$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa File: 7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa (raw, json) Hash identifier: iB2G4qj+kYvRNX/92N8lWi0B6sJhC/DP0sCbSMRyB3Y= Subject key identifier: 2E:7E:CF:F1:64:64:D1:23:85:9B:50:DA:C7:34:E2:FC:71:E5:F9:8D Certificate issuer: /CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Certificate serial: 010D0C9F4328584BB5C2510C4EE1AE6B8F980380 Authority key identifier: 5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 401731 IP address blocks: 23.139.60.0/24 maxlen: 24 64.32.50.0/24 maxlen: 24 2620:d7:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:51:0c:4e:e1:ae:6b:8f:98:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c33aff5-10d3-454a-8b27-ca4c4f50851f Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=1bd158de-6684-410e-93f6-494f961e0def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:ac:ce:f9:bd:7f:3e:fe:7b:5c:57:14:c5: 93:c4:08:27:e6:3e:3b:64:6f:86:1a:97:16:7f:9a: 8d:d3:8f:b5:70:d6:ae:df:20:c8:e4:a9:66:34:73: 6c:c8:f4:e1:bb:10:33:5d:96:88:3d:fd:94:9d:e9: be:66:8e:29:5f:ea:65:41:b7:7d:b2:d6:d0:80:da: a0:d5:09:71:6f:e1:be:18:d2:56:ec:7c:bb:98:34: ff:af:87:34:13:e7:26:7b:1f:6b:dc:0b:de:ca:0c: 0b:b7:5c:b5:0c:f2:33:7d:ad:91:b9:d2:2c:41:75: 9f:b3:27:07:a8:33:8a:54:a8:4d:0c:e1:6a:40:15: 26:1a:95:2d:9c:a7:7a:f3:c7:96:58:e8:f5:e4:e5: 5e:0e:af:6e:b7:d1:0c:f6:03:22:a4:ab:5e:0c:a8: ac:73:5b:33:1e:8b:c0:57:a4:08:79:a1:9e:e3:6c: f0:95:f7:4d:18:a2:12:c2:06:78:f7:1b:f5:31:3e: 06:87:da:4e:67:f4:51:a8:70:36:f8:b1:24:1d:f0: 80:9e:cb:30:2e:a0:03:e4:c1:a1:ab:7e:a3:33:be: e3:0e:46:15:6d:b2:2c:1e:b6:aa:55:a8:cb:97:22: 74:04:85:c6:35:f6:09:2b:c1:d3:3f:ee:0c:e6:98: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7E:CF:F1:64:64:D1:23:85:9B:50:DA:C7:34:E2:FC:71:E5:F9:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/7dbf1cea-6d71-3c74-a66c-ffddff7b15d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f/0c33aff5-10d3-454a-8b27-ca4c4f50851f.crl X509v3 Authority Key Identifier: keyid:5F:22:DD:58:56:EF:26:C7:1C:AF:8E:EC:EE:A9:FD:69:FB:3D:08:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0c33aff5-10d3-454a-8b27-ca4c4f50851f.cer sbgp-ipAddrBlock: critical IPv4: 23.139.60.0/24 64.32.50.0/24 IPv6: 2620:d7:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:80:a7:1f:a7:41:43:4a:13:55:2c:f8:31:36:44:7e:97:db: a4:47:59:bd:0c:10:8f:a1:36:a2:ef:3d:86:9d:b4:3a:ac:b3: b0:e4:ef:42:78:a0:aa:f0:4a:46:3f:3e:9b:77:e0:7d:6f:08: 4b:d3:56:fc:3d:f5:29:d0:87:36:70:ba:ba:2e:59:f0:98:51: 0f:5c:c4:97:a7:c8:eb:49:77:21:7e:2e:02:cd:e1:c3:e6:cc: 82:82:13:ba:22:bf:9f:dd:d0:90:fb:cd:07:e5:ba:d7:0f:5f: 75:bb:5b:93:3d:78:82:14:bb:1b:86:b1:78:a9:54:ea:b5:14: 24:79:37:f5:06:03:db:48:3d:57:f2:1a:03:7d:a9:b5:d0:2f: b6:e8:c0:2e:9d:c1:ec:5e:91:ea:6a:8c:73:ec:da:45:0a:8a: de:4b:61:5d:85:b2:c2:d7:9c:44:d1:22:da:6b:0b:6f:83:cc: bf:4f:72:65:5a:4e:7b:1f:cd:ed:46:00:d0:9b:59:8e:9c:71: 00:cf:87:ac:b4:8f:95:ee:62:2c:29:a5:22:56:aa:cd:00:45: 0d:b9:f1:d3:f9:89:70:1b:e1:6f:c7:81:a7:3d:a9:5b:7f:9c: 45:7a:d7:77:a4:98:a8:c9:3e:f6:ef:0d:f8:ac:83:7e:49:12: 0b:56:1f:43 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEu1wlEMTuGua4+YA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzM2FmZjUtMTBkMy00NTRhLThiMjctY2E0YzRmNTA4 NTFmMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk MWJkMTU4ZGUtNjY4NC00MTBlLTkzZjYtNDk0Zjk2MWUwZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtCszvm9fz7+e1xXFMWTxAgn5j47ZG+GGpcW f5qN04+1cNau3yDI5KlmNHNsyPThuxAzXZaIPf2Unem+Zo4pX+plQbd9stbQgNqg 1Qlxb+G+GNJW7Hy7mDT/r4c0E+cmex9r3AveygwLt1y1DPIzfa2RudIsQXWfsycH qDOKVKhNDOFqQBUmGpUtnKd688eWWOj15OVeDq9ut9EM9gMipKteDKisc1szHovA V6QIeaGe42zwlfdNGKISwgZ49xv1MT4Gh9pOZ/RRqHA2+LEkHfCAnsswLqAD5MGh q36jM77jDkYVbbIsHraqVajLlyJ0BIXGNfYJK8HTP+4M5phXqwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFC5+z/FkZNEjhZtQ2sc04vxx5fmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMz YWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRjNGY1MDg1MWYvN2RiZjFjZWEtNmQ3MS0z Yzc0LWE2NmMtZmZkZGZmN2IxNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGMzM2FmZjUtMTBkMy00NTRhLThi MjctY2E0YzRmNTA4NTFmLzBjMzNhZmY1LTEwZDMtNDU0YS04YjI3LWNhNGM0ZjUw ODUxZi5jcmwwHwYDVR0jBBgwFoAUXyLdWFbvJsccr47s7qn9afs9CH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wYzMzYWZmNS0xMGQzLTQ1NGEtOGIyNy1jYTRj NGY1MDg1MWYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAF4s8AwQA QCAyMA8EAgACMAkDBwAmIADXoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaICnH6dBQ0oTVSz4MTZEfpfb pEdZvQwQj6E2ou89hp20OqyzsOTvQnigqvBKRj8+m3fgfW8IS9NW/D31KdCHNnC6 ui5Z8JhRD1zEl6fI60l3IX4uAs3hw+bMgoITuiK/n93QkPvNB+W61w9fdbtbkz14 ghS7G4axeKlU6rUUJHk39QYD20g9V/IaA32ptdAvtujALp3B7F6R6mqMc+zaRQqK 3kthXYWywtecRNEi2msLb4PMv09yZVpOex/N7UYA0JtZjpxxAM+HrLSPle5iLCml IlaqzQBFDbnx0/mJcBvhb8eBpz2pW3+cRXrXd6SYqMk+9u8N+KyDfkkSC1YfQw== -----END CERTIFICATE-----Generated at Wed Nov 5 13:22:47 2025 by rpki-client