$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa File: dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa (raw, json) Hash identifier: +tvKMIo2b9082eqdhJzHq3mZL/MNWspSrHrJh3+Swek= Subject key identifier: BB:7E:99:C3:32:99:98:06:86:ED:C9:5B:AA:5E:CC:84:AA:95:64:95 Certificate issuer: /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30 Certificate serial: 010D0C9F4328584B153C26644919D2C0AFABAE80 Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 11832 IP address blocks: 23.136.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:26:64:49:19:d2:c0:af:ab:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=de6a0247-ecdb-4c9b-aca4-6e1a2866c98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:a9:f4:09:2a:b6:3e:99:6c:57:57:7e:f3: 17:6b:59:b6:d8:8e:10:fc:85:11:46:46:e0:7e:5b: 53:0b:25:68:5e:8b:89:10:e8:4e:ae:06:ec:b7:c5: 1d:fe:b6:3f:e4:15:17:56:6f:66:fb:c4:d7:fc:f5: dd:5e:ca:0e:83:70:bd:14:5a:fb:8a:23:ae:45:98: fc:25:46:51:45:07:5d:be:25:ad:94:de:91:0d:e8: d1:73:4a:fd:ef:51:b9:95:94:4f:88:17:5d:56:e4: d8:af:ea:63:54:58:ed:ea:1c:94:8f:e6:c9:50:1a: f0:28:b7:88:af:77:f0:61:b2:c3:35:79:28:35:8a: ec:2c:61:bf:9a:6a:d0:fe:25:e0:82:b6:8c:15:42: 98:34:21:a1:74:09:8c:b3:1d:1f:35:87:94:cc:28: 0a:d5:bd:70:79:ea:a4:39:04:2a:1c:3b:48:46:d1: 62:bf:ec:96:8a:8d:70:0e:59:a2:fd:35:7b:a0:12: 1b:d0:20:e7:d9:1f:67:db:21:a6:ed:33:9b:4d:25: 63:98:87:5b:da:b6:8d:a1:36:24:44:7c:a5:e0:d0: 5b:c7:3c:5d:c1:29:0e:3c:96:23:7e:c3:27:b1:af: 3c:a8:13:33:66:92:1f:f9:f9:90:2a:9a:6b:38:3f: de:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7E:99:C3:32:99:98:06:86:ED:C9:5B:AA:5E:CC:84:AA:95:64:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl X509v3 Authority Key Identifier: keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer sbgp-ipAddrBlock: critical IPv4: 23.136.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:76:1d:c4:a7:44:0d:3d:16:bc:46:be:c7:ea:bd:ec:3e:02: 68:f2:bd:20:cf:cc:6c:a5:23:28:39:4d:cd:19:4e:f9:9c:0c: ed:46:74:85:93:f4:55:19:23:64:cc:2d:83:37:39:38:b6:14: ca:64:68:0f:2e:48:3c:a7:b7:bd:0e:f5:e7:ae:42:29:a4:7f: ad:dc:d6:40:e4:61:e8:64:6e:34:ba:d9:70:19:b9:13:56:f5: a5:d8:cf:6e:3b:e7:39:c9:2d:36:0d:8a:fb:2d:6f:40:32:43: 7f:56:09:b7:f2:f3:7b:55:6a:4c:60:75:a5:b7:90:86:a8:08: 01:41:a0:65:d2:76:e7:59:bc:04:9c:fd:a6:8a:57:aa:8e:8a: 8c:d2:5c:31:a9:34:3d:9b:e7:2f:7d:73:67:8c:dc:ee:ac:0d: cb:41:23:ac:7b:f7:f1:bb:62:0c:2d:68:35:36:f8:5f:4c:c4: 65:ec:65:c3:02:a4:bc:5c:27:10:b4:34:6b:4f:60:3c:a2:39: 44:c2:1a:9c:68:b8:6e:cb:ef:04:f9:d6:46:47:50:d3:32:f0: bc:cc:76:55:22:b2:8f:f1:3a:de:ea:4f:be:e5:e0:25:d0:76: 5c:8b:99:96:b4:2a:5c:ee:d8:e4:7e:79:56:c5:6e:7a:b6:a2: cc:5d:92:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCZkSRnSwK+rroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZiODc3NTktMzZjNC00ZTVhLTljMmItMzRlMDBjMGZi YzMwMB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZGU2YTAyNDctZWNkYi00YzliLWFjYTQtNmUxYTI4NjZjOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Wp9Akqtj6ZbFdXfvMXa1m22I4Q/IURRkbg fltTCyVoXouJEOhOrgbst8Ud/rY/5BUXVm9m+8TX/PXdXsoOg3C9FFr7iiOuRZj8 JUZRRQddviWtlN6RDejRc0r971G5lZRPiBddVuTYr+pjVFjt6hyUj+bJUBrwKLeI r3fwYbLDNXkoNYrsLGG/mmrQ/iXggraMFUKYNCGhdAmMsx0fNYeUzCgK1b1weeqk OQQqHDtIRtFiv+yWio1wDlmi/TV7oBIb0CDn2R9n2yGm7TObTSVjmIdb2raNoTYk RHyl4NBbxzxdwSkOPJYjfsMnsa88qBMzZpIf+fmQKpprOD/ezwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt+mcMymZgGhu3JW6pezISqlWSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZmI4 Nzc1OS0zNmM0LTRlNWEtOWMyYi0zNGUwMGMwZmJjMzAvZGQ0NzQ5ZTYtNmYwMy0z OWVlLTg2OWYtYWIxMmQzY2I0M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWZiODc3NTktMzZjNC00ZTVhLTlj MmItMzRlMDBjMGZiYzMwL2VmYjg3NzU5LTM2YzQtNGU1YS05YzJiLTM0ZTAwYzBm YmMzMC5jcmwwHwYDVR0jBBgwFoAUeLPdEjqK3NXQvmd/J/lBuR6hhiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZmI4Nzc1OS0zNmM0LTRlNWEtOWMyYi0zNGUw MGMwZmJjMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4iMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD92HcSnRA09FrxGvsfqvew+AmjyvSDPzGylIyg5Tc0ZTvmcDO1GdIWT 9FUZI2TMLYM3OTi2FMpkaA8uSDynt70O9eeuQimkf63c1kDkYehkbjS62XAZuRNW 9aXYz2475znJLTYNivstb0AyQ39WCbfy83tVakxgdaW3kIaoCAFBoGXSdudZvASc /aaKV6qOiozSXDGpND2b5y99c2eM3O6sDctBI6x79/G7YgwtaDU2+F9MxGXsZcMC pLxcJxC0NGtPYDyiOUTCGpxouG7L7wT51kZHUNMy8LzMdlUiso/xOt7qT77l4CXQ dlyLmZa0Klzu2OR+eVbFbnq2osxdksk= -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:42 2025 by rpki-client