$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa File: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json) Hash identifier: nggQM9isGwW1yLkKvW7Qm9KI9x6WkZUV4QYEzSI0K9Y= Subject key identifier: B5:F7:E2:D0:79:50:2B:8C:FF:CF:7E:94:49:C2:9C:ED:57:4F:00:BD Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584BA93273DBB4249E6D0C707180 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 396500 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:73:db:b4:24:9e:6d:0c:70:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f011cdbe-7635-44a9-a36d-e0e0ef605284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:c4:35:e4:a1:0e:cb:2b:16:d2:d5:5a:ee: 9c:c1:a0:5c:06:f6:bf:b5:b6:97:42:d1:4d:82:97: a6:e9:a7:8a:d5:2d:44:e3:29:60:73:7c:80:1c:cd: 68:b5:3a:57:88:b5:54:92:c9:eb:0b:f7:e6:42:86: 2c:8f:3f:e1:ae:3d:78:b8:80:96:36:5d:f5:8b:1a: 20:3b:6e:6a:74:82:1e:82:23:8f:e8:d9:0d:ad:bd: 85:03:10:b4:5e:cb:43:9a:0b:8d:0c:27:8b:d7:28: ac:f9:b1:26:e0:f9:55:f2:5c:f6:0d:f6:8e:9f:0a: 05:c4:ba:5b:60:bd:75:a4:bd:6e:52:9e:ec:95:94: 68:92:a5:5d:96:7d:dc:11:f6:91:43:ed:04:bb:f4: a8:c1:dc:7f:63:17:dd:09:68:ad:07:89:6a:dd:73: 6d:b9:06:b2:e7:a4:6a:71:1b:06:4c:87:d2:ad:3e: 68:ed:c1:dd:98:78:77:37:02:f3:6d:52:8d:1d:20: ef:01:90:cd:3a:1d:8b:14:39:1b:c9:f5:71:42:33: c4:48:ad:f1:7d:53:4a:ca:c0:1b:98:e7:77:6d:4a: 40:9c:f1:7f:d0:8d:61:a9:7e:df:b7:5d:60:76:8d: de:f3:10:f4:49:9b:46:c1:f6:f8:89:6e:87:10:27: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F7:E2:D0:79:50:2B:8C:FF:CF:7E:94:49:C2:9C:ED:57:4F:00:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3d:cd:53:4e:7f:ff:76:ba:dc:2b:3b:51:4b:f5:07:8c:89: 5b:0c:5b:e3:dd:b9:05:75:9a:49:2b:e7:60:bd:8f:9b:0e:f4: 9c:7d:fa:fd:53:db:84:a3:d2:5c:e9:a9:cb:24:2a:be:27:32: 55:1c:fc:05:dc:c0:1f:8d:50:cb:87:3e:ee:f0:7f:fa:6f:84: 2e:7c:6f:39:97:1b:65:35:b7:cc:f9:b0:09:ee:50:a1:9c:e6: 3a:40:71:bd:e8:7f:a5:f9:09:33:58:b7:aa:69:9f:a8:c9:0d: a0:bd:b8:9b:ec:20:51:15:93:73:d8:ca:4c:94:3e:95:85:89: 08:bf:40:4c:87:67:ad:9d:ed:51:ab:49:7a:8b:d8:e2:a3:43: 70:bb:9b:0b:23:04:80:2b:f9:5f:81:0f:0a:bd:47:fc:c1:fd: f2:da:03:ec:ca:cb:0e:ed:e7:7e:f7:b1:53:8b:13:8f:81:95: 50:5d:dc:0e:c3:b4:87:1a:42:b4:8d:4b:53:51:de:f4:6b:35: 7b:4e:4f:70:6f:09:19:21:3a:87:2b:6f:ff:f1:b9:77:11:a2: 82:73:73:18:77:44:e3:0a:28:b1:c4:93:bf:d2:7e:f3:67:19: 4d:23:92:20:56:e9:91:9b:e4:7e:95:0f:d7:b4:41:ff:74:cc: 18:25:87:6e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEupMnPbtCSebQxwcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjAxMWNkYmUtNzYzNS00NGE5LWEzNmQtZTBlMGVmNjA1Mjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaPENeShDssrFtLVWu6cwaBcBva/tbaXQtFN gpem6aeK1S1E4ylgc3yAHM1otTpXiLVUksnrC/fmQoYsjz/hrj14uICWNl31ixog O25qdIIegiOP6NkNrb2FAxC0XstDmguNDCeL1yis+bEm4PlV8lz2DfaOnwoFxLpb YL11pL1uUp7slZRokqVdln3cEfaRQ+0Eu/Sowdx/YxfdCWitB4lq3XNtuQay56Rq cRsGTIfSrT5o7cHdmHh3NwLzbVKNHSDvAZDNOh2LFDkbyfVxQjPESK3xfVNKysAb mOd3bUpAnPF/0I1hqX7ft11gdo3e8xD0SZtGwfb4iW6HECfD6wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLX34tB5UCuM/89+lEnCnO1XTwC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvYTk4MWMxMTEtMzM0MS0z ZjczLTg1ZWMtM2U5ZjViOGQyNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0Pc1TTn//drrcKztRS/UHjIlbDFvj3bkF dZpJK+dgvY+bDvScffr9U9uEo9Jc6anLJCq+JzJVHPwF3MAfjVDLhz7u8H/6b4Qu fG85lxtlNbfM+bAJ7lChnOY6QHG96H+l+QkzWLeqaZ+oyQ2gvbib7CBRFZNz2MpM lD6VhYkIv0BMh2etne1Rq0l6i9jio0Nwu5sLIwSAK/lfgQ8KvUf8wf3y2gPsyssO 7ed+97FTixOPgZVQXdwOw7SHGkK0jUtTUd70azV7Tk9wbwkZITqHK2//8bl3EaKC c3MYd0TjCiixxJO/0n7zZxlNI5IgVumRm+R+lQ/XtEH/dMwYJYdu -----END CERTIFICATE-----Generated at Thu Nov 6 01:51:45 2025 by rpki-client