$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa File: ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa (raw, json) Hash identifier: 5s/SVfJEheQMOcRSk4ELCBYTb7GQMVw7Zc9TUJmn5KQ= Subject key identifier: 60:46:4F:FE:CF:02:3D:34:40:E9:4C:76:1D:09:B5:47:FD:C1:9D:D3 Certificate issuer: /CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126 Certificate serial: 010D0C9F4328584B28C6E6DCF3356409A34AF5C0 Authority key identifier: 4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 401598 IP address blocks: 23.132.52.0/24 maxlen: 24 2602:f73c::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:e6:dc:f3:35:64:09:a3:4a:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=aa3e8da1-d407-4c77-98c6-e36f3becc511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:48:1a:7a:0c:c2:79:2e:56:cd:f4:f1:40:f8: 71:1a:44:2b:ec:19:39:f8:72:7e:80:08:1f:5a:d0: 6c:65:4b:d9:49:66:1c:ac:41:dc:1f:8a:42:ba:a2: 27:b0:82:20:2d:39:d5:1d:e2:69:f0:f9:ba:c9:61: 0a:aa:2d:b4:cf:5e:a5:60:31:8e:e8:48:f5:14:0a: 59:8c:03:c6:2b:56:f7:3c:f9:68:9a:0f:d1:e2:04: 2b:ae:6c:79:8c:7d:62:db:97:cd:68:74:c1:eb:49: 07:8b:87:99:5e:93:ca:1c:d7:9a:ee:60:3e:1b:b1: 33:f2:a2:92:b0:f6:d9:ed:aa:3f:bf:d2:06:30:fb: 71:54:76:05:f0:5d:ec:45:d5:7d:cc:cc:b9:92:af: b4:a0:21:18:be:9b:62:af:aa:b6:70:05:da:33:57: 2b:28:cb:ab:66:ad:b2:65:b6:1e:78:0c:c6:31:83: 65:ca:16:9e:db:e6:98:7e:a8:7f:1c:bf:ab:9d:54: d2:6a:ba:47:47:7c:c7:d3:f9:72:ae:24:b0:f8:42: e5:cb:5f:04:b8:5c:c9:93:81:25:75:1d:47:ea:90: 31:ce:f3:52:47:bc:bb:55:0d:48:97:d8:ed:4f:fa: 1a:42:a4:5a:84:3b:a4:ac:6f:82:43:3e:1d:2e:ed: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:46:4F:FE:CF:02:3D:34:40:E9:4C:76:1D:09:B5:47:FD:C1:9D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl X509v3 Authority Key Identifier: keyid:4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer sbgp-ipAddrBlock: critical IPv4: 23.132.52.0/24 IPv6: 2602:f73c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f8:96:56:f7:7b:80:45:7e:a2:dd:88:16:61:eb:f5:64:df: 7d:cf:44:3f:dd:53:dd:f1:a5:3f:34:0b:c5:67:59:50:8a:c3: 9a:56:4c:52:dc:30:22:60:ae:db:01:89:a5:09:8e:d6:f3:ea: 7f:bd:27:e7:c9:80:32:05:d5:69:ca:03:71:e7:84:ed:21:d9: d2:1e:d7:63:d5:ef:d1:aa:ce:cf:8d:c2:87:5d:d6:b7:4f:a9: a2:50:45:7b:44:7a:23:42:01:70:eb:82:44:bf:0d:05:93:2f: 67:f2:a6:1e:9a:97:45:b0:8f:d7:3e:bd:12:77:15:22:cb:93: c1:e2:c2:99:ee:f1:41:2f:8a:bb:b6:3a:56:32:aa:b0:ef:ba: 7c:5e:69:43:65:4d:2d:f4:c4:54:2a:ed:b2:85:ed:b8:dc:78: a0:52:a3:ad:37:4a:b1:cc:9b:2b:63:d1:78:3c:53:e4:56:30: f2:66:eb:d1:78:5f:34:a9:11:9c:6c:47:7b:69:55:9c:65:f7: 81:46:11:ec:67:ba:dc:44:70:a7:af:12:ae:8c:ae:4c:9f:92: 2a:72:9a:cf:05:b1:05:de:f9:28:2b:aa:34:2f:8e:77:0f:f2: 1d:4e:09:12:99:ea:96:85:2f:59:cd:78:6d:87:27:52:70:5a: e7:9d:27:ac -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsoxubc8zVkCaNK9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZkZmJkZjgtNmY5Yy00NzAyLThkYTctYzZkNTU5OGMx MTI2MB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YWEzZThkYTEtZDQwNy00Yzc3LTk4YzYtZTM2ZjNiZWNjNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EgaegzCeS5WzfTxQPhxGkQr7Bk5+HJ+gAgf WtBsZUvZSWYcrEHcH4pCuqInsIIgLTnVHeJp8Pm6yWEKqi20z16lYDGO6Ej1FApZ jAPGK1b3PPlomg/R4gQrrmx5jH1i25fNaHTB60kHi4eZXpPKHNea7mA+G7Ez8qKS sPbZ7ao/v9IGMPtxVHYF8F3sRdV9zMy5kq+0oCEYvptir6q2cAXaM1crKMurZq2y ZbYeeAzGMYNlyhae2+aYfqh/HL+rnVTSarpHR3zH0/lyriSw+ELly18EuFzJk4El dR1H6pAxzvNSR7y7VQ1Il9jtT/oaQqRahDukrG+CQz4dLu1WTwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGBGT/7PAj00QOlMdh0JtUf9wZ3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NmRm YmRmOC02ZjljLTQ3MDItOGRhNy1jNmQ1NTk4YzExMjYvZGRjNTY1YjAtNWY3My0z ODU2LTgzYWUtZWI1YTVlNDBlYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzZkZmJkZjgtNmY5Yy00NzAyLThk YTctYzZkNTU5OGMxMTI2Lzc2ZGZiZGY4LTZmOWMtNDcwMi04ZGE3LWM2ZDU1OThj MTEyNi5jcmwwHwYDVR0jBBgwFoAUTnuiWSBmlFqG6jf4WUqGP1ga1sswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NmRmYmRmOC02ZjljLTQ3MDItOGRhNy1jNmQ1 NTk4YzExMjYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Q0MA4E AgACMAgDBgAmAvc8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf+JZW93uARX6i3YgWYev1ZN99z0Q/3VPd 8aU/NAvFZ1lQisOaVkxS3DAiYK7bAYmlCY7W8+p/vSfnyYAyBdVpygNx54TtIdnS Htdj1e/Rqs7PjcKHXda3T6miUEV7RHojQgFw64JEvw0Fky9n8qYempdFsI/XPr0S dxUiy5PB4sKZ7vFBL4q7tjpWMqqw77p8XmlDZU0t9MRUKu2yhe243HigUqOtN0qx zJsrY9F4PFPkVjDyZuvReF80qRGcbEd7aVWcZfeBRhHsZ7rcRHCnrxKujK5Mn5Iq cprPBbEF3vkoK6o0L453D/IdTgkSmeqWhS9ZzXhthydScFrnnSes -----END CERTIFICATE-----Generated at Fri Oct 10 16:13:40 2025 by rpki-client