$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/3af8380e-92ea-3c18-b48e-cca8c8b09e14.roa File: 3af8380e-92ea-3c18-b48e-cca8c8b09e14.roa (raw, json) Hash identifier: AIlbydqdHNdbsju3v9nfrCxvnAMxOXP1lJbAb26/FwY= Subject key identifier: EA:0D:28:CD:37:56:F7:76:E0:E7:3F:4F:FF:3B:DA:A3:06:DA:D0:69 Certificate issuer: /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Certificate serial: 010D0C9F4328584B2102468D244798C295C94540 Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/3af8380e-92ea-3c18-b48e-cca8c8b09e14.roa Signing time: Tue 05 Aug 2025 19:47:15 +0000 ROA not before: Tue 05 Aug 2025 19:47:15 +0000 ROA not after: Mon 03 Nov 2025 20:47:15 +0000 asID: 36236 IP address blocks: 23.143.68.0/24 maxlen: 24 2602:f5c8::/41 maxlen: 44 2602:f5c8:20::/44 maxlen: 47 2602:f5c8:80::/41 maxlen: 44 2602:f5c8:c0::/43 maxlen: 48 2602:f5c8:e0::/44 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:02:46:8d:24:47:98:c2:95:c9:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Validity Not Before: Aug 5 19:47:15 2025 GMT Not After : Nov 3 20:47:15 2025 GMT Subject: CN=a4b74ec0-178d-40e4-b616-d3e8a13e2f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:94:7c:78:3f:0d:aa:28:a7:79:62:3c:a4:fe: 5f:eb:cc:11:a7:2b:c7:43:c1:f0:ad:50:29:08:2a: 17:b4:0a:d5:67:f3:cd:d7:23:4c:50:ab:76:82:26: fa:6e:3b:00:ed:9d:28:32:22:91:0c:ec:13:35:ca: 80:d0:5b:8c:0f:d4:25:1d:b9:01:70:fe:6d:0b:f9: 5e:99:14:74:1b:1d:d3:63:a8:24:ff:a3:9e:c0:ea: ef:cc:87:6c:97:cb:75:12:52:24:08:36:4e:77:a0: a9:0f:56:76:f4:c2:3d:3e:56:7a:48:37:0d:57:56: 52:67:c0:77:3a:2b:d8:99:70:cf:c1:bb:8a:d6:6d: ce:9c:62:15:29:31:35:82:73:f9:59:00:c5:da:b2: cc:20:47:56:6d:a3:a0:44:77:70:b6:8d:d0:b7:cf: 1c:0b:0e:cf:21:b3:fa:96:13:54:0a:4c:a6:b4:65: f4:26:1d:75:30:18:5f:3f:3a:21:cf:7a:02:dd:3e: 54:51:2f:34:8c:4c:67:2d:7a:bd:e7:0d:43:4a:c4: c5:e8:7b:28:2b:d3:61:fa:02:e3:eb:23:df:1c:23: c6:8d:2e:a6:af:23:78:ca:f4:55:1b:c0:73:dd:ab: b7:07:7f:07:81:39:83:21:ef:d4:75:ef:e6:79:21: 53:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0D:28:CD:37:56:F7:76:E0:E7:3F:4F:FF:3B:DA:A3:06:DA:D0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/3af8380e-92ea-3c18-b48e-cca8c8b09e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl X509v3 Authority Key Identifier: keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.68.0/24 IPv6: 2602:f5c8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:60:e5:5f:bd:6d:db:a1:f4:d9:c7:3b:3f:8b:6d:c2:fd:ba: d8:6c:9b:d8:09:74:77:62:9d:34:1d:6f:ee:b7:be:33:6f:09: 97:c0:69:de:0a:6a:7f:b7:46:3d:32:cd:d8:67:4c:92:ce:a9: 7c:cf:a6:f2:4b:f9:68:59:2d:b5:73:b6:a3:cd:76:3b:b9:76: f1:48:f6:9f:f0:a7:d3:f3:8c:04:8e:e5:1b:14:c5:ba:ce:2f: 6a:bd:7c:65:76:db:6b:a0:f2:26:f4:23:7c:c0:8a:f5:eb:cc: bd:94:cc:43:1f:c4:43:7e:47:cb:60:54:a3:52:68:f9:7c:f2: 21:60:0f:78:dc:73:ab:ba:14:69:11:b5:82:fc:c3:86:79:15: de:6f:d7:5b:c0:bf:a9:f9:51:fc:ec:07:ab:83:3a:03:17:6a: 0b:86:3e:83:00:c5:a7:f9:20:3d:83:7d:7c:8f:5c:7f:a6:a7: 94:c6:aa:46:d6:f1:5e:12:de:ec:8a:80:12:2a:88:ce:65:b9: 14:9f:b4:c3:15:7f:65:81:d4:d8:d8:b0:bb:54:a2:1a:46:4b: 97:95:1b:82:bc:df:db:55:e7:fd:d4:46:4d:f0:eb:3c:bf:79: ed:03:97:61:04:64:66:7d:41:1a:12:e0:0b:5d:33:12:f5:bd: 43:4a:77:2f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEshAkaNJEeYwpXJRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzOWJjOTAtZTljZi00MTI1LWFiZTYtZjc1ZDk5YjFj YTFjMB4XDTI1MDgwNTE5NDcxNVoXDTI1MTEwMzIwNDcxNVowLzEtMCsGA1UEAxMk YTRiNzRlYzAtMTc4ZC00MGU0LWI2MTYtZDNlOGExM2UyZjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpR8eD8NqiineWI8pP5f68wRpyvHQ8HwrVAp CCoXtArVZ/PN1yNMUKt2gib6bjsA7Z0oMiKRDOwTNcqA0FuMD9QlHbkBcP5tC/le mRR0Gx3TY6gk/6OewOrvzIdsl8t1ElIkCDZOd6CpD1Z29MI9PlZ6SDcNV1ZSZ8B3 OivYmXDPwbuK1m3OnGIVKTE1gnP5WQDF2rLMIEdWbaOgRHdwto3Qt88cCw7PIbP6 lhNUCkymtGX0Jh11MBhfPzohz3oC3T5UUS80jExnLXq95w1DSsTF6HsoK9Nh+gLj 6yPfHCPGjS6mryN4yvRVG8Bz3au3B38HgTmDIe/Ude/meSFTLwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOoNKM03Vvd24Oc/T/872qMG2tBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5 YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVkOTliMWNhMWMvM2FmODM4MGUtOTJlYS0z YzE4LWI0OGUtY2NhOGM4YjA5ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWQzOWJjOTAtZTljZi00MTI1LWFi ZTYtZjc1ZDk5YjFjYTFjL2FkMzliYzkwLWU5Y2YtNDEyNS1hYmU2LWY3NWQ5OWIx Y2ExYy5jcmwwHwYDVR0jBBgwFoAUZ+GlgVM7SvNBnGzNthnN8x6dX6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVk OTliMWNhMWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF49EMA4E AgACMAgDBgAmAvXIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1YOVfvW3bofTZxzs/i23C/brYbJvYCXR3 Yp00HW/ut74zbwmXwGneCmp/t0Y9Ms3YZ0ySzql8z6byS/loWS21c7ajzXY7uXbx SPaf8KfT84wEjuUbFMW6zi9qvXxldttroPIm9CN8wIr168y9lMxDH8RDfkfLYFSj Umj5fPIhYA943HOruhRpEbWC/MOGeRXeb9dbwL+p+VH87AergzoDF2oLhj6DAMWn +SA9g318j1x/pqeUxqpG1vFeEt7sioASKojOZbkUn7TDFX9lgdTY2LC7VKIaRkuX lRuCvN/bVef91EZN8Os8v3ntA5dhBGRmfUEaEuALXTMS9b1DSncv -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:36 2025 by rpki-client