$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa File: f1428052-35e1-39f6-a7a4-5464e85eb554.roa (raw, json) Hash identifier: gSpvbmYHnYoM7O8jSJH732EOmkaBLKLRvQktq2c31CA= Subject key identifier: 23:57:2B:DF:9B:FB:51:F5:35:4C:DF:A6:FC:61:EB:42:5E:34:81:12 Certificate issuer: /CN=1d52c1d1-8920-4ee9-a78f-3ec07db187a7 Certificate serial: 010D0C9F4328584B77EAB882122ACEAAC2B9DCC0 Authority key identifier: 4E:BC:CC:38:96:22:CA:6D:F4:C6:79:E3:F8:A9:09:59:A9:52:72:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa Signing time: Wed 08 Oct 2025 19:07:49 +0000 ROA not before: Wed 08 Oct 2025 19:07:49 +0000 ROA not after: Tue 06 Jan 2026 20:07:49 +0000 asID: 402069 IP address blocks: 23.147.12.0/24 maxlen: 24 2602:f525::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:ea:b8:82:12:2a:ce:aa:c2:b9:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d52c1d1-8920-4ee9-a78f-3ec07db187a7 Validity Not Before: Oct 8 19:07:49 2025 GMT Not After : Jan 6 20:07:49 2026 GMT Subject: CN=b2ebb9b5-2523-4790-9cb9-f315303f14e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d1:c6:44:66:3d:65:ee:4d:20:a6:74:5c:34: 9b:b5:9d:a1:13:2e:5e:ca:62:70:6f:e5:ea:03:66: e6:b5:c8:34:2e:8f:29:91:1e:4a:23:e3:65:0e:6d: df:32:9d:82:f2:e0:13:14:0d:1e:2d:77:7f:be:a6: ba:e7:10:79:af:c2:a2:93:af:97:fd:39:5a:66:d6: a2:c6:fc:ef:5f:56:06:5f:e5:50:ba:7d:4c:5b:31: 6c:7d:e4:bc:1e:14:48:b3:14:71:c9:d1:3a:4d:c2: 7e:a5:1e:f8:bf:39:c7:cf:3c:d8:98:c1:f2:9d:8d: c9:4e:bd:fc:81:9f:a4:62:cc:03:64:46:7e:f0:d5: c4:9a:1f:21:28:c8:60:0e:7a:f6:ca:14:6c:84:a3: 10:2d:01:41:2d:10:ed:fa:35:ae:56:42:7d:1a:94: d2:29:20:4b:0e:45:35:f5:37:b1:96:de:2f:d0:71: c1:88:37:0a:fa:66:4d:48:d0:94:fd:19:e2:76:1b: e7:58:d1:2d:b1:48:74:25:d8:a5:b1:b8:96:40:a1: 1e:bf:60:a8:99:9c:e2:6c:cb:02:1a:31:6c:3e:51: cb:fb:33:0a:c1:49:9a:8f:33:66:d4:a0:89:0f:fb: 2c:ce:80:a0:da:e7:9e:9e:3c:0c:0e:10:25:3a:ca: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:57:2B:DF:9B:FB:51:F5:35:4C:DF:A6:FC:61:EB:42:5E:34:81:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/f1428052-35e1-39f6-a7a4-5464e85eb554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.crl X509v3 Authority Key Identifier: keyid:4E:BC:CC:38:96:22:CA:6D:F4:C6:79:E3:F8:A9:09:59:A9:52:72:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1d52c1d1-8920-4ee9-a78f-3ec07db187a7.cer sbgp-ipAddrBlock: critical IPv4: 23.147.12.0/24 IPv6: 2602:f525::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:00:a5:00:db:c7:c4:77:bc:91:07:2a:c5:34:5c:88:3a:c1: 4b:9e:5c:67:06:71:97:d3:f1:94:5e:4d:20:78:9b:88:ae:51: bd:ea:3f:6c:67:34:d5:66:c3:d7:5f:61:1a:ba:32:09:b7:71: 55:c2:52:2e:f6:b6:f8:c8:87:c8:63:83:38:97:68:f9:2a:99: 91:bb:2a:80:5a:62:c7:8c:c4:a3:bc:04:b6:da:7e:4e:5e:cd: ca:e5:49:23:74:4f:e0:17:96:11:10:0b:ec:ee:d2:33:75:3d: 70:9d:e1:b6:a3:21:ed:56:70:7c:65:69:df:ef:c6:18:c9:34: d4:3d:87:91:58:13:3b:9f:0e:8a:8c:04:1c:a8:df:1d:cd:2e: 9d:38:40:62:4a:2c:42:60:03:50:2e:89:22:a4:05:1d:0f:30: c3:5b:11:51:2b:8d:7b:2a:c5:af:bd:50:e0:30:68:7c:b8:d2: 86:6a:1d:14:9e:45:de:d6:2e:03:68:ae:f4:0d:87:ba:c7:42: db:b0:06:6b:ba:d8:fc:22:89:ce:7c:8a:13:b0:2c:05:f8:80: 7c:dc:1f:ac:e8:dd:61:3e:da:52:dd:fb:bc:07:10:b6:71:6f: a8:17:70:62:9b:f0:4e:5b:c8:f8:78:5b:26:1a:f2:e2:d6:70: 2d:99:65:c7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEt36riCEirOqsK53MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ1MmMxZDEtODkyMC00ZWU5LWE3OGYtM2VjMDdkYjE4 N2E3MB4XDTI1MTAwODE5MDc0OVoXDTI2MDEwNjIwMDc0OVowLzEtMCsGA1UEAxMk YjJlYmI5YjUtMjUyMy00NzkwLTljYjktZjMxNTMwM2YxNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NHGRGY9Ze5NIKZ0XDSbtZ2hEy5eymJwb+Xq A2bmtcg0Lo8pkR5KI+NlDm3fMp2C8uATFA0eLXd/vqa65xB5r8Kik6+X/TlaZtai xvzvX1YGX+VQun1MWzFsfeS8HhRIsxRxydE6TcJ+pR74vznHzzzYmMHynY3JTr38 gZ+kYswDZEZ+8NXEmh8hKMhgDnr2yhRshKMQLQFBLRDt+jWuVkJ9GpTSKSBLDkU1 9Texlt4v0HHBiDcK+mZNSNCU/RnidhvnWNEtsUh0JdilsbiWQKEev2ComZzibMsC GjFsPlHL+zMKwUmajzNm1KCJD/sszoCg2ueenjwMDhAlOsre2wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCNXK9+b+1H1NUzfpvxh60JeNIESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xZDUy YzFkMS04OTIwLTRlZTktYTc4Zi0zZWMwN2RiMTg3YTcvZjE0MjgwNTItMzVlMS0z OWY2LWE3YTQtNTQ2NGU4NWViNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWQ1MmMxZDEtODkyMC00ZWU5LWE3 OGYtM2VjMDdkYjE4N2E3LzFkNTJjMWQxLTg5MjAtNGVlOS1hNzhmLTNlYzA3ZGIx ODdhNy5jcmwwHwYDVR0jBBgwFoAUTrzMOJYiym30xnnj+KkJWalScj8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xZDUyYzFkMS04OTIwLTRlZTktYTc4Zi0zZWMw N2RiMTg3YTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MMMA4E AgACMAgDBgAmAvUlADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQAKUA28fEd7yRByrFNFyIOsFLnlxnBnGX 0/GUXk0geJuIrlG96j9sZzTVZsPXX2EaujIJt3FVwlIu9rb4yIfIY4M4l2j5KpmR uyqAWmLHjMSjvAS22n5OXs3K5UkjdE/gF5YREAvs7tIzdT1wneG2oyHtVnB8ZWnf 78YYyTTUPYeRWBM7nw6KjAQcqN8dzS6dOEBiSixCYANQLokipAUdDzDDWxFRK417 KsWvvVDgMGh8uNKGah0UnkXe1i4DaK70DYe6x0LbsAZrutj8IonOfIoTsCwF+IB8 3B+s6N1hPtpS3fu8BxC2cW+oF3Bim/BOW8j4eFsmGvLi1nAtmWXH -----END CERTIFICATE-----Generated at Mon Oct 20 09:09:20 2025 by rpki-client