$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa File: 5c8b5541-b81c-355e-9b23-a80ca613a215.roa (raw, json) Hash identifier: HDjdbrEnbcq1CoeauZZNkA1X45Ins6zYlqoGziGGiws= Subject key identifier: 30:26:F9:2F:B8:D3:9A:13:F1:2C:B4:50:3A:07:CF:32:30:A5:BD:54 Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Certificate serial: 010D0C9F4328584B84E7878745FF00270AEC0880 Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16611 IP address blocks: 23.153.216.0/24 maxlen: 24 2602:2de::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:87:87:45:ff:00:27:0a:ec:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=82d5bf7d-9221-4b6c-9256-a4f4f9b7edcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:c0:e2:b5:73:f2:b8:e2:d7:43:d1:b5:79: aa:20:f5:d7:7b:14:60:e2:4c:5d:27:86:5f:96:32: 66:33:ea:e3:e1:bc:cb:db:c1:a0:d8:a9:45:78:2e: 06:e1:47:4a:e0:8d:2c:63:95:72:2c:57:d0:10:5f: 81:1f:93:4b:c4:7e:7c:d7:70:e0:b3:0c:a6:1a:54: f1:9d:42:2f:98:28:13:f6:01:44:ba:21:6e:a3:24: da:0f:50:75:84:b4:85:3c:c8:15:f0:4f:6b:bc:c4: 31:51:21:e8:df:4d:c8:04:cb:07:e9:b0:6f:97:4c: 71:ef:dd:c5:98:c2:ca:ff:c7:6c:53:34:6f:58:76: 7d:ce:56:db:23:a3:4c:38:33:4f:38:d9:3d:37:32: dd:d6:26:4f:9b:d4:be:03:9b:dc:fe:21:60:4b:14: fd:67:b8:f8:3e:bb:74:cf:db:c1:90:b4:db:f9:fc: d5:94:41:b6:73:36:6e:8a:04:44:31:be:47:42:3b: 33:b3:8b:6b:05:59:d2:02:d5:d2:45:85:5b:76:d8: 07:89:d1:70:d5:fe:da:2b:57:95:d1:81:54:94:65: 4f:bf:a4:18:1f:c6:36:98:40:e6:0d:8a:c0:cc:10: b1:0a:79:2f:b2:73:46:4d:7e:94:b2:55:c3:f7:74: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:26:F9:2F:B8:D3:9A:13:F1:2C:B4:50:3A:07:CF:32:30:A5:BD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5c8b5541-b81c-355e-9b23-a80ca613a215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl X509v3 Authority Key Identifier: keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.216.0/24 IPv6: 2602:2de::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a2:ef:83:b9:23:4b:79:48:37:b4:47:ef:3f:cc:72:95:83: 56:73:28:05:59:a7:8d:73:79:1d:77:c6:dc:15:21:f6:e3:39: b8:25:fd:c0:69:24:60:b7:2d:a9:f7:a8:3a:26:d6:78:b8:79: 47:f0:b9:ae:1d:b9:4f:e1:8a:ce:bf:71:86:b2:41:cd:08:72: 7d:b6:de:d9:b9:dc:d9:b1:93:e5:c6:01:0c:0d:f3:97:ec:e5: f5:94:0d:58:a7:a5:fd:55:23:31:14:5d:45:2c:fa:e4:e7:fd: 77:f2:28:9e:a5:29:fe:b6:64:96:88:db:f6:14:73:70:a9:60: 79:7a:bf:19:47:83:4b:50:d1:90:a9:cb:6b:ab:7b:70:26:e0: cd:c4:86:57:88:9d:62:8c:0f:62:2b:e5:10:46:d3:d6:db:41: 03:cb:96:f9:6e:84:d3:12:f8:5c:b8:67:39:12:40:78:79:13: fb:9e:f2:4d:ae:06:c4:57:54:d8:20:22:cd:13:8c:0e:07:1f: df:ee:e4:94:fb:d3:3e:3f:12:1b:c2:a4:51:a2:41:ef:47:7f: 65:fe:36:46:21:c0:a9:ab:bb:d8:0d:0b:b7:c7:e2:c0:23:ee: ef:38:5c:f6:0c:05:9f:12:77:aa:38:6a:ff:90:44:df:cf:3c: 25:86:f8:05 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuE54eHRf8AJwrsCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5 ZWIxMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODJkNWJmN2QtOTIyMS00YjZjLTkyNTYtYTRmNGY5YjdlZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5TA4rVz8rji10PRtXmqIPXXexRg4kxdJ4Zf ljJmM+rj4bzL28Gg2KlFeC4G4UdK4I0sY5VyLFfQEF+BH5NLxH5813DgswymGlTx nUIvmCgT9gFEuiFuoyTaD1B1hLSFPMgV8E9rvMQxUSHo303IBMsH6bBvl0xx793F mMLK/8dsUzRvWHZ9zlbbI6NMODNPONk9NzLd1iZPm9S+A5vc/iFgSxT9Z7j4Prt0 z9vBkLTb+fzVlEG2czZuigREMb5HQjszs4trBVnSAtXSRYVbdtgHidFw1f7aK1eV 0YFUlGVPv6QYH8Y2mEDmDYrAzBCxCnkvsnNGTX6UslXD93RAHwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDAm+S+405oT8Sy0UDoHzzIwpb1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvNWM4YjU1NDEtYjgxYy0z NTVlLTliMjMtYTgwY2E2MTNhMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4 OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz MGMyODllYjEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5nYMA4E AgACMAgDBgQmAgLeADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAou+DuSNLeUg3tEfvP8xylYNWcygFWaeN c3kdd8bcFSH24zm4Jf3AaSRgty2p96g6JtZ4uHlH8LmuHblP4YrOv3GGskHNCHJ9 tt7ZudzZsZPlxgEMDfOX7OX1lA1Yp6X9VSMxFF1FLPrk5/138iiepSn+tmSWiNv2 FHNwqWB5er8ZR4NLUNGQqctrq3twJuDNxIZXiJ1ijA9iK+UQRtPW20EDy5b5boTT EvhcuGc5EkB4eRP7nvJNrgbEV1TYICLNE4wOBx/f7uSU+9M+PxIbwqRRokHvR39l /jZGIcCpq7vYDQu3x+LAI+7vOFz2DAWfEneqOGr/kETfzzwlhvgF -----END CERTIFICATE-----Generated at Mon Oct 20 12:37:49 2025 by rpki-client