$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d704c7f9-6879-32d9-83c6-80566b0898b0.roa File: d704c7f9-6879-32d9-83c6-80566b0898b0.roa (raw, json) Hash identifier: bmkyNgAUMk4SNHGhvRrieNJLM+HsXAqoZahQpVdhfdw= Subject key identifier: 13:A6:0F:EF:E0:38:5D:89:65:FF:4C:98:46:88:F1:8D:8B:AD:BC:AF Certificate issuer: /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Certificate serial: 010D0C9F4328584B5C6CB4F33E266174E2583640 Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d704c7f9-6879-32d9-83c6-80566b0898b0.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 11878 IP address blocks: 23.234.64.0/24 maxlen: 32 23.234.65.0/24 maxlen: 32 23.234.66.0/24 maxlen: 32 23.234.67.0/24 maxlen: 32 173.249.214.0/24 maxlen: 32 173.249.215.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b4:f3:3e:26:61:74:e2:58:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=6d0001c2-9a38-44a0-8305-800455c70559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:a2:5f:da:0e:ad:d1:9f:82:52:50:20:c3: fd:7e:c6:f4:4a:d8:5d:e8:d0:ab:f0:c9:3d:ac:b4: 46:6d:09:49:2a:1e:fc:1d:bb:8b:48:0f:d3:57:87: fc:4f:c7:df:80:d4:64:ca:2c:4b:72:3c:37:8a:4d: e6:cd:38:54:a8:58:27:43:80:d0:7f:e3:3d:2d:49: 3e:2e:f4:37:9b:e5:75:15:a1:50:c9:cc:e6:30:36: c3:1b:ff:fc:04:1c:9c:1d:39:40:33:08:42:3d:b0: 17:8a:9b:c7:a8:3e:ea:f2:80:11:fa:e6:75:1d:84: e3:c2:3b:c3:4d:2d:49:b3:e0:76:83:df:6a:d3:51: aa:95:08:7d:c8:c1:d6:1f:6c:7a:af:d8:e9:aa:77: b9:38:02:57:5c:e9:d1:08:e9:7d:2c:3a:37:44:6f: ef:70:6c:25:99:c0:db:84:68:99:53:21:b6:9b:fd: 24:d8:50:d0:a6:2e:0b:54:16:38:ce:8c:ff:90:53: 30:52:e9:ae:3e:09:ec:95:4c:64:cf:cd:13:f2:39: ae:ee:5c:a1:6c:5d:00:74:30:4c:3c:9b:60:a7:f5: f4:84:bd:10:97:7c:6e:56:8a:64:b2:57:93:d9:2b: b3:da:c6:46:de:5e:b8:86:d1:db:1b:0b:ba:b8:2f: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A6:0F:EF:E0:38:5D:89:65:FF:4C:98:46:88:F1:8D:8B:AD:BC:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/d704c7f9-6879-32d9-83c6-80566b0898b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl X509v3 Authority Key Identifier: keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer sbgp-ipAddrBlock: critical IPv4: 23.234.64.0/22 173.249.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a5:b9:b4:88:75:17:d4:c0:07:e3:bf:46:fb:5d:bc:17:36: 55:93:7e:0e:41:d1:59:2d:ee:c9:57:c4:13:b7:7f:2e:3a:aa: 5b:19:7f:df:04:54:df:57:cc:61:e7:88:67:66:f7:53:38:6b: c6:57:68:65:3b:90:57:01:3c:d2:6b:98:d4:fb:e2:4d:4d:1a: 7f:7a:05:2a:2f:49:5b:86:53:05:46:62:62:be:af:7a:4a:9a: 05:c2:11:aa:9d:8e:45:69:70:bf:4f:b8:01:ab:22:62:ce:30: c5:3b:cf:ef:94:56:a2:5c:1f:b1:98:5f:ef:e5:3b:2d:1e:e0: c8:15:ed:af:f5:d0:93:e4:3a:c4:92:35:9b:66:4e:8c:10:e8: 4b:fd:7a:ed:68:c1:69:2e:c4:51:29:b3:47:ee:36:d1:de:a1: ac:e4:5c:ec:04:ae:e3:5c:c7:04:1d:11:8a:36:29:33:f4:b0: 14:f0:47:ba:fe:2a:61:e5:ad:cc:a3:ed:49:46:90:c9:fd:40: 90:b8:af:cc:f4:cf:77:91:8d:1e:08:34:96:d0:68:bb:c9:ac: d2:be:0d:c0:08:68:1c:71:03:e6:f6:9c:93:f5:9e:f0:03:4b: 6f:0c:f0:88:02:6f:7b:d6:5c:8d:88:d6:ad:55:2a:6a:44:d1: e0:56:29:fd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtcbLTzPiZhdOJYNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMzYmVhMGUtY2Q1Mi00OWE4LTljY2EtYTA1Y2MzM2Nl MDczMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NmQwMDAxYzItOWEzOC00NGEwLTgzMDUtODAwNDU1YzcwNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4iiX9oOrdGfglJQIMP9fsb0Sthd6NCr8Mk9 rLRGbQlJKh78HbuLSA/TV4f8T8ffgNRkyixLcjw3ik3mzThUqFgnQ4DQf+M9LUk+ LvQ3m+V1FaFQyczmMDbDG//8BBycHTlAMwhCPbAXipvHqD7q8oAR+uZ1HYTjwjvD TS1Js+B2g99q01GqlQh9yMHWH2x6r9jpqne5OAJXXOnRCOl9LDo3RG/vcGwlmcDb hGiZUyG2m/0k2FDQpi4LVBY4zoz/kFMwUumuPgnslUxkz80T8jmu7lyhbF0AdDBM PJtgp/X0hL0Ql3xuVopksleT2Suz2sZG3l64htHbGwu6uC8gvQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBOmD+/gOF2JZf9MmEaI8Y2LrbyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MzNi ZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVjYzMzY2UwNzMvZDcwNGM3ZjktNjg3OS0z MmQ5LTgzYzYtODA1NjZiMDg5OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTMzYmVhMGUtY2Q1Mi00OWE4LTlj Y2EtYTA1Y2MzM2NlMDczLzUzM2JlYTBlLWNkNTItNDlhOC05Y2NhLWEwNWNjMzNj ZTA3My5jcmwwHwYDVR0jBBgwFoAUMxi/JZqnskOqqLLCHXyjj+mzZWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MzNiZWEwZS1jZDUyLTQ5YTgtOWNjYS1hMDVj YzMzY2UwNzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCF+pAAwQB rfnWMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ2lubSIdRfUwAfjv0b7XbwXNlWTfg5B0Vkt7slXxBO3fy46 qlsZf98EVN9XzGHniGdm91M4a8ZXaGU7kFcBPNJrmNT74k1NGn96BSovSVuGUwVG YmK+r3pKmgXCEaqdjkVpcL9PuAGrImLOMMU7z++UVqJcH7GYX+/lOy0e4MgV7a/1 0JPkOsSSNZtmTowQ6Ev9eu1owWkuxFEps0fuNtHeoazkXOwEruNcxwQdEYo2KTP0 sBTwR7r+KmHlrcyj7UlGkMn9QJC4r8z0z3eRjR4INJbQaLvJrNK+DcAIaBxxA+b2 nJP1nvADS28M8IgCb3vWXI2I1q1VKmpE0eBWKf0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:28:13 2025 by rpki-client