$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa File: 14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa (raw, json) Hash identifier: oEZNaDm0VWYXeZIx4YnREh5bDp0M5yn2XKovAlbthtk= Subject key identifier: F2:33:88:92:17:95:00:A6:CC:FF:A0:BB:DE:E5:DC:C3:A4:25:55:F2 Certificate issuer: /CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Certificate serial: 010D0C9F4328584B1806D8F53C7F19985799D780 Authority key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 401328 IP address blocks: 23.131.20.0/24 maxlen: 32 2602:f769::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d8:f5:3c:7f:19:98:57:99:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ed0c7abf-7566-4fb8-b0ab-998bdfd2899a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:d7:cc:3d:21:e7:55:9a:a6:31:65:56:50: 71:7c:ee:f7:63:35:53:92:32:62:15:55:cb:15:60: 6d:65:fe:cf:94:72:0e:bd:10:48:04:88:5a:5b:e2: 1b:e9:10:74:8d:de:5b:ef:0e:b0:03:b0:21:8f:58: 77:a6:8a:9f:8d:ea:b9:9e:b5:ad:60:95:19:ee:43: 68:cc:c2:57:55:fa:4c:93:6c:55:56:f2:67:b4:cd: f9:a5:a5:1b:5e:d8:9a:e8:39:b4:c1:bb:f8:c8:6c: f1:a0:68:d8:57:63:d5:1a:94:2b:5f:cf:c0:69:70: a2:12:39:67:60:7b:f0:36:13:41:ba:d1:99:de:54: f5:de:12:11:72:68:3d:a6:4d:d7:70:94:c6:46:dc: aa:a0:7a:0f:0d:68:21:a8:d7:28:1f:77:e5:bb:b0: a4:7f:b0:30:24:38:14:e8:3c:7e:f9:7a:a4:ef:6c: ce:1a:b1:95:49:22:b3:9a:60:42:8a:fc:17:50:dc: 2c:19:84:6a:3b:3b:46:ab:12:f2:32:f2:88:5a:af: 7b:c3:3b:55:c2:ec:c4:2c:ca:75:4b:fe:ee:7e:42: 5c:73:08:40:89:6e:c7:30:a8:ac:4c:b4:26:10:97: 8a:47:eb:ac:c2:c3:d1:d7:2a:1d:d2:98:21:76:13: 9f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:33:88:92:17:95:00:A6:CC:FF:A0:BB:DE:E5:DC:C3:A4:25:55:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl X509v3 Authority Key Identifier: keyid:B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer sbgp-ipAddrBlock: critical IPv4: 23.131.20.0/24 IPv6: 2602:f769::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:94:bf:ef:f4:af:59:df:9e:ee:01:d1:92:f4:fa:9d:79:cd: 2f:b0:d8:b4:ab:c8:58:90:7d:17:3b:a1:2f:68:f0:e8:bc:3a: 4e:5b:f4:0e:85:79:1e:68:b2:8e:0e:b1:5e:29:e6:f5:fb:c8: f4:88:53:ad:89:6e:27:ed:33:57:99:af:27:10:af:50:10:13: ca:4e:f6:35:f4:9a:01:03:49:67:01:dc:ee:c5:29:d7:ee:26: 64:f5:5b:22:53:6d:23:76:7d:e7:e9:37:7d:33:ea:e1:c6:71: c3:3d:2d:dc:e0:67:f0:1c:f8:73:be:39:df:88:ca:46:b1:af: 93:25:f3:3d:c2:23:59:ed:e6:73:2a:40:28:d4:dc:a7:51:4f: 21:06:01:23:e8:6d:83:ba:19:1a:bc:9a:fd:2b:68:c1:2a:4f: 1f:b9:fb:80:c1:d5:b3:fb:2d:8f:0c:e2:be:ac:58:ee:e3:c5: 16:14:57:3a:2b:ee:dd:23:bb:7d:f9:5d:90:42:99:88:a9:9c: 8e:de:fb:87:97:0a:d9:ff:09:ba:44:ed:27:5e:f9:15:84:0b: f2:15:ce:2f:7d:76:8c:7d:e6:c3:bb:9c:35:91:70:d1:8c:0a: 69:bc:a9:9d:4b:ae:c9:5a:84:0a:4c:8d:0e:52:d1:cd:26:19: 7d:42:c9:c0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsYBtj1PH8ZmFeZ14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdm Mzg2MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZWQwYzdhYmYtNzU2Ni00ZmI4LWIwYWItOTk4YmRmZDI4OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWjXzD0h51WapjFlVlBxfO73YzVTkjJiFVXL FWBtZf7PlHIOvRBIBIhaW+Ib6RB0jd5b7w6wA7Ahj1h3poqfjeq5nrWtYJUZ7kNo zMJXVfpMk2xVVvJntM35paUbXtia6Dm0wbv4yGzxoGjYV2PVGpQrX8/AaXCiEjln YHvwNhNButGZ3lT13hIRcmg9pk3XcJTGRtyqoHoPDWghqNcoH3flu7Ckf7AwJDgU 6Dx++Xqk72zOGrGVSSKzmmBCivwXUNwsGYRqOztGqxLyMvKIWq97wztVwuzELMp1 S/7ufkJccwhAiW7HMKisTLQmEJeKR+uswsPR1yod0pghdhOfWwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPIziJIXlQCmzP+gu97l3MOkJVXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjhh MmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvMTRiMzhlMzctYjVmZS0z ZDAxLTk3ZGItM2I3ZGUxY2ViNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY4YTJkMWQtMmMzNi00YTFkLTg4 YTctMGMzMGQyNTdmMzg2L2Q2OGEyZDFkLTJjMzYtNGExZC04OGE3LTBjMzBkMjU3 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUtQ9QgY04B+AhOdH40Z4gI+5guyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMw ZDI1N2YzODYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4MUMA4E AgACMAgDBgQmAvdpADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAblL/v9K9Z357uAdGS9Pqdec0vsNi0q8hY kH0XO6EvaPDovDpOW/QOhXkeaLKODrFeKeb1+8j0iFOtiW4n7TNXma8nEK9QEBPK TvY19JoBA0lnAdzuxSnX7iZk9VsiU20jdn3n6Td9M+rhxnHDPS3c4GfwHPhzvjnf iMpGsa+TJfM9wiNZ7eZzKkAo1NynUU8hBgEj6G2DuhkavJr9K2jBKk8fufuAwdWz +y2PDOK+rFju48UWFFc6K+7dI7t9+V2QQpmIqZyO3vuHlwrZ/wm6RO0nXvkVhAvy Fc4vfXaMfebDu5w1kXDRjAppvKmdS67JWoQKTI0OUtHNJhl9QsnA -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:51 2025 by rpki-client