$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa File: 1f8b69fd-0f88-3d83-8616-5876e0d10640.roa (raw, json) Hash identifier: 1DQDDJn0xJp9hnraV2DBWhTDa+MdQSF+ruR92UPk/H0= Subject key identifier: 9E:40:71:5E:7B:85:99:4E:AF:C4:25:BF:48:C0:5C:4F:09:38:08:C1 Certificate issuer: /CN=b43c5615-9630-4bab-8258-f3b32e00f304 Certificate serial: 010D0C9F4328584BBCDAE4DB9512DC50F53BEEC0 Authority key identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 36832 IP address blocks: 23.132.172.0/24 maxlen: 24 2602:f8c4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e4:db:95:12:dc:50:f5:3b:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43c5615-9630-4bab-8258-f3b32e00f304 Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=60795278-def0-4a60-ab82-70ccba27b218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cf:d2:f7:41:6d:06:aa:7d:29:4a:62:4b:b7: 2f:4f:41:95:fd:2a:8e:47:8e:60:62:b5:cb:57:7a: 20:84:d3:77:53:b3:3e:a6:d2:fa:11:14:25:f7:3b: 6e:6a:a9:96:a6:72:68:d9:2b:99:58:7c:ca:a7:b1: 43:7d:f5:7c:69:2a:88:b9:76:b8:2c:35:c9:79:47: db:c4:33:20:aa:31:c8:ea:48:29:f8:d6:f3:19:3f: 3a:ba:ba:be:ad:b2:c2:bd:cd:f6:1e:a6:92:af:75: 6f:9e:6c:4c:a5:cb:63:b2:b2:b2:cb:1f:29:e0:d8: 63:4d:bb:13:1e:79:c6:a0:b5:6e:a5:96:90:98:71: b0:b4:46:53:a9:92:e0:39:b7:1f:a5:b6:ef:56:42: 96:f6:d9:31:df:51:c4:3f:72:0c:9e:2a:37:78:63: aa:18:59:31:2a:a9:55:4a:83:a7:1c:8e:fe:fa:3a: 76:b1:95:7a:78:b0:aa:58:6f:8d:ea:73:a3:0b:99: d6:dd:7e:fc:1b:7d:64:fb:df:d6:c0:30:a5:a8:b5: 1b:3f:29:26:f7:33:3e:b7:c9:c6:83:21:29:1b:f1: f1:40:d6:1d:3d:1a:e8:1f:0b:d0:1d:64:0e:91:c9: 48:59:42:b4:34:e2:dd:30:20:2e:f9:ff:b8:df:3d: 75:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:71:5E:7B:85:99:4E:AF:C4:25:BF:48:C0:5C:4F:09:38:08:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl X509v3 Authority Key Identifier: keyid:F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer sbgp-ipAddrBlock: critical IPv4: 23.132.172.0/24 IPv6: 2602:f8c4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:03:3e:00:6d:30:9c:84:bd:79:d7:1a:a8:4f:cf:96:ea:6f: de:a0:c2:a7:0b:95:78:f8:2f:ad:4a:46:de:57:6d:2d:9f:da: dc:a4:a6:3f:6f:09:cd:8f:8b:49:54:e3:6f:cc:e0:5e:a6:9c: e2:2b:4c:5f:36:5b:1e:42:bc:a9:83:90:fa:bc:43:81:70:4a: 51:14:90:43:e0:b3:68:ec:74:ce:5b:b4:91:1b:6b:38:11:60: 58:f8:1f:11:6d:f6:53:7b:a6:ab:46:b3:c3:12:92:ae:89:0a: 25:4c:25:6c:82:fb:7d:55:17:d1:bf:0a:8c:e0:7f:61:32:e0: 19:53:8e:69:93:da:3e:c0:43:8b:38:85:25:ca:86:6d:4b:39: e0:e0:d9:72:47:78:53:d4:07:22:04:b5:d7:db:8d:0b:29:ac: 86:fa:ac:da:5f:04:d7:08:7d:94:e8:14:90:bd:e5:32:95:5b: a1:72:ec:b2:1f:3b:72:48:fe:b6:e0:2a:6c:4d:81:71:10:a6: 56:9f:cb:25:b8:c8:7a:4a:a7:1e:2f:a0:15:f3:fd:3e:2e:af: b3:25:89:ec:ba:e1:be:26:fb:fb:1a:c1:64:f0:a4:21:05:85: 96:03:06:48:aa:c7:d0:4b:25:11:d8:df:23:ce:a5:66:e2:e1: ae:73:54:1e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu82uTblRLcUPU77sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzYzU2MTUtOTYzMC00YmFiLTgyNTgtZjNiMzJlMDBm MzA0MB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk NjA3OTUyNzgtZGVmMC00YTYwLWFiODItNzBjY2JhMjdiMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM/S90FtBqp9KUpiS7cvT0GV/SqOR45gYrXL V3oghNN3U7M+ptL6ERQl9ztuaqmWpnJo2SuZWHzKp7FDffV8aSqIuXa4LDXJeUfb xDMgqjHI6kgp+NbzGT86urq+rbLCvc32HqaSr3VvnmxMpctjsrKyyx8p4NhjTbsT HnnGoLVupZaQmHGwtEZTqZLgObcfpbbvVkKW9tkx31HEP3IMnio3eGOqGFkxKqlV SoOnHI7++jp2sZV6eLCqWG+N6nOjC5nW3X78G31k+9/WwDClqLUbPykm9zM+t8nG gyEpG/HxQNYdPRroHwvQHWQOkclIWUK0NOLdMCAu+f+43z116wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJ5AcV57hZlOr8Qlv0jAXE8JOAjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNDNj NTYxNS05NjMwLTRiYWItODI1OC1mM2IzMmUwMGYzMDQvMWY4YjY5ZmQtMGY4OC0z ZDgzLTg2MTYtNTg3NmUwZDEwNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjQzYzU2MTUtOTYzMC00YmFiLTgy NTgtZjNiMzJlMDBmMzA0L2I0M2M1NjE1LTk2MzAtNGJhYi04MjU4LWYzYjMyZTAw ZjMwNC5jcmwwHwYDVR0jBBgwFoAU+Ghk2AJu3VHNPFT1gb/ooKEw/CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNDNjNTYxNS05NjMwLTRiYWItODI1OC1mM2Iz MmUwMGYzMDQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4SsMA4E AgACMAgDBgAmAvjEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoAz4AbTCchL151xqoT8+W6m/eoMKnC5V4 +C+tSkbeV20tn9rcpKY/bwnNj4tJVONvzOBeppziK0xfNlseQrypg5D6vEOBcEpR FJBD4LNo7HTOW7SRG2s4EWBY+B8RbfZTe6arRrPDEpKuiQolTCVsgvt9VRfRvwqM 4H9hMuAZU45pk9o+wEOLOIUlyoZtSzng4NlyR3hT1AciBLXX240LKayG+qzaXwTX CH2U6BSQveUylVuhcuyyHztySP624CpsTYFxEKZWn8sluMh6SqceL6AV8/0+Lq+z JYnsuuG+Jvv7GsFk8KQhBYWWAwZIqsfQSyUR2N8jzqVm4uGuc1Qe -----END CERTIFICATE-----Generated at Tue Nov 4 20:50:02 2025 by rpki-client