$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa File: c00ef155-85c4-36fa-98b1-e12fe962553e.roa (raw, json) Hash identifier: Y6tCVjKRPbonBDXBtYYceCtUgT6q1LskjTCs+Zy8/9o= Subject key identifier: 76:10:EC:BE:9F:4D:DA:BC:4C:AA:DC:A2:88:9A:09:8E:9E:11:E5:8B Certificate issuer: /CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569 Certificate serial: 010D0C9F4328584B44B1B2DA3DFD930D210F9720 Authority key identifier: D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 11611 IP address blocks: 23.158.112.0/24 maxlen: 24 2602:fd61::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:b2:da:3d:fd:93:0d:21:0f:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0b1b62e-9aba-4733-9d96-9b7c59dd9569 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=c93bc146-88c3-436f-baf2-48098fba09f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:95:86:2a:4f:57:bd:31:04:b6:45:41:86: 56:82:d2:e6:5c:3b:a2:2f:dc:f1:22:99:36:f0:23: 2d:5d:c0:b4:91:2e:fe:1a:5b:7d:ac:a3:fb:1d:61: 87:aa:f1:d5:43:25:ac:bd:78:d4:f7:02:d9:b3:13: ee:88:3f:5a:9d:01:ea:24:18:e9:c9:cf:ab:75:88: ad:d5:d8:00:d9:47:cb:c6:48:5e:31:5a:93:72:d9: 13:ad:2d:67:95:2e:0c:d9:67:05:64:f5:6e:bc:fb: 07:b2:f9:8e:fa:86:1c:93:b4:09:5f:44:4b:8a:1b: 68:b9:78:55:09:9a:d9:c8:c8:75:96:32:1b:65:a2: d8:5a:c7:f6:5c:65:24:30:82:6a:97:2f:00:a8:18: ca:53:41:71:4f:b0:af:93:d3:b8:4f:4e:29:4c:24: e8:a0:8e:eb:72:a5:cb:59:a2:5c:c5:41:97:c2:d0: d5:93:66:29:ec:f4:23:8e:52:13:68:c4:d6:dc:5e: 74:5f:21:d6:37:ff:96:66:c6:41:38:27:13:2c:c8: 72:a8:30:a3:bf:78:3b:22:ec:ba:fb:a3:74:ad:e7: 16:9a:1a:ad:08:6f:25:c3:02:4c:fc:f3:97:ed:6b: 4e:3e:64:34:74:60:12:13:37:6e:20:70:f3:bc:00: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:10:EC:BE:9F:4D:DA:BC:4C:AA:DC:A2:88:9A:09:8E:9E:11:E5:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c00ef155-85c4-36fa-98b1-e12fe962553e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.crl X509v3 Authority Key Identifier: keyid:D8:83:AB:A6:FA:D6:F8:25:52:27:F7:05:20:66:A6:20:7C:AC:ED:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c0b1b62e-9aba-4733-9d96-9b7c59dd9569.cer sbgp-ipAddrBlock: critical IPv4: 23.158.112.0/24 IPv6: 2602:fd61::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:8b:6e:26:37:e1:0b:4f:71:fc:02:c4:b7:5f:a9:d2:58:99: 5b:83:1a:5f:5f:59:cf:32:8d:bb:25:03:45:53:36:86:e8:58: 9d:88:b2:45:1a:70:79:06:ce:b1:90:af:a0:29:17:16:cb:1a: e0:86:36:00:39:6d:91:0b:6d:1c:7e:8f:5c:58:ea:fd:ae:0c: 64:6b:5f:0a:90:a4:39:aa:3d:2f:33:3e:7c:20:f2:97:a5:73: ba:c4:b1:55:16:06:c7:06:13:a3:89:39:6c:30:c7:7b:d0:80: f3:e3:15:b2:ad:0c:73:a5:b8:de:7f:69:b1:4f:24:c1:b0:ec: bb:75:aa:9a:dc:3d:82:9e:18:05:bd:bf:f3:60:63:14:ca:8d: f7:d9:c5:43:ef:bb:8d:dc:2e:0d:5b:51:c7:5d:0c:a9:1a:64: b1:fb:dc:10:86:40:1f:a7:5c:ae:64:41:ed:51:d9:25:a5:52: e0:a2:f7:dc:6b:62:44:64:e5:39:95:18:0f:f5:37:1f:15:7e: 58:48:93:9b:9a:b4:f1:85:76:41:00:1b:c7:f1:7a:a2:79:a5: 75:c9:ab:57:4b:1f:54:f9:ad:9a:f9:46:68:55:29:b5:04:d2: ce:1c:9f:05:10:ea:c5:1a:07:6d:98:da:95:26:1a:a0:e3:ee: a1:76:52:db -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEtEsbLaPf2TDSEPlyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBiMWI2MmUtOWFiYS00NzMzLTlkOTYtOWI3YzU5ZGQ5 NTY5MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk YzkzYmMxNDYtODhjMy00MzZmLWJhZjItNDgwOThmYmEwOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmyVhipPV70xBLZFQYZWgtLmXDuiL9zxIpk2 8CMtXcC0kS7+Glt9rKP7HWGHqvHVQyWsvXjU9wLZsxPuiD9anQHqJBjpyc+rdYit 1dgA2UfLxkheMVqTctkTrS1nlS4M2WcFZPVuvPsHsvmO+oYck7QJX0RLihtouXhV CZrZyMh1ljIbZaLYWsf2XGUkMIJqly8AqBjKU0FxT7Cvk9O4T04pTCTooI7rcqXL WaJcxUGXwtDVk2Yp7PQjjlITaMTW3F50XyHWN/+WZsZBOCcTLMhyqDCjv3g7Iuy6 +6N0recWmhqtCG8lwwJM/POX7WtOPmQ0dGASEzduIHDzvABYGQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFHYQ7L6fTdq8TKrcooiaCY6eEeWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMGIx YjYyZS05YWJhLTQ3MzMtOWQ5Ni05YjdjNTlkZDk1NjkvYzAwZWYxNTUtODVjNC0z NmZhLTk4YjEtZTEyZmU5NjI1NTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzBiMWI2MmUtOWFiYS00NzMzLTlk OTYtOWI3YzU5ZGQ5NTY5L2MwYjFiNjJlLTlhYmEtNDczMy05ZDk2LTliN2M1OWRk OTU2OS5jcmwwHwYDVR0jBBgwFoAU2IOrpvrW+CVSJ/cFIGamIHys7YMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMGIxYjYyZS05YWJhLTQ3MzMtOWQ5Ni05Yjdj NTlkZDk1NjkuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF55wMA0E AgACMAcDBQAmAv1hMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEWLbiY34QtPcfwCxLdfqdJYmVuDGl9fWc8y jbslA0VTNoboWJ2IskUacHkGzrGQr6ApFxbLGuCGNgA5bZELbRx+j1xY6v2uDGRr XwqQpDmqPS8zPnwg8pelc7rEsVUWBscGE6OJOWwwx3vQgPPjFbKtDHOluN5/abFP JMGw7Lt1qprcPYKeGAW9v/NgYxTKjffZxUPvu43cLg1bUcddDKkaZLH73BCGQB+n XK5kQe1R2SWlUuCi99xrYkRk5TmVGA/1Nx8VflhIk5uatPGFdkEAG8fxeqJ5pXXJ q1dLH1T5rZr5RmhVKbUE0s4cnwUQ6sUaB22Y2pUmGqDj7qF2Uts= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:46 2025 by rpki-client