$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/d5b124e9-9b8c-3532-ab43-033cf2bd0f0f.roa File: d5b124e9-9b8c-3532-ab43-033cf2bd0f0f.roa (raw, json) Hash identifier: jQ9gpS9Pg9jxVwKAGXxzUsLAj3HHlYJJVC8mSFiwx0I= Subject key identifier: F5:B6:A4:E2:FB:A7:A3:49:CC:D9:83:8A:1F:8A:FC:CE:1B:28:BF:CB Certificate issuer: /CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982 Certificate serial: 010D0C9F4328584B8A7CD0A7D8FC64F168456680 Authority key identifier: 5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/d5b124e9-9b8c-3532-ab43-033cf2bd0f0f.roa Signing time: Thu 16 Oct 2025 13:00:38 +0000 ROA not before: Thu 16 Oct 2025 13:00:38 +0000 ROA not after: Wed 14 Jan 2026 14:00:38 +0000 asID: 40419 IP address blocks: 23.190.216.0/24 maxlen: 24 142.249.174.0/24 maxlen: 24 2602:fa86::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:7c:d0:a7:d8:fc:64:f1:68:45:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1886e4bb-e8b3-46f4-8d9d-8d226295a982 Validity Not Before: Oct 16 13:00:38 2025 GMT Not After : Jan 14 14:00:38 2026 GMT Subject: CN=3b20408f-4370-44bd-9d4e-8227aacfa348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c8:a4:a0:f9:18:6f:a1:73:81:e1:9b:72:ce: 53:5f:73:6c:40:c7:36:5c:d4:4e:a4:db:08:6c:23: c0:ef:44:b6:e8:7d:b4:ab:e9:00:19:6f:39:28:4a: bc:50:f1:69:8c:96:48:8f:3c:57:c5:89:1f:0e:a8: 28:74:90:b7:9e:47:d9:9f:81:6d:d3:16:ad:37:fa: b3:ad:a2:1a:fd:5c:bb:cd:ad:93:a3:fd:d5:53:c6: 96:b0:51:67:02:53:cd:7d:34:3d:a5:47:59:99:51: 02:4f:a5:08:33:57:36:f8:37:1b:db:10:b6:40:c5: b6:bf:6f:93:67:32:d1:be:3b:6b:18:27:d9:3c:66: b8:c1:28:ec:08:d6:7f:62:95:b8:d0:24:28:73:6b: d3:22:fc:39:b4:8e:c0:14:12:07:c0:5c:ca:54:bb: 37:fb:6f:09:06:b2:df:6b:86:ca:c3:14:6f:bf:18: 28:d4:d7:4a:b1:0c:b5:9a:8c:02:3d:d6:d0:c1:9e: c9:c2:1c:31:b2:31:8a:49:63:e2:1f:9d:fb:aa:65: aa:8c:6b:10:55:61:fb:f9:82:5d:cd:00:75:dc:8a: be:99:6c:5b:90:88:8f:cc:3f:61:77:d7:a4:2e:62: 75:12:0d:0e:1f:53:5d:b5:f8:5f:f2:c5:57:77:c2: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B6:A4:E2:FB:A7:A3:49:CC:D9:83:8A:1F:8A:FC:CE:1B:28:BF:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/d5b124e9-9b8c-3532-ab43-033cf2bd0f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982/1886e4bb-e8b3-46f4-8d9d-8d226295a982.crl X509v3 Authority Key Identifier: keyid:5B:59:46:55:98:AA:24:33:EC:67:68:B3:2B:CA:BD:F0:78:DF:89:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1886e4bb-e8b3-46f4-8d9d-8d226295a982.cer sbgp-ipAddrBlock: critical IPv4: 23.190.216.0/24 142.249.174.0/24 IPv6: 2602:fa86::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:22:ee:cf:c9:a1:f2:2b:1f:5c:43:db:1c:c2:cc:75:ce:a8: 32:d6:91:84:ed:b9:74:4b:20:c7:81:bd:a9:5b:33:1b:54:e6: 86:b3:38:26:14:3d:55:f1:05:61:5c:3a:b8:e9:2b:5b:93:38: 7a:99:a7:88:7a:a7:f0:35:1a:e1:06:b4:46:16:d9:b3:d0:cf: fc:2d:f8:02:31:0a:da:65:1c:ca:e9:bb:20:e8:34:bb:37:6c: f8:04:bf:ee:a1:07:5d:83:96:8b:27:d3:e1:a1:62:1a:e5:a4: 5f:4d:6a:19:64:9f:c8:fb:82:db:09:cc:ff:ca:e3:a4:5f:8a: ed:49:61:7e:ab:5a:27:a7:3f:55:9a:3e:da:44:51:64:9c:f3: 0f:9e:35:4f:97:a7:ee:e8:21:25:7c:5a:51:6c:27:25:8e:87: a4:ea:e8:7f:90:76:dd:33:32:2e:9b:06:79:cc:d0:ea:b4:69: 14:d1:68:d7:37:13:e3:95:68:bd:cb:a9:9f:53:b6:dd:48:ce: 95:e6:cb:7c:da:62:32:0e:52:7b:fc:a2:d3:e8:b9:ed:00:96: 38:d8:86:ff:05:89:4f:7c:37:d9:6c:08:41:3b:18:4d:da:04: 15:81:b0:5e:b1:30:21:fd:ec:5d:b5:e2:7f:3f:25:4f:ee:db: f4:36:e2:60 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEuKfNCn2Pxk8WhFZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4NmU0YmItZThiMy00NmY0LThkOWQtOGQyMjYyOTVh OTgyMB4XDTI1MTAxNjEzMDAzOFoXDTI2MDExNDE0MDAzOFowLzEtMCsGA1UEAxMk M2IyMDQwOGYtNDM3MC00NGJkLTlkNGUtODIyN2FhY2ZhMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8ikoPkYb6FzgeGbcs5TX3NsQMc2XNROpNsI bCPA70S26H20q+kAGW85KEq8UPFpjJZIjzxXxYkfDqgodJC3nkfZn4Ft0xatN/qz raIa/Vy7za2To/3VU8aWsFFnAlPNfTQ9pUdZmVECT6UIM1c2+Dcb2xC2QMW2v2+T ZzLRvjtrGCfZPGa4wSjsCNZ/YpW40CQoc2vTIvw5tI7AFBIHwFzKVLs3+28JBrLf a4bKwxRvvxgo1NdKsQy1mowCPdbQwZ7JwhwxsjGKSWPiH537qmWqjGsQVWH7+YJd zQB13Iq+mWxbkIiPzD9hd9ekLmJ1Eg0OH1Ndtfhf8sVXd8JfEwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFPW2pOL7p6NJzNmDih+K/M4bKL/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xODg2 ZTRiYi1lOGIzLTQ2ZjQtOGQ5ZC04ZDIyNjI5NWE5ODIvZDViMTI0ZTktOWI4Yy0z NTMyLWFiNDMtMDMzY2YyYmQwZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTg4NmU0YmItZThiMy00NmY0LThk OWQtOGQyMjYyOTVhOTgyLzE4ODZlNGJiLWU4YjMtNDZmNC04ZDlkLThkMjI2Mjk1 YTk4Mi5jcmwwHwYDVR0jBBgwFoAUW1lGVZiqJDPsZ2izK8q98HjfiUIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xODg2ZTRiYi1lOGIzLTQ2ZjQtOGQ5ZC04ZDIy NjI5NWE5ODIuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF77YAwQA jvmuMA4EAgACMAgDBgQmAvqGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxIu7PyaHyKx9cQ9scwsx1zqgy 1pGE7bl0SyDHgb2pWzMbVOaGszgmFD1V8QVhXDq46Stbkzh6maeIeqfwNRrhBrRG Ftmz0M/8LfgCMQraZRzK6bsg6DS7N2z4BL/uoQddg5aLJ9PhoWIa5aRfTWoZZJ/I +4LbCcz/yuOkX4rtSWF+q1onpz9Vmj7aRFFknPMPnjVPl6fu6CElfFpRbCcljoek 6uh/kHbdMzIumwZ5zNDqtGkU0WjXNxPjlWi9y6mfU7bdSM6V5st82mIyDlJ7/KLT 6LntAJY42Ib/BYlPfDfZbAhBOxhN2gQVgbBesTAh/exdteJ/PyVP7tv0NuJg -----END CERTIFICATE-----Generated at Wed Nov 5 16:23:14 2025 by rpki-client