$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa File: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (raw, json) Hash identifier: ryIwUvBNJTvFWJtAvlV4CGbMvIdfHR/Lf2oTnh6CDFo= Subject key identifier: A6:1A:6D:1F:7D:83:C2:48:24:C7:13:D4:94:9C:48:14:81:C3:2B:A5 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584AFC1C0FE1D6E75CAD956BB300 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 401370 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0f:e1:d6:e7:5c:ad:95:6b:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=3134e4f6-8fd8-4f46-9716-15134b9aeb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:4e:da:bf:14:20:42:7a:7b:3c:60:eb:f4: 8b:f0:b9:7e:1e:a8:9a:e5:bf:9e:58:2d:8d:70:b0: e4:5c:12:96:87:98:2c:1f:df:95:ff:3f:4e:1d:fa: f6:51:05:1f:ca:ec:d0:29:be:22:13:9a:2e:db:64: 8e:57:32:45:bd:12:4f:5e:50:5a:50:28:33:41:25: e1:02:3d:00:2c:bf:f6:6a:78:1f:e6:2c:19:67:1b: b4:a8:ca:43:dd:85:41:0b:8a:56:6d:33:b2:f9:db: 5d:b0:aa:08:30:f3:70:4c:89:c3:30:45:88:6b:68: 67:b1:42:06:36:7c:66:66:7f:c6:ce:44:cb:7c:d8: 59:8e:cf:fd:d6:c4:db:83:5e:d9:06:40:04:9a:b5: dd:7d:47:83:ea:e4:d6:22:04:ae:e2:97:1a:f9:94: c8:2b:0b:82:e9:0c:f7:6a:37:aa:79:fd:97:5d:32: 56:7b:60:96:a1:93:87:01:99:b6:f6:90:9c:28:6c: f0:06:c4:28:d9:2c:b5:c6:36:d4:09:de:44:c9:bd: 71:9a:c8:ca:9a:e0:5a:91:82:6c:27:0a:14:6d:f3: 91:d0:30:c4:38:e4:a1:e7:9f:4e:9c:6d:52:84:fc: d6:86:31:3c:71:43:0b:f8:55:d9:6e:95:e8:84:4b: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1A:6D:1F:7D:83:C2:48:24:C7:13:D4:94:9C:48:14:81:C3:2B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:e2:ec:c6:ce:e0:7f:e5:20:61:8e:e8:2b:c1:75:c7:94:d0: 09:1c:9e:b3:63:d5:6c:9c:57:6c:63:f9:5b:57:6c:83:d1:95: 6b:85:e1:f1:6a:10:18:6a:34:a7:d3:b7:3b:51:be:06:ee:a6: 1b:1d:d6:78:d0:0c:a6:b6:71:99:a3:b1:a3:1a:11:2a:71:d8: 9d:bc:ae:c1:84:23:de:09:36:b0:16:1f:ca:b7:31:dc:27:db: fa:c7:ed:37:3b:01:4c:d0:97:75:19:c6:52:57:3a:67:d3:12: e3:f9:74:2b:81:ff:ca:cf:8a:59:30:11:8e:3f:27:16:a0:d6: 36:56:1b:9b:75:81:0c:4d:c3:ac:2e:85:aa:31:a7:9a:33:0e: d5:04:0b:a3:5f:bc:ef:da:62:31:37:00:b4:b4:92:da:26:7d: a1:d7:fd:c6:eb:51:23:a6:48:9a:06:39:14:75:13:bc:61:76: 5c:53:ff:f0:21:db:b1:f8:ae:c2:8b:8e:45:83:72:69:d2:08: 5f:c3:b3:60:18:b7:3d:56:da:45:db:70:43:32:c7:6d:90:59: f1:7a:9f:87:ca:69:72:02:bc:df:05:83:ce:69:f1:e5:a9:a5: 60:c0:c4:0f:fd:82:1d:c7:81:3f:d0:1e:75:b1:aa:81:d8:38: 10:0e:ea:8a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr8HA/h1udcrZVrswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MzEzNGU0ZjYtOGZkOC00ZjQ2LTk3MTYtMTUxMzRiOWFlYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiJO2r8UIEJ6ezxg6/SL8Ll+Hqia5b+eWC2N cLDkXBKWh5gsH9+V/z9OHfr2UQUfyuzQKb4iE5ou22SOVzJFvRJPXlBaUCgzQSXh Aj0ALL/2angf5iwZZxu0qMpD3YVBC4pWbTOy+dtdsKoIMPNwTInDMEWIa2hnsUIG NnxmZn/GzkTLfNhZjs/91sTbg17ZBkAEmrXdfUeD6uTWIgSu4pca+ZTIKwuC6Qz3 ajeqef2XXTJWe2CWoZOHAZm29pCcKGzwBsQo2Sy1xjbUCd5Eyb1xmsjKmuBakYJs JwoUbfOR0DDEOOSh559OnG1ShPzWhjE8cUML+FXZbpXohEvdpQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKYabR99g8JIJMcT1JScSBSBwyulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvNDRmY2FiZjAtZjg5Yy0z YmIxLWFkYjQtNTk1Y2U3MzAwODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCV4uzGzuB/5SBhjugrwXXHlNAJHJ6zY9Vs nFdsY/lbV2yD0ZVrheHxahAYajSn07c7Ub4G7qYbHdZ40AymtnGZo7GjGhEqcdid vK7BhCPeCTawFh/KtzHcJ9v6x+03OwFM0Jd1GcZSVzpn0xLj+XQrgf/Kz4pZMBGO PycWoNY2VhubdYEMTcOsLoWqMaeaMw7VBAujX7zv2mIxNwC0tJLaJn2h1/3G61Ej pkiaBjkUdRO8YXZcU//wIdux+K7Ci45Fg3Jp0ghfw7NgGLc9VtpF23BDMsdtkFnx ep+HymlyArzfBYPOafHlqaVgwMQP/YIdx4E/0B51saqB2DgQDuqK -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:45 2025 by rpki-client