$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa File: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (raw, json) Hash identifier: LmihFJgF2kSNI7mIEF5lZXYBc9Q1Zygu1ag0bBUR/Xw= Subject key identifier: 8A:C7:28:58:B7:5A:B6:CB:C6:E1:DB:FB:C3:1D:A5:24:59:FA:10:9D Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F4328584B7F520FDCEA84266BA1657000 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 393524 IP address blocks: 23.134.16.0/24 maxlen: 24 23.134.17.0/24 maxlen: 24 23.135.18.0/24 maxlen: 24 104.192.96.0/22 maxlen: 22 104.245.136.0/22 maxlen: 22 2602:ff44::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0f:dc:ea:84:26:6b:a1:65:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9acc46cd-d529-49d5-b3a6-dcedcaf780b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:11:06:4a:d2:f7:9a:3f:e8:a0:28:b0:ba:3a: 3d:2f:6b:69:9f:ab:ce:00:b1:c9:e8:b9:a6:8d:5c: b8:8b:72:5c:bf:82:82:c5:89:0c:ef:fe:a9:c4:d8: eb:9e:2d:40:ea:c4:f7:82:49:2e:56:f2:cc:dc:66: f6:61:26:be:f1:a4:60:14:3a:6f:c4:a7:57:7b:b8: fb:33:51:82:e7:e0:a9:42:d4:1c:c3:93:d4:b7:ab: c1:7a:f9:7e:fc:d7:ed:aa:65:cd:d8:48:62:8c:9c: c3:a5:e8:d3:4e:3a:33:13:ee:d1:7d:d7:f0:2f:7c: 2a:d2:74:eb:da:57:4e:8c:7d:46:89:0d:d1:17:b5: c1:b3:47:e9:46:71:77:65:ee:bb:4c:4e:92:56:e6: 6b:f7:d1:70:a5:2f:fd:a7:0a:0a:9d:f4:5f:ee:5e: 0a:91:62:c8:04:a3:29:de:63:80:66:cd:0c:09:87: c0:53:d3:3a:83:10:73:00:1b:50:39:d7:7c:ed:44: 8b:fb:50:ed:dc:ca:a6:48:c4:9d:0a:4d:7e:6d:96: ae:ec:5e:da:b6:06:7a:4b:40:d7:e8:a5:f1:fc:88: 9e:f4:64:9d:52:91:25:28:23:1b:ce:2b:17:2d:4c: 56:7f:4b:d6:ba:55:84:13:ae:4e:92:f7:27:94:9e: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C7:28:58:B7:5A:B6:CB:C6:E1:DB:FB:C3:1D:A5:24:59:FA:10:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: 23.134.16.0/23 23.135.18.0/24 104.192.96.0/22 104.245.136.0/22 IPv6: 2602:ff44::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:40:27:e9:34:eb:ee:06:8f:0a:bf:48:90:a0:3b:04:b3:45: be:cb:81:4e:07:df:40:60:41:c5:c1:db:65:56:ae:ef:a1:14: ee:46:9a:79:61:24:6a:9c:8c:bc:1a:64:7c:a7:04:d4:03:8c: c2:27:cb:2c:48:c2:ac:f6:27:09:c7:24:17:22:f2:ec:e5:f3: cc:8a:15:c6:17:18:6d:56:0b:53:bc:ee:bc:ac:9a:9d:5e:f4: 75:18:c8:ba:06:2f:31:53:5f:41:f2:44:19:bd:38:3a:ca:20: c3:b4:96:36:c8:5a:a5:01:6d:54:4b:99:b8:62:33:37:59:8e: fb:0d:f1:e4:93:55:f3:9e:17:ae:7a:f3:93:6a:3b:72:d6:30: 32:73:c5:c8:35:de:60:fb:c2:3c:e3:57:36:5c:e4:8d:4b:7f: 68:87:f5:b1:27:e4:52:c5:68:0a:a6:ae:72:1b:ac:fc:f2:1e: cc:c7:16:e9:80:f2:79:7e:f7:34:7e:99:a9:f4:04:5e:9b:4f: 5d:70:4f:72:15:64:71:c8:ef:1d:bc:d8:c5:2c:0b:85:9d:5e: ba:e0:c2:75:27:b1:86:76:75:45:03:e4:94:26:a7:e5:9f:dc: d0:a5:ed:03:2c:90:54:d8:dc:43:f7:90:3e:fe:de:8b:73:24: e5:85:65:b3 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEt/Ug/c6oQma6FlcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OWFjYzQ2Y2QtZDUyOS00OWQ1LWIzYTYtZGNlZGNhZjc4MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxEGStL3mj/ooCiwujo9L2tpn6vOALHJ6Lmm jVy4i3Jcv4KCxYkM7/6pxNjrni1A6sT3gkkuVvLM3Gb2YSa+8aRgFDpvxKdXe7j7 M1GC5+CpQtQcw5PUt6vBevl+/NftqmXN2EhijJzDpejTTjozE+7RfdfwL3wq0nTr 2ldOjH1GiQ3RF7XBs0fpRnF3Ze67TE6SVuZr99FwpS/9pwoKnfRf7l4KkWLIBKMp 3mOAZs0MCYfAU9M6gxBzABtQOdd87USL+1Dt3MqmSMSdCk1+bZau7F7atgZ6S0DX 6KXx/Iie9GSdUpElKCMbzisXLUxWf0vWulWEE65OkvcnlJ7XHQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFIrHKFi3WrbLxuHb+8MdpSRZ+hCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMDdhZmRiNWItZjMzOS0z YTFmLTkwOGEtMmI1YzkyMDQ0ZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQBF4YQAwQA F4cSAwQCaMBgAwQCaPWIMA4EAgACMAgDBgQmAv9EADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtQCfpNOvu Bo8Kv0iQoDsEs0W+y4FOB99AYEHFwdtlVq7voRTuRpp5YSRqnIy8GmR8pwTUA4zC J8ssSMKs9icJxyQXIvLs5fPMihXGFxhtVgtTvO68rJqdXvR1GMi6Bi8xU19B8kQZ vTg6yiDDtJY2yFqlAW1US5m4YjM3WY77DfHkk1XznheuevOTajty1jAyc8XINd5g +8I841c2XOSNS39oh/WxJ+RSxWgKpq5yG6z88h7MxxbpgPJ5fvc0fpmp9ARem09d cE9yFWRxyO8dvNjFLAuFnV664MJ1J7GGdnVFA+SUJqfln9zQpe0DLJBU2NxD95A+ /t6LcyTlhWWz -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:36 2025 by rpki-client