$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa File: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (raw, json) Hash identifier: bSGGr0EhhiMd5Qr3r93uP+hZZ+Ks44xhJRdbWV667qc= Subject key identifier: 40:69:73:BA:E1:4B:F7:CC:83:8C:7B:A9:33:D0:4A:C3:C9:D6:BC:EB Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Certificate serial: 010D0C9F4328584BB45D10FB6B52E8A18E5C8C7E Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 397939 IP address blocks: 23.145.112.0/24 maxlen: 24 2605:7340::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:10:fb:6b:52:e8:a1:8e:5c:8c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=31eab19b-98f3-4df8-bb77-eb2ba71c04b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6b:ae:e9:5f:f7:9d:bc:aa:2b:0f:f4:dd:68: dc:cc:2c:44:80:c5:eb:28:ce:b4:1c:33:37:ba:ae: f3:4a:ec:2c:80:c0:b6:84:6a:68:b0:22:e5:9b:28: 23:c7:2d:1a:47:16:e4:59:bf:36:40:90:39:24:dc: 3f:db:76:9f:51:c2:8b:7d:5e:bf:8d:11:59:c5:d4: 7c:ea:ee:92:8e:cf:09:96:89:94:37:b7:06:9d:7d: 67:fb:43:12:9c:37:bd:5c:66:2f:52:a2:f9:37:f6: da:27:b4:f5:92:cc:d8:51:30:ac:f6:18:a2:f0:91: 7e:12:6a:cf:e5:ed:1d:31:da:10:fb:42:79:21:75: 2b:5e:df:82:1e:06:52:74:d1:f7:ac:60:c6:4c:3d: d9:5a:e5:4c:d9:5d:e1:34:20:28:60:0a:15:c0:2a: 46:44:39:a8:ef:8d:ca:66:d3:ab:c0:35:c5:ce:fe: b7:bc:d1:00:82:4f:00:c7:82:f5:f8:c6:0e:59:63: 5e:c4:1d:6d:a7:6d:37:6a:3e:be:ed:0a:2c:8d:7f: 64:bd:60:5a:62:80:ed:62:11:8f:8c:e8:af:29:8a: f6:bb:e0:7b:ab:db:7a:60:6c:65:5b:07:4a:fb:ff: 26:b2:75:bf:dd:8f:0b:d7:26:06:56:46:2d:ed:e8: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:69:73:BA:E1:4B:F7:CC:83:8C:7B:A9:33:D0:4A:C3:C9:D6:BC:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl X509v3 Authority Key Identifier: keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer sbgp-ipAddrBlock: critical IPv4: 23.145.112.0/24 IPv6: 2605:7340::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:16:98:b9:6b:e7:fa:ba:e7:38:17:df:15:63:b8:3c:d6:82: be:98:2c:94:cd:cf:4b:d2:12:ff:f6:39:87:eb:17:30:ce:2c: 51:f8:4d:ba:71:87:64:3a:53:ef:ff:32:5c:a9:c4:ee:77:fe: f0:6f:6c:46:19:22:62:7a:4c:a6:53:ff:bf:22:64:b7:18:43: be:e6:f7:4c:1e:0d:f7:62:68:b8:64:52:cd:7b:5d:eb:05:a8: e6:42:a0:b3:f1:f5:f2:18:4c:7c:e4:3d:76:2a:d0:61:7d:6d: 37:73:a3:cc:be:8b:f3:69:37:39:c7:29:bb:42:f6:09:71:2d: 3f:06:76:48:8c:6b:a6:80:5a:e1:df:06:4b:8a:57:f8:26:0b: 19:f4:ce:67:c5:0b:dd:73:74:d1:06:b3:f5:08:38:96:35:00: 22:59:3f:12:6f:4a:da:f4:eb:86:ed:f8:23:f2:70:4a:c5:f2: be:18:cd:8f:55:db:32:22:76:2a:65:41:f9:41:6b:ff:9b:da: 57:ec:d8:52:77:cb:fe:16:16:e6:bc:09:80:c4:e2:38:b9:75: ef:58:aa:ea:b0:dd:fd:bf:4e:35:33:ee:fe:98:9f:a2:87:b4: f7:6b:dc:91:1a:1d:2e:ce:79:c1:bf:d3:8c:bc:b4:7c:0c:07: 59:c0:1e:cc -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEu0XRD7a1LooY5cjH4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU1ZjhmZjgtNzdhMC00N2U5LWJhNzktY2NhZjE0N2Ey MDcxMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MzFlYWIxOWItOThmMy00ZGY4LWJiNzctZWIyYmE3MWMwNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2uu6V/3nbyqKw/03WjczCxEgMXrKM60HDM3 uq7zSuwsgMC2hGposCLlmygjxy0aRxbkWb82QJA5JNw/23afUcKLfV6/jRFZxdR8 6u6Sjs8JlomUN7cGnX1n+0MSnDe9XGYvUqL5N/baJ7T1kszYUTCs9hii8JF+EmrP 5e0dMdoQ+0J5IXUrXt+CHgZSdNH3rGDGTD3ZWuVM2V3hNCAoYAoVwCpGRDmo743K ZtOrwDXFzv63vNEAgk8Ax4L1+MYOWWNexB1tp203aj6+7QosjX9kvWBaYoDtYhGP jOivKYr2u+B7q9t6YGxlWwdK+/8msnW/3Y8L1yYGVkYt7ehKyQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFEBpc7rhS/fMg4x7qTPQSsPJ1rzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVm OGZmOC03N2EwLTQ3ZTktYmE3OS1jY2FmMTQ3YTIwNzEvYTRlM2I2ZTItYzdkMC0z NDM0LWI3ZDItY2ViY2E2YzJlZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWU1ZjhmZjgtNzdhMC00N2U5LWJh NzktY2NhZjE0N2EyMDcxLzFlNWY4ZmY4LTc3YTAtNDdlOS1iYTc5LWNjYWYxNDdh MjA3MS5jcmwwHwYDVR0jBBgwFoAUB5tPRFtgoPzbKEI3Im1tGLQcjrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZTVmOGZmOC03N2EwLTQ3ZTktYmE3OS1jY2Fm MTQ3YTIwNzEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5FwMA0E AgACMAcDBQAmBXNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEkWmLlr5/q65zgX3xVjuDzWgr6YLJTNz0vS Ev/2OYfrFzDOLFH4Tbpxh2Q6U+//MlypxO53/vBvbEYZImJ6TKZT/78iZLcYQ77m 90weDfdiaLhkUs17XesFqOZCoLPx9fIYTHzkPXYq0GF9bTdzo8y+i/NpNznHKbtC 9glxLT8GdkiMa6aAWuHfBkuKV/gmCxn0zmfFC91zdNEGs/UIOJY1ACJZPxJvStr0 64bt+CPycErF8r4YzY9V2zIidiplQflBa/+b2lfs2FJ3y/4WFua8CYDE4ji5de9Y quqw3f2/TjUz7v6Yn6KHtPdr3JEaHS7OecG/04y8tHwMB1nAHsw= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:28 2025 by rpki-client