$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa File: 0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa (raw, json) Hash identifier: eEpbQugszSpHSj8E4aF30fEe/BfdFfXlv37y/ZQVBIQ= Subject key identifier: 3F:7C:2C:89:6C:0A:C2:1D:E3:23:4C:D0:58:14:09:4D:8F:67:35:0B Certificate issuer: /CN=22ffee48-ebff-42ef-a411-b2fd73c7ffcf Certificate serial: 010D0C9F4328584BA5023A3348EFA28C00068180 Authority key identifier: A2:D6:37:34:C5:BD:16:2B:C5:17:D1:AA:A4:DF:3B:66:C7:FA:43:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 2914 IP address blocks: 23.134.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3a:33:48:ef:a2:8c:00:06:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ffee48-ebff-42ef-a411-b2fd73c7ffcf Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=68b244b6-f05d-41b3-89e1-264ef91a22b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e4:f1:c4:a8:a5:08:da:30:7f:6d:6c:fa:ae: 37:d2:a3:16:a3:e8:5b:36:34:bb:08:8f:6a:6b:e7: 58:0b:cd:cd:75:ff:77:80:8a:4f:16:09:de:16:b5: ff:58:a3:4e:14:90:3f:02:bb:dd:da:78:21:29:a6: c1:3f:53:98:aa:b3:2f:13:b8:70:19:14:e7:db:f2: 73:83:b0:19:71:9e:60:5e:ec:04:9f:a5:44:d5:3f: 27:ef:9e:87:7e:82:10:e5:16:c3:0d:bf:fc:61:9b: 09:9b:de:78:fc:2b:a9:ce:27:1f:da:8d:dd:ec:24: 19:73:16:6b:df:a8:7d:54:e7:9e:2d:a4:94:a7:71: a8:3e:23:48:da:da:80:e3:cb:d8:8e:6e:a9:b7:b8: 43:46:63:34:e8:cb:54:d5:e1:f3:40:2f:8b:a1:30: ae:93:42:bc:8d:56:aa:cc:07:7f:29:48:eb:e1:11: 3d:87:4c:1f:96:4e:3b:fb:a2:23:6f:f7:c8:bd:59: 70:57:e2:ef:f1:b9:ce:f6:3b:6f:b7:c8:cf:2f:26: cd:60:70:b9:44:97:19:df:82:2e:56:f9:fc:ac:27: d7:4b:8d:97:5b:1e:33:34:02:54:45:34:8f:f3:45: 56:e1:3c:9f:28:6d:43:2c:20:b9:7f:f9:a7:9c:0f: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7C:2C:89:6C:0A:C2:1D:E3:23:4C:D0:58:14:09:4D:8F:67:35:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.crl X509v3 Authority Key Identifier: keyid:A2:D6:37:34:C5:BD:16:2B:C5:17:D1:AA:A4:DF:3B:66:C7:FA:43:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer sbgp-ipAddrBlock: critical IPv4: 23.134.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:11:79:59:bc:d3:7f:5a:32:92:2a:39:75:fd:80:72:c2:00: 40:af:d8:62:45:fa:e9:0b:12:32:85:19:8d:45:71:83:75:95: 87:37:1b:61:98:f1:7f:cc:dc:0f:fc:c2:ed:88:08:2f:b9:7d: 55:60:3d:12:ab:25:38:9d:b1:4c:87:42:6d:09:e8:6b:c2:0f: 04:3d:b8:f6:33:a8:f0:01:4c:fb:e8:ce:a0:7e:55:8b:0c:db: 8b:e0:1e:4c:ad:0a:f6:b9:d5:6a:fd:01:c3:0d:1e:28:8f:2b: f9:df:76:3e:90:2c:39:e2:2e:b3:bb:44:d4:8d:30:94:47:1a: 8b:f7:5b:63:78:a1:10:a4:6a:93:2f:be:50:39:44:a4:3b:ba: 68:3a:1d:8d:ad:7e:76:2e:da:92:aa:96:0e:6f:5b:4e:76:b7: ea:3b:87:77:fb:08:56:3b:a2:e8:b0:a5:c3:78:78:0e:77:4e: 6d:f9:e7:78:95:30:0b:b2:09:9e:f0:da:e2:92:92:fe:93:a4: 0b:79:dc:f7:59:20:ba:19:07:14:cd:e7:46:a4:49:ca:97:7f: d7:44:e4:40:71:32:02:67:c6:50:df:cd:a7:f7:fa:bd:d6:59: 75:48:f1:48:d3:30:18:c3:65:d0:1e:17:f6:54:64:09:76:3e: ab:73:df:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAjozSO+ijAAGgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmZmVlNDgtZWJmZi00MmVmLWE0MTEtYjJmZDczYzdm ZmNmMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk NjhiMjQ0YjYtZjA1ZC00MWIzLTg5ZTEtMjY0ZWY5MWEyMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuTxxKilCNowf21s+q430qMWo+hbNjS7CI9q a+dYC83Ndf93gIpPFgneFrX/WKNOFJA/Arvd2nghKabBP1OYqrMvE7hwGRTn2/Jz g7AZcZ5gXuwEn6VE1T8n756HfoIQ5RbDDb/8YZsJm954/Cupzicf2o3d7CQZcxZr 36h9VOeeLaSUp3GoPiNI2tqA48vYjm6pt7hDRmM06MtU1eHzQC+LoTCuk0K8jVaq zAd/KUjr4RE9h0wflk47+6Ijb/fIvVlwV+Lv8bnO9jtvt8jPLybNYHC5RJcZ34Iu Vvn8rCfXS42XWx4zNAJURTSP80VW4TyfKG1DLCC5f/mnnA+sqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD98LIlsCsId4yNM0FgUCU2PZzULMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMmZm ZWU0OC1lYmZmLTQyZWYtYTQxMS1iMmZkNzNjN2ZmY2YvMGUwZmI3ZmQtMzNjYy0z YmQ1LThlNGMtMTA4Mzk5NWUxYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjJmZmVlNDgtZWJmZi00MmVmLWE0 MTEtYjJmZDczYzdmZmNmLzIyZmZlZTQ4LWViZmYtNDJlZi1hNDExLWIyZmQ3M2M3 ZmZjZi5jcmwwHwYDVR0jBBgwFoAUotY3NMW9FivFF9GqpN87Zsf6Q/UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMmZmZWU0OC1lYmZmLTQyZWYtYTQxMS1iMmZk NzNjN2ZmY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQReVm8039aMpIqOXX9gHLCAECv2GJF+ukLEjKFGY1FcYN1lYc3G2GY 8X/M3A/8wu2ICC+5fVVgPRKrJTidsUyHQm0J6GvCDwQ9uPYzqPABTPvozqB+VYsM 24vgHkytCva51Wr9AcMNHiiPK/nfdj6QLDniLrO7RNSNMJRHGov3W2N4oRCkapMv vlA5RKQ7umg6HY2tfnYu2pKqlg5vW052t+o7h3f7CFY7ouiwpcN4eA53Tm3553iV MAuyCZ7w2uKSkv6TpAt53PdZILoZBxTN50akScqXf9dE5EBxMgJnxlDfzaf3+r3W WXVI8UjTMBjDZdAeF/ZUZAl2Pqtz31I= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:49 2025 by rpki-client