$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa File: 0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa (raw, json) Hash identifier: BDkyQU71TWlOQJxAVTIiXAaUq6XnbjEvPrS69qDIWwE= Subject key identifier: 44:03:61:EF:4A:4F:25:58:B2:C7:83:CB:FC:3D:1B:E8:D7:A5:FC:41 Certificate issuer: /CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Certificate serial: 010D0C9F4328584B5DD1E0874E1755D677D32780 Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 38008 IP address blocks: 23.143.8.0/24 maxlen: 24 2602:27c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e0:87:4e:17:55:d6:77:d3:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=adc19a48-43d8-4170-bdc8-436f88eda351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:7b:7f:42:c2:ba:f3:5b:77:06:9e:53:d2: 82:1c:80:a6:83:fb:06:96:75:94:70:37:e5:5b:12: e1:e8:e9:c9:60:47:f9:9a:81:26:fc:9c:4d:62:c2: e2:92:f2:29:48:58:79:99:df:2b:92:98:b0:c7:d5: d9:6a:71:ad:1c:50:94:fd:59:29:1e:f9:52:96:56: 09:d0:a9:4f:7a:9c:6a:ea:a3:83:d9:e5:77:91:6e: 9c:6b:3f:ef:ea:a9:97:58:28:11:f8:45:53:bd:e6: 6e:a3:7b:bd:37:ec:45:48:13:8a:91:d4:9a:16:2a: d4:bd:e7:c9:8a:94:58:02:60:61:77:49:ee:5a:49: 50:d5:62:59:2d:b6:86:a2:c7:46:e0:96:5a:5d:f9: 01:76:cb:d3:a9:1f:36:70:20:ee:95:cb:74:64:b2: d3:79:9d:55:ff:6e:cf:ff:1f:3c:ae:99:36:af:56: 1c:c0:97:6e:bd:95:77:f6:95:92:54:66:32:50:5f: 18:b8:59:73:a4:18:48:56:67:f8:d1:3a:6f:2e:19: db:47:91:4c:4f:da:b0:30:51:47:28:55:ae:27:67: de:14:d6:be:3a:98:9d:d6:57:70:96:1e:8f:d3:d2: 3a:aa:80:cd:3b:8c:ed:71:32:91:87:02:4a:6b:a3: e3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:03:61:EF:4A:4F:25:58:B2:C7:83:CB:FC:3D:1B:E8:D7:A5:FC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/0ccec1d9-bdbf-390f-86f2-af13d7c9146f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl X509v3 Authority Key Identifier: keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer sbgp-ipAddrBlock: critical IPv4: 23.143.8.0/24 IPv6: 2602:27c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:66:65:ce:2f:95:47:26:94:26:cf:24:d9:f6:5c:86:23:ad: 21:74:00:34:ac:c1:25:1a:15:7e:84:64:cc:38:06:9e:9a:60: ae:88:7f:45:62:97:11:f5:f2:81:99:aa:e1:58:41:96:80:5a: 2e:7c:a8:19:34:53:9d:40:11:c3:99:c1:d6:63:f8:69:51:7a: fc:92:69:5b:9a:1a:e4:dc:dc:27:df:40:94:c1:0a:ed:22:6b: a2:60:43:a2:c3:27:eb:e5:d1:1e:d9:f7:61:bb:23:63:e2:8b: b6:05:3b:a3:7c:b6:9c:eb:a6:bf:44:15:1e:90:9a:af:55:55: 14:20:bd:5d:62:d7:65:e7:b4:be:47:7d:31:7e:4b:eb:4c:d9: d8:88:6b:c4:bb:2f:f6:2b:66:fd:46:89:86:46:37:ef:52:25: e1:1a:c8:49:33:f3:1a:c2:c4:54:5a:db:ef:9c:49:db:ff:c1: bc:1a:7d:51:36:e1:ee:0a:fe:78:e4:13:c8:cd:f5:0f:cc:2f: 50:fd:c7:74:c9:67:4e:57:c8:10:dc:a8:4a:6f:8b:72:bf:8c: 25:6e:30:e8:f5:a7:cb:d6:a6:fc:b3:a8:85:2e:53:a6:a0:b3: 8d:de:4a:50:ac:b4:91:c2:86:40:5b:9d:71:51:83:1a:59:c9: 5a:69:97:95 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtd0eCHThdV1nfTJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwYjk3OGEtOTQ0YS00MDFjLWFhMjUtMmViYmQ0ZDU4 MzQwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YWRjMTlhNDgtNDNkOC00MTcwLWJkYzgtNDM2Zjg4ZWRhMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPB7f0LCuvNbdwaeU9KCHICmg/sGlnWUcDfl WxLh6OnJYEf5moEm/JxNYsLikvIpSFh5md8rkpiwx9XZanGtHFCU/VkpHvlSllYJ 0KlPepxq6qOD2eV3kW6caz/v6qmXWCgR+EVTveZuo3u9N+xFSBOKkdSaFirUvefJ ipRYAmBhd0nuWklQ1WJZLbaGosdG4JZaXfkBdsvTqR82cCDulct0ZLLTeZ1V/27P /x88rpk2r1YcwJduvZV39pWSVGYyUF8YuFlzpBhIVmf40TpvLhnbR5FMT9qwMFFH KFWuJ2feFNa+Opid1ldwlh6P09I6qoDNO4ztcTKRhwJKa6PjJQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEQDYe9KTyVYsseDy/w9G+jXpfxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBi OTc4YS05NDRhLTQwMWMtYWEyNS0yZWJiZDRkNTgzNDAvMGNjZWMxZDktYmRiZi0z OTBmLTg2ZjItYWYxM2Q3YzkxNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwYjk3OGEtOTQ0YS00MDFjLWFh MjUtMmViYmQ0ZDU4MzQwL2Q3MGI5NzhhLTk0NGEtNDAxYy1hYTI1LTJlYmJkNGQ1 ODM0MC5jcmwwHwYDVR0jBBgwFoAUcx9dnRTzp+3CNGp0KmTLcKr/LnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBiOTc4YS05NDRhLTQwMWMtYWEyNS0yZWJi ZDRkNTgzNDAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF48IMA4E AgACMAgDBgQmAgJ8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+ZmXOL5VHJpQmzyTZ9lyGI60hdAA0rMEl GhV+hGTMOAaemmCuiH9FYpcR9fKBmarhWEGWgFoufKgZNFOdQBHDmcHWY/hpUXr8 kmlbmhrk3Nwn30CUwQrtImuiYEOiwyfr5dEe2fdhuyNj4ou2BTujfLac66a/RBUe kJqvVVUUIL1dYtdl57S+R30xfkvrTNnYiGvEuy/2K2b9RomGRjfvUiXhGshJM/Ma wsRUWtvvnEnb/8G8Gn1RNuHuCv545BPIzfUPzC9Q/cd0yWdOV8gQ3KhKb4tyv4wl bjDo9afL1qb8s6iFLlOmoLON3kpQrLSRwoZAW51xUYMaWclaaZeV -----END CERTIFICATE-----Generated at Tue Nov 4 23:52:07 2025 by rpki-client