$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa File: 07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa (raw, json) Hash identifier: PjELS/QnKS2IBwWwibumauK9stkkSrm+b4J3NV/1hc4= Subject key identifier: 5D:88:DD:9A:C4:12:3F:90:12:22:5A:03:7D:14:BA:88:A6:58:4C:9A Certificate issuer: /CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Certificate serial: 010D0C9F4328584B6E91F511F13A05B29E09C960 Authority key identifier: 1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 398174 IP address blocks: 23.147.80.0/24 maxlen: 24 2602:802:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:f5:11:f1:3a:05:b2:9e:09:c9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=f92bca73-3b93-4ab2-a8f6-7cc170a18485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b3:b9:64:b9:c3:41:8a:f6:d6:0f:37:c3:4f: 7c:bf:b8:96:ef:6d:42:38:54:15:a6:28:6b:7f:c1: 85:50:70:2a:4c:af:06:bd:f2:7c:7b:aa:64:67:4c: f1:0a:e4:63:14:58:76:11:ce:2c:6a:14:ea:05:b1: 2e:0d:c8:ba:3a:5a:a4:eb:7a:34:27:c1:fe:b9:68: 6a:47:64:6b:fb:3c:3f:9d:fa:47:ce:e0:27:2b:8f: e9:be:ba:e6:5b:41:0d:97:71:e2:60:8f:64:4c:6f: fe:be:ba:29:ff:99:17:6d:e2:92:a0:91:a1:dc:85: a1:86:5e:d7:ac:d7:cc:1e:8d:c0:ea:59:0c:d0:1c: c1:58:30:de:e8:f7:c2:f5:d0:1a:5e:0f:01:21:d1: 6a:2b:75:b5:4b:05:7f:b2:8d:dc:7d:ea:c6:82:02: a8:bd:97:07:d9:71:08:c7:d8:d2:89:c9:6b:5c:91: ca:2c:72:e8:60:88:fa:61:09:b9:7d:6c:2e:99:9c: 7f:fd:30:32:69:d2:0a:26:f9:54:12:62:d6:08:df: 83:ae:6b:97:60:7e:5e:e9:ea:4c:30:a9:5e:ba:07: c9:37:df:4e:d5:b9:b0:39:b8:d7:59:62:fa:d4:a3: 8d:e4:96:18:09:1d:35:1b:2c:a8:1b:1c:49:2f:74: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:88:DD:9A:C4:12:3F:90:12:22:5A:03:7D:14:BA:88:A6:58:4C:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl X509v3 Authority Key Identifier: keyid:1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer sbgp-ipAddrBlock: critical IPv4: 23.147.80.0/24 IPv6: 2602:802:7000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ae:f4:4d:56:bc:60:35:d0:a1:e6:a8:2d:18:13:2c:03:ec: 28:9e:5d:29:e9:3a:b3:31:e8:24:fa:d2:c0:30:a0:ba:47:7a: 1b:18:f0:83:10:f6:a5:88:93:a4:5d:a8:1a:d7:e5:b8:1d:3f: 6d:e4:c8:9b:6e:bd:c8:79:09:4c:2f:91:ea:a2:4f:7b:96:7f: c5:fc:e6:ed:f1:8f:86:1f:20:13:8f:60:76:0a:70:0e:a0:34: 7c:52:c5:cd:cc:73:ad:8d:3e:72:78:f9:53:ae:1e:2f:5f:fe: 9b:3f:18:a8:54:e7:3b:c5:f8:9b:83:4a:5e:8d:2e:68:59:18: 14:c7:ce:2c:7d:a2:7c:cf:e0:34:77:9a:c6:35:1f:f3:7f:48: 65:48:33:51:75:45:b5:7a:7e:04:35:85:07:7a:18:c6:b2:77: b7:86:29:de:5b:b9:70:31:ca:09:84:26:f2:8d:ee:62:89:2a: cd:8e:e1:03:cc:b2:75:17:d0:49:31:50:74:5f:c7:80:5b:d8: 0f:5d:c2:a3:9a:99:05:7a:62:e5:f2:22:99:8d:45:92:11:64: 00:a2:b3:f7:b0:bf:6b:5f:e0:b9:ea:0b:0b:68:89:1f:a3:77: 55:e2:d6:49:9d:e2:5d:23:79:38:70:90:d4:49:6d:8a:7a:0b: df:9e:15:a2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtukfUR8ToFsp4JyWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxZTAyODctOGFiNC00MzBiLTlmMDktMGM0NWZhOGQ3 NzEzMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjkyYmNhNzMtM2I5My00YWIyLWE4ZjYtN2NjMTcwYTE4NDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLO5ZLnDQYr21g83w098v7iW721COFQVpihr f8GFUHAqTK8GvfJ8e6pkZ0zxCuRjFFh2Ec4sahTqBbEuDci6Olqk63o0J8H+uWhq R2Rr+zw/nfpHzuAnK4/pvrrmW0ENl3HiYI9kTG/+vrop/5kXbeKSoJGh3IWhhl7X rNfMHo3A6lkM0BzBWDDe6PfC9dAaXg8BIdFqK3W1SwV/so3cferGggKovZcH2XEI x9jSiclrXJHKLHLoYIj6YQm5fWwumZx//TAyadIKJvlUEmLWCN+DrmuXYH5e6epM MKleugfJN99O1bmwObjXWWL61KON5JYYCR01GyyoGxxJL3Rg7QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFF2I3ZrEEj+QEiJaA30UuoimWEyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMjFl MDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1ZmE4ZDc3MTMvMDdjZGU2NWEtODMxNS0z YmI2LWExNTMtNjhkZDJkZGZlYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjIxZTAyODctOGFiNC00MzBiLTlm MDktMGM0NWZhOGQ3NzEzLzIyMWUwMjg3LThhYjQtNDMwYi05ZjA5LTBjNDVmYThk NzcxMy5jcmwwHwYDVR0jBBgwFoAUHEGrBWrRcQ68xXL9zqGB367fp3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMjFlMDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1 ZmE4ZDc3MTMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5NQMA4E AgACMAgDBgAmAggCcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWrvRNVrxgNdCh5qgtGBMsA+wonl0p6Tqz Megk+tLAMKC6R3obGPCDEPaliJOkXaga1+W4HT9t5Mibbr3IeQlML5Hqok97ln/F /Obt8Y+GHyATj2B2CnAOoDR8UsXNzHOtjT5yePlTrh4vX/6bPxioVOc7xfibg0pe jS5oWRgUx84sfaJ8z+A0d5rGNR/zf0hlSDNRdUW1en4ENYUHehjGsne3hineW7lw McoJhCbyje5iiSrNjuEDzLJ1F9BJMVB0X8eAW9gPXcKjmpkFemLl8iKZjUWSEWQA orP3sL9rX+C56gsLaIkfo3dV4tZJneJdI3k4cJDUSW2KegvfnhWi -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:40 2025 by rpki-client