$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa File: 4f62ed94-cb56-3676-93b3-049015d9490b.roa (raw, json) Hash identifier: HZM3Mkq2iwTSe4SkluTBL7HLkffYw9OMxluOMb54KwM= Subject key identifier: 73:18:C3:F9:45:90:8C:CC:A4:EC:63:0F:A2:F7:35:B9:6D:11:81:42 Certificate issuer: /CN=0b35d1e4-863f-4e5d-8b1e-cda81c416971 Certificate serial: 010D0C9F4328584B6201F07E40CBD2EDE8F7B280 Authority key identifier: E0:31:9F:31:68:22:28:34:85:A0:F3:9E:85:A7:6F:AA:E7:D9:28:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 6939 IP address blocks: 23.171.48.0/24 maxlen: 24 172.111.40.0/22 maxlen: 22 2602:fcd7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f0:7e:40:cb:d2:ed:e8:f7:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b35d1e4-863f-4e5d-8b1e-cda81c416971 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=4bb55ae9-c027-44de-8866-9d230b19f61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:6b:3f:9e:48:6e:62:17:9f:4e:23:e2:41: 18:ea:04:88:60:a8:b6:d2:35:c2:2d:d2:76:ac:61: c6:14:0a:3c:98:20:67:16:d1:95:be:25:24:5b:c8: 7b:a0:53:a9:2f:e8:56:2c:10:cb:97:8a:e7:da:45: cb:ec:fb:82:ab:15:71:2f:4b:0b:62:dc:2a:9c:aa: 9b:60:ce:47:2e:ed:8f:fd:89:c0:01:4a:14:02:86: ff:28:8b:d7:16:bc:b1:07:16:58:ee:88:ee:97:d2: 50:fb:dc:06:c8:96:19:48:7f:6d:86:a6:f5:11:6a: 8c:12:2b:28:4c:86:43:3c:c6:7e:09:c0:a2:f1:33: b8:43:22:17:ec:e8:98:8d:e6:a9:a2:fa:60:40:06: 85:f4:75:03:c8:9c:57:11:88:e6:1d:93:67:a7:b8: a6:f1:cb:89:74:83:f2:35:19:1d:67:8a:cb:8f:74: 40:d3:ff:8f:11:c0:c1:cf:28:55:7f:53:c4:63:73: 7e:4a:4b:64:74:07:6f:a3:a7:93:a2:6d:a4:71:80: 3f:cc:85:1f:16:9e:d1:22:e7:bb:70:81:d6:0b:bd: 1d:9e:c4:ff:2d:aa:89:9c:27:8f:f0:50:1d:2b:b3: d9:8b:de:2c:77:6a:5f:f1:9e:a8:c9:b3:cf:50:35: 98:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:18:C3:F9:45:90:8C:CC:A4:EC:63:0F:A2:F7:35:B9:6D:11:81:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.crl X509v3 Authority Key Identifier: keyid:E0:31:9F:31:68:22:28:34:85:A0:F3:9E:85:A7:6F:AA:E7:D9:28:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer sbgp-ipAddrBlock: critical IPv4: 23.171.48.0/24 172.111.40.0/22 IPv6: 2602:fcd7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:df:42:d5:9a:ae:d7:4a:d3:42:ed:55:7f:0b:b9:26:e0:6b: 23:c4:80:57:01:b3:e6:b4:24:a4:1e:3a:f0:16:02:03:b6:48: 8d:25:39:c5:a3:f9:a6:4a:31:3f:04:40:8b:43:da:eb:90:2a: bf:dd:81:97:39:8b:a6:92:3c:f0:f3:9e:6b:9d:e5:71:49:91: ed:a6:c7:60:76:c4:91:45:2e:fe:76:04:09:de:db:5e:3a:c5: 63:ac:a0:8b:9e:7f:58:20:5a:9e:80:8b:0c:9a:b2:e2:f2:f4: 29:25:56:eb:0f:38:fe:a6:f7:3c:cc:3e:8e:58:e7:05:8b:0b: ac:23:04:0a:bb:26:db:ce:71:24:a6:f0:6a:2d:ab:9e:31:d6: 30:84:d3:fb:65:5f:3a:f9:02:6e:3f:3a:d8:f4:c7:22:46:59: 20:7d:e8:21:db:51:12:e5:f3:ad:23:fd:d5:cd:8d:07:0d:87: 9c:e8:2c:e9:83:42:e8:70:db:a6:9e:59:50:a4:3f:db:62:c4: 12:5d:94:1f:15:ab:cc:31:f1:9a:53:93:cf:74:17:30:7c:36: ef:c5:19:41:34:30:73:a9:1b:57:86:3d:5d:b4:b6:e7:d8:7d: ca:0c:3f:e6:56:c2:19:a8:24:8a:dc:7b:b8:a9:c0:39:6a:ed: 6c:d1:93:30 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEtiAfB+QMvS7ej3soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIzNWQxZTQtODYzZi00ZTVkLThiMWUtY2RhODFjNDE2 OTcxMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NGJiNTVhZTktYzAyNy00NGRlLTg4NjYtOWQyMzBiMTlmNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pFrP55IbmIXn04j4kEY6gSIYKi20jXCLdJ2 rGHGFAo8mCBnFtGVviUkW8h7oFOpL+hWLBDLl4rn2kXL7PuCqxVxL0sLYtwqnKqb YM5HLu2P/YnAAUoUAob/KIvXFryxBxZY7ojul9JQ+9wGyJYZSH9thqb1EWqMEiso TIZDPMZ+CcCi8TO4QyIX7OiYjeapovpgQAaF9HUDyJxXEYjmHZNnp7im8cuJdIPy NRkdZ4rLj3RA0/+PEcDBzyhVf1PEY3N+SktkdAdvo6eTom2kcYA/zIUfFp7RIue7 cIHWC70dnsT/LaqJnCeP8FAdK7PZi94sd2pf8Z6oybPPUDWYlQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFHMYw/lFkIzMpOxjD6L3NbltEYFCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjM1 ZDFlNC04NjNmLTRlNWQtOGIxZS1jZGE4MWM0MTY5NzEvNGY2MmVkOTQtY2I1Ni0z Njc2LTkzYjMtMDQ5MDE1ZDk0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGIzNWQxZTQtODYzZi00ZTVkLThi MWUtY2RhODFjNDE2OTcxLzBiMzVkMWU0LTg2M2YtNGU1ZC04YjFlLWNkYTgxYzQx Njk3MS5jcmwwHwYDVR0jBBgwFoAU4DGfMWgiKDSFoPOehadvqufZKMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjM1ZDFlNC04NjNmLTRlNWQtOGIxZS1jZGE4 MWM0MTY5NzEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6swAwQC rG8oMA4EAgACMAgDBgQmAvzXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAC30LVmq7XStNC7VV/C7km4Gsj xIBXAbPmtCSkHjrwFgIDtkiNJTnFo/mmSjE/BECLQ9rrkCq/3YGXOYumkjzw855r neVxSZHtpsdgdsSRRS7+dgQJ3tteOsVjrKCLnn9YIFqegIsMmrLi8vQpJVbrDzj+ pvc8zD6OWOcFiwusIwQKuybbznEkpvBqLaueMdYwhNP7ZV86+QJuPzrY9MciRlkg fegh21ES5fOtI/3VzY0HDYec6Czpg0LocNumnllQpD/bYsQSXZQfFavMMfGaU5PP dBcwfDbvxRlBNDBzqRtXhj1dtLbn2H3KDD/mVsIZqCSK3Hu4qcA5au1s0ZMw -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:06 2025 by rpki-client