$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa File: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (raw, json) Hash identifier: Jml8U54qlocDa4+hDzMmAYQQGc/XO7wE3JmkPu1irQk= Subject key identifier: AB:83:4F:A0:B6:D6:31:7E:70:92:95:85:4D:7C:B9:3D:25:B6:17:30 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584AECC120DF7BD2C516F85CF340 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 393444 IP address blocks: 23.165.48.0/24 maxlen: 24 2602:fd1c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:20:df:7b:d2:c5:16:f8:5c:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=9d855135-3950-4ae0-90b2-ec1168ad8778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:ff:f9:32:ff:5e:d2:29:ea:ae:33:44:a6: e8:96:6c:4f:37:d7:01:b7:33:c6:ee:04:8d:a8:81: 78:c0:01:73:78:16:ba:31:d8:f4:5f:0b:98:4f:c4: 0a:2b:1b:20:e1:14:d6:16:44:b4:a1:35:e2:38:26: 9d:77:c8:dc:67:4b:39:fa:02:03:e3:0b:1f:0c:9d: e6:21:d8:d1:ca:e4:8e:4f:4a:9a:5b:d2:91:6b:7d: b6:ba:95:9e:3e:f1:73:56:9e:99:ce:9d:80:fb:48: af:f6:2a:68:72:6e:c5:34:89:3a:ed:3e:bd:1f:76: 32:03:b4:f9:54:50:e6:f6:94:13:c3:5b:80:f2:3b: a7:51:ea:4c:fa:b0:6c:d4:74:be:6b:98:1f:c4:82: a3:45:e3:44:34:9e:f4:6a:2a:24:47:83:c4:31:a6: 9d:3d:4c:71:c0:1c:c7:32:36:f9:26:cc:2f:c9:46: d9:80:c9:c4:5a:94:fa:57:04:13:31:b4:97:f2:a7: 75:fd:07:62:ea:3e:f6:27:a0:fe:4b:ca:44:be:75: 44:04:f7:f3:e1:73:dc:37:55:8a:9a:af:92:d1:c5: 8d:1b:c1:1b:12:80:5f:04:67:ca:55:50:4c:11:57: 48:0b:e5:0d:73:d2:2a:d4:c4:bb:a9:02:bd:b4:85: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:83:4F:A0:B6:D6:31:7E:70:92:95:85:4D:7C:B9:3D:25:B6:17:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 23.165.48.0/24 IPv6: 2602:fd1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:bb:fd:33:8b:b2:6f:98:9e:14:db:58:4b:12:12:d3:06:1f: b0:de:8f:b1:f3:59:09:cc:0f:d2:df:e9:0d:f0:fa:d0:06:94: 2b:96:b3:2b:70:b6:11:90:7f:dd:51:76:b6:e0:28:d7:09:b2: 72:69:97:29:83:01:94:8f:95:7d:2f:a2:17:8b:b3:6b:21:57: f2:99:68:0b:f7:78:3b:c6:3d:45:52:4e:39:ed:cb:06:f2:9c: 68:50:09:ca:c4:e3:72:46:0a:d1:2a:ec:67:0d:5e:58:b9:c3: db:e5:38:d2:b1:ac:e9:e2:ba:00:1b:21:f5:15:d9:8c:28:3f: 7a:1f:10:cf:60:4c:a9:54:2d:09:df:71:c7:e9:10:28:91:f9: 98:7f:e2:d4:47:f4:61:c3:04:3a:3b:02:52:7f:ba:f4:29:33: e3:f7:5c:b1:c9:1f:d7:9a:e8:f9:70:67:27:7d:76:d2:3f:d7: e5:9f:ec:09:6e:96:ef:66:c7:f4:ea:03:7f:da:ac:dd:4c:f9: 3a:81:9a:bf:7b:20:6f:5d:b4:f6:f1:09:74:3d:9c:de:4f:cd: 11:5e:a0:4e:b4:38:b9:6d:e9:e1:19:c3:85:ca:c8:15:e4:d0: c0:b2:04:31:26:eb:34:f3:cd:9f:7d:87:07:19:5b:a3:cb:9d: 56:80:e5:82 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErswSDfe9LFFvhc80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OWQ4NTUxMzUtMzk1MC00YWUwLTkwYjItZWMxMTY4YWQ4Nzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKz/+TL/XtIp6q4zRKbolmxPN9cBtzPG7gSN qIF4wAFzeBa6Mdj0XwuYT8QKKxsg4RTWFkS0oTXiOCadd8jcZ0s5+gID4wsfDJ3m IdjRyuSOT0qaW9KRa322upWePvFzVp6Zzp2A+0iv9ipocm7FNIk67T69H3YyA7T5 VFDm9pQTw1uA8junUepM+rBs1HS+a5gfxIKjReNENJ70aiokR4PEMaadPUxxwBzH Mjb5JswvyUbZgMnEWpT6VwQTMbSX8qd1/Qdi6j72J6D+S8pEvnVEBPfz4XPcN1WK mq+S0cWNG8EbEoBfBGfKVVBMEVdIC+UNc9Iq1MS7qQK9tIWDswIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKuDT6C21jF+cJKVhU18uT0lthcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvZWIwODljMWItYzVjYi0z Y2FhLWE4NjgtOTUyZmMxMTI0MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6UwMA4E AgACMAgDBgQmAv0cADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXu/0zi7JvmJ4U21hLEhLTBh+w3o+x81kJ zA/S3+kN8PrQBpQrlrMrcLYRkH/dUXa24CjXCbJyaZcpgwGUj5V9L6IXi7NrIVfy mWgL93g7xj1FUk457csG8pxoUAnKxONyRgrRKuxnDV5YucPb5TjSsazp4roAGyH1 FdmMKD96HxDPYEypVC0J33HH6RAokfmYf+LUR/RhwwQ6OwJSf7r0KTPj91yxyR/X muj5cGcnfXbSP9fln+wJbpbvZsf06gN/2qzdTPk6gZq/eyBvXbT28Ql0PZzeT80R XqBOtDi5benhGcOFysgV5NDAsgQxJus0882ffYcHGVujy51WgOWC -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:58 2025 by rpki-client