$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa File: 2b69ec88-0999-3936-983b-14aa048586b6.roa (raw, json) Hash identifier: A46df9IsLqApbNFI9OZFQQob53Ao2yzFol+jAsIs9F4= Subject key identifier: 61:EA:B2:16:EC:F5:40:07:16:9A:D4:C5:8B:A7:B6:46:7C:C6:BC:BA Certificate issuer: /CN=ac22a1e5-62cd-4608-a584-a3d08be071d8 Certificate serial: 010D0C9F4328584B3C51B572C02782DF3497C800 Authority key identifier: 82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 397617 IP address blocks: 23.136.240.0/24 maxlen: 24 2602:fdce::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:b5:72:c0:27:82:df:34:97:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac22a1e5-62cd-4608-a584-a3d08be071d8 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=ef53e016-29ea-4dc0-99ab-fb2712626a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:0b:f5:e6:bc:e6:95:74:52:e5:1c:ea:a2: 04:eb:a2:2d:f5:1e:ef:ea:bd:6d:9f:3c:29:a1:eb: e6:53:f8:56:ad:33:92:27:d8:18:17:60:ee:3a:3c: da:88:82:38:61:d5:77:32:73:a1:c4:59:fe:f2:ea: 85:79:99:6c:3d:24:c9:1c:9c:87:bc:76:56:6d:2c: 6c:b2:aa:ff:26:4e:78:30:f3:c9:87:94:43:11:05: ff:e1:98:ad:e2:0c:9f:92:2c:b1:27:fd:f5:04:a1: ee:7d:6a:db:21:1c:b0:45:98:38:b6:42:fd:a1:b0: 1f:cf:f7:94:93:25:fc:c1:72:a6:0c:f0:56:9c:5c: a2:fa:5b:8c:f3:a5:4e:62:6f:10:e1:73:a8:27:41: 6e:c5:c1:80:dc:e6:6d:1b:c2:5b:0c:e6:a3:73:c4: 95:e9:4a:ed:39:7c:cd:82:33:41:22:51:03:ed:48: 3a:59:7e:2c:e0:f2:f2:29:98:04:ca:b2:8e:86:8f: bc:0c:25:3d:02:18:d9:ee:a4:c5:0c:16:8c:17:54: 76:55:83:df:9c:44:02:38:ec:4f:fc:e3:f9:ed:f6: 00:98:5c:bb:4a:b3:94:2a:e5:ed:94:39:44:00:88: 01:aa:fc:38:19:53:99:f2:7a:67:16:5a:68:34:15: 54:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EA:B2:16:EC:F5:40:07:16:9A:D4:C5:8B:A7:B6:46:7C:C6:BC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/2b69ec88-0999-3936-983b-14aa048586b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8/ac22a1e5-62cd-4608-a584-a3d08be071d8.crl X509v3 Authority Key Identifier: keyid:82:46:D7:98:06:54:B8:AE:CA:04:DB:12:7E:9C:71:5F:34:97:4A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac22a1e5-62cd-4608-a584-a3d08be071d8.cer sbgp-ipAddrBlock: critical IPv4: 23.136.240.0/24 IPv6: 2602:fdce::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:61:74:4a:ba:62:65:2c:0a:af:d5:84:de:fd:82:bc:10:a4: f9:89:09:a7:e0:a9:85:ec:18:22:6b:c3:49:d4:e5:55:59:03: 55:1d:2b:40:47:f0:79:c3:8c:0e:a9:e1:d4:e0:2c:40:38:ee: 29:bf:fd:ff:e5:45:6e:70:d1:e4:56:90:e9:bc:62:88:16:9e: 13:f3:4c:1a:ae:a2:ea:7a:92:64:f1:b9:c3:54:64:13:6e:b5: 97:61:d0:7d:0e:13:7e:32:65:4a:4e:2f:ae:17:24:e8:75:fa: 6c:a5:77:c5:05:4a:9f:f2:a6:a7:cf:8a:d3:e9:b9:cd:5e:cc: c3:0c:85:74:67:c3:95:27:bb:ba:74:5c:0f:83:20:fa:fc:71: a7:78:e7:c1:62:88:d3:03:0d:6b:bd:93:7c:0f:fc:3f:9b:d5: 03:41:7e:f5:2d:90:c3:3a:1c:c6:72:6d:5a:ec:6e:0e:6e:72: 4c:47:f1:2e:f6:92:cd:c7:37:6e:7a:4a:78:6d:cb:7e:3f:a4: 33:b6:52:d3:62:48:b5:fe:87:60:43:d8:06:ad:b0:6e:2d:36: 86:2c:b4:c9:35:3c:f0:53:c9:a6:a1:36:26:b2:9d:96:6a:c2: 51:1a:ff:37:77:12:5b:c5:f8:9f:08:0d:ad:de:b0:f9:34:e9: 79:bf:52:bc -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEs8UbVywCeC3zSXyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyMmExZTUtNjJjZC00NjA4LWE1ODQtYTNkMDhiZTA3 MWQ4MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZWY1M2UwMTYtMjllYS00ZGMwLTk5YWItZmIyNzEyNjI2YTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvcL9ea85pV0UuUc6qIE66It9R7v6r1tnzwp oevmU/hWrTOSJ9gYF2DuOjzaiII4YdV3MnOhxFn+8uqFeZlsPSTJHJyHvHZWbSxs sqr/Jk54MPPJh5RDEQX/4Zit4gyfkiyxJ/31BKHufWrbIRywRZg4tkL9obAfz/eU kyX8wXKmDPBWnFyi+luM86VOYm8Q4XOoJ0FuxcGA3OZtG8JbDOajc8SV6UrtOXzN gjNBIlED7Ug6WX4s4PLyKZgEyrKOho+8DCU9AhjZ7qTFDBaMF1R2VYPfnEQCOOxP /OP57fYAmFy7SrOUKuXtlDlEAIgBqvw4GVOZ8npnFlpoNBVUCwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGHqshbs9UAHFprUxYuntkZ8xry6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzIy YTFlNS02MmNkLTQ2MDgtYTU4NC1hM2QwOGJlMDcxZDgvMmI2OWVjODgtMDk5OS0z OTM2LTk4M2ItMTRhYTA0ODU4NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWMyMmExZTUtNjJjZC00NjA4LWE1 ODQtYTNkMDhiZTA3MWQ4L2FjMjJhMWU1LTYyY2QtNDYwOC1hNTg0LWEzZDA4YmUw NzFkOC5jcmwwHwYDVR0jBBgwFoAUgkbXmAZUuK7KBNsSfpxxXzSXSpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzIyYTFlNS02MmNkLTQ2MDgtYTU4NC1hM2Qw OGJlMDcxZDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4jwMA4E AgACMAgDBgQmAv3OADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASYXRKumJlLAqv1YTe/YK8EKT5iQmn4KmF 7Bgia8NJ1OVVWQNVHStAR/B5w4wOqeHU4CxAOO4pv/3/5UVucNHkVpDpvGKIFp4T 80warqLqepJk8bnDVGQTbrWXYdB9DhN+MmVKTi+uFyTodfpspXfFBUqf8qanz4rT 6bnNXszDDIV0Z8OVJ7u6dFwPgyD6/HGneOfBYojTAw1rvZN8D/w/m9UDQX71LZDD OhzGcm1a7G4ObnJMR/Eu9pLNxzduekp4bct+P6QztlLTYki1/odgQ9gGrbBuLTaG LLTJNTzwU8mmoTYmsp2WasJRGv83dxJbxfifCA2t3rD5NOl5v1K8 -----END CERTIFICATE-----Generated at Wed Nov 5 14:09:55 2025 by rpki-client