$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa File: f3805def-12ab-3eea-993c-463a8a73c36a.roa (raw, json) Hash identifier: KjLXh+i/Vk4EoPfJMQXF14aYZLS5wmkJ6Rh/pwvS/QE= Subject key identifier: D2:BB:71:81:1C:67:11:E0:D2:CE:AF:4E:3B:21:D6:66:45:72:69:BC Certificate issuer: /CN=a4607f8f-ba19-4447-a356-e3ec6823f923 Certificate serial: 010D0C9F4328584B715CBB92C67BC758340BAC40 Authority key identifier: 3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 400938 IP address blocks: 23.143.248.0/24 maxlen: 24 74.120.232.0/22 maxlen: 22 2602:fad1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bb:92:c6:7b:c7:58:34:0b:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4607f8f-ba19-4447-a356-e3ec6823f923 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8662e509-f985-4153-ade3-55515745bcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:45:0c:78:8d:1f:f4:30:ea:e5:aa:81:7d:72: f8:a8:51:a6:8e:82:dd:dc:75:97:b2:cb:cc:83:1f: d7:86:37:f4:1f:24:72:35:49:9c:cf:fa:6c:75:08: 72:e2:90:3b:e1:12:69:fc:81:61:56:c5:0d:03:81: 8e:14:66:3a:7a:d7:f5:20:8b:54:d2:fc:5b:33:c3: df:ec:a5:dc:6b:54:8b:00:6c:95:81:78:13:a6:84: a9:ad:a4:96:1c:bd:20:b3:bb:9c:2c:7a:d9:f1:8e: a3:07:6e:89:70:32:7f:7f:48:5b:71:fc:18:44:aa: 4e:34:ac:de:cb:a3:ba:40:5e:f4:a0:27:ce:48:0b: 19:8a:97:61:fa:51:cf:db:c9:41:6b:65:b9:16:d3: a0:d3:fe:8a:58:d8:92:93:37:39:4a:ea:2d:04:f6: 30:8b:2e:f8:2a:78:85:dc:53:4a:26:90:de:5d:29: 4a:38:52:37:e1:0a:61:a5:6d:80:e9:22:ff:43:6e: 8f:af:20:05:a9:8f:f6:1a:f8:1c:eb:06:76:d4:2c: 3c:b3:34:c8:8a:cb:67:54:c0:ad:8d:8a:09:f7:27: 44:6a:21:a9:62:a8:da:e4:93:c8:b1:da:f0:50:11: f6:76:b5:98:16:a8:ee:8d:6a:fe:51:4c:e6:79:78: 4b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BB:71:81:1C:67:11:E0:D2:CE:AF:4E:3B:21:D6:66:45:72:69:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.crl X509v3 Authority Key Identifier: keyid:3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer sbgp-ipAddrBlock: critical IPv4: 23.143.248.0/24 74.120.232.0/22 IPv6: 2602:fad1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:69:78:f7:10:ac:64:73:65:46:28:c5:a9:e6:57:c6:3e:14: 1b:ea:83:f1:10:f4:bc:73:22:b1:c3:6e:65:99:7f:f2:f5:d4: 2a:3f:64:8b:1b:3d:f2:2d:8d:e0:18:7b:64:45:6d:e6:84:af: 4f:7e:30:76:75:b6:8e:a2:ad:52:c6:e7:f5:6e:d0:7f:95:d1: f6:df:c4:84:22:87:b7:f3:8b:6c:33:d3:13:bf:c4:0f:71:b4: 7c:66:66:d2:cf:7b:14:29:22:ed:c6:15:5f:f5:d8:a6:08:73: e6:1f:11:46:58:81:76:6d:11:16:5d:4f:14:eb:ea:1b:43:3e: ac:11:9e:b6:24:a3:10:76:c8:ed:f7:69:df:74:52:69:61:2d: d8:04:e1:77:6e:37:d2:2e:05:79:a4:6c:94:8c:85:fd:11:b6: 1e:bf:05:2f:28:44:6b:c1:89:2f:33:7c:07:cc:9f:1a:d5:a8: b0:7f:fe:61:95:73:bc:4b:a2:f9:c2:96:0d:68:cb:45:87:9b: 99:b4:97:98:a3:c6:8a:3e:bf:c3:46:a0:fe:77:7a:d4:01:65: 52:ce:3c:c4:cb:01:36:9d:0a:77:2f:0f:3f:1a:5e:ad:41:00: 88:8d:ce:c9:f9:e8:25:d2:20:dc:9e:4f:67:86:2c:e6:88:d1: 4e:4e:ce:13 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEtxXLuSxnvHWDQLrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTQ2MDdmOGYtYmExOS00NDQ3LWEzNTYtZTNlYzY4MjNm OTIzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ODY2MmU1MDktZjk4NS00MTUzLWFkZTMtNTU1MTU3NDViY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UUMeI0f9DDq5aqBfXL4qFGmjoLd3HWXssvM gx/Xhjf0HyRyNUmcz/psdQhy4pA74RJp/IFhVsUNA4GOFGY6etf1IItU0vxbM8Pf 7KXca1SLAGyVgXgTpoSpraSWHL0gs7ucLHrZ8Y6jB26JcDJ/f0hbcfwYRKpONKze y6O6QF70oCfOSAsZipdh+lHP28lBa2W5FtOg0/6KWNiSkzc5SuotBPYwiy74KniF 3FNKJpDeXSlKOFI34QphpW2A6SL/Q26PryAFqY/2Gvgc6wZ21Cw8szTIistnVMCt jYoJ9ydEaiGpYqja5JPIsdrwUBH2drWYFqjujWr+UUzmeXhLowIDAQABo4IDazCC A2cwHQYDVR0OBBYEFNK7cYEcZxHg0s6vTjsh1mZFcmm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hNDYw N2Y4Zi1iYTE5LTQ0NDctYTM1Ni1lM2VjNjgyM2Y5MjMvZjM4MDVkZWYtMTJhYi0z ZWVhLTk5M2MtNDYzYThhNzNjMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTQ2MDdmOGYtYmExOS00NDQ3LWEz NTYtZTNlYzY4MjNmOTIzL2E0NjA3ZjhmLWJhMTktNDQ0Ny1hMzU2LWUzZWM2ODIz ZjkyMy5jcmwwHwYDVR0jBBgwFoAUPZZ9LCbdohdfyYMzC0NKqjh0ATAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hNDYwN2Y4Zi1iYTE5LTQ0NDctYTM1Ni1lM2Vj NjgyM2Y5MjMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4/4AwQC SnjoMA4EAgACMAgDBgQmAvrRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALaXj3EKxkc2VGKMWp5lfGPhQb 6oPxEPS8cyKxw25lmX/y9dQqP2SLGz3yLY3gGHtkRW3mhK9PfjB2dbaOoq1Sxuf1 btB/ldH238SEIoe384tsM9MTv8QPcbR8ZmbSz3sUKSLtxhVf9dimCHPmHxFGWIF2 bREWXU8U6+obQz6sEZ62JKMQdsjt92nfdFJpYS3YBOF3bjfSLgV5pGyUjIX9EbYe vwUvKERrwYkvM3wHzJ8a1aiwf/5hlXO8S6L5wpYNaMtFh5uZtJeYo8aKPr/DRqD+ d3rUAWVSzjzEywE2nQp3Lw8/Gl6tQQCIjc7J+egl0iDcnk9nhizmiNFOTs4T -----END CERTIFICATE-----Generated at Fri Oct 10 22:24:17 2025 by rpki-client