$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/12170323-a17d-3096-8443-d5792eec0c16.roa File: 12170323-a17d-3096-8443-d5792eec0c16.roa (raw, json) Hash identifier: KkZbc0Dwp9IyirjitoMMpZgeS5Sp3L/YpQIsMcEapb4= Subject key identifier: A4:CB:A3:9B:7D:49:EB:E4:BC:7F:0A:CA:8E:90:06:B4:0F:76:58:8D Certificate issuer: /CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef Certificate serial: 010D0C9F4328584B63673DB8CAA02CDB33FD86A0 Authority key identifier: 62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/12170323-a17d-3096-8443-d5792eec0c16.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 17083 IP address blocks: 23.133.196.0/24 maxlen: 24 2602:f705::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3d:b8:ca:a0:2c:db:33:fd:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=aee32a8a-1f61-443c-ba1c-957af2e5037e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:f0:7e:d7:b2:92:f6:49:b7:2e:9f:fa:92: c9:31:57:b8:5f:e7:23:dd:2a:c4:7e:aa:bd:01:8d: 66:70:47:45:0b:ba:a0:fa:43:85:9a:51:fe:f1:55: ec:a2:dc:42:9e:4d:96:95:c1:2f:e8:80:f9:b8:05: 6e:fd:23:2b:6c:48:88:7c:a1:94:e9:5c:83:ae:82: ee:45:d1:76:35:06:73:95:70:69:4c:9b:b8:cd:71: 02:43:d6:33:4f:b2:3b:fc:b7:5c:6e:3a:f9:a4:1c: 03:bc:6b:78:46:da:44:c2:98:bc:81:77:7b:ff:3a: 6f:84:90:e4:54:73:0e:45:1c:fe:f4:32:c9:70:57: 39:18:2a:99:36:25:2c:cc:6f:a6:c3:05:b6:7a:3c: 04:ba:66:b3:43:e7:3b:df:3b:65:bc:54:80:5c:be: ea:c3:a2:6a:1b:c6:13:8e:a7:6f:0c:37:79:13:d4: 12:c1:69:19:50:36:01:9e:58:72:02:9e:56:68:8c: bd:d0:91:85:79:89:6e:9b:26:93:28:58:6c:9e:25: 93:32:7a:86:39:c4:89:0c:5c:d4:a4:d0:f8:e0:77: a5:14:b7:ec:86:ab:76:fc:27:24:9c:7d:13:4b:b4: 37:68:ba:ea:19:c8:03:5c:19:b1:97:46:e2:99:96: a6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:A3:9B:7D:49:EB:E4:BC:7F:0A:CA:8E:90:06:B4:0F:76:58:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/12170323-a17d-3096-8443-d5792eec0c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl X509v3 Authority Key Identifier: keyid:62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer sbgp-ipAddrBlock: critical IPv4: 23.133.196.0/24 IPv6: 2602:f705::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c0:1d:f5:37:f1:c6:41:9a:7d:bb:9a:42:10:16:75:b8:e9: b8:d1:1d:93:de:93:9f:77:0e:a4:21:12:bf:19:7b:fe:e9:a5: c8:32:aa:f4:09:10:7c:2e:70:8d:fc:78:d9:fb:3a:8f:a6:28: 7c:27:19:fb:be:34:20:fe:61:32:9e:5e:9e:4b:d2:ee:4b:d5: a7:9b:c4:e8:c6:c3:66:6a:19:a1:25:45:0b:bf:de:5a:ed:0b: 99:9a:78:e7:ab:33:eb:e5:45:6d:f6:03:12:54:ba:d1:8f:a9: c6:b5:b0:0b:b7:c6:db:5a:f9:09:3d:58:60:c2:95:25:cb:68: fd:d2:41:dd:0a:f6:15:64:bf:04:e7:09:9b:c4:c5:58:73:0f: 6b:79:9a:e0:98:06:46:95:a0:8d:3f:61:6b:6d:eb:2e:65:4d: 9b:ef:16:bf:83:aa:8d:90:7f:b2:02:20:2c:8d:ee:b5:e8:cd: f6:3a:9e:10:be:40:36:cd:2a:f2:60:29:84:2e:ee:5c:1b:61: 77:9a:33:8e:0f:da:fd:be:6a:85:14:a0:a2:3c:76:17:1d:7f: 36:00:6e:99:2c:7f:e8:6b:3f:cc:00:1b:db:1b:73:f3:a8:2c: 3c:b9:27:68:c6:0a:d0:4e:7a:93:e2:87:4f:a1:e3:1a:eb:20: 10:89:02:0b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtjZz24yqAs2zP9hqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDZkZDc0ZTYtN2U2NS00MmQ0LWE0OWEtMDdlMGNjMThj MWVmMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk YWVlMzJhOGEtMWY2MS00NDNjLWJhMWMtOTU3YWYyZTUwMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK/wfteykvZJty6f+pLJMVe4X+cj3SrEfqq9 AY1mcEdFC7qg+kOFmlH+8VXsotxCnk2WlcEv6ID5uAVu/SMrbEiIfKGU6VyDroLu RdF2NQZzlXBpTJu4zXECQ9YzT7I7/Ldcbjr5pBwDvGt4RtpEwpi8gXd7/zpvhJDk VHMORRz+9DLJcFc5GCqZNiUszG+mwwW2ejwEumazQ+c73ztlvFSAXL7qw6JqG8YT jqdvDDd5E9QSwWkZUDYBnlhyAp5WaIy90JGFeYlumyaTKFhsniWTMnqGOcSJDFzU pND44HelFLfshqt2/CcknH0TS7Q3aLrqGcgDXBmxl0bimZamMQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKTLo5t9SevkvH8Kyo6QBrQPdliNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wNmRk NzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2UwY2MxOGMxZWYvMTIxNzAzMjMtYTE3ZC0z MDk2LTg0NDMtZDU3OTJlZWMwYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMDZkZDc0ZTYtN2U2NS00MmQ0LWE0 OWEtMDdlMGNjMThjMWVmLzA2ZGQ3NGU2LTdlNjUtNDJkNC1hNDlhLTA3ZTBjYzE4 YzFlZi5jcmwwHwYDVR0jBBgwFoAUYi13yGYulJlhcXxC8kNoQfFqT1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wNmRkNzRlNi03ZTY1LTQyZDQtYTQ5YS0wN2Uw Y2MxOGMxZWYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4XEMA4E AgACMAgDBgQmAvcFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAowB31N/HGQZp9u5pCEBZ1uOm40R2T3pOf dw6kIRK/GXv+6aXIMqr0CRB8LnCN/HjZ+zqPpih8Jxn7vjQg/mEynl6eS9LuS9Wn m8ToxsNmahmhJUULv95a7QuZmnjnqzPr5UVt9gMSVLrRj6nGtbALt8bbWvkJPVhg wpUly2j90kHdCvYVZL8E5wmbxMVYcw9reZrgmAZGlaCNP2FrbesuZU2b7xa/g6qN kH+yAiAsje616M32Op4QvkA2zSryYCmELu5cG2F3mjOOD9r9vmqFFKCiPHYXHX82 AG6ZLH/oaz/MABvbG3PzqCw8uSdoxgrQTnqT4odPoeMa6yAQiQIL -----END CERTIFICATE-----Generated at Fri Oct 10 17:37:01 2025 by rpki-client