$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa File: d73dd892-ee55-3262-86e9-4939ca3508af.roa (raw, json) Hash identifier: zSo3K+1VGxHsFzwRub9HghY6bVFMu7wCm03tvaiIS54= Subject key identifier: 10:40:A5:F2:A6:51:C8:DB:DD:DC:B1:69:7B:11:F2:42:4C:40:7E:24 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584AFAB680CB617B4A86909990F0 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 401368 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:80:cb:61:7b:4a:86:90:99:90:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=f1e978c5-5834-4fb4-9c49-a87134f692ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e2:f3:60:15:8d:51:b2:9b:20:ee:98:3f:23: 79:4f:c4:bf:3c:e5:99:33:84:4a:dc:cf:3a:1d:b6: 1e:f1:c1:9e:ce:55:cd:25:fa:71:fb:4d:11:4a:03: d0:0d:45:ed:e9:f1:bd:d0:f8:91:26:19:ff:4c:48: 98:ff:d8:95:d8:f2:ab:ab:da:95:13:c4:0f:2c:f9: b6:0e:85:a9:1d:50:eb:f5:3f:17:0d:ee:f3:14:fa: 02:5f:3f:75:c0:54:ef:84:85:f8:81:af:85:9c:33: 4f:a9:68:9c:92:89:3d:74:90:0e:71:96:12:1b:26: 18:dc:0c:47:84:03:de:c7:bf:22:f2:65:39:dd:e3: 63:6e:90:c6:d3:16:87:4f:ae:30:35:6f:b8:2c:64: 4c:b7:18:d4:49:31:50:25:04:5b:40:c8:67:af:e2: a0:35:af:db:8c:da:8a:dc:ec:a2:e2:08:1f:a6:ad: 2a:a9:df:08:18:46:57:28:8c:2d:41:57:ef:0f:db: d9:59:dd:7f:ef:29:e4:50:85:a1:23:f7:71:79:98: a6:83:89:c9:8c:1c:21:7e:ba:57:61:c6:97:98:46: ed:d1:8a:3e:9b:c5:2e:50:5a:35:80:a1:ba:fc:0e: 88:50:3c:c3:1c:e7:8a:c6:c2:28:77:f8:4e:6f:81: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:40:A5:F2:A6:51:C8:DB:DD:DC:B1:69:7B:11:F2:42:4C:40:7E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:91:63:64:74:29:20:52:ba:33:3c:e3:bf:9c:a2:95:df:6a: fb:b8:4e:fd:3c:12:cd:e3:d1:9b:f6:4d:c3:cf:04:37:99:ae: 3f:21:f7:7a:56:1a:33:7c:56:90:06:d6:fe:f6:77:03:52:d3: 4a:32:4f:6a:94:77:ab:79:c4:7b:ad:c6:b5:01:f8:a4:4a:ee: 7c:b4:49:58:36:dd:da:93:7e:a1:2e:63:11:49:a0:1c:b5:74: 43:32:ad:65:83:f4:98:62:00:32:6c:b4:4d:22:e6:3b:29:dc: b4:37:95:c2:8a:5d:85:f4:bd:3b:60:48:39:f6:46:50:50:1b: e3:72:e8:9f:da:7c:62:51:6f:0c:f9:71:9e:89:60:e9:0c:33: bc:66:37:21:5f:5c:67:41:c3:7d:39:b1:28:1d:af:a5:96:12: ee:70:9a:8d:eb:fe:49:73:c8:4b:d9:72:e0:ae:62:49:39:f7: 61:c6:14:9a:79:7d:0b:df:2e:e6:d0:87:60:09:fc:e3:b3:d1: 1e:6b:14:9d:01:54:f0:55:2e:87:4f:b1:d0:8a:30:b8:07:7a: 29:10:3a:48:65:50:f2:35:52:03:6f:59:61:86:b3:fd:e0:fb: 00:61:cf:11:bb:47:8d:4f:f9:48:57:6f:27:ae:97:01:a7:a3: dc:47:88:bc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr6toDLYXtKhpCZkPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk ZjFlOTc4YzUtNTgzNC00ZmI0LTljNDktYTg3MTM0ZjY5MmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+LzYBWNUbKbIO6YPyN5T8S/POWZM4RK3M86 HbYe8cGezlXNJfpx+00RSgPQDUXt6fG90PiRJhn/TEiY/9iV2PKrq9qVE8QPLPm2 DoWpHVDr9T8XDe7zFPoCXz91wFTvhIX4ga+FnDNPqWickok9dJAOcZYSGyYY3AxH hAPex78i8mU53eNjbpDG0xaHT64wNW+4LGRMtxjUSTFQJQRbQMhnr+KgNa/bjNqK 3Oyi4ggfpq0qqd8IGEZXKIwtQVfvD9vZWd1/7ynkUIWhI/dxeZimg4nJjBwhfrpX YcaXmEbt0Yo+m8UuUFo1gKG6/A6IUDzDHOeKxsIod/hOb4HuGwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBBApfKmUcjb3dyxaXsR8kJMQH4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZDczZGQ4OTItZWU1NS0z MjYyLTg2ZTktNDkzOWNhMzUwOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/kWNkdCkgUrozPOO/nKKV32r7uE79PBLN 49Gb9k3DzwQ3ma4/Ifd6VhozfFaQBtb+9ncDUtNKMk9qlHerecR7rca1AfikSu58 tElYNt3ak36hLmMRSaActXRDMq1lg/SYYgAybLRNIuY7Kdy0N5XCil2F9L07YEg5 9kZQUBvjcuif2nxiUW8M+XGeiWDpDDO8ZjchX1xnQcN9ObEoHa+llhLucJqN6/5J c8hL2XLgrmJJOfdhxhSaeX0L3y7m0IdgCfzjs9EeaxSdAVTwVS6HT7HQijC4B3op EDpIZVDyNVIDb1lhhrP94PsAYc8Ru0eNT/lIV28nrpcBp6PcR4i8 -----END CERTIFICATE-----Generated at Thu Nov 6 01:51:44 2025 by rpki-client