$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa File: cebb264b-8916-3bf8-971e-9c880ec664a8.roa (raw, json) Hash identifier: vgnhYh/MLlpopqAzBoqBb3rCGprFYd0sbJk0skUOhfM= Subject key identifier: 2B:92:02:93:DF:74:A8:E3:8B:7E:48:B5:E1:82:A9:6D:B6:00:C7:4C Certificate issuer: /CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Certificate serial: 010D0C9F4328584B7B21F954E84D30114A3D1C80 Authority key identifier: 7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 53698 IP address blocks: 23.174.128.0/24 maxlen: 24 23.174.129.0/24 maxlen: 24 23.175.16.0/24 maxlen: 24 165.140.128.0/23 maxlen: 24 192.33.139.0/24 maxlen: 24 209.209.4.0/22 maxlen: 24 2604:6040::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f9:54:e8:4d:30:11:4a:3d:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=615e35f9-bfe1-4c69-bb32-cd252c125c65 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=0aa99407-aadf-4b4d-afe0-1e12a5ba1228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:a2:34:3b:ec:2f:fe:9d:15:b4:f7:7e:c0: 13:52:ac:8d:9b:bb:4a:31:11:1a:fa:bf:18:52:5b: de:f4:d8:9f:7f:3f:2d:83:ba:6c:c0:c5:f1:ea:6f: 40:4e:ad:1c:b4:14:13:e5:91:bd:2c:6d:72:61:18: 61:1e:13:f5:20:28:6f:39:8b:24:40:de:ef:9f:98: d4:a7:8c:eb:c8:38:aa:ae:62:2d:6e:02:55:b2:f0: a6:27:8f:6f:09:71:a0:2e:a1:87:c9:bb:8c:2f:2a: 96:f1:70:b0:cf:51:80:a9:d4:bf:ae:82:41:08:39: d4:4f:e0:33:25:e6:a9:2e:47:00:8c:f5:08:1e:b9: ff:a1:49:25:d4:3a:5f:c5:91:24:16:ef:fb:e7:40: e3:97:e1:00:de:03:83:20:1f:f4:ef:c7:7a:75:b7: d9:fb:e8:fb:89:42:a5:00:ff:31:4d:1e:1c:51:85: 95:71:70:0f:5a:f9:99:ec:81:fa:15:0e:28:23:47: 55:c5:5c:18:7c:ad:28:ae:fe:5d:e9:8e:bf:d4:2f: 38:03:73:11:c9:8b:ac:5f:69:7d:f8:4b:c3:d1:19: 96:7f:8f:85:53:6f:a3:bb:6a:69:e7:52:a0:d5:1e: 13:fe:90:33:d6:b4:f0:4b:df:91:c0:b3:8e:2d:d6: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:92:02:93:DF:74:A8:E3:8B:7E:48:B5:E1:82:A9:6D:B6:00:C7:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/cebb264b-8916-3bf8-971e-9c880ec664a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65/615e35f9-bfe1-4c69-bb32-cd252c125c65.crl X509v3 Authority Key Identifier: keyid:7C:F3:67:47:B2:5A:27:B5:5B:BF:CC:83:68:DC:5D:B2:B8:44:D2:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/615e35f9-bfe1-4c69-bb32-cd252c125c65.cer sbgp-ipAddrBlock: critical IPv4: 23.174.128.0/23 23.175.16.0/24 165.140.128.0/23 192.33.139.0/24 209.209.4.0/22 IPv6: 2604:6040::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ce:b2:d8:2e:80:39:e1:c4:12:de:38:b0:55:07:d2:bc:62: 34:4f:ee:f6:ef:e7:c8:b5:fe:07:90:b6:26:8a:93:8b:1f:32: 39:0f:3a:e2:fc:2a:66:da:f1:f0:a7:40:1d:26:09:17:ac:b9: 47:32:d4:47:c1:a3:78:d3:3c:ff:72:74:ef:2f:bf:60:ac:f2: cb:d6:f7:44:aa:56:85:52:4b:23:e5:b0:43:19:2d:cd:79:cc: b6:8c:f2:bf:71:dc:df:2c:86:af:e5:b2:cc:12:2f:30:fc:d7: 7f:32:db:3f:6d:33:0b:9a:16:74:b9:15:1d:63:ec:f5:a1:3d: f4:d6:f0:64:f6:7b:a5:de:35:9a:7a:ee:f2:17:e3:7b:76:2f: b1:9e:e7:ed:b4:97:25:ef:00:f6:ba:75:e6:67:78:25:50:8a: 6c:07:a4:c2:c8:56:2b:78:12:17:eb:f4:25:6b:09:b0:f8:b2: 0f:65:3d:a9:d4:e8:74:2e:ac:47:a6:18:81:e7:8d:cb:2c:20: ec:bf:bf:90:10:7a:af:81:97:26:51:2d:ad:4b:f8:6c:2e:65: b4:75:57:4d:92:08:33:de:12:11:ae:04:86:d6:d1:75:44:15: 52:c9:5d:86:a0:fc:84:c5:84:b2:9e:5b:d1:b7:7c:aa:45:20: 4e:90:b8:3c -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEt7IflU6E0wEUo9HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1ZTM1ZjktYmZlMS00YzY5LWJiMzItY2QyNTJjMTI1 YzY1MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk MGFhOTk0MDctYWFkZi00YjRkLWFmZTAtMWUxMmE1YmExMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq2iNDvsL/6dFbT3fsATUqyNm7tKMREa+r8Y Ulve9Niffz8tg7pswMXx6m9ATq0ctBQT5ZG9LG1yYRhhHhP1IChvOYskQN7vn5jU p4zryDiqrmItbgJVsvCmJ49vCXGgLqGHybuMLyqW8XCwz1GAqdS/roJBCDnUT+Az JeapLkcAjPUIHrn/oUkl1DpfxZEkFu/750Djl+EA3gODIB/078d6dbfZ++j7iUKl AP8xTR4cUYWVcXAPWvmZ7IH6FQ4oI0dVxVwYfK0orv5d6Y6/1C84A3MRyYusX2l9 +EvD0RmWf4+FU2+ju2pp51Kg1R4T/pAz1rTwS9+RwLOOLdZNEwIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFCuSApPfdKjji35IteGCqW22AMdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MTVl MzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1MmMxMjVjNjUvY2ViYjI2NGItODkxNi0z YmY4LTk3MWUtOWM4ODBlYzY2NGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjE1ZTM1ZjktYmZlMS00YzY5LWJi MzItY2QyNTJjMTI1YzY1LzYxNWUzNWY5LWJmZTEtNGM2OS1iYjMyLWNkMjUyYzEy NWM2NS5jcmwwHwYDVR0jBBgwFoAUfPNnR7JaJ7Vbv8yDaNxdsrhE0sIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MTVlMzVmOS1iZmUxLTRjNjktYmIzMi1jZDI1 MmMxMjVjNjUuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAkBAIAATAeAwQBF66AAwQA F68QAwQBpYyAAwQAwCGLAwQC0dEEMA4EAgACMAgDBgQmBGBAADBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5 zrLYLoA54cQS3jiwVQfSvGI0T+727+fItf4HkLYmipOLHzI5Dzri/Cpm2vHwp0Ad JgkXrLlHMtRHwaN40zz/cnTvL79grPLL1vdEqlaFUksj5bBDGS3Necy2jPK/cdzf LIav5bLMEi8w/Nd/Mts/bTMLmhZ0uRUdY+z1oT301vBk9nul3jWaeu7yF+N7di+x nufttJcl7wD2unXmZ3glUIpsB6TCyFYreBIX6/Qlawmw+LIPZT2p1Oh0LqxHphiB 543LLCDsv7+QEHqvgZcmUS2tS/hsLmW0dVdNkggz3hIRrgSG1tF1RBVSyV2GoPyE xYSynlvRt3yqRSBOkLg8 -----END CERTIFICATE-----Generated at Wed Nov 5 16:22:18 2025 by rpki-client