$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa File: 2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json) Hash identifier: Oui5NVGr3ZfXgLtRhSW5vdI92rxQ8gysqwWZ6TxAf3s= Subject key identifier: 32:EE:09:26:E5:F7:27:0B:2A:58:A8:C8:9E:F3:6D:D6:52:5D:09:FE Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Certificate serial: 010D0C9F4328584B8632D1BF8FEAE4C47EC265C0 Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 401468 IP address blocks: 23.128.124.0/24 maxlen: 24 192.43.161.0/24 maxlen: 24 2602:f9a0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:32:d1:bf:8f:ea:e4:c4:7e:c2:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=7f418481-df81-4108-8598-20bee971b097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0c:18:c0:d3:31:bf:05:80:b7:7c:18:71:5f: d8:04:38:e8:7d:40:cc:09:8e:a1:49:b4:79:ef:3d: be:a8:49:c8:6e:14:1e:e6:5c:c8:b7:0b:84:00:0c: 6f:a1:f2:02:f8:aa:b2:0f:eb:d0:2a:04:cd:11:3d: 99:88:6b:96:5a:e2:4e:0d:2f:3c:8a:3d:88:42:29: 8f:d1:c5:92:e8:fd:df:2d:51:d4:a4:27:5d:c1:22: b7:ee:f5:7b:5a:88:e9:d2:1f:4f:2f:77:cf:06:8e: aa:f5:65:12:cc:1b:2b:5f:1e:63:f1:c1:b1:08:f5: 5a:8b:86:bd:04:f4:21:01:40:8e:1c:2a:4c:7b:d4: 28:e6:cb:85:18:58:28:a3:0c:1e:b7:d6:10:7d:56: 89:e9:f6:b5:ee:76:b9:15:20:14:6a:b4:fc:52:5f: 01:f0:ba:df:91:dc:dd:47:b2:21:6c:ac:93:c5:20: 59:ee:b4:fc:30:e3:03:ab:7b:1e:d6:aa:94:88:5b: 3e:b7:40:32:ee:d8:cb:1d:c0:20:86:23:e2:93:72: 33:05:82:02:41:b5:95:13:ab:ab:e6:98:52:c2:b8: 33:c3:2b:1f:7d:20:49:b7:95:56:e2:79:1c:d4:d1: 47:b3:64:17:51:24:97:7d:f0:28:ed:01:9f:25:cf: b0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EE:09:26:E5:F7:27:0B:2A:58:A8:C8:9E:F3:6D:D6:52:5D:09:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl X509v3 Authority Key Identifier: keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer sbgp-ipAddrBlock: critical IPv4: 23.128.124.0/24 192.43.161.0/24 IPv6: 2602:f9a0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:14:8d:4a:d4:9c:e8:34:62:e1:c6:38:3e:a4:7d:4c:8b:85: 24:f4:90:be:20:2b:56:cf:30:8f:52:02:1f:06:f0:0b:3d:88: 5b:4f:41:7f:6d:5e:37:df:3b:91:38:fc:1a:1a:ae:e0:05:9a: 60:07:40:ba:97:28:54:48:7f:84:31:12:12:b8:c3:be:10:eb: 08:ed:f4:01:3d:6e:ac:24:e8:b5:28:1e:65:0d:9a:93:b3:5d: 5e:9f:a0:c1:21:c5:26:ec:58:00:0e:8d:38:65:f7:69:3e:aa: 2b:6c:f2:d7:16:d6:ca:01:26:59:88:55:8f:04:82:18:27:65: c8:7d:0e:e2:59:6c:e8:63:de:28:1d:5f:4a:e2:58:75:7b:ff: 63:3d:5b:02:30:12:84:d2:bd:a4:29:c6:05:89:77:c4:63:ba: 68:3f:64:83:55:cc:e3:08:6f:4f:55:38:c2:e6:e3:01:db:b4: 51:e4:fc:ca:a5:2e:e4:db:5b:0c:87:69:be:b1:fa:c6:bd:08: 11:d2:e7:1d:56:ad:f0:12:2a:38:a0:76:bc:b6:09:c7:ee:cb: 22:07:fe:d4:ec:df:6c:50:f4:2f:4c:07:5e:12:f2:b2:21:35: 02:e4:b5:81:bc:cf:4e:26:d0:bb:78:a0:76:e8:42:3a:7c:2e: be:e4:d5:64 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEuGMtG/j+rkxH7CZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRi Njk3MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk N2Y0MTg0ODEtZGY4MS00MTA4LTg1OTgtMjBiZWU5NzFiMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwwYwNMxvwWAt3wYcV/YBDjofUDMCY6hSbR5 7z2+qEnIbhQe5lzItwuEAAxvofIC+KqyD+vQKgTNET2ZiGuWWuJODS88ij2IQimP 0cWS6P3fLVHUpCddwSK37vV7Wojp0h9PL3fPBo6q9WUSzBsrXx5j8cGxCPVai4a9 BPQhAUCOHCpMe9Qo5suFGFgoowwet9YQfVaJ6fa17na5FSAUarT8Ul8B8Lrfkdzd R7IhbKyTxSBZ7rT8MOMDq3se1qqUiFs+t0Ay7tjLHcAghiPik3IzBYICQbWVE6ur 5phSwrgzwysffSBJt5VW4nkc1NFHs2QXUSSXffAo7QGfJc+weQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDLuCSbl9ycLKlioyJ7zbdZSXQn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAz NTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvMmY0ZWU4N2UtMGU4Mi0z MWU5LTgzNjQtYzg4OTMwZTdkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmMwMzUwNjMtYmMwYi00MWMwLTlm NTAtOWNmYTBmOWRiNjk3L2ZjMDM1MDYzLWJjMGItNDFjMC05ZjUwLTljZmEwZjlk YjY5Ny5jcmwwHwYDVR0jBBgwFoAUiUAtol04ogGn/UcxVCqNgd9OaiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2Zh MGY5ZGI2OTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4B8AwQA wCuhMA4EAgACMAgDBgAmAvmgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQATFI1K1JzoNGLhxjg+pH1Mi4Uk 9JC+ICtWzzCPUgIfBvALPYhbT0F/bV433zuROPwaGq7gBZpgB0C6lyhUSH+EMRIS uMO+EOsI7fQBPW6sJOi1KB5lDZqTs11en6DBIcUm7FgADo04ZfdpPqorbPLXFtbK ASZZiFWPBIIYJ2XIfQ7iWWzoY94oHV9K4lh1e/9jPVsCMBKE0r2kKcYFiXfEY7po P2SDVczjCG9PVTjC5uMB27RR5PzKpS7k21sMh2m+sfrGvQgR0ucdVq3wEio4oHa8 tgnH7ssiB/7U7N9sUPQvTAdeEvKyITUC5LWBvM9OJtC7eKB26EI6fC6+5NVk -----END CERTIFICATE-----Generated at Mon Oct 20 21:10:10 2025 by rpki-client