$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa File: 287a2a23-ee50-3199-aa52-e050b1ad449e.roa (raw, json) Hash identifier: auXUHHnrnuvLGVIlCzt6k1QLZXql6gcDdmZHcRX81XA= Subject key identifier: 39:5F:9A:B4:A4:BC:45:5F:2B:66:0B:10:54:06:C8:C9:5C:52:6E:A5 Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F4328584BA93258B22982BC6D262CA780 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 31775 IP address blocks: 23.175.80.0/24 maxlen: 24 23.226.80.0/20 maxlen: 24 204.80.232.0/24 maxlen: 24 209.94.32.0/20 maxlen: 24 2606:29c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:58:b2:29:82:bc:6d:26:2c:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=7ef8a578-80ca-4d1c-8566-261a8609f990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:88:e5:44:ef:e0:cf:91:07:a8:35:ed:9f: e1:77:ef:2f:ea:d7:5e:65:81:9b:b6:52:de:41:6a: 58:bd:f4:d9:36:d9:21:9d:47:cc:f4:34:f3:b1:ec: e4:fd:af:ef:54:4b:b7:63:88:40:21:07:7b:67:3f: 10:30:17:69:ef:e0:d1:22:30:9f:f2:85:21:88:4a: ea:61:73:3c:fe:47:92:f0:29:e3:6d:63:fa:6a:80: 62:b6:11:f0:6f:a5:6a:1d:8b:c5:66:21:22:81:18: 46:81:55:e9:c4:65:ae:46:49:03:04:24:ba:0b:a5: 2f:2f:32:3b:87:54:c6:1e:bf:67:ee:32:e0:d0:96: e1:7a:72:9b:ea:33:5d:7d:d8:b1:57:11:17:54:fa: b2:fa:ca:06:15:72:95:61:45:84:85:c3:8d:e8:4d: 35:b1:ca:28:4c:b6:be:54:19:b6:f3:6f:fa:a5:31: 9f:d0:4e:56:ee:9a:2f:18:ee:f3:56:d3:44:82:e2: a5:98:41:93:82:59:aa:41:e8:b6:e2:b1:fc:d3:73: fe:07:91:b0:9e:be:18:62:de:76:d5:81:fd:cd:7b: b7:98:cf:83:40:6c:01:74:43:48:13:d7:45:35:c4: 0a:b5:be:f7:19:ae:6c:ac:e6:41:6d:10:7b:ec:51: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5F:9A:B4:A4:BC:45:5F:2B:66:0B:10:54:06:C8:C9:5C:52:6E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/287a2a23-ee50-3199-aa52-e050b1ad449e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 23.175.80.0/24 23.226.80.0/20 204.80.232.0/24 209.94.32.0/20 IPv6: 2606:29c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:fe:18:c3:7e:f8:15:e5:7b:a3:69:c1:62:44:ed:f0:ed:8e: c6:d5:cd:72:4c:3e:02:9b:07:c3:54:9c:7a:79:9d:83:16:8f: 55:83:b8:86:a6:f2:86:39:d4:ad:6a:e5:ea:32:91:e8:46:ef: 93:3b:74:7c:3a:c5:36:ff:ea:44:d8:11:40:56:b9:02:5e:8a: 90:74:07:52:d0:14:17:39:d6:cb:30:9a:60:a7:eb:38:60:80: 62:f2:f8:70:a0:8a:3b:c3:b9:f1:b9:00:a1:bf:aa:58:73:3e: 49:6e:e0:15:9e:4a:ca:47:3b:a2:8d:54:80:fe:fe:47:ac:7a: ac:74:24:d1:1b:2a:cf:cd:42:a5:3a:7e:05:eb:0a:01:1b:58: 3b:1c:7a:73:6b:f9:b8:56:3d:8c:0d:e5:6d:6c:be:26:62:98: 7c:63:3d:47:7b:96:a5:e2:4a:67:a6:82:28:e7:21:87:cb:0b: 63:22:31:49:f1:91:c1:7f:d0:25:c5:4a:32:4b:2d:42:d3:ce: 88:ba:3c:18:1a:06:b5:ac:68:6d:13:d9:6b:d0:cd:4d:68:0b: 0f:94:af:cc:5e:d7:ff:6f:27:e7:0f:1b:9e:2e:09:14:0c:9d: f0:79:c8:35:71:1f:48:4f:65:1e:81:83:1b:7f:89:9d:1c:56: 74:33:cd:f7 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEupMliyKYK8bSYsp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk N2VmOGE1NzgtODBjYS00ZDFjLTg1NjYtMjYxYTg2MDlmOTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiiI5UTv4M+RB6g17Z/hd+8v6tdeZYGbtlLe QWpYvfTZNtkhnUfM9DTzsezk/a/vVEu3Y4hAIQd7Zz8QMBdp7+DRIjCf8oUhiErq YXM8/keS8CnjbWP6aoBithHwb6VqHYvFZiEigRhGgVXpxGWuRkkDBCS6C6UvLzI7 h1TGHr9n7jLg0JbhenKb6jNdfdixVxEXVPqy+soGFXKVYUWEhcON6E01scooTLa+ VBm282/6pTGf0E5W7povGO7zVtNEguKlmEGTglmqQei24rH803P+B5Gwnr4YYt52 1YH9zXu3mM+DQGwBdENIE9dFNcQKtb73Ga5srOZBbRB77FG5WQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFDlfmrSkvEVfK2YLEFQGyMlcUm6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMjg3YTJhMjMtZWU1MC0z MTk5LWFhNTItZTA1MGIxYWQ0NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF69QAwQE F+JQAwQAzFDoAwQE0V4gMA0EAgACMAcDBQAmBinAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE7+GMN++BXl e6NpwWJE7fDtjsbVzXJMPgKbB8NUnHp5nYMWj1WDuIam8oY51K1q5eoykehG75M7 dHw6xTb/6kTYEUBWuQJeipB0B1LQFBc51sswmmCn6zhggGLy+HCgijvDufG5AKG/ qlhzPklu4BWeSspHO6KNVID+/keseqx0JNEbKs/NQqU6fgXrCgEbWDscenNr+bhW PYwN5W1sviZimHxjPUd7lqXiSmemgijnIYfLC2MiMUnxkcF/0CXFSjJLLULTzoi6 PBgaBrWsaG0T2WvQzU1oCw+Ur8xe1/9vJ+cPG54uCRQMnfB5yDVxH0hPZR6Bgxt/ iZ0cVnQzzfc= -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:14 2025 by rpki-client