$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa File: c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa (raw, json) Hash identifier: a8pdwPtA6z2r5BUSiGxjCdSvXace1c0AyU1fdMPye5w= Subject key identifier: E0:32:44:F4:42:D4:81:41:53:18:A2:2B:9A:DE:C8:38:02:D7:BF:E8 Certificate issuer: /CN=55263d01-2075-432b-94d1-01f0c1c34295 Certificate serial: 010D0C9F4328584B4FDC714FC3CAF36C97E529E0 Authority key identifier: 2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 401631 IP address blocks: 23.133.68.0/24 maxlen: 24 2602:f71f::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:71:4f:c3:ca:f3:6c:97:e5:29:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55263d01-2075-432b-94d1-01f0c1c34295 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=95973c8c-072b-417f-8ac4-11bcfcf0eb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:1b:bc:a3:f0:27:b3:bf:56:56:74:93:f6: 65:64:1b:ca:50:bf:be:3a:4f:a8:4d:39:35:cd:dc: df:46:85:52:f2:6e:eb:7b:75:e2:df:7a:eb:17:5d: 03:b4:11:05:41:16:01:95:2c:3a:06:9f:8a:be:f4: ca:ef:b6:2e:a2:0a:ce:78:f8:50:14:0e:0e:35:88: b5:53:84:ae:2f:04:5d:e2:7f:9b:bf:38:19:40:92: 7a:4e:23:c9:12:e3:7f:31:c5:6f:47:88:06:ee:10: 24:31:76:29:78:5f:e7:e4:93:42:98:37:fa:8b:1e: c8:91:33:04:14:32:bc:9f:c7:35:45:5f:8e:04:9b: d6:c4:8a:4f:13:2b:ec:de:de:41:4e:d5:a3:0b:18: 76:bb:1e:df:8f:ab:c0:c6:12:0f:06:d8:7a:76:65: 6f:1a:08:45:12:d6:0f:c4:ff:00:ce:3a:95:8c:43: 7c:a3:0c:9c:ae:7e:d0:32:41:5b:44:34:19:27:95: bc:5f:7a:d5:03:b8:94:69:2d:e3:16:8c:61:8f:b3: 10:f2:37:cf:a4:25:20:4e:00:68:bc:82:e3:47:bc: ac:dd:63:d3:f7:84:4c:1a:a6:d5:82:e8:42:d1:96: e1:ba:a3:e8:1b:87:e9:da:fb:89:7e:d9:85:6c:58: 27:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:32:44:F4:42:D4:81:41:53:18:A2:2B:9A:DE:C8:38:02:D7:BF:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/c41e07a5-de2f-3567-ae4c-7e8a2e2f01e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl X509v3 Authority Key Identifier: keyid:2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer sbgp-ipAddrBlock: critical IPv4: 23.133.68.0/24 IPv6: 2602:f71f::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b8:3e:71:66:c9:e1:03:5d:ef:80:42:d8:44:b9:e9:da:c8: fe:06:3a:89:88:1d:60:b2:4e:73:c5:c9:b3:71:03:e7:0f:86: e5:f5:cb:e0:82:16:c8:d1:99:08:09:b3:03:0a:09:96:33:da: c9:a3:05:c6:b1:64:fa:4c:54:71:15:4d:e4:af:42:16:78:9c: e5:8f:b5:69:eb:af:43:90:b8:f1:85:af:87:c1:c3:d6:09:0e: 3c:6f:79:35:ec:ab:a9:dc:31:65:a3:80:47:57:05:ec:de:8c: b7:6c:9d:bc:cc:68:74:0e:ac:d1:f9:2b:bf:98:48:11:93:9b: b6:26:00:ae:2a:5b:13:c3:38:64:3e:07:0d:76:a1:29:38:6e: 8b:ba:97:51:df:3d:71:7a:98:c8:51:5b:eb:db:84:44:13:e6: 38:6c:27:17:02:ac:c1:5b:89:ab:84:d7:a8:8f:1b:94:f6:ae: b0:94:8b:10:80:bc:1e:f0:c0:b6:09:a1:4a:0a:d4:06:53:f9: 2f:7e:a9:f2:f4:9c:9b:52:9a:e8:8f:fe:76:9c:fb:ae:b7:e3: ad:fd:fb:30:9e:0e:c4:52:ac:b1:90:15:83:e7:0c:ba:e6:14: 7e:2c:98:ee:ab:a8:1b:84:46:3a:b4:eb:c6:ec:83:c3:a8:95: fe:1d:0c:45 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEtP3HFPw8rzbJflKeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTUyNjNkMDEtMjA3NS00MzJiLTk0ZDEtMDFmMGMxYzM0 Mjk1MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTU5NzNjOGMtMDcyYi00MTdmLThhYzQtMTFiY2ZjZjBlYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPYbvKPwJ7O/VlZ0k/ZlZBvKUL++Ok+oTTk1 zdzfRoVS8m7re3Xi33rrF10DtBEFQRYBlSw6Bp+KvvTK77YuogrOePhQFA4ONYi1 U4SuLwRd4n+bvzgZQJJ6TiPJEuN/McVvR4gG7hAkMXYpeF/n5JNCmDf6ix7IkTME FDK8n8c1RV+OBJvWxIpPEyvs3t5BTtWjCxh2ux7fj6vAxhIPBth6dmVvGghFEtYP xP8AzjqVjEN8owycrn7QMkFbRDQZJ5W8X3rVA7iUaS3jFoxhj7MQ8jfPpCUgTgBo vILjR7ys3WPT94RMGqbVguhC0ZbhuqPoG4fp2vuJftmFbFgniwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOAyRPRC1IFBUxiiK5reyDgC17/oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81NTI2 M2QwMS0yMDc1LTQzMmItOTRkMS0wMWYwYzFjMzQyOTUvYzQxZTA3YTUtZGUyZi0z NTY3LWFlNGMtN2U4YTJlMmYwMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTUyNjNkMDEtMjA3NS00MzJiLTk0 ZDEtMDFmMGMxYzM0Mjk1LzU1MjYzZDAxLTIwNzUtNDMyYi05NGQxLTAxZjBjMWMz NDI5NS5jcmwwHwYDVR0jBBgwFoAULcAuJ7fIO0x8TjVZZKbOhicbgZ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81NTI2M2QwMS0yMDc1LTQzMmItOTRkMS0wMWYw YzFjMzQyOTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VEMA4E AgACMAgDBgQmAvcfADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAMuD5xZsnhA13vgELYRLnp2sj+BjqJiB1g sk5zxcmzcQPnD4bl9cvgghbI0ZkICbMDCgmWM9rJowXGsWT6TFRxFU3kr0IWeJzl j7Vp669DkLjxha+HwcPWCQ48b3k17Kup3DFlo4BHVwXs3oy3bJ28zGh0DqzR+Su/ mEgRk5u2JgCuKlsTwzhkPgcNdqEpOG6LupdR3z1xepjIUVvr24REE+Y4bCcXAqzB W4mrhNeojxuU9q6wlIsQgLwe8MC2CaFKCtQGU/kvfqny9JybUproj/52nPuut+Ot /fswng7EUqyxkBWD5wy65hR+LJjuq6gbhEY6tOvG7IPDqJX+HQxF -----END CERTIFICATE-----Generated at Fri Oct 10 19:48:39 2025 by rpki-client