$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa File: 2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json) Hash identifier: TNJWJ7OOLOyYXdloPuMSYQhITJ5U1ATtUTnIq8dvDE4= Subject key identifier: 5A:3D:FB:6D:23:61:FD:C9:F4:3D:4A:41:BD:13:75:6B:24:10:AC:7A Certificate issuer: /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Certificate serial: 010D0C9F4328584B715CACF27BE7057588278380 Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 400893 IP address blocks: 23.153.0.0/24 maxlen: 24 172.82.8.0/22 maxlen: 24 2602:ff2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ac:f2:7b:e7:05:75:88:27:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8a0dcc0a-f579-48e2-8d59-509ce26537c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:e9:50:1f:b7:62:95:80:e6:21:37:04:aa: 43:1c:75:39:53:68:9a:33:06:9d:90:ca:f7:a8:72: a1:c8:f6:bf:ca:a0:46:c9:18:98:7e:7f:1c:28:56: 2e:0f:fe:87:34:80:95:e9:3b:17:98:57:a4:38:d6: 5e:f8:24:36:13:43:30:e1:ca:d7:a4:fd:9b:f9:38: 9d:18:58:12:1f:d5:2d:18:84:9d:ec:ff:dc:c0:2e: f5:c6:f0:64:9f:20:e5:ae:00:44:23:ad:b8:35:f0: c2:1c:71:fd:c8:0f:e4:f4:63:74:81:f7:45:d6:cb: 47:28:da:67:9f:23:73:eb:c7:be:8d:ed:b0:d5:13: 34:74:ca:2a:6c:a1:ac:db:21:a9:31:8f:1c:86:75: b8:3a:88:ef:49:77:d7:95:38:53:52:79:73:6d:86: df:e3:63:04:8c:b4:3d:d7:cb:0b:f9:00:c3:ea:dc: fa:c3:f0:28:67:40:3e:ca:1c:8b:40:ce:67:37:d5: 2c:2d:17:1b:6d:2b:b3:ab:73:04:bd:a8:71:b2:cd: b0:4c:01:e6:f3:44:c7:ed:b6:f9:ad:7f:4c:32:63: eb:ca:df:bd:cf:69:60:63:9b:1e:5e:6f:2e:8e:53: 27:77:05:1f:df:4c:b5:f9:7c:2a:74:34:b7:11:bd: 2e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:FB:6D:23:61:FD:C9:F4:3D:4A:41:BD:13:75:6B:24:10:AC:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl X509v3 Authority Key Identifier: keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer sbgp-ipAddrBlock: critical IPv4: 23.153.0.0/24 172.82.8.0/22 IPv6: 2602:ff2a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:80:1e:3f:d9:6f:1f:7a:50:8d:12:60:77:c9:36:ff:6f:66: 72:b0:31:1f:5f:41:10:d4:7e:ce:f7:3b:14:91:4a:1f:89:a3: 25:b3:2d:8d:39:9b:8a:b8:f0:dd:e1:f6:c8:07:37:5c:70:20: 07:f9:d7:1f:ee:e7:4d:35:b9:eb:b0:c5:4b:c5:a6:95:f6:42: 51:0d:bc:e6:1a:91:a3:0b:fa:92:8c:57:48:27:63:e4:11:29: 98:8d:18:fb:9b:9a:19:d4:4b:7e:8a:5e:6a:67:8a:d2:5e:5f: e4:87:6f:b9:bd:b7:e3:39:88:ba:2a:c7:5e:82:ad:8f:4e:13: 15:18:2b:84:ac:c8:cd:c2:b7:39:60:2d:37:77:3c:7f:e4:d1: ad:b9:52:fb:cd:2e:ea:d3:80:eb:24:07:ef:90:1e:0c:4b:e8: 9a:30:d8:80:8e:77:c3:23:ad:4a:bc:09:45:0b:e5:20:77:00: 6b:e2:94:ab:51:a7:f9:be:80:4a:f4:94:9c:8e:fc:54:6b:4f: 54:6a:5d:4d:14:e1:38:76:1e:23:fa:8b:c5:42:5e:85:7e:78: eb:21:9c:f4:8b:6f:84:ba:10:4e:50:79:e5:1f:8a:18:80:cb: 99:aa:a0:1a:38:e7:a2:fe:d6:48:fa:d0:c5:11:63:9e:88:dd: 45:a6:9a:00 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEtxXKzye+cFdYgng4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM3ZWEwNzEtOWFkOC00NmM1LTk3ZGUtZGUxNDljNGE1 YTc4MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGEwZGNjMGEtZjU3OS00OGUyLThkNTktNTA5Y2UyNjUzN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhnpUB+3YpWA5iE3BKpDHHU5U2iaMwadkMr3 qHKhyPa/yqBGyRiYfn8cKFYuD/6HNICV6TsXmFekONZe+CQ2E0Mw4crXpP2b+Tid GFgSH9UtGISd7P/cwC71xvBknyDlrgBEI624NfDCHHH9yA/k9GN0gfdF1stHKNpn nyNz68e+je2w1RM0dMoqbKGs2yGpMY8chnW4OojvSXfXlThTUnlzbYbf42MEjLQ9 18sL+QDD6tz6w/AoZ0A+yhyLQM5nN9UsLRcbbSuzq3MEvahxss2wTAHm80TH7bb5 rX9MMmPryt+9z2lgY5seXm8ujlMndwUf30y1+XwqdDS3Eb0u9QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFo9+20jYf3J9D1KQb0TdWskEKx6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdl YTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0OWM0YTVhNzgvMmQwNzE4YTAtN2MxNS0z MzAwLWFmN2UtZjgzMTI3ZTI0NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWM3ZWEwNzEtOWFkOC00NmM1LTk3 ZGUtZGUxNDljNGE1YTc4L2VjN2VhMDcxLTlhZDgtNDZjNS05N2RlLWRlMTQ5YzRh NWE3OC5jcmwwHwYDVR0jBBgwFoAUVDfG0ElP1CnQxJc7kpkLvEBryc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdlYTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0 OWM0YTVhNzguY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5kAAwQC rFIIMA0EAgACMAcDBQAmAv8qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHCAHj/Zbx96UI0SYHfJNv9vZnKw MR9fQRDUfs73OxSRSh+JoyWzLY05m4q48N3h9sgHN1xwIAf51x/u5001ueuwxUvF ppX2QlENvOYakaML+pKMV0gnY+QRKZiNGPubmhnUS36KXmpnitJeX+SHb7m9t+M5 iLoqx16CrY9OExUYK4SsyM3CtzlgLTd3PH/k0a25UvvNLurTgOskB++QHgxL6Jow 2ICOd8MjrUq8CUUL5SB3AGvilKtRp/m+gEr0lJyO/FRrT1RqXU0U4Th2HiP6i8VC XoV+eOshnPSLb4S6EE5QeeUfihiAy5mqoBo456L+1kj60MURY56I3UWmmgA= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:08 2025 by rpki-client