$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa File: 466907d0-f56d-36c2-88cd-f7f59fa888e2.roa (raw, json) Hash identifier: qD/BlM5Zdl7hGhwjH4sZWWKKN3vsDzk0cZImG+2iJgE= Subject key identifier: 2B:97:9F:6F:38:F1:52:98:F5:37:98:CC:47:59:D8:69:A6:B5:37:B7 Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Certificate serial: 010D0C9F4328584B5DD1D9F03F5603D34388EA00 Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 394144 IP address blocks: 23.152.56.0/24 maxlen: 24 198.135.179.0/24 maxlen: 24 2602:2cd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:d9:f0:3f:56:03:d3:43:88:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=6d732dc1-8adc-45c8-9cdd-fc6fc4e22da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b9:96:2a:10:fd:56:58:1a:e0:88:0f:cf:f7: 9f:de:14:80:b0:28:78:5d:99:9e:64:8d:f2:16:9c: 04:99:06:74:51:a1:08:0d:53:c0:04:53:a1:28:39: 03:da:37:f8:58:ec:83:63:5a:c9:28:f7:fa:ca:96: c7:13:d0:58:c9:b6:98:c5:7e:59:14:45:73:2b:2b: 88:4f:ca:31:f1:30:ba:de:2a:0a:b1:7f:72:29:35: 98:93:43:cf:5a:cc:1b:b9:41:8d:1e:f4:bc:74:36: 76:2b:c4:df:7e:21:d0:bc:e7:a7:86:91:25:75:0b: 09:89:3f:a6:d2:97:47:0f:a4:09:9f:a6:c8:16:21: 98:d9:81:e2:08:e3:9d:64:f8:9f:ec:e7:fa:23:ff: 93:b1:1d:3b:af:84:f7:c4:39:90:c8:07:7d:18:67: bf:fa:62:d2:16:84:95:44:62:03:f9:2d:f3:0e:b0: 3a:fa:6d:f2:a0:55:c3:e7:f0:6c:90:27:f5:63:5b: 58:15:6a:67:ac:e1:3b:71:88:35:85:07:63:f8:f1: d0:2c:23:6c:8b:67:78:b5:7c:a1:13:d8:e9:dc:49: 3d:5d:cb:c4:6e:b9:56:36:48:c9:3c:fe:52:5a:1a: f2:dd:42:fd:82:5d:34:a2:10:4a:0f:6a:f2:52:4b: 1a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:97:9F:6F:38:F1:52:98:F5:37:98:CC:47:59:D8:69:A6:B5:37:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/466907d0-f56d-36c2-88cd-f7f59fa888e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl X509v3 Authority Key Identifier: keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer sbgp-ipAddrBlock: critical IPv4: 23.152.56.0/24 198.135.179.0/24 IPv6: 2602:2cd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:19:d9:98:6e:f6:f1:dc:10:a8:7b:0c:5f:0b:39:0d:cc:ff: f5:9a:22:22:2d:6c:59:b3:36:8b:e6:40:31:ff:e0:d8:8a:c1: 90:6e:3e:06:a2:bc:90:3d:24:36:b5:73:ab:ac:77:cd:6c:9b: c5:c6:f8:8e:2a:3c:9c:7f:9c:c3:76:6d:42:5b:b8:99:9d:94: 18:79:8c:ad:35:79:9f:a2:39:a1:4b:a4:be:0d:f5:41:48:d0: d2:d8:73:eb:2a:80:e7:b1:ef:02:09:1b:58:a9:79:63:dc:66: ea:c1:0c:6c:38:53:7e:5d:74:7b:4f:1d:cd:58:bf:68:0f:50: c8:ba:a2:21:e6:9a:d1:17:20:90:35:e7:87:cd:01:b7:b6:10: 7b:5f:74:2a:af:35:1b:5d:33:5f:67:b6:8a:d5:d9:dc:99:91: 95:64:bb:64:f5:82:64:6a:b4:85:e6:07:6d:cc:a2:8e:0a:71: d3:86:6a:5f:98:ad:30:86:55:9b:9e:ce:a6:14:ac:9b:e0:24: 8e:00:0c:4f:e3:c9:49:0d:e4:f9:55:73:3a:ee:1d:e9:c5:ed: 1b:e4:75:09:e7:01:32:7c:cd:ae:42:f5:5c:08:60:65:85:3e: 6c:75:08:20:fe:0c:b2:29:b8:d0:8a:54:94:85:59:e1:5c:aa: 58:39:90:62 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEtd0dnwP1YD00OI6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAy M2I0MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NmQ3MzJkYzEtOGFkYy00NWM4LTljZGQtZmM2ZmM0ZTIyZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLmWKhD9Vlga4IgPz/ef3hSAsCh4XZmeZI3y FpwEmQZ0UaEIDVPABFOhKDkD2jf4WOyDY1rJKPf6ypbHE9BYybaYxX5ZFEVzKyuI T8ox8TC63ioKsX9yKTWYk0PPWswbuUGNHvS8dDZ2K8TffiHQvOenhpEldQsJiT+m 0pdHD6QJn6bIFiGY2YHiCOOdZPif7Of6I/+TsR07r4T3xDmQyAd9GGe/+mLSFoSV RGID+S3zDrA6+m3yoFXD5/BskCf1Y1tYFWpnrOE7cYg1hQdj+PHQLCNsi2d4tXyh E9jp3Ek9XcvEbrlWNkjJPP5SWhry3UL9gl00ohBKD2ryUksaOwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFCuXn2848VKY9TeYzEdZ2GmmtTe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3 YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvNDY2OTA3ZDAtZjU2ZC0z NmMyLTg4Y2QtZjdmNTlmYTg4OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWJlN2JjZjUtMDUzOC00YTkyLTlh ZWYtYzQ2MGYxNTAyM2I0LzFiZTdiY2Y1LTA1MzgtNGE5Mi05YWVmLWM0NjBmMTUw MjNiNC5jcmwwHwYDVR0jBBgwFoAURZQqtWqdfjaPSQmspYB7dN4Nt2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYw ZjE1MDIzYjQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5g4AwQA xoezMA4EAgACMAgDBgQmAgLNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBiGdmYbvbx3BCoewxfCzkNzP/1 miIiLWxZszaL5kAx/+DYisGQbj4GoryQPSQ2tXOrrHfNbJvFxviOKjycf5zDdm1C W7iZnZQYeYytNXmfojmhS6S+DfVBSNDS2HPrKoDnse8CCRtYqXlj3GbqwQxsOFN+ XXR7Tx3NWL9oD1DIuqIh5prRFyCQNeeHzQG3thB7X3QqrzUbXTNfZ7aK1dncmZGV ZLtk9YJkarSF5gdtzKKOCnHThmpfmK0whlWbns6mFKyb4CSOAAxP48lJDeT5VXM6 7h3pxe0b5HUJ5wEyfM2uQvVcCGBlhT5sdQgg/gyyKbjQilSUhVnhXKpYOZBi -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:49 2025 by rpki-client