$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa File: 4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json) Hash identifier: G7xg8NUAoGb6t+HBJgG7T8DdrNKrpvr/eA0fWEyuh3U= Subject key identifier: 5B:D2:78:08:0F:84:58:DE:A8:E0:6C:19:9E:F6:FF:6C:4E:A7:49:78 Certificate issuer: /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Certificate serial: 010D0C9F4328584BA39D1F476CCB151376646380 Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 394875 IP address blocks: 52.144.25.0/24 maxlen: 24 2620:f9:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1f:47:6c:cb:15:13:76:64:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=dc5da28f-7de5-4de1-9678-2b4737933f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a9:42:72:e5:86:f6:f3:e7:9b:34:ba:21:38: d4:5f:30:a8:00:3a:39:3c:4d:41:94:e8:d9:a3:5e: 26:5a:eb:cc:4f:4d:dd:a2:9d:a6:72:86:06:ce:31: c6:39:41:fc:cb:1c:5a:8f:d1:b9:6f:4c:cd:38:d3: f9:18:68:22:b2:ee:1d:c5:9e:1b:33:3b:14:95:55: 25:f8:2b:d4:60:dc:28:06:a3:10:b2:7b:1b:a0:b5: 0d:58:54:b0:a2:19:4f:b1:4b:12:e5:76:86:3a:98: 01:f6:2c:e5:e7:33:5f:bd:f6:3b:62:76:bc:99:e2: 9c:8b:51:d3:3b:43:74:af:c6:f5:c3:9f:8b:f7:77: 5f:0d:cd:d7:64:e7:2b:51:66:3b:dc:22:e1:21:17: 6b:81:87:68:31:f5:ad:d8:67:6a:00:de:9c:3f:95: 57:6e:6d:63:d6:27:07:4f:44:47:57:ce:e6:5a:a2: b6:b3:85:80:75:37:70:15:df:f5:71:20:0a:a2:8e: b3:ea:1e:d8:8b:f5:af:9c:e8:c0:cd:21:9d:51:5f: 39:d1:87:0d:41:55:38:17:8d:4a:16:71:33:ef:b6: d0:ac:fb:4a:33:dd:ac:83:84:8b:b9:70:b1:41:ec: c1:43:f4:83:43:de:32:be:2c:ae:f1:9e:d5:89:c1: c8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D2:78:08:0F:84:58:DE:A8:E0:6C:19:9E:F6:FF:6C:4E:A7:49:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl X509v3 Authority Key Identifier: keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer sbgp-ipAddrBlock: critical IPv4: 52.144.25.0/24 IPv6: 2620:f9:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:50:b8:58:be:ae:96:ec:3a:36:3d:24:76:3e:c7:9c:01:5a: da:a4:16:75:4d:da:15:10:0d:f3:98:3d:4d:5e:98:1c:31:f4: 59:10:05:41:8b:96:1d:eb:0b:f3:9c:5f:d2:2d:4b:43:a0:ac: 26:2e:9a:ea:4f:6f:fe:32:4c:bd:d7:e5:11:6d:4f:e5:7e:27: df:e6:0d:43:60:38:80:9b:25:8e:1a:09:54:a9:98:bc:66:53: b8:51:76:ff:41:5d:a1:19:1a:a5:93:2d:18:35:c7:eb:25:f4: 55:b3:5d:67:e9:cb:43:53:fd:cf:39:ef:b0:56:5e:08:65:1a: 9a:d4:f2:cb:f8:ae:e3:1a:9f:7d:2e:76:1e:34:8c:29:b3:60: 48:98:dc:99:8e:1c:52:dd:08:7d:b9:c2:81:dc:93:67:bb:8a: ca:f1:23:f4:e8:22:c2:fe:3a:09:54:c7:58:ca:95:7a:af:0f: 23:cc:7b:ee:54:50:b2:e2:d2:c1:38:50:6d:d3:e5:19:ca:8c: 83:21:db:f5:8e:f3:f6:8d:72:84:83:1b:9c:a3:c1:cc:d6:ce: dd:61:c2:99:b7:ee:33:20:5d:3d:4b:2c:54:ce:52:3a:5f:58: 35:c2:f3:51:53:3e:f3:e1:31:7a:7c:07:1c:98:c5:c2:29:cd: e9:d8:74:a3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEujnR9HbMsVE3ZkY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ2MDMzNmItNGIzYy00OWViLWJmZDctZDk4MDNmN2Jh ZDZiMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGM1ZGEyOGYtN2RlNS00ZGUxLTk2NzgtMmI0NzM3OTMzZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5alCcuWG9vPnmzS6ITjUXzCoADo5PE1BlOjZ o14mWuvMT03dop2mcoYGzjHGOUH8yxxaj9G5b0zNONP5GGgisu4dxZ4bMzsUlVUl +CvUYNwoBqMQsnsboLUNWFSwohlPsUsS5XaGOpgB9izl5zNfvfY7Yna8meKci1HT O0N0r8b1w5+L93dfDc3XZOcrUWY73CLhIRdrgYdoMfWt2GdqAN6cP5VXbm1j1icH T0RHV87mWqK2s4WAdTdwFd/1cSAKoo6z6h7Yi/WvnOjAzSGdUV850YcNQVU4F41K FnEz77bQrPtKM92sg4SLuXCxQezBQ/SDQ94yviyu8Z7VicHISwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFvSeAgPhFjeqOBsGZ72/2xOp0l4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYw MzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgwM2Y3YmFkNmIvNGNlZDYzODYtNGRhMS0z ZTRiLWE5MjctZGI0NGE5YWQyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MDMzNmItNGIzYy00OWViLWJm ZDctZDk4MDNmN2JhZDZiLzhkNjAzMzZiLTRiM2MtNDllYi1iZmQ3LWQ5ODAzZjdi YWQ2Yi5jcmwwHwYDVR0jBBgwFoAUhr5+KeF+Vnlp76h7dzy4ixjTKaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYwMzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgw M2Y3YmFkNmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQANJAZMA8E AgACMAkDBwAmIAD5QAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASlC4WL6uluw6Nj0kdj7HnAFa2qQWdU3a FRAN85g9TV6YHDH0WRAFQYuWHesL85xf0i1LQ6CsJi6a6k9v/jJMvdflEW1P5X4n 3+YNQ2A4gJsljhoJVKmYvGZTuFF2/0FdoRkapZMtGDXH6yX0VbNdZ+nLQ1P9zznv sFZeCGUamtTyy/iu4xqffS52HjSMKbNgSJjcmY4cUt0IfbnCgdyTZ7uKyvEj9Ogi wv46CVTHWMqVeq8PI8x77lRQsuLSwThQbdPlGcqMgyHb9Y7z9o1yhIMbnKPBzNbO 3WHCmbfuMyBdPUssVM5SOl9YNcLzUVM+8+ExenwHHJjFwinN6dh0ow== -----END CERTIFICATE-----Generated at Wed Nov 5 19:13:16 2025 by rpki-client