$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa File: d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa (raw, json) Hash identifier: IAg6VrMnbH+fyIK8NhGn+YBIT4EQJSM8FB7GVy2RwRU= Subject key identifier: B2:D9:30:42:32:BA:E9:05:0F:3B:98:8B:1A:2A:B7:82:CC:DC:BD:4C Certificate issuer: /CN=3789343d-8560-48b0-9530-d2a1129fefe7 Certificate serial: 010D0C9F4328584B95A79B391707430066C05A40 Authority key identifier: 42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 401228 IP address blocks: 23.183.216.0/24 maxlen: 24 2602:f87c::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:9b:39:17:07:43:00:66:c0:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3789343d-8560-48b0-9530-d2a1129fefe7 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=872d1a6b-207e-4c78-bb5a-0e1138dfd75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:47:26:58:e6:5d:52:84:dc:cb:55:57:9a:9b: 80:e8:34:77:4b:24:09:9e:f4:7f:ac:c2:23:7f:0d: 77:e2:91:51:50:46:1b:85:5f:17:07:49:cf:c2:21: f4:75:c7:05:ca:5c:2f:10:e9:a1:ff:06:45:67:be: 31:02:41:18:b9:e7:49:28:45:86:42:39:54:d6:c3: 9c:73:ac:ee:7b:20:8d:4c:7e:75:ce:8c:bb:3c:7a: 97:2b:ab:8d:85:e3:84:bc:66:85:1d:0d:aa:6b:2a: df:08:69:ae:f0:fc:69:82:c6:2c:9e:42:da:d5:90: 73:cf:79:13:a5:96:4d:73:6c:20:32:0b:29:ea:ad: 05:64:d7:c4:7d:72:84:98:35:7e:95:79:38:8c:c0: a3:37:31:2d:29:ef:a0:36:5a:f4:9a:ad:89:9b:43: 1b:77:88:90:b2:53:d1:06:c0:30:22:b1:12:9a:18: 1e:94:46:23:63:1a:32:2f:f4:19:bf:11:4d:d0:35: c6:29:f2:be:48:a3:16:ec:a1:a2:90:89:0e:ef:14: 7c:17:4d:96:17:cf:ca:79:59:21:5e:38:ad:b8:d3: b1:99:44:29:fa:10:c6:27:a8:50:ef:2e:4c:3c:7f: 10:22:99:56:3a:9c:0d:ec:dd:35:8a:8a:f9:c1:67: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D9:30:42:32:BA:E9:05:0F:3B:98:8B:1A:2A:B7:82:CC:DC:BD:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/d603bc48-0e7c-3f9c-ac30-aa2ddd7af2bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7/3789343d-8560-48b0-9530-d2a1129fefe7.crl X509v3 Authority Key Identifier: keyid:42:FD:E7:FA:D2:03:A1:BC:60:07:16:6B:17:B1:BA:42:B9:C1:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3789343d-8560-48b0-9530-d2a1129fefe7.cer sbgp-ipAddrBlock: critical IPv4: 23.183.216.0/24 IPv6: 2602:f87c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:7e:72:2b:23:62:ec:fe:2e:44:44:9b:86:99:6b:a2:7c:5b: 70:26:03:d7:bb:d1:f1:35:60:5f:5f:19:e0:61:28:c2:1f:5b: 18:51:cf:5a:9d:af:8d:10:a4:c0:56:4a:28:17:69:76:40:26: 07:fa:e0:18:28:1e:d8:db:97:32:f5:b7:34:0b:99:94:23:9e: 4e:39:49:3f:3f:14:e6:8e:e0:53:48:12:69:96:d3:59:45:f8: 3f:67:0d:06:bf:18:be:6c:81:a8:da:4e:37:79:73:9e:8b:dc: 65:4e:cd:d7:e5:00:d5:ec:c3:51:62:b7:4f:98:88:81:c7:6c: 71:2e:7e:e1:2f:10:47:a9:fd:28:48:42:36:de:93:52:f6:9a: 94:51:6c:3b:78:6d:1c:90:c9:8b:29:f7:e8:a1:06:b5:78:b8: b9:5d:82:f6:89:45:e3:79:60:bc:33:c8:e8:fc:06:a8:6e:3b: 49:10:d4:37:35:13:5f:7e:81:1d:90:1b:a3:1e:c8:01:25:14: 64:ef:20:9d:01:9c:d4:b3:bc:10:43:ef:92:4a:90:c1:32:6d: e0:7f:75:a0:e1:0b:af:6b:0a:b2:6d:91:35:21:a0:1e:87:8e: 1d:8d:15:3a:a3:38:ae:e2:cf:66:2d:9e:d9:19:ec:86:0f:91: 2f:6c:e7:ea -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuVp5s5FwdDAGbAWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTM0M2QtODU2MC00OGIwLTk1MzAtZDJhMTEyOWZl ZmU3MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODcyZDFhNmItMjA3ZS00Yzc4LWJiNWEtMGUxMTM4ZGZkNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkcmWOZdUoTcy1VXmpuA6DR3SyQJnvR/rMIj fw134pFRUEYbhV8XB0nPwiH0dccFylwvEOmh/wZFZ74xAkEYuedJKEWGQjlU1sOc c6zueyCNTH51zoy7PHqXK6uNheOEvGaFHQ2qayrfCGmu8PxpgsYsnkLa1ZBzz3kT pZZNc2wgMgsp6q0FZNfEfXKEmDV+lXk4jMCjNzEtKe+gNlr0mq2Jm0Mbd4iQslPR BsAwIrESmhgelEYjYxoyL/QZvxFN0DXGKfK+SKMW7KGikIkO7xR8F02WF8/KeVkh XjituNOxmUQp+hDGJ6hQ7y5MPH8QIplWOpwN7N01ior5wWc5QwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLLZMEIyuukFDzuYixoqt4LM3L1MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zNzg5 MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmExMTI5ZmVmZTcvZDYwM2JjNDgtMGU3Yy0z ZjljLWFjMzAtYWEyZGRkN2FmMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzc4OTM0M2QtODU2MC00OGIwLTk1 MzAtZDJhMTEyOWZlZmU3LzM3ODkzNDNkLTg1NjAtNDhiMC05NTMwLWQyYTExMjlm ZWZlNy5jcmwwHwYDVR0jBBgwFoAUQv3n+tIDobxgBxZrF7G6QrnBmlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zNzg5MzQzZC04NTYwLTQ4YjAtOTUzMC1kMmEx MTI5ZmVmZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7fYMA4E AgACMAgDBgAmAvh8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzfnIrI2Ls/i5ERJuGmWuifFtwJgPXu9Hx NWBfXxngYSjCH1sYUc9ana+NEKTAVkooF2l2QCYH+uAYKB7Y25cy9bc0C5mUI55O OUk/PxTmjuBTSBJpltNZRfg/Zw0Gvxi+bIGo2k43eXOei9xlTs3X5QDV7MNRYrdP mIiBx2xxLn7hLxBHqf0oSEI23pNS9pqUUWw7eG0ckMmLKffooQa1eLi5XYL2iUXj eWC8M8jo/AaobjtJENQ3NRNffoEdkBujHsgBJRRk7yCdAZzUs7wQQ++SSpDBMm3g f3Wg4QuvawqybZE1IaAeh44djRU6oziu4s9mLZ7ZGeyGD5EvbOfq -----END CERTIFICATE-----Generated at Mon Oct 20 20:14:35 2025 by rpki-client