$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa File: 13ee82f5-89fe-3243-a686-2132e4e2271a.roa (raw, json) Hash identifier: 3HXq3qf7mZInRLXW7YPDQEHKIneQb3DhvnTGan/LwRs= Subject key identifier: A2:2A:DD:73:33:D7:1C:18:1F:D1:B4:8F:73:F0:8C:31:8A:5C:FB:B9 Certificate issuer: /CN=cd043f47-7524-4b11-a109-6bba895f6e1c Certificate serial: 010D0C9F4328584B1AD1959CBFEADE2DAB349C80 Authority key identifier: F7:81:22:5B:63:96:02:E9:BD:55:DC:50:B5:4B:81:A9:0A:FA:73:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 47055 IP address blocks: 23.185.136.0/24 maxlen: 24 2602:f85b::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/cd043f47-7524-4b11-a109-6bba895f6e1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/cd043f47-7524-4b11-a109-6bba895f6e1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:95:9c:bf:ea:de:2d:ab:34:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd043f47-7524-4b11-a109-6bba895f6e1c Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=6d6a8267-87e4-4635-99dd-0b961e184b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:5d:b0:35:d6:30:70:80:81:d3:bd:0a:3f: 9a:87:99:d5:2d:8b:f0:c6:7c:89:16:bd:e3:aa:00: ba:58:e8:79:72:a4:8d:ee:75:d4:58:75:01:6d:00: d0:19:38:2c:a4:8c:47:72:d0:b8:f8:7b:5f:b6:b8: 6e:c4:a7:a9:82:4f:cb:55:d6:15:a9:b7:41:ad:43: d4:33:b6:1e:e9:ae:ed:38:a8:56:c4:78:41:74:50: 42:ce:8c:91:6c:12:b0:2a:0e:61:0b:67:71:9e:05: 22:7c:ed:97:b3:ec:21:9a:7a:9e:fa:b1:b1:b9:30: 94:72:40:74:36:2d:68:19:ec:f1:59:1c:d3:a5:1c: 65:9f:4b:3e:80:1b:9c:10:01:bc:27:3e:70:0b:8e: 44:65:76:24:fa:77:98:25:1f:18:fd:43:06:ca:07: e4:98:a9:bb:5e:0e:20:3f:02:2b:44:ae:c3:f4:18: 8d:5c:92:c6:d5:cd:3b:b7:0e:65:6f:09:65:46:64: 19:01:da:6f:80:a0:3c:5d:51:d9:32:a2:70:0a:47: 47:cd:9f:9e:f9:f3:12:7a:73:06:52:e6:66:e8:e1: 92:60:38:42:61:86:2c:83:e8:49:89:e6:ff:28:04: 92:1c:55:0c:67:d2:e5:2b:c7:b6:1e:52:d4:63:d0: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2A:DD:73:33:D7:1C:18:1F:D1:B4:8F:73:F0:8C:31:8A:5C:FB:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/13ee82f5-89fe-3243-a686-2132e4e2271a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c/cd043f47-7524-4b11-a109-6bba895f6e1c.crl X509v3 Authority Key Identifier: keyid:F7:81:22:5B:63:96:02:E9:BD:55:DC:50:B5:4B:81:A9:0A:FA:73:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cd043f47-7524-4b11-a109-6bba895f6e1c.cer sbgp-ipAddrBlock: critical IPv4: 23.185.136.0/24 IPv6: 2602:f85b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:dc:c1:72:57:a9:eb:61:de:1a:51:85:78:63:a0:82:d7:52: 68:24:d0:a3:e1:a0:2a:b1:49:b3:90:e8:b5:1c:89:18:5c:1f: 2d:c1:01:18:7f:10:f8:cc:29:c1:0a:0e:eb:b3:d7:18:cd:50: 19:ad:37:89:3c:78:99:a4:f1:21:54:34:42:9b:e1:7c:41:6d: 0f:46:0a:61:09:81:a0:64:ff:0b:1c:9e:a7:5e:af:3f:67:0e: 8c:c1:e4:5d:96:0d:e4:79:7e:42:16:4d:01:80:1e:08:3e:b8: 5b:67:fe:76:55:d1:ea:44:d1:fa:d1:5a:20:1e:57:17:6c:6a: 35:80:60:54:5d:ef:e3:35:c8:3f:7e:a1:6a:e9:b0:4d:f1:5c: 7e:6a:3d:08:f7:6e:f3:76:01:8d:1a:3a:e1:c1:77:db:96:78: d6:f8:8a:ab:bc:53:29:a7:b1:95:97:10:c0:ad:cb:ef:f9:d9: 89:17:9c:3f:1b:1a:73:1c:5a:dc:5f:56:8e:2c:82:47:4e:6f: 07:b9:e0:2a:d6:58:ce:c2:86:3f:1e:91:25:8f:b8:76:f3:35: 9a:30:fd:fa:a2:4b:9c:69:00:b5:8f:7a:f6:4b:fe:9e:6d:99: 0d:93:4e:58:dd:29:de:2c:4f:11:fa:c7:3b:fd:5f:28:ef:8b: 7d:05:4e:fb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsa0ZWcv+reLas0nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QwNDNmNDctNzUyNC00YjExLWExMDktNmJiYTg5NWY2 ZTFjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NmQ2YTgyNjctODdlNC00NjM1LTk5ZGQtMGI5NjFlMTg0YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzopdsDXWMHCAgdO9Cj+ah5nVLYvwxnyJFr3j qgC6WOh5cqSN7nXUWHUBbQDQGTgspIxHctC4+HtftrhuxKepgk/LVdYVqbdBrUPU M7Ye6a7tOKhWxHhBdFBCzoyRbBKwKg5hC2dxngUifO2Xs+whmnqe+rGxuTCUckB0 Ni1oGezxWRzTpRxln0s+gBucEAG8Jz5wC45EZXYk+neYJR8Y/UMGygfkmKm7Xg4g PwIrRK7D9BiNXJLG1c07tw5lbwllRmQZAdpvgKA8XVHZMqJwCkdHzZ+e+fMSenMG UuZm6OGSYDhCYYYsg+hJieb/KASSHFUMZ9LlK8e2HlLUY9CpgQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKIq3XMz1xwYH9G0j3PwjDGKXPu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jZDA0 M2Y0Ny03NTI0LTRiMTEtYTEwOS02YmJhODk1ZjZlMWMvMTNlZTgyZjUtODlmZS0z MjQzLWE2ODYtMjEzMmU0ZTIyNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2QwNDNmNDctNzUyNC00YjExLWEx MDktNmJiYTg5NWY2ZTFjL2NkMDQzZjQ3LTc1MjQtNGIxMS1hMTA5LTZiYmE4OTVm NmUxYy5jcmwwHwYDVR0jBBgwFoAU94EiW2OWAum9VdxQtUuBqQr6cwAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jZDA0M2Y0Ny03NTI0LTRiMTEtYTEwOS02YmJh ODk1ZjZlMWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7mIMA4E AgACMAgDBgAmAvhbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/3MFyV6nrYd4aUYV4Y6CC11JoJNCj4aAq sUmzkOi1HIkYXB8twQEYfxD4zCnBCg7rs9cYzVAZrTeJPHiZpPEhVDRCm+F8QW0P RgphCYGgZP8LHJ6nXq8/Zw6MweRdlg3keX5CFk0BgB4IPrhbZ/52VdHqRNH60Vog HlcXbGo1gGBUXe/jNcg/fqFq6bBN8Vx+aj0I927zdgGNGjrhwXfblnjW+IqrvFMp p7GVlxDArcvv+dmJF5w/GxpzHFrcX1aOLIJHTm8HueAq1ljOwoY/HpElj7h28zWa MP36okucaQC1j3r2S/6ebZkNk05Y3SneLE8R+sc7/V8o74t9BU77 -----END CERTIFICATE-----Generated at Fri Oct 10 22:30:34 2025 by rpki-client