$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa File: 663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa (raw, json) Hash identifier: iBQp0G87AWGTbX9OPBNg3MfDRbQpo+Y7whxYyyrbg1k= Subject key identifier: 66:2F:9D:8D:A0:0D:BC:2C:70:26:62:90:23:11:0F:C0:99:F6:0C:6D Certificate issuer: /CN=d884379a-447d-445c-b465-3fe894aa66ec Certificate serial: 010D0C9F4328584B970CCC340BF905A1E486B880 Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 40712 IP address blocks: 23.134.244.0/24 maxlen: 24 2602:f6e2::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:cc:34:0b:f9:05:a1:e4:86:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=87abf8ec-68e2-461e-b2d2-72289da1e622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:c8:c2:37:87:b8:fc:a1:f1:39:c6:2a:bf: 52:d5:a3:8d:91:45:30:3b:c8:14:34:36:06:cf:1f: 40:80:6e:67:96:8b:97:2e:be:82:04:b8:8d:83:8c: 62:a1:f6:6f:7f:9b:a5:c0:52:e2:be:8a:3a:5c:b6: ed:db:8d:35:55:0f:23:2c:9c:37:51:b2:47:c2:4c: cb:28:8a:f7:05:3e:8e:b4:f4:71:fa:62:9e:9c:ee: 06:e3:e1:db:ad:06:05:9e:82:89:08:08:9d:9f:34: a2:27:2d:ee:c4:04:3a:27:41:df:d0:bd:b0:76:31: 4c:10:2e:25:25:66:cf:8f:0d:36:f5:bc:d5:a0:c6: cd:de:93:78:a4:f3:ce:f6:7d:11:f6:da:5c:14:1a: e0:2d:ea:94:1e:c9:63:99:f8:1f:8e:1a:c7:33:4c: 55:ad:be:8f:0e:8a:c7:c2:2c:03:59:4b:5b:b1:4d: 36:32:47:6c:51:07:5d:3d:ff:4d:e8:42:b1:47:45: 2d:c6:e6:18:b4:90:30:4d:f0:b9:08:99:f8:98:58: 9d:27:a4:44:8e:47:a3:20:7f:75:96:5d:5f:55:bd: a1:d6:d4:03:cb:4e:3c:2f:d5:72:09:11:b4:c9:ae: 6e:87:5a:5b:6d:01:46:ac:c4:ea:03:01:aa:40:7f: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2F:9D:8D:A0:0D:BC:2C:70:26:62:90:23:11:0F:C0:99:F6:0C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl X509v3 Authority Key Identifier: keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.244.0/24 IPv6: 2602:f6e2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e1:c1:9a:05:da:c2:92:ee:fd:a6:f5:aa:69:2b:07:3e:6f: 4a:30:df:2e:aa:0b:9a:bb:a7:31:c3:1c:40:e7:b5:38:75:14: 79:b0:85:ed:f8:f1:42:c1:16:bf:fd:ff:23:b8:54:7f:fc:ca: 72:92:40:df:b3:2b:9f:cc:bd:e1:af:e5:75:9d:2c:1f:59:d5: 5a:d4:b5:a7:e3:ce:cb:50:78:bf:53:43:82:7f:58:e3:ae:2f: 8d:4a:43:69:c3:d7:2b:0b:e0:9e:7a:d7:71:94:c5:63:ef:48: 5f:81:95:4c:53:ca:cb:6f:d1:90:fd:2d:a6:1f:c6:a7:54:af: 66:8e:97:e1:91:dc:08:fa:24:92:bd:a1:2b:0e:71:1e:9f:9d: a1:25:7f:7a:f4:68:8a:c1:02:ec:72:fa:10:27:ef:70:56:bb: c9:e7:4a:5a:be:77:3d:3f:32:65:c5:65:2e:d5:31:4d:3f:f9: 0a:ad:48:90:33:4b:51:e1:fc:58:25:2f:4e:1c:f5:17:bd:cf: 0a:06:b6:3c:1d:0e:ae:44:c4:82:c2:ae:9f:d5:37:2a:5b:ee: 59:23:d1:ff:39:9a:31:06:75:4a:85:ef:78:bb:6c:90:5a:85: e8:db:b4:12:6e:54:e7:df:ea:a8:bb:71:69:25:e4:22:e4:ef: 11:9b:44:84 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuXDMw0C/kFoeSGuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NDM3OWEtNDQ3ZC00NDVjLWI0NjUtM2ZlODk0YWE2 NmVjMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ODdhYmY4ZWMtNjhlMi00NjFlLWIyZDItNzIyODlkYTFlNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ7IwjeHuPyh8TnGKr9S1aONkUUwO8gUNDYG zx9AgG5nlouXLr6CBLiNg4xiofZvf5ulwFLivoo6XLbt2401VQ8jLJw3UbJHwkzL KIr3BT6OtPRx+mKenO4G4+HbrQYFnoKJCAidnzSiJy3uxAQ6J0Hf0L2wdjFMEC4l JWbPjw029bzVoMbN3pN4pPPO9n0R9tpcFBrgLeqUHsljmfgfjhrHM0xVrb6PDorH wiwDWUtbsU02MkdsUQddPf9N6EKxR0UtxuYYtJAwTfC5CJn4mFidJ6REjkejIH91 ll1fVb2h1tQDy048L9VyCRG0ya5uh1pbbQFGrMTqAwGqQH9c7QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGYvnY2gDbwscCZikCMRD8CZ9gxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kODg0 Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4OTRhYTY2ZWMvNjYzYjY1NTQtOGZmMy0z ZmQwLThkM2YtZGFhZjk0ZTAyNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDg4NDM3OWEtNDQ3ZC00NDVjLWI0 NjUtM2ZlODk0YWE2NmVjL2Q4ODQzNzlhLTQ0N2QtNDQ1Yy1iNDY1LTNmZTg5NGFh NjZlYy5jcmwwHwYDVR0jBBgwFoAUCaY/g3z0aM5v5uBZTUdBH5jhZpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kODg0Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4 OTRhYTY2ZWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b0MA4E AgACMAgDBgQmAvbiADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH4cGaBdrCku79pvWqaSsHPm9KMN8uqgua u6cxwxxA57U4dRR5sIXt+PFCwRa//f8juFR//MpykkDfsyufzL3hr+V1nSwfWdVa 1LWn487LUHi/U0OCf1jjri+NSkNpw9crC+CeetdxlMVj70hfgZVMU8rLb9GQ/S2m H8anVK9mjpfhkdwI+iSSvaErDnEen52hJX969GiKwQLscvoQJ+9wVrvJ50pavnc9 PzJlxWUu1TFNP/kKrUiQM0tR4fxYJS9OHPUXvc8KBrY8HQ6uRMSCwq6f1TcqW+5Z I9H/OZoxBnVKhe94u2yQWoXo27QSblTn3+qou3FpJeQi5O8Rm0SE -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:35 2025 by rpki-client