$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa File: d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa (raw, json) Hash identifier: Cy55k8QuhtGVkvURk86QEJnGSgpXYIcmqHEsCH+XWuM= Subject key identifier: 9E:A7:3C:31:3C:D2:2B:BA:11:DF:FF:EA:C3:0C:7A:74:B9:EF:4F:54 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584AFC1C0FF4CFD856BAD4BB9580 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 401369 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0f:f4:cf:d8:56:ba:d4:bb:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=9ad9a22e-1771-4a4c-82b5-aa7ae80afbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e2:00:35:61:6a:87:43:a9:ab:22:64:0b:51: 25:f1:cb:4b:8e:d3:7b:02:72:22:14:81:f1:f5:b0: 1a:27:b3:3e:bf:d9:b8:fa:d2:42:41:0c:c0:3c:50: 6b:b3:a5:34:95:79:64:82:ba:12:df:35:d7:b7:bf: b7:77:56:12:cb:86:a8:a2:3e:ab:a7:00:77:42:9d: da:20:f0:70:8e:5e:15:56:e3:bd:21:8f:4c:17:4a: 18:6b:09:d9:d7:52:46:95:18:75:0f:b6:72:5a:e2: 4f:e5:88:82:28:ed:cc:12:d7:0e:0a:1f:65:e5:08: 2c:aa:60:0c:50:48:80:90:59:d1:26:e2:49:87:9d: 84:fa:c9:50:95:bd:6b:eb:25:41:2f:f7:fc:1d:54: 33:c2:f0:bd:e5:ae:1c:00:f4:5a:d4:86:f4:1e:28: cf:f6:ff:12:bd:9a:01:a2:e6:49:7b:98:58:d0:14: c0:b5:97:c9:e2:87:54:b9:e4:65:0c:f2:cd:e3:87: 47:4a:65:a2:e3:96:a4:eb:c6:40:32:9a:eb:a8:0f: fd:78:14:92:28:a8:44:9f:86:59:69:48:4e:6f:22: d6:85:a4:3f:67:6e:20:73:2b:3f:bb:87:5b:ae:2b: e4:01:43:6c:3b:0e:fc:9d:07:29:10:12:0e:0b:17: f0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A7:3C:31:3C:D2:2B:BA:11:DF:FF:EA:C3:0C:7A:74:B9:EF:4F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d6c17614-b6c8-3e14-9443-1922a25dd1ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:db:da:64:b7:33:18:c7:56:53:aa:bd:72:17:ee:65:b7:2c: 2a:6c:6d:ce:46:e9:88:1d:a3:29:93:9a:95:48:e8:b6:a0:82: fa:57:9e:5f:67:21:08:f7:39:70:c0:10:07:ab:41:a4:2b:cb: 6b:b2:84:3d:1d:51:25:72:9f:0c:cf:53:dc:60:a6:50:fe:4f: 5c:45:54:b3:b0:b5:2f:c2:03:7b:c9:58:9d:26:57:74:1d:ff: 52:fc:59:f2:f2:a5:cf:e9:66:ef:1d:4d:2a:1d:d1:b5:fb:12: 82:45:5a:d6:17:3e:1c:1f:10:41:a8:b1:9d:8d:75:26:4d:0f: 5f:ae:ba:3b:1b:dc:80:c5:41:40:11:c6:e2:56:3f:e9:a6:91: 4c:0d:99:1e:88:1c:30:e9:31:35:28:9d:25:c9:00:16:f9:d2: d3:4a:dd:57:ee:a5:38:6e:5c:9b:62:fc:a4:25:2d:ea:8a:ed: f0:1d:db:7f:f2:9b:05:68:e0:69:e4:53:03:27:82:5d:09:a4: 4f:83:1a:a0:f5:ef:36:c4:20:67:ae:5b:04:0d:54:46:b4:f7: e2:62:0a:77:da:21:29:ff:d5:a4:eb:6d:f9:7f:33:6a:d3:6a: 81:36:90:55:df:5b:10:21:29:fe:2b:3f:b7:ff:ef:b4:1d:bf: f5:af:37:df -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr8HA/0z9hWutS7lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWFkOWEyMmUtMTc3MS00YTRjLTgyYjUtYWE3YWU4MGFmYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieIANWFqh0OpqyJkC1El8ctLjtN7AnIiFIHx 9bAaJ7M+v9m4+tJCQQzAPFBrs6U0lXlkgroS3zXXt7+3d1YSy4aooj6rpwB3Qp3a IPBwjl4VVuO9IY9MF0oYawnZ11JGlRh1D7ZyWuJP5YiCKO3MEtcOCh9l5QgsqmAM UEiAkFnRJuJJh52E+slQlb1r6yVBL/f8HVQzwvC95a4cAPRa1Ib0HijP9v8SvZoB ouZJe5hY0BTAtZfJ4odUueRlDPLN44dHSmWi45ak68ZAMprrqA/9eBSSKKhEn4ZZ aUhObyLWhaQ/Z24gcys/u4dbrivkAUNsOw78nQcpEBIOCxfwiQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJ6nPDE80iu6Ed//6sMMenS5709UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZDZjMTc2MTQtYjZjOC0z ZTE0LTk0NDMtMTkyMmEyNWRkMWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAs29pktzMYx1ZTqr1yF+5ltywqbG3ORumI HaMpk5qVSOi2oIL6V55fZyEI9zlwwBAHq0GkK8trsoQ9HVElcp8Mz1PcYKZQ/k9c RVSzsLUvwgN7yVidJld0Hf9S/Fny8qXP6WbvHU0qHdG1+xKCRVrWFz4cHxBBqLGd jXUmTQ9frro7G9yAxUFAEcbiVj/pppFMDZkeiBww6TE1KJ0lyQAW+dLTSt1X7qU4 blybYvykJS3qiu3wHdt/8psFaOBp5FMDJ4JdCaRPgxqg9e82xCBnrlsEDVRGtPfi Ygp32iEp/9Wk6235fzNq02qBNpBV31sQISn+Kz+3/++0Hb/1rzff -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:31 2025 by rpki-client