$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa File: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json) Hash identifier: wrLZMg0HvXOBhCDfSZZ45dojZD/EJ096GYzGbzPbS3M= Subject key identifier: F3:80:DD:2B:44:2D:EA:73:0F:52:55:69:EF:DF:48:3B:64:12:77:02 Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Certificate serial: 010D0C9F4328584B9CA230109EB9D2D203F46D00 Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 20067 IP address blocks: 23.148.8.0/24 maxlen: 24 2602:811:c000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:30:10:9e:b9:d2:d2:03:f4:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=ee788939-f805-46ee-ba28-36f2dd3fc00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ff:51:b8:37:c1:56:64:c9:35:21:9f:20:5f: bd:ea:83:91:4f:62:20:d4:94:ef:72:b4:a8:1f:86: 7d:70:c5:a7:a4:c4:5d:b4:29:75:1c:4c:42:d8:10: a6:6e:3e:2f:a8:eb:a3:9b:68:aa:94:56:89:9b:12: 8c:d1:81:cb:32:33:72:b9:1d:81:37:45:b4:27:ea: a8:42:d7:f4:b4:a9:ee:b5:2a:e2:66:3d:10:db:86: 01:03:09:c5:97:28:80:0c:b6:13:6d:20:7f:fe:14: 5b:c7:2b:d0:7d:3e:31:78:c0:c1:fc:37:61:b5:45: e0:8f:c5:d9:76:fe:e9:f8:bf:ce:3e:8e:f3:17:ab: 4c:c2:53:53:3c:2e:e7:6c:d0:55:5e:66:90:fc:73: e5:9b:91:70:18:af:d0:6a:ec:3c:6d:d7:67:cc:99: 85:32:75:d3:f7:b5:1c:e2:dd:83:31:ec:97:c3:09: e3:83:1e:5d:bc:d2:59:10:da:f2:fb:db:fa:76:39: 11:e8:be:cd:05:27:04:7e:5b:5c:51:23:e1:dd:35: 63:66:b3:44:e3:c9:75:56:1d:fb:2d:45:b2:55:53: 7d:9d:24:2e:23:22:22:19:b9:05:da:74:86:1b:e2: 7a:7f:73:ec:58:b4:83:96:a7:d3:d1:7b:1b:8d:09: d8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:80:DD:2B:44:2D:EA:73:0F:52:55:69:EF:DF:48:3B:64:12:77:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl X509v3 Authority Key Identifier: keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer sbgp-ipAddrBlock: critical IPv4: 23.148.8.0/24 IPv6: 2602:811:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:93:ae:73:b0:56:c6:c5:8e:a4:19:b2:ce:4d:e6:9d:76:99: cb:f8:be:c1:c0:ad:51:89:2d:ad:5f:cf:23:59:ec:e2:85:e4: a3:d6:be:64:fc:52:bd:24:ae:b7:c0:67:cf:15:1c:85:df:35: ef:51:12:60:43:bc:ae:c4:9b:09:4a:60:38:c6:b0:58:b5:45: 20:3a:b8:f5:dd:5a:a3:49:17:17:b8:b8:2f:16:4a:27:44:28: bc:ac:3a:90:5e:dc:ce:3d:75:aa:8a:82:d0:48:c3:6b:88:04: e5:39:7c:e5:84:e4:49:6d:78:a1:bb:01:a8:7e:96:f3:51:92: 15:74:b6:5c:33:35:55:36:d3:04:06:36:14:ca:9b:67:06:98: 6c:ae:29:a5:a5:c5:20:1e:72:c7:ee:a9:61:19:3e:13:6f:cd: 8d:67:b6:c0:9b:f4:6b:2c:81:ea:69:86:e8:ed:9e:96:90:ab: cd:0b:cd:97:55:8e:25:6a:1a:e9:bb:68:5e:55:77:63:31:ff: b6:62:fd:77:33:3d:25:5d:ad:5f:3e:6d:ad:6e:2a:05:04:f3: 93:4b:b6:a1:03:e3:8b:d0:3c:25:75:1e:94:55:87:60:9a:42: bc:3a:d3:9f:0c:1d:9f:ad:bf:be:20:39:4d:30:90:54:54:e8: b0:20:ad:5f -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEucojAQnrnS0gP0bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY3ODg1ZjItNWIxNC00ZGVkLWIyZGQtN2JlZmUyMTVk YjA3MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWU3ODg5MzktZjgwNS00NmVlLWJhMjgtMzZmMmRkM2ZjMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf9RuDfBVmTJNSGfIF+96oORT2Ig1JTvcrSo H4Z9cMWnpMRdtCl1HExC2BCmbj4vqOujm2iqlFaJmxKM0YHLMjNyuR2BN0W0J+qo Qtf0tKnutSriZj0Q24YBAwnFlyiADLYTbSB//hRbxyvQfT4xeMDB/DdhtUXgj8XZ dv7p+L/OPo7zF6tMwlNTPC7nbNBVXmaQ/HPlm5FwGK/Qauw8bddnzJmFMnXT97Uc 4t2DMeyXwwnjgx5dvNJZENry+9v6djkR6L7NBScEfltcUSPh3TVjZrNE48l1Vh37 LUWyVVN9nSQuIyIiGbkF2nSGG+J6f3PsWLSDlqfT0XsbjQnYuwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPOA3StELepzD1JVae/fSDtkEncCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZjc4 ODVmMi01YjE0LTRkZWQtYjJkZC03YmVmZTIxNWRiMDcvNWNjNjU3ODktZTAwNi0z YWE0LWFiNWItMzE2MDNiYTQ4ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWY3ODg1ZjItNWIxNC00ZGVkLWIy ZGQtN2JlZmUyMTVkYjA3L2FmNzg4NWYyLTViMTQtNGRlZC1iMmRkLTdiZWZlMjE1 ZGIwNy5jcmwwHwYDVR0jBBgwFoAUvTSRSrAbYBKqzqEtwWTJvL7lYbAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZjc4ODVmMi01YjE0LTRkZWQtYjJkZC03YmVm ZTIxNWRiMDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5QIMA8E AgACMAkDBwQmAggRwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADpOuc7BWxsWOpBmyzk3mnXaZy/i+wcCt UYktrV/PI1ns4oXko9a+ZPxSvSSut8BnzxUchd8171ESYEO8rsSbCUpgOMawWLVF IDq49d1ao0kXF7i4LxZKJ0QovKw6kF7czj11qoqC0EjDa4gE5Tl85YTkSW14obsB qH6W81GSFXS2XDM1VTbTBAY2FMqbZwaYbK4ppaXFIB5yx+6pYRk+E2/NjWe2wJv0 ayyB6mmG6O2elpCrzQvNl1WOJWoa6btoXlV3YzH/tmL9dzM9JV2tXz5trW4qBQTz k0u2oQPji9A8JXUelFWHYJpCvDrTnwwdn62/viA5TTCQVFTosCCtXw== -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:54 2025 by rpki-client