$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa File: 445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa (raw, json) Hash identifier: EyVduydlXeCd6rm4+CpQ9FfjVMzNtdJX3PaAHYk+34g= Subject key identifier: 07:C7:2E:7F:5F:47:20:6E:3E:C1:3D:D1:D8:E3:9A:BB:93:62:6B:B5 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584B8D477B9EA305777045EA8600 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa Signing time: Fri 17 Oct 2025 13:00:39 +0000 ROA not before: Fri 17 Oct 2025 13:00:39 +0000 ROA not after: Thu 15 Jan 2026 14:00:39 +0000 asID: 401481 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:47:7b:9e:a3:05:77:70:45:ea:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Oct 17 13:00:39 2025 GMT Not After : Jan 15 14:00:39 2026 GMT Subject: CN=c0922ad3-f4bb-4c26-b32e-add7e5fa9bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:8b:78:8f:2f:71:4c:83:73:fc:ae:d5:c9: 6c:e6:81:34:68:69:51:45:29:e9:b5:cb:8f:94:e9: 6d:2b:d0:51:ab:e7:6c:93:d5:63:a2:d5:35:66:4b: fe:a5:79:a9:4e:0b:fb:0c:ff:49:22:4b:91:3b:a5: e0:9f:40:55:13:b3:39:a6:46:ff:fb:ab:57:2e:52: db:c3:4c:03:96:43:85:69:30:4b:fa:a1:41:06:d8: 74:48:5b:24:b8:00:c8:fd:8a:e2:bd:31:f1:7f:3d: 95:5d:0e:fa:2a:4e:8d:a4:e1:73:08:df:f9:b1:de: 7a:f5:61:cb:2b:26:85:04:2c:31:e5:5a:91:7c:42: e4:1b:69:dd:87:26:2d:37:fe:57:98:4b:e7:0b:64: 3d:58:4a:fc:56:3b:b8:e3:02:1a:88:3c:58:2c:ad: 2f:0a:60:57:65:3e:c9:5d:02:47:76:40:24:29:72: e5:81:c3:ea:a5:0b:97:33:df:c3:60:d2:2d:d5:29: f2:00:5e:15:27:54:23:c4:25:68:f8:76:b4:cb:49: 28:d4:27:88:1c:dd:f0:91:6a:8c:15:6f:ca:26:c0: fe:7e:5f:f1:85:e9:45:84:16:7e:ce:9d:b4:4b:1f: 4d:8b:a9:48:de:91:8b:2b:bd:0c:26:14:b7:3e:33: c8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C7:2E:7F:5F:47:20:6E:3E:C1:3D:D1:D8:E3:9A:BB:93:62:6B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:99:1f:c5:d6:af:2f:bb:ac:9f:cb:56:6a:a0:a8:ac:5c:96: a4:e1:4a:7b:f1:b9:f9:0e:5d:b2:dc:0a:c1:22:82:be:58:c8: 60:c6:9b:1e:aa:6f:47:b1:c3:a7:1a:4b:0f:ad:b2:6b:fd:b6: 32:38:7c:c4:28:64:a3:44:41:48:22:40:a0:f8:e2:e1:b7:4f: 78:22:a7:f2:c9:8a:8d:a6:61:72:89:a4:a9:20:42:54:a6:7c: 2a:92:51:bb:ef:6d:a0:a2:5b:c3:f4:58:2b:68:1a:2f:10:13: 42:31:bb:a7:a9:29:04:55:a9:8a:b8:6d:14:69:c1:a3:53:43: 96:43:8f:a4:8a:4b:1e:c0:4d:32:07:ad:50:17:5a:37:03:83: f1:e4:af:cc:05:aa:cb:ed:03:fa:c0:77:d2:66:0d:cf:fa:3c: 0e:ce:91:50:27:53:d8:1e:48:87:58:73:07:57:35:34:9f:2e: 1b:51:5c:67:c3:b2:a1:0c:f1:96:30:06:ee:9b:a4:c1:fe:bc: 92:9d:a9:0e:be:44:f9:93:11:ee:2b:ad:21:a4:53:66:aa:b2: 7e:14:88:9b:34:22:8f:4f:13:11:0d:f9:6f:f7:b3:ae:e5:6a: 63:68:e8:49:7a:b2:4d:dc:8a:49:00:af:d5:85:70:cc:0d:3b: ea:e7:83:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNR3ueowV3cEXqhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI1MTAxNzEzMDAzOVoXDTI2MDExNTE0MDAzOVowLzEtMCsGA1UEAxMk YzA5MjJhZDMtZjRiYi00YzI2LWIzMmUtYWRkN2U1ZmE5YmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCqLeI8vcUyDc/yu1cls5oE0aGlRRSnptcuP lOltK9BRq+dsk9VjotU1Zkv+pXmpTgv7DP9JIkuRO6Xgn0BVE7M5pkb/+6tXLlLb w0wDlkOFaTBL+qFBBth0SFskuADI/YrivTHxfz2VXQ76Kk6NpOFzCN/5sd569WHL KyaFBCwx5VqRfELkG2ndhyYtN/5XmEvnC2Q9WEr8Vju44wIaiDxYLK0vCmBXZT7J XQJHdkAkKXLlgcPqpQuXM9/DYNIt1SnyAF4VJ1QjxCVo+Ha0y0ko1CeIHN3wkWqM FW/KJsD+fl/xhelFhBZ+zp20Sx9Ni6lI3pGLK70MJhS3PjPI5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfHLn9fRyBuPsE90djjmruTYmu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvNDQ1YjFjMDYtZmVjMS0z YjFmLTg1MGQtMDJhYzY1Y2MyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqZH8XWry+7rJ/LVmqgqKxclqThSnvxufkOXbLcCsEigr5YyGDGmx6q b0exw6caSw+tsmv9tjI4fMQoZKNEQUgiQKD44uG3T3gip/LJio2mYXKJpKkgQlSm fCqSUbvvbaCiW8P0WCtoGi8QE0Ixu6epKQRVqYq4bRRpwaNTQ5ZDj6SKSx7ATTIH rVAXWjcDg/Hkr8wFqsvtA/rAd9JmDc/6PA7OkVAnU9geSIdYcwdXNTSfLhtRXGfD sqEM8ZYwBu6bpMH+vJKdqQ6+RPmTEe4rrSGkU2aqsn4UiJs0Io9PExEN+W/3s67l amNo6El6sk3cikkAr9WFcMwNO+rng9s= -----END CERTIFICATE-----Generated at Wed Nov 5 11:27:02 2025 by rpki-client