$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa File: 3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa (raw, json) Hash identifier: 3ksiEsF+3U53vd3UPjLHJ2Yy0dHpvttBvMG26ThyHeM= Subject key identifier: 8F:1E:04:BA:ED:D1:18:70:9E:20:00:25:DF:61:E3:A4:18:20:D0:D9 Certificate issuer: /CN=c9d8d2d7-c780-4688-bbc9-433d4b540641 Certificate serial: 010D0C9F4328584B9F6CDF2429FD9EC0ADF9BB20 Authority key identifier: FB:B4:43:43:74:73:89:35:FE:E9:E2:20:7C:C5:22:87:FE:03:31:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 396313 IP address blocks: 23.171.128.0/24 maxlen: 24 199.250.60.0/22 maxlen: 24 2602:fef2::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:df:24:29:fd:9e:c0:ad:f9:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d8d2d7-c780-4688-bbc9-433d4b540641 Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=1def1580-5bdb-453c-9c31-1aafb8898fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:08:29:5f:99:42:74:69:a0:2d:71:f2:57: 2b:34:ed:3e:8d:7c:93:ec:a2:78:f1:84:f1:50:d8: bc:b7:61:a8:34:2c:90:05:7f:45:80:01:3a:b3:e1: dd:55:09:39:51:7b:46:ad:d1:3b:8e:5b:a3:48:c7: ae:b0:69:34:3e:13:a5:81:3a:cc:84:61:28:e1:d7: b5:0c:17:70:93:d8:d6:9c:a5:d9:fa:91:50:5d:78: 60:58:92:f9:e2:c7:df:b2:fd:f5:e2:3e:c7:58:60: be:44:d4:cb:41:2f:ff:02:52:f2:db:dc:8d:9b:c9: 01:df:f4:58:42:84:24:ce:0e:4a:3e:26:bb:50:11: be:51:7a:03:b7:f3:88:3d:77:8b:7b:cf:bd:55:ec: 0c:85:ad:82:26:14:80:d0:cb:eb:f0:ea:1b:64:82: 88:17:d8:ba:c8:7e:8a:10:f8:d4:bb:ab:88:54:8b: 50:cb:4b:5d:93:1b:70:89:91:7f:dc:57:6c:5c:0b: 8c:02:8c:fd:9c:fb:d8:cf:d2:c5:ea:0d:16:17:d6: 84:0b:c0:cd:0f:57:b8:bb:20:16:eb:a6:44:96:bc: 41:7a:06:a4:6a:99:4e:82:72:51:41:40:59:41:18: 07:35:a4:cf:f7:c4:9d:eb:fe:2a:2b:c0:43:d1:ee: 84:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1E:04:BA:ED:D1:18:70:9E:20:00:25:DF:61:E3:A4:18:20:D0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.crl X509v3 Authority Key Identifier: keyid:FB:B4:43:43:74:73:89:35:FE:E9:E2:20:7C:C5:22:87:FE:03:31:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer sbgp-ipAddrBlock: critical IPv4: 23.171.128.0/24 199.250.60.0/22 IPv6: 2602:fef2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:68:3e:46:ff:a4:fb:86:86:43:f9:8b:0b:b5:a5:c8:90:48: 2a:d2:74:b4:ea:d9:55:e2:f2:3f:23:7a:55:55:36:f1:b1:7f: 5c:c7:6a:94:8e:68:92:d9:f6:01:28:b7:ff:e9:58:3e:fc:6a: 84:85:53:83:e0:b2:d9:b5:68:bd:9c:ce:6a:98:b5:1a:87:9f: 33:0f:8f:63:f0:2d:20:41:b2:de:ff:b7:1c:3a:6c:4a:11:60: bf:c0:f5:18:6f:77:72:93:34:ca:d8:88:d9:9a:1f:aa:e8:16: 0f:e0:b7:40:9b:a3:32:65:ec:25:b3:25:42:11:cf:65:aa:4e: 07:d5:9f:f0:8e:8a:cb:ae:8f:5c:43:20:08:f3:75:ea:ce:cf: e2:8b:a1:56:14:49:e3:09:bb:ca:3c:fc:61:e8:87:5a:b3:e9: dd:12:9b:7e:a6:a3:f7:46:b7:2a:ca:a1:43:5e:65:3d:cf:9b: 7c:89:26:be:28:f8:dd:94:12:34:d0:b8:cd:d9:07:ba:ee:92: 61:b2:89:7e:90:ca:50:4d:9b:50:94:0e:f4:0b:0a:a3:6b:9b: ac:d2:7e:7d:0c:b5:a0:cf:2c:f9:5d:0f:24:82:21:b0:ab:d8: 52:9a:6f:e4:fd:a9:1c:f5:fa:6b:49:5b:af:6a:92:69:04:f3: 45:21:a1:2b -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEufbN8kKf2ewK35uyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkOGQyZDctYzc4MC00Njg4LWJiYzktNDMzZDRiNTQw NjQxMB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk MWRlZjE1ODAtNWJkYi00NTNjLTljMzEtMWFhZmI4ODk4ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszYIKV+ZQnRpoC1x8lcrNO0+jXyT7KJ48YTx UNi8t2GoNCyQBX9FgAE6s+HdVQk5UXtGrdE7jlujSMeusGk0PhOlgTrMhGEo4de1 DBdwk9jWnKXZ+pFQXXhgWJL54sffsv314j7HWGC+RNTLQS//AlLy29yNm8kB3/RY QoQkzg5KPia7UBG+UXoDt/OIPXeLe8+9VewMha2CJhSA0Mvr8OobZIKIF9i6yH6K EPjUu6uIVItQy0tdkxtwiZF/3FdsXAuMAoz9nPvYz9LF6g0WF9aEC8DND1e4uyAW 66ZElrxBegakaplOgnJRQUBZQRgHNaTP98Sd6/4qK8BD0e6EiwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFI8eBLrt0RhwniAAJd9h46QYINDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jOWQ4 ZDJkNy1jNzgwLTQ2ODgtYmJjOS00MzNkNGI1NDA2NDEvM2Q5ZDQwMzItZDIwMC0z YmYxLTgyYzQtZGNmYmY2MDdiZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzlkOGQyZDctYzc4MC00Njg4LWJi YzktNDMzZDRiNTQwNjQxL2M5ZDhkMmQ3LWM3ODAtNDY4OC1iYmM5LTQzM2Q0YjU0 MDY0MS5jcmwwHwYDVR0jBBgwFoAU+7RDQ3RziTX+6eIgfMUih/4DMekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jOWQ4ZDJkNy1jNzgwLTQ2ODgtYmJjOS00MzNk NGI1NDA2NDEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6uAAwQC x/o8MA4EAgACMAgDBgQmAv7yADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMaD5G/6T7hoZD+YsLtaXIkEgq 0nS06tlV4vI/I3pVVTbxsX9cx2qUjmiS2fYBKLf/6Vg+/GqEhVOD4LLZtWi9nM5q mLUah58zD49j8C0gQbLe/7ccOmxKEWC/wPUYb3dykzTK2IjZmh+q6BYP4LdAm6My ZewlsyVCEc9lqk4H1Z/wjorLro9cQyAI83Xqzs/ii6FWFEnjCbvKPPxh6Idas+nd Ept+pqP3RrcqyqFDXmU9z5t8iSa+KPjdlBI00LjN2Qe67pJhsol+kMpQTZtQlA70 Cwqja5us0n59DLWgzyz5XQ8kgiGwq9hSmm/k/akc9fprSVuvapJpBPNFIaEr -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:35 2025 by rpki-client