$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa File: 2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (raw, json) Hash identifier: 6y3tkvPPFuoeUVednPVzbZSDph7S2T6v/dH9s1CAgJA= Subject key identifier: 33:2C:8A:5A:43:AA:07:02:47:20:43:27:C1:BE:AD:2A:25:8B:62:DD Certificate issuer: /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6 Certificate serial: 010D0C9F4328584B434C69863DE15B3C1DC8F800 Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 25944 IP address blocks: 23.157.168.0/24 maxlen: 24 2602:814:d000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:69:86:3d:e1:5b:3c:1d:c8:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=044e9de5-58f7-4d8c-b8ed-7d739720f153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:88:6e:ef:bb:a5:7f:cf:20:fb:0c:03:91:bc: cd:fa:18:a0:66:dd:76:54:56:cc:7b:e4:5d:83:0a: 42:a1:95:6d:a1:8c:c4:49:43:ec:d5:33:9f:28:5b: 25:f3:c4:50:2b:d6:03:c8:3b:55:1e:ae:b5:88:6a: 57:b2:fa:1f:d1:37:56:72:5e:2d:c7:81:1e:fc:4e: 3a:47:c3:60:88:03:2f:4e:19:ef:3e:93:9a:53:9e: 30:ef:42:b5:9c:0d:40:5d:f3:95:7b:8b:f1:1d:c4: a3:90:69:5c:31:20:bb:da:53:c8:fd:df:6b:6a:ee: 33:b3:44:cf:c4:ca:58:f3:15:10:06:79:f0:f3:ca: df:16:a2:03:76:41:de:4f:8b:de:87:4e:5d:c2:58: a0:a8:6a:4e:09:91:95:53:c2:21:f8:e1:ee:c9:76: db:84:40:51:36:7f:18:ee:ce:f0:7c:c7:86:b9:e9: 8e:95:75:df:7c:30:7a:da:fe:6c:e5:c5:fe:79:de: ee:63:8b:16:63:59:34:c3:4f:ab:56:ee:bb:a7:0e: 41:dd:d2:24:be:a8:63:68:c8:36:2d:13:9b:7f:a4: 4f:45:92:b2:d4:99:dd:66:8c:06:0b:3c:e4:f7:85: 4b:f8:70:a2:f6:ce:5d:9e:8a:74:1d:a1:62:d6:c6: a9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:2C:8A:5A:43:AA:07:02:47:20:43:27:C1:BE:AD:2A:25:8B:62:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl X509v3 Authority Key Identifier: keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer sbgp-ipAddrBlock: critical IPv4: 23.157.168.0/24 IPv6: 2602:814:d000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:5a:de:1e:86:90:9b:49:37:16:19:d0:8c:3d:8e:ad:e1:f6: fa:c7:c3:e9:63:5f:64:a4:46:86:44:4d:4a:a0:8c:62:79:59: 9f:f5:53:a8:72:c8:59:11:74:20:58:a5:77:39:77:8b:48:52: ba:1a:cd:66:39:c8:bf:ae:0d:a1:3e:76:5f:a0:52:1c:05:ba: 3d:ac:d3:94:09:52:d4:39:35:d1:1b:be:63:6f:a6:f4:b2:71: 16:b1:de:84:a6:e6:29:01:9c:59:de:0d:fc:8b:ad:7b:30:3e: 7b:ca:6a:c9:31:b3:63:10:2c:0c:09:a2:25:1e:9a:b8:37:fd: 71:ca:a3:28:c4:03:13:aa:88:ef:11:63:18:74:6e:e7:b2:3c: fd:5b:fa:93:18:7b:f4:86:0c:cb:09:af:b4:f2:41:20:8d:10: ef:6f:60:ee:45:3d:40:c0:c3:36:67:57:43:0f:f9:ca:dd:65: 33:51:37:80:29:fa:b6:a3:fe:bd:ca:76:37:01:32:53:b4:67: 0e:ed:1c:db:3d:df:76:84:e6:5a:a2:36:31:70:40:b6:3b:83: 5e:e5:2e:10:11:20:0a:53:37:de:95:b8:a5:06:f5:72:e3:bd: 8d:6c:b9:7d:c7:90:07:9c:af:0c:92:ea:eb:fd:d9:3d:b3:c2: 7e:5e:94:66 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtDTGmGPeFbPB3I+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ4YmYyYzgtN2YyYi00ZTJiLWE2NTMtMWU4OWVkMmNh OGI2MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MDQ0ZTlkZTUtNThmNy00ZDhjLWI4ZWQtN2Q3Mzk3MjBmMTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiohu77ulf88g+wwDkbzN+higZt12VFbMe+Rd gwpCoZVtoYzESUPs1TOfKFsl88RQK9YDyDtVHq61iGpXsvof0TdWcl4tx4Ee/E46 R8NgiAMvThnvPpOaU54w70K1nA1AXfOVe4vxHcSjkGlcMSC72lPI/d9rau4zs0TP xMpY8xUQBnnw88rfFqIDdkHeT4veh05dwligqGpOCZGVU8Ih+OHuyXbbhEBRNn8Y 7s7wfMeGuemOlXXffDB62v5s5cX+ed7uY4sWY1k0w0+rVu67pw5B3dIkvqhjaMg2 LRObf6RPRZKy1JndZowGCzzk94VL+HCi9s5dnop0HaFi1sapTQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDMsilpDqgcCRyBDJ8G+rSoli2LdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NDhi ZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5ZWQyY2E4YjYvMmYxNjBhMGUtYTEyMy0z YTcyLTk5ZTEtZDY2OTQ5NmJkMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDQ4YmYyYzgtN2YyYi00ZTJiLWE2 NTMtMWU4OWVkMmNhOGI2LzQ0OGJmMmM4LTdmMmItNGUyYi1hNjUzLTFlODllZDJj YThiNi5jcmwwHwYDVR0jBBgwFoAUMpzTTWQriq2VApMNbBmQeCPWaY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NDhiZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5 ZWQyY2E4YjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF52oMA8E AgACMAkDBwQmAggU0AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnVreHoaQm0k3FhnQjD2OreH2+sfD6WNf ZKRGhkRNSqCMYnlZn/VTqHLIWRF0IFildzl3i0hSuhrNZjnIv64NoT52X6BSHAW6 PazTlAlS1Dk10Ru+Y2+m9LJxFrHehKbmKQGcWd4N/IutezA+e8pqyTGzYxAsDAmi JR6auDf9ccqjKMQDE6qI7xFjGHRu57I8/Vv6kxh79IYMywmvtPJBII0Q729g7kU9 QMDDNmdXQw/5yt1lM1E3gCn6tqP+vcp2NwEyU7RnDu0c2z3fdoTmWqI2MXBAtjuD XuUuEBEgClM33pW4pQb1cuO9jWy5fceQB5yvDJLq6/3ZPbPCfl6UZg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:45:15 2025 by rpki-client