$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa File: 295d13d7-99ef-33dd-a625-3a2596a0f75d.roa (raw, json) Hash identifier: 5JZ40ENj/5kfKJVsULi7vGiBXGFBUt2fE+6XmYaU3Xk= Subject key identifier: 11:48:AA:6D:7B:07:CE:19:6D:06:CD:F8:0D:E5:A5:80:F8:4B:E5:16 Certificate issuer: /CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Certificate serial: 010D0C9F4328584AF7EBD8274BFF5B9131D798C0 Authority key identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 401010 IP address blocks: 23.148.136.0/24 maxlen: 24 130.51.77.0/24 maxlen: 24 2602:face::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d8:27:4b:ff:5b:91:31:d7:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=be6bb5ab-9e5a-4beb-ba7e-939c4e953279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e4:e5:ce:78:82:48:3b:82:16:be:8f:de:90: 4f:7e:82:ea:37:61:dc:58:7b:a1:31:8a:08:1e:db: 19:83:5f:56:e6:05:2a:5f:ba:3c:54:f7:4b:7d:c1: f7:90:23:84:5a:37:b5:b8:bc:9b:5c:20:e5:6c:84: 27:15:4f:6b:af:a2:9a:a6:7c:54:ec:2b:a3:31:19: e5:5d:5f:83:9a:c7:5a:42:ce:e0:59:ee:40:f5:c8: 96:66:bd:58:bc:13:0d:71:46:21:52:19:bd:6e:3d: 83:e6:6c:8d:8e:c9:32:a4:43:54:0d:7c:02:4f:b4: 32:e4:6a:a6:61:bc:93:be:c6:76:19:b0:82:8a:84: bc:a5:64:08:1f:a9:40:94:8e:4b:a4:5c:4d:cb:ee: 64:fe:cb:dc:b3:8f:af:29:0b:3b:45:e8:5b:f8:05: 55:95:4d:5d:75:52:50:82:b4:cc:16:79:81:28:66: f0:4d:7a:18:86:e5:ef:06:0c:66:6d:ee:53:2e:0a: 51:28:77:b1:03:66:1b:d8:98:cf:6c:2b:62:41:50: 62:7a:2e:63:90:df:b2:2c:7e:02:2f:fa:35:82:68: 2a:78:24:49:30:c2:52:94:30:f5:11:9a:98:d6:19: 28:cb:53:2c:15:8d:d3:5f:74:9c:c7:a8:a8:41:f8: 53:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:48:AA:6D:7B:07:CE:19:6D:06:CD:F8:0D:E5:A5:80:F8:4B:E5:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl X509v3 Authority Key Identifier: keyid:A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer sbgp-ipAddrBlock: critical IPv4: 23.148.136.0/24 130.51.77.0/24 IPv6: 2602:face::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c4:c0:36:4f:3a:31:07:70:aa:a7:c9:db:eb:7c:22:59:01: 27:bf:8a:97:4f:0d:b1:36:93:60:a8:1b:e0:cb:82:68:7d:4c: 11:0e:ed:f3:0a:a1:86:39:51:d7:d4:c1:ba:b2:56:e3:65:66: 69:a8:de:6d:40:d7:04:b4:97:a8:24:55:2b:3d:b1:2d:60:51: 44:d3:39:ea:65:6a:b3:8a:69:4d:8f:78:e5:5b:74:dc:83:df: c2:bc:22:f3:5f:0e:22:4f:58:a2:ab:dd:73:cb:f9:46:f9:20: 24:7f:3b:c9:b4:40:c1:98:dc:04:ff:23:4d:76:87:a6:9d:73: 52:48:b0:49:4b:59:6a:32:26:15:bf:49:d7:44:ac:0a:98:3b: cb:48:57:93:82:a0:97:4b:74:8f:93:ea:e3:fa:5b:06:1e:11: 34:dc:11:42:ab:1d:31:0e:06:36:08:d6:4a:8a:69:7d:b1:27: c5:74:8b:2c:0b:54:ff:f2:0a:67:76:27:50:73:e6:3a:8b:c5: c8:b8:58:e6:33:c5:79:43:a0:1e:c4:43:89:e3:21:0d:f1:c6: 02:8e:de:8c:cb:88:35:93:89:09:3f:6c:08:f2:91:87:6b:fc: 4b:2e:f7:73:b7:9d:1f:e7:88:cb:e7:65:ff:3b:08:4e:f8:5f: 7a:af:04:31 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEr369gnS/9bkTHXmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I1YjE0ZGMtNjllZS00YjU4LWIyN2QtNzhmZTUxYjEz MzVmMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk YmU2YmI1YWItOWU1YS00YmViLWJhN2UtOTM5YzRlOTUzMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eTlzniCSDuCFr6P3pBPfoLqN2HcWHuhMYoI HtsZg19W5gUqX7o8VPdLfcH3kCOEWje1uLybXCDlbIQnFU9rr6KapnxU7CujMRnl XV+DmsdaQs7gWe5A9ciWZr1YvBMNcUYhUhm9bj2D5myNjskypENUDXwCT7Qy5Gqm YbyTvsZ2GbCCioS8pWQIH6lAlI5LpFxNy+5k/svcs4+vKQs7Rehb+AVVlU1ddVJQ grTMFnmBKGbwTXoYhuXvBgxmbe5TLgpRKHexA2Yb2JjPbCtiQVBiei5jkN+yLH4C L/o1gmgqeCRJMMJSlDD1EZqY1hkoy1MsFY3TX3Scx6ioQfhT8wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFBFIqm17B84ZbQbN+A3lpYD4S+UWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjVi MTRkYy02OWVlLTRiNTgtYjI3ZC03OGZlNTFiMTMzNWYvMjk1ZDEzZDctOTllZi0z M2RkLWE2MjUtM2EyNTk2YTBmNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2I1YjE0ZGMtNjllZS00YjU4LWIy N2QtNzhmZTUxYjEzMzVmL2NiNWIxNGRjLTY5ZWUtNGI1OC1iMjdkLTc4ZmU1MWIx MzM1Zi5jcmwwHwYDVR0jBBgwFoAUoZp3L/1w6Adk4uMcpEEktkJRBdEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYjViMTRkYy02OWVlLTRiNTgtYjI3ZC03OGZl NTFiMTMzNWYuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5SIAwQA gjNNMA4EAgACMAgDBgQmAvrOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlxMA2TzoxB3Cqp8nb63wiWQEn v4qXTw2xNpNgqBvgy4JofUwRDu3zCqGGOVHX1MG6slbjZWZpqN5tQNcEtJeoJFUr PbEtYFFE0znqZWqzimlNj3jlW3Tcg9/CvCLzXw4iT1iiq91zy/lG+SAkfzvJtEDB mNwE/yNNdoemnXNSSLBJS1lqMiYVv0nXRKwKmDvLSFeTgqCXS3SPk+rj+lsGHhE0 3BFCqx0xDgY2CNZKiml9sSfFdIssC1T/8gpndidQc+Y6i8XIuFjmM8V5Q6AexEOJ 4yEN8cYCjt6My4g1k4kJP2wI8pGHa/xLLvdzt50f54jL52X/OwhO+F96rwQx -----END CERTIFICATE-----Generated at Thu Nov 6 02:54:47 2025 by rpki-client