlNzEtMjRjZi00ZjY1LWI3 NWItMTc4YzA3MzllYWQ5LzZiNDg4ZTcxLTI0Y2YtNGY2NS1iNzViLTE3OGMwNzM5 ZWFkOS5jcmwwHwYDVR0jBBgwFoAUbjf/JoGiqOsC3q+vOeXCA63mBHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82YjQ4OGU3MS0yNGNmLTRmNjUtYjc1Yi0xNzhj MDczOWVhZDkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4RsMA8E AgACMAkDBwAmAvc2AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGWx28htl1Y+6idiC5NZdePXAlc0WLJpI fnFbjGK8e+JXS/dtfw2LP0cMFXv66MPBuBQK4dWfH0thEciB44qg9BT78GwkFlOK XrswJ43fAoKfz1H8CHfGWMcqX+hQhuGUzwqLHHn6FN/+ljgAPRtul6QteNIKdZVI /r/4WXunTNqPzfBBBLd5WeMwhgThHvJEZOV9RHa4QBF5fGwso8H0jos5N6l4IAn/ ojVHXfvWRtGrD1imyXneaTcxbHXGvA26lLeOJt4tlNirJXKnf8KuIDlofOJWscEO uA23FjhMZ8Ehav4Vilm3/soYlQaTgLmwoO0LYq7i5kmJcOj2PHfCkA== -----END CERTIFICATE-----Generated at Wed Nov 5 16:19:03 2025 by rpki-client