$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa File: 8008f8ed-620d-3847-b19a-1d027971a2c4.roa (raw, json) Hash identifier: tURJ8SPLXBnU/xv7e00LizS+BS480Fe/2Q2HYFrLliQ= Subject key identifier: CD:64:98:62:1D:E3:AF:56:48:5A:2B:EA:64:24:73:41:21:35:E9:C5 Certificate issuer: /CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c Certificate serial: 010D0C9F4328584B16033A8DC2563C9C29179580 Authority key identifier: 8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa Signing time: Thu 04 Sep 2025 19:41:59 +0000 ROA not before: Thu 04 Sep 2025 19:41:59 +0000 ROA not after: Wed 03 Dec 2025 20:41:59 +0000 asID: 26695 IP address blocks: 23.138.208.0/24 maxlen: 24 2605:8bc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:03:3a:8d:c2:56:3c:9c:29:17:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c Validity Not Before: Sep 4 19:41:59 2025 GMT Not After : Dec 3 20:41:59 2025 GMT Subject: CN=15dcdd3a-ecec-4d25-9f1d-7c85e34f89e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:22:b4:43:66:f6:7f:7c:75:eb:14:a8:7f:2a: 45:36:9d:35:a1:f4:e6:11:4c:b8:4b:d5:49:6b:8b: 39:78:22:19:e5:fd:88:69:41:be:d3:92:1c:d1:54: ae:47:09:b6:9a:07:03:c2:da:76:2d:8c:e4:c7:47: 12:95:2f:ae:b9:52:a2:f3:db:a6:e0:ec:4d:72:c7: 46:dc:47:0c:89:2e:c6:37:d0:8e:b0:37:05:68:59: c6:b0:b6:67:aa:7d:d7:73:16:b2:bc:7e:2a:98:4d: bc:ab:0e:8a:a5:95:33:42:8b:41:d5:23:78:30:29: 30:0c:3b:44:36:1b:63:19:a4:8d:ea:a9:cb:d1:59: a6:2f:22:03:b2:2a:93:f8:bd:ee:4d:34:20:13:3d: 64:74:6e:37:b5:06:c1:f6:a9:bf:a1:92:25:34:4d: 5c:91:e5:93:fb:a6:20:9d:7e:c6:f0:7e:51:ac:1e: df:b1:7d:d1:6f:b9:04:71:a6:c0:b9:73:68:a6:ee: a3:08:59:2e:fd:4d:40:7f:6a:50:a5:02:54:f1:e1: 49:50:91:6d:d0:88:45:fa:2e:2f:d1:cf:0d:fc:15: d1:a9:1c:29:c3:39:d9:98:43:58:2f:1b:c7:8a:fc: e4:b4:62:6b:e3:2d:59:97:c8:73:c6:0f:8c:69:22: de:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:64:98:62:1D:E3:AF:56:48:5A:2B:EA:64:24:73:41:21:35:E9:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl X509v3 Authority Key Identifier: keyid:8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer sbgp-ipAddrBlock: critical IPv4: 23.138.208.0/24 IPv6: 2605:8bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:17:eb:5e:bd:03:ed:ce:16:1c:7d:f0:4a:6a:00:34:a5:2c: b1:93:54:79:e0:95:11:38:42:a9:36:cb:23:3e:9e:e4:8c:3d: 53:db:bd:8b:d2:e0:0a:cc:a9:78:31:f1:94:83:33:14:4d:bc: 31:8c:95:06:e2:d2:79:17:22:9d:c1:a6:ac:30:e3:c1:3a:4f: 24:cc:f9:5e:45:fe:d0:d8:fb:97:a9:43:20:82:b8:ef:6b:8c: be:e0:65:ab:84:cc:da:b7:80:d1:b1:9f:9e:3d:4b:e7:e6:43: 03:21:26:65:83:4c:9a:5a:d6:57:98:8d:6b:c7:57:e3:2c:c3: 64:59:d9:4f:d4:28:84:8c:db:5e:19:b2:6e:2d:1f:3b:ae:7a: fe:77:db:e5:80:49:b5:4a:97:78:9a:8b:89:e1:16:60:d0:b6: 29:1c:fd:05:28:e6:1d:6d:8e:72:11:f4:7e:cc:7a:8c:cc:3a: 29:56:fa:cb:be:d9:e0:de:48:a0:46:78:6b:ee:88:6b:23:6a: 79:83:ff:90:22:84:29:71:ed:87:ec:91:8c:46:15:9c:92:31: 04:8a:26:fe:16:1e:65:5d:13:a1:2d:36:c1:76:77:bb:ed:91: 22:95:67:95:03:93:2a:73:0e:b2:42:56:fc:ae:a3:5b:02:a7: a3:07:b6:28 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEsWAzqNwlY8nCkXlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZkOWUwZmMtM2E3ZS00MGM4LWE5MzUtYjU4YzZiOTky YzNjMB4XDTI1MDkwNDE5NDE1OVoXDTI1MTIwMzIwNDE1OVowLzEtMCsGA1UEAxMk MTVkY2RkM2EtZWNlYy00ZDI1LTlmMWQtN2M4NWUzNGY4OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CK0Q2b2f3x16xSofypFNp01ofTmEUy4S9VJ a4s5eCIZ5f2IaUG+05Ic0VSuRwm2mgcDwtp2LYzkx0cSlS+uuVKi89um4OxNcsdG 3EcMiS7GN9COsDcFaFnGsLZnqn3XcxayvH4qmE28qw6KpZUzQotB1SN4MCkwDDtE NhtjGaSN6qnL0VmmLyIDsiqT+L3uTTQgEz1kdG43tQbB9qm/oZIlNE1ckeWT+6Yg nX7G8H5RrB7fsX3Rb7kEcabAuXNopu6jCFku/U1Af2pQpQJU8eFJUJFt0IhF+i4v 0c8N/BXRqRwpwznZmENYLxvHivzktGJr4y1Zl8hzxg+MaSLeGQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFM1kmGId469WSFor6mQkc0EhNenFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZmQ5 ZTBmYy0zYTdlLTQwYzgtYTkzNS1iNThjNmI5OTJjM2MvODAwOGY4ZWQtNjIwZC0z ODQ3LWIxOWEtMWQwMjc5NzFhMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWZkOWUwZmMtM2E3ZS00MGM4LWE5 MzUtYjU4YzZiOTkyYzNjLzFmZDllMGZjLTNhN2UtNDBjOC1hOTM1LWI1OGM2Yjk5 MmMzYy5jcmwwHwYDVR0jBBgwFoAUjhwc1ljAGCpSFPAoHuDxFEJiW7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZmQ5ZTBmYy0zYTdlLTQwYzgtYTkzNS1iNThj NmI5OTJjM2MuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4rQMA0E AgACMAcDBQAmBYvAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJcX6169A+3OFhx98EpqADSlLLGTVHnglRE4 Qqk2yyM+nuSMPVPbvYvS4ArMqXgx8ZSDMxRNvDGMlQbi0nkXIp3Bpqww48E6TyTM +V5F/tDY+5epQyCCuO9rjL7gZauEzNq3gNGxn549S+fmQwMhJmWDTJpa1leYjWvH V+Msw2RZ2U/UKISM214Zsm4tHzuuev532+WASbVKl3iai4nhFmDQtikc/QUo5h1t jnIR9H7MeozMOilW+su+2eDeSKBGeGvuiGsjanmD/5AihClx7YfskYxGFZySMQSK Jv4WHmVdE6EtNsF2d7vtkSKVZ5UDkypzDrJCVvyuo1sCp6MHtig= -----END CERTIFICATE-----Generated at Wed Nov 5 06:47:38 2025 by rpki-client