$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa File: 91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa (raw, json) Hash identifier: ebVzusDdgZ3HT2WFvlhyzYjPIiaEcKOiCHY1tsGwhEE= Subject key identifier: DB:BB:B1:98:25:BE:D4:61:51:E4:55:D9:E5:76:82:EC:52:6B:68:B5 Certificate issuer: /CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Certificate serial: 010D0C9F4328584B95A79B0EC9A01C64389FB678 Authority key identifier: 96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 55077 IP address blocks: 23.128.208.0/24 maxlen: 24 103.25.230.0/24 maxlen: 24 104.36.4.0/22 maxlen: 22 198.44.204.0/22 maxlen: 22 2602:ff31::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9b:0e:c9:a0:1c:64:38:9f:b6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aeb4dac-8911-4f44-9f24-1f5081193043 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f6720c61-2037-48b9-bcd9-a65f0af0a441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6d:c0:b0:27:40:98:04:71:b4:e7:95:6c:78: 0b:97:60:24:7d:68:91:50:87:d9:4b:7b:ca:01:c5: f2:7c:86:56:4b:f4:ab:57:db:00:1b:d5:9b:28:63: 14:a7:e7:3f:ee:fc:a2:3c:0c:07:e7:6a:51:2b:ef: 40:e3:84:94:c6:54:71:54:43:2a:82:7c:97:d6:bf: cf:5c:36:c3:74:59:e0:84:ad:50:cb:b1:60:39:c8: 43:83:31:36:d4:aa:99:af:0b:08:f5:2e:bc:1b:74: 93:16:38:62:42:f0:37:c2:01:78:ea:3f:30:64:59: 83:6f:cb:56:e3:3f:97:1a:46:cd:c3:da:ab:ea:df: 57:e4:ae:3d:a9:75:ef:e4:b6:4d:00:31:07:1e:25: 5b:2d:85:bf:cc:f1:25:ab:c6:3c:43:fc:67:88:60: b7:90:38:cd:74:65:c9:0f:56:00:99:f9:cb:97:e2: 19:e4:e1:f4:a3:6e:5a:08:58:c2:92:65:bd:81:25: a6:20:a0:05:43:0d:c8:1a:99:44:74:10:16:a7:12: 8f:d2:60:ba:4c:a6:c6:0f:c6:a5:56:c2:d2:5d:c0: 18:96:04:5b:ab:ec:c6:1b:09:23:0c:15:a7:ec:b0: 96:6c:a7:0c:bf:48:11:74:2a:6e:1c:13:98:11:a4: a0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BB:B1:98:25:BE:D4:61:51:E4:55:D9:E5:76:82:EC:52:6B:68:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/91ec1b9a-5318-3b0b-8d0d-18183e71e924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043/3aeb4dac-8911-4f44-9f24-1f5081193043.crl X509v3 Authority Key Identifier: keyid:96:FF:31:79:24:B5:E1:3A:74:B0:00:4D:50:56:C3:6D:12:47:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3aeb4dac-8911-4f44-9f24-1f5081193043.cer sbgp-ipAddrBlock: critical IPv4: 23.128.208.0/24 103.25.230.0/24 104.36.4.0/22 198.44.204.0/22 IPv6: 2602:ff31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:70:1d:4d:84:23:8a:1c:b3:2d:d6:51:d0:af:a7:e7:70:41: 73:b6:11:34:86:41:d3:3b:fa:8a:bb:de:6a:4e:4c:f1:fa:bd: 5f:b3:f1:57:7d:84:ce:64:a8:eb:4d:cc:7a:b7:db:2a:26:f2: a5:ae:89:b1:71:88:bf:ee:30:7e:f9:57:95:84:87:07:e6:22: 93:01:9a:0d:2f:10:5c:b2:94:63:f9:e2:d5:b8:a4:d0:84:af: 66:f6:0c:4d:14:2e:1a:6e:61:e8:2b:27:a7:c6:b1:6c:d0:4d: 88:94:8e:e7:84:0b:d4:25:d7:71:06:9c:75:af:87:d8:4b:db: 21:90:bc:17:90:7b:11:21:09:64:c9:c1:16:61:d6:92:5d:29: be:4e:31:94:dc:3b:1a:99:2d:98:f0:1b:12:34:84:f8:6b:ea: 20:5b:ad:41:fc:30:9d:0d:f3:ba:fc:4c:1e:52:f2:99:84:49: df:cd:f2:cf:51:f0:c2:ed:ef:3e:55:9e:06:b1:95:42:1c:b8: fb:b8:86:f4:8a:2e:b5:ae:6a:9b:fe:40:80:1d:f8:59:82:b1: d7:ac:63:39:dd:8f:bb:5a:55:ea:6b:75:19:41:ce:cc:1b:d0: 2a:86:44:ae:5f:ae:1b:88:7d:42:51:4f:51:aa:ba:9e:c7:ba: cc:f5:f3:f6 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEuVp5sOyaAcZDiftngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlYjRkYWMtODkxMS00ZjQ0LTlmMjQtMWY1MDgxMTkz MDQzMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjY3MjBjNjEtMjAzNy00OGI5LWJjZDktYTY1ZjBhZjBhNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj23AsCdAmARxtOeVbHgLl2AkfWiRUIfZS3vK AcXyfIZWS/SrV9sAG9WbKGMUp+c/7vyiPAwH52pRK+9A44SUxlRxVEMqgnyX1r/P XDbDdFnghK1Qy7FgOchDgzE21KqZrwsI9S68G3STFjhiQvA3wgF46j8wZFmDb8tW 4z+XGkbNw9qr6t9X5K49qXXv5LZNADEHHiVbLYW/zPElq8Y8Q/xniGC3kDjNdGXJ D1YAmfnLl+IZ5OH0o25aCFjCkmW9gSWmIKAFQw3IGplEdBAWpxKP0mC6TKbGD8al VsLSXcAYlgRbq+zGGwkjDBWn7LCWbKcMv0gRdCpuHBOYEaSg9QIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFNu7sZglvtRhUeRV2eV2guxSa2i1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYWVi NGRhYy04OTExLTRmNDQtOWYyNC0xZjUwODExOTMwNDMvOTFlYzFiOWEtNTMxOC0z YjBiLThkMGQtMTgxODNlNzFlOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2FlYjRkYWMtODkxMS00ZjQ0LTlm MjQtMWY1MDgxMTkzMDQzLzNhZWI0ZGFjLTg5MTEtNGY0NC05ZjI0LTFmNTA4MTE5 MzA0My5jcmwwHwYDVR0jBBgwFoAUlv8xeSS14Tp0sABNUFbDbRJHXp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYWViNGRhYy04OTExLTRmNDQtOWYyNC0xZjUw ODExOTMwNDMuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQAF4DQAwQA ZxnmAwQCaCQEAwQCxizMMA4EAgACMAgDBgQmAv8xADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbcB1NhCOK HLMt1lHQr6fncEFzthE0hkHTO/qKu95qTkzx+r1fs/FXfYTOZKjrTcx6t9sqJvKl romxcYi/7jB++VeVhIcH5iKTAZoNLxBcspRj+eLVuKTQhK9m9gxNFC4abmHoKyen xrFs0E2IlI7nhAvUJddxBpx1r4fYS9shkLwXkHsRIQlkycEWYdaSXSm+TjGU3Dsa mS2Y8BsSNIT4a+ogW61B/DCdDfO6/EweUvKZhEnfzfLPUfDC7e8+VZ4GsZVCHLj7 uIb0ii61rmqb/kCAHfhZgrHXrGM53Y+7WlXqa3UZQc7MG9AqhkSuX64biH1CUU9R qrqex7rM9fP2 -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:02 2025 by rpki-client