$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/6cbc79c9-8cbf-30c1-890e-ab54e9688782.roa File: 6cbc79c9-8cbf-30c1-890e-ab54e9688782.roa (raw, json) Hash identifier: 55Qc5QJa3qKYsrbp8Fk+vOneJVl/q7FE7a13obWxVH0= Subject key identifier: 78:5B:CC:D5:74:56:92:27:40:19:49:94:CB:02:92:A3:2E:B4:6C:15 Certificate issuer: /CN=137f9174-32a4-4183-9e4e-4171f06758bc Certificate serial: 010D0C9F4328584B79BCB9B9AAC1D11C4B42B680 Authority key identifier: 8C:A6:74:1E:32:A7:D0:64:52:8F:A0:B6:16:76:94:EB:15:96:9D:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/6cbc79c9-8cbf-30c1-890e-ab54e9688782.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 12056 IP address blocks: 23.252.208.0/20 maxlen: 24 172.97.0.0/21 maxlen: 24 2604:2440::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/137f9174-32a4-4183-9e4e-4171f06758bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/137f9174-32a4-4183-9e4e-4171f06758bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b9:b9:aa:c1:d1:1c:4b:42:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137f9174-32a4-4183-9e4e-4171f06758bc Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=ce541afb-ad50-4447-9b3c-1156f6638cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:35:eb:4c:4e:f0:26:f3:b0:59:f1:3f:26: 04:5e:fa:e4:01:f9:77:50:59:62:7b:65:09:ff:a7: 74:47:72:00:d1:f5:d7:d0:0b:36:60:41:20:60:61: 89:fb:bb:4a:02:34:79:a0:11:6c:40:b2:58:53:0f: 18:6c:11:96:22:d6:4d:2d:30:be:cd:01:19:2f:b7: 91:cf:10:b0:82:e5:bc:ca:21:65:5a:3b:7b:51:54: d7:c3:07:bf:4a:a0:d1:5a:10:d1:fe:76:c0:c8:be: c4:e6:0d:07:cc:09:87:92:f3:87:f7:3f:a0:b1:f5: e3:63:d3:7b:8f:48:eb:ff:21:7a:6d:5f:9b:f1:0e: 38:3e:ab:89:3a:4b:57:be:8c:14:62:7e:d6:a1:1e: 01:49:e3:94:7a:06:ad:02:95:bb:26:df:26:3a:ad: 01:ab:ed:06:f7:36:c3:7e:f7:42:09:e6:ff:02:b6: 23:f2:51:ad:32:44:a3:de:11:42:89:49:9c:e7:76: 2e:99:75:79:a9:26:5f:2e:19:d5:77:20:af:ca:12: 5e:14:fe:ef:ba:c4:5e:51:18:c8:bd:73:c8:cf:47: f2:26:59:ec:ee:cb:d4:7b:1d:e3:d6:8b:c0:cd:c3: 6c:40:2d:4b:41:aa:29:b2:b2:84:fc:28:8a:12:1f: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5B:CC:D5:74:56:92:27:40:19:49:94:CB:02:92:A3:2E:B4:6C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/6cbc79c9-8cbf-30c1-890e-ab54e9688782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/137f9174-32a4-4183-9e4e-4171f06758bc.crl X509v3 Authority Key Identifier: keyid:8C:A6:74:1E:32:A7:D0:64:52:8F:A0:B6:16:76:94:EB:15:96:9D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc.cer sbgp-ipAddrBlock: critical IPv4: 23.252.208.0/20 172.97.0.0/21 IPv6: 2604:2440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4c:8e:1d:99:b3:0b:ee:b9:c6:b0:02:32:6e:23:d0:8e:e1: bf:3a:88:25:c7:71:97:0f:52:6b:8e:17:ce:32:06:6e:ca:47: ab:84:ac:a1:08:cf:1e:5c:b8:a1:68:9a:b4:1b:d6:f3:4d:b7: 46:f7:57:30:46:9b:bc:43:6b:0a:b2:ac:83:c1:60:6a:39:ed: b0:31:8c:c9:cc:2b:31:15:f3:d8:00:7c:12:66:19:0e:2c:e9: 6c:1a:1c:45:47:e1:c1:df:c0:47:cd:d0:29:70:af:89:a9:7d: 29:be:09:70:3a:03:cc:9d:39:8a:f4:f2:0b:b7:e4:3d:1d:c3: 78:22:7e:61:e6:33:03:18:29:58:97:5a:3f:a0:93:a3:31:97: ba:60:ce:b6:e1:1c:a9:cc:63:17:8b:b3:16:4d:dd:70:be:4b: ce:eb:36:81:74:b1:f3:e8:97:b9:6f:d7:36:26:4b:6d:8a:f0: 42:bb:9f:b2:d3:76:f2:dc:87:c8:e4:63:d2:59:0a:78:ff:b1: e3:59:0a:d4:03:1a:c0:72:5c:0e:ae:93:36:6a:e3:26:2b:37: c2:7b:ba:b3:6a:79:22:c5:0e:71:62:fc:a7:9c:00:98:ba:b7: b9:77:a4:9e:0d:c8:e0:05:53:af:58:4f:e6:0f:07:95:16:0c: cb:1b:0d:df -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEt5vLm5qsHRHEtCtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM3ZjkxNzQtMzJhNC00MTgzLTllNGUtNDE3MWYwNjc1 OGJjMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk Y2U1NDFhZmItYWQ1MC00NDQ3LTliM2MtMTE1NmY2NjM4Y2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpw160xO8CbzsFnxPyYEXvrkAfl3UFlie2UJ /6d0R3IA0fXX0As2YEEgYGGJ+7tKAjR5oBFsQLJYUw8YbBGWItZNLTC+zQEZL7eR zxCwguW8yiFlWjt7UVTXwwe/SqDRWhDR/nbAyL7E5g0HzAmHkvOH9z+gsfXjY9N7 j0jr/yF6bV+b8Q44PquJOktXvowUYn7WoR4BSeOUegatApW7Jt8mOq0Bq+0G9zbD fvdCCeb/ArYj8lGtMkSj3hFCiUmc53YumXV5qSZfLhnVdyCvyhJeFP7vusReURjI vXPIz0fyJlns7svUex3j1ovAzcNsQC1LQaopsrKE/CiKEh8GPwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFHhbzNV0VpInQBlJlMsCkqMutGwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMzdm OTE3NC0zMmE0LTQxODMtOWU0ZS00MTcxZjA2NzU4YmMvNmNiYzc5YzktOGNiZi0z MGMxLTg5MGUtYWI1NGU5Njg4NzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTM3ZjkxNzQtMzJhNC00MTgzLTll NGUtNDE3MWYwNjc1OGJjLzEzN2Y5MTc0LTMyYTQtNDE4My05ZTRlLTQxNzFmMDY3 NThiYy5jcmwwHwYDVR0jBBgwFoAUjKZ0HjKn0GRSj6C2FnaU6xWWna0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMzdmOTE3NC0zMmE0LTQxODMtOWU0ZS00MTcx ZjA2NzU4YmMuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEF/zQAwQD rGEAMA0EAgACMAcDBQAmBCRAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACBMjh2ZswvuucawAjJuI9CO4b86 iCXHcZcPUmuOF84yBm7KR6uErKEIzx5cuKFomrQb1vNNt0b3VzBGm7xDawqyrIPB YGo57bAxjMnMKzEV89gAfBJmGQ4s6WwaHEVH4cHfwEfN0Clwr4mpfSm+CXA6A8yd OYr08gu35D0dw3gifmHmMwMYKViXWj+gk6Mxl7pgzrbhHKnMYxeLsxZN3XC+S87r NoF0sfPol7lv1zYmS22K8EK7n7LTdvLch8jkY9JZCnj/seNZCtQDGsByXA6ukzZq 4yYrN8J7urNqeSLFDnFi/KecAJi6t7l3pJ4NyOAFU69YT+YPB5UWDMsbDd8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:24 2025 by rpki-client