$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa File: 129c3d36-47e7-391c-9b2e-a0052216f38b.roa (raw, json) Hash identifier: pLywCtnEKK5rWQ47kCqm99NFOEFJEyZ8CAK3dapBJcA= Subject key identifier: CA:08:6E:C8:D8:55:BE:5B:1D:3B:D4:37:85:92:1D:7A:1B:AE:72:9E Certificate issuer: /CN=659c51b6-b1ff-426e-a5f4-86f155c1d9e4 Certificate serial: 010D0C9F4328584AECC13EBA066BE081677941C0 Authority key identifier: E0:D0:FA:24:C3:E0:AA:78:B6:32:9F:9B:E4:F8:01:E0:46:A6:19:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 400970 IP address blocks: 23.152.248.0/24 maxlen: 24 2602:2d2::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:3e:ba:06:6b:e0:81:67:79:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=659c51b6-b1ff-426e-a5f4-86f155c1d9e4 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=49808f95-14cc-45cb-a1ec-8ccb1e5aebf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:b1:f2:65:b9:fe:ee:41:8e:0b:05:4c:36: b8:37:bf:66:2a:29:c7:d6:f4:62:c0:54:e2:18:90: 21:d6:84:b8:a1:a3:32:3b:fb:c2:73:dc:2b:bc:68: bf:d5:1e:4d:9d:f7:51:e7:7a:01:c3:e6:27:d0:de: 41:3b:b9:5a:f0:8a:82:50:37:1e:34:2f:71:e2:72: 88:f1:d5:3b:83:70:c3:30:a7:83:88:04:07:f0:d4: 4e:9f:6d:9b:71:e5:b3:9d:67:d6:b0:99:81:49:3a: db:ea:6b:07:aa:f3:1c:77:26:93:ea:7b:59:91:8b: be:b3:2b:a2:b8:37:fc:0c:8c:69:a5:6a:41:4f:15: cf:d7:ab:9b:e8:b0:00:5f:c6:8b:ce:df:07:db:67: 98:b4:72:c8:f8:10:fa:b4:ef:91:f5:cd:35:be:75: 96:44:d4:bd:5f:63:e3:b7:38:d0:00:49:b6:87:4c: 20:0e:4e:34:14:70:f7:10:46:ba:5a:c1:2d:ec:9f: 1e:25:48:3b:87:a1:04:ee:c1:90:f7:2b:89:39:d9: 61:71:e1:6b:1c:41:05:90:af:7e:e0:3b:a8:54:fb: 01:5c:a2:ac:11:37:26:aa:df:30:f0:8e:24:13:46: a6:84:05:28:14:fc:3f:81:89:5e:e0:db:36:f6:2b: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:6E:C8:D8:55:BE:5B:1D:3B:D4:37:85:92:1D:7A:1B:AE:72:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.crl X509v3 Authority Key Identifier: keyid:E0:D0:FA:24:C3:E0:AA:78:B6:32:9F:9B:E4:F8:01:E0:46:A6:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer sbgp-ipAddrBlock: critical IPv4: 23.152.248.0/24 IPv6: 2602:2d2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a3:fe:c2:b5:38:3f:de:eb:15:43:4e:52:7b:4b:3d:bb:2e: ca:d9:ac:0b:dc:98:91:e6:97:d2:fb:7d:9d:58:c5:b2:56:fb: 2c:f2:8c:12:93:c7:3f:8d:78:cf:cf:e2:c2:1d:3f:02:24:46: cd:68:a7:a1:fc:f9:d6:86:3c:a1:c7:5b:41:a3:f6:4d:5c:42: 28:ae:cd:62:ad:9e:0d:70:05:a0:b6:50:cd:0a:d9:7b:89:be: d6:7c:d4:e2:09:88:1e:a1:a5:db:13:4c:6f:c0:62:aa:9b:33: 5b:4a:0e:72:be:16:15:f8:4d:e9:ca:43:3e:8d:ad:22:85:f8: b1:76:94:b4:97:31:a5:f4:b5:f1:15:9d:6e:7b:45:2f:68:c0: 05:c7:61:e5:64:f9:5c:ed:be:bc:ae:b9:cf:30:30:42:26:f1: f0:99:63:79:a5:54:52:76:a1:c4:ab:99:ab:a7:b3:de:12:5b: db:bc:cb:f5:af:6d:4c:85:b9:2c:19:58:f0:71:cd:2a:cc:50: ce:b9:ea:da:89:6b:fa:5b:08:bc:26:39:c0:31:46:74:8d:2a: ad:b3:0a:69:13:5e:bf:53:6c:8c:20:cb:0a:e1:f3:ee:17:7e: cf:f1:fa:f6:f2:59:0c:45:9b:dd:a6:e2:b3:7e:ed:7e:fa:e5: 40:98:d2:61 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErswT66BmvggWd5QcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU5YzUxYjYtYjFmZi00MjZlLWE1ZjQtODZmMTU1YzFk OWU0MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk NDk4MDhmOTUtMTRjYy00NWNiLWExZWMtOGNjYjFlNWFlYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhix8mW5/u5BjgsFTDa4N79mKinH1vRiwFTi GJAh1oS4oaMyO/vCc9wrvGi/1R5NnfdR53oBw+Yn0N5BO7la8IqCUDceNC9x4nKI 8dU7g3DDMKeDiAQH8NROn22bceWznWfWsJmBSTrb6msHqvMcdyaT6ntZkYu+syui uDf8DIxppWpBTxXP16ub6LAAX8aLzt8H22eYtHLI+BD6tO+R9c01vnWWRNS9X2Pj tzjQAEm2h0wgDk40FHD3EEa6WsEt7J8eJUg7h6EE7sGQ9yuJOdlhceFrHEEFkK9+ 4DuoVPsBXKKsETcmqt8w8I4kE0amhAUoFPw/gYle4Ns29itO7QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMoIbsjYVb5bHTvUN4WSHXobrnKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NTlj NTFiNi1iMWZmLTQyNmUtYTVmNC04NmYxNTVjMWQ5ZTQvMTI5YzNkMzYtNDdlNy0z OTFjLTliMmUtYTAwNTIyMTZmMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjU5YzUxYjYtYjFmZi00MjZlLWE1 ZjQtODZmMTU1YzFkOWU0LzY1OWM1MWI2LWIxZmYtNDI2ZS1hNWY0LTg2ZjE1NWMx ZDllNC5jcmwwHwYDVR0jBBgwFoAU4ND6JMPgqni2Mp+b5PgB4EamGSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NTljNTFiNi1iMWZmLTQyNmUtYTVmNC04NmYx NTVjMWQ5ZTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5j4MA4E AgACMAgDBgQmAgLSADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUo/7CtTg/3usVQ05Se0s9uy7K2awL3JiR 5pfS+32dWMWyVvss8owSk8c/jXjPz+LCHT8CJEbNaKeh/PnWhjyhx1tBo/ZNXEIo rs1irZ4NcAWgtlDNCtl7ib7WfNTiCYgeoaXbE0xvwGKqmzNbSg5yvhYV+E3pykM+ ja0ihfixdpS0lzGl9LXxFZ1ue0UvaMAFx2HlZPlc7b68rrnPMDBCJvHwmWN5pVRS dqHEq5mrp7PeElvbvMv1r21MhbksGVjwcc0qzFDOueraiWv6Wwi8JjnAMUZ0jSqt swppE16/U2yMIMsK4fPuF37P8fr28lkMRZvdpuKzfu1++uVAmNJh -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:17 2025 by rpki-client