$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa File: f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa (raw, json) Hash identifier: tuvsYg9LDaULvngev+tOe4Gcs4+oe0mTh9XEznWQzaQ= Subject key identifier: 3B:73:B1:61:3C:D7:13:89:9A:69:F4:92:B3:BC:80:C3:F9:F4:2F:B0 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584AFC1C0F82F984C5CC7510ED80 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 401371 IP address blocks: 23.187.152.0/24 maxlen: 24 2602:f82d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0f:82:f9:84:c5:cc:75:10:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=546158dc-27cd-473d-8fdd-dbcca2a14398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9f:e9:7a:55:db:0a:b2:40:21:cd:33:55:60: 6d:e0:fa:bc:f8:e4:5c:4f:27:79:54:89:a8:83:e9: a0:99:0d:81:28:e0:28:97:05:42:e6:b0:ec:1f:a5: 87:65:c9:f2:69:47:13:f0:8e:40:b6:b4:c4:d5:b1: f7:10:c9:9f:9e:0d:34:90:21:fa:bc:9d:2f:20:c4: 4b:2f:9c:e1:5c:cc:88:42:18:bd:af:73:b4:64:84: 80:75:3f:e6:e0:01:22:42:a3:ca:50:48:9a:6e:6c: d2:cc:49:ae:ca:75:6a:68:43:f5:24:dc:b3:b4:7e: 4e:f5:b1:51:c5:87:12:48:b4:68:32:25:bc:f6:ad: c6:d0:97:4c:f6:69:e5:4a:7a:7a:9b:cb:25:3f:d7: cb:e2:95:e7:e6:28:fa:a5:6e:47:df:a9:18:59:43: d8:47:2c:6a:e5:dc:cd:9c:dc:3f:87:60:0b:f7:eb: 6e:09:fc:c2:e3:74:80:0c:e8:ef:45:dc:95:ec:19: e7:61:05:49:1d:2e:f1:9d:4b:a4:3f:45:0d:13:68: 79:49:0c:da:72:73:7d:fe:db:8a:fa:a8:13:5f:0c: 61:98:5e:4a:57:0e:35:93:17:09:ec:fd:26:a8:eb: 50:91:6b:94:09:f8:0f:21:3f:dd:e9:3d:a1:0f:8b: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:B1:61:3C:D7:13:89:9A:69:F4:92:B3:BC:80:C3:F9:F4:2F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/f8ba03ab-eb1d-305c-b6c7-6661ebf6f5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8a:f3:01:a9:6e:77:f8:db:f1:97:c8:ae:a3:ae:08:7b:42: 53:68:a2:eb:d2:c8:03:e9:a5:51:7f:ab:1d:11:32:cc:32:a8: d3:4f:70:d6:12:2d:f6:08:62:85:e2:6a:9c:3b:d4:02:f3:e8: 31:7b:bd:9c:d2:60:7d:c2:f8:39:4e:09:af:9c:76:02:a8:ac: d6:ba:c7:4c:2a:41:b4:de:14:71:97:32:1e:d0:78:16:55:be: e6:29:d8:3e:33:05:0c:7b:22:61:95:9f:c7:47:7b:d4:2b:ee: 6b:9e:33:24:bc:57:5c:a8:99:40:e2:80:f9:50:35:70:78:2d: b7:a3:88:fd:43:2e:96:ca:d3:32:55:27:fa:f6:a7:67:28:1c: 6d:89:5c:21:b9:b3:26:fa:7e:81:82:22:40:c0:d2:db:5c:e4: 7e:b3:56:32:c9:c8:42:98:5e:16:a3:58:66:67:c2:12:2a:09: a0:bb:f2:45:81:74:09:3c:9f:86:05:2c:b5:3b:3e:b8:21:d2: ce:50:86:ad:14:f1:d8:74:23:f9:24:9b:89:26:97:80:9f:71: 2b:60:a9:70:7a:b0:6d:db:42:f6:2a:fe:fb:72:7c:0e:d1:1a: dc:22:aa:29:d1:97:05:30:fc:59:b5:46:3d:e1:97:9d:b5:29: 98:07:b1:1c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr8HA+C+YTFzHUQ7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NTQ2MTU4ZGMtMjdjZC00NzNkLThmZGQtZGJjY2EyYTE0Mzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ/pelXbCrJAIc0zVWBt4Pq8+ORcTyd5VImo g+mgmQ2BKOAolwVC5rDsH6WHZcnyaUcT8I5AtrTE1bH3EMmfng00kCH6vJ0vIMRL L5zhXMyIQhi9r3O0ZISAdT/m4AEiQqPKUEiabmzSzEmuynVqaEP1JNyztH5O9bFR xYcSSLRoMiW89q3G0JdM9mnlSnp6m8slP9fL4pXn5ij6pW5H36kYWUPYRyxq5dzN nNw/h2AL9+tuCfzC43SADOjvRdyV7BnnYQVJHS7xnUukP0UNE2h5SQzacnN9/tuK +qgTXwxhmF5KVw41kxcJ7P0mqOtQkWuUCfgPIT/d6T2hD4v4vQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDtzsWE81xOJmmn0krO8gMP59C+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvZjhiYTAzYWItZWIxZC0z MDVjLWI2YzctNjY2MWViZjZmNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNivMBqW53+Nvxl8iuo64Ie0JTaKLr0sgD 6aVRf6sdETLMMqjTT3DWEi32CGKF4mqcO9QC8+gxe72c0mB9wvg5TgmvnHYCqKzW usdMKkG03hRxlzIe0HgWVb7mKdg+MwUMeyJhlZ/HR3vUK+5rnjMkvFdcqJlA4oD5 UDVweC23o4j9Qy6WytMyVSf69qdnKBxtiVwhubMm+n6BgiJAwNLbXOR+s1YyychC mF4Wo1hmZ8ISKgmgu/JFgXQJPJ+GBSy1Oz64IdLOUIatFPHYdCP5JJuJJpeAn3Er YKlwerBt20L2Kv77cnwO0RrcIqop0ZcFMPxZtUY94ZedtSmYB7Ec -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:45 2025 by rpki-client