$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa File: 932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa (raw, json) Hash identifier: MFdJMp30ICUnwMjZ6SxzrigJPN0XyPObr3feIZ1hgYs= Subject key identifier: A4:F2:DF:97:4A:5F:97:39:BA:AA:4D:6F:9C:AF:AD:3B:42:43:A3:EE Certificate issuer: /CN=d2e35455-e012-4897-80f6-c6386a9f779c Certificate serial: 010D0C9F4328584AE9F66C6504D8B117AF2E4BE5 Authority key identifier: BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 26520 IP address blocks: 23.171.88.0/24 maxlen: 24 2602:f987::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:6c:65:04:d8:b1:17:af:2e:4b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2e35455-e012-4897-80f6-c6386a9f779c Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=68006e65-8860-4252-aa26-870a208b3ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:e8:e1:79:49:73:66:b4:a4:86:89:5a:3a: 13:2a:93:3c:5e:05:ca:cb:32:07:3c:10:44:95:02: f1:c1:38:33:3f:17:c9:35:db:91:31:ed:74:44:b2: 9a:d5:c5:f2:26:04:53:93:74:02:12:8e:eb:d5:0f: da:a4:3e:a0:df:13:8b:2d:86:12:e2:fc:ee:96:93: 88:61:13:e4:9d:b0:f7:9d:4b:91:e8:d7:32:d0:cb: 6f:57:be:a3:3c:da:6a:7e:c8:38:f9:ab:9c:ab:e9: ab:bf:f2:4f:16:09:bf:7f:da:1e:0f:ce:d6:96:d3: 53:cd:4e:96:4f:2f:1b:76:ef:71:6b:e6:e3:3c:bb: e2:a5:e4:56:be:86:8e:c2:af:0d:fd:cd:a3:c2:f0: 0e:5c:d9:52:93:f6:9e:32:a3:e8:91:fc:22:4b:fe: 9c:e7:e3:0c:32:56:30:f7:d6:fc:36:82:04:ce:d0: fb:0f:48:b4:58:2f:f9:e2:97:60:5a:e5:42:f2:78: d1:d7:6f:58:0e:1b:ea:e5:4c:4b:90:bf:74:0b:04: 4b:85:0b:e9:6d:2f:a0:f4:d3:ae:80:ae:f5:1f:4a: a5:e7:44:76:7b:24:a8:0b:e9:a3:79:f7:ab:0f:0c: 62:69:10:5d:cc:fb:20:ff:5b:33:32:2b:f2:23:79: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F2:DF:97:4A:5F:97:39:BA:AA:4D:6F:9C:AF:AD:3B:42:43:A3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/932fa17b-4260-3a87-96bd-e02baa9fcf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c/d2e35455-e012-4897-80f6-c6386a9f779c.crl X509v3 Authority Key Identifier: keyid:BC:45:84:C3:68:98:D4:CD:9B:E6:76:83:5C:33:53:C3:63:A8:17:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d2e35455-e012-4897-80f6-c6386a9f779c.cer sbgp-ipAddrBlock: critical IPv4: 23.171.88.0/24 IPv6: 2602:f987::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d4:53:76:36:87:73:11:50:db:bd:83:37:6c:2e:20:3d:9a: 0a:05:58:b6:c6:13:a8:ce:83:86:62:3f:7f:58:54:de:e2:cd: 4b:02:01:ba:b8:4c:27:70:6c:b7:eb:bf:a0:70:b2:b9:28:f6: a1:b6:9d:44:e2:80:64:2b:ba:c3:84:8b:ad:86:b4:8e:7d:fa: b3:89:ae:6b:2e:ea:c8:c7:d4:af:62:16:af:bb:15:57:49:5e: 5c:3d:cc:82:81:17:fb:23:cc:70:ad:b2:c9:fb:3a:5d:06:8d: 4f:3c:ca:57:1d:b0:99:94:e6:ec:d4:d8:02:45:5a:73:3a:78: 30:1c:44:c8:19:b7:19:11:78:24:88:59:a7:67:42:52:64:06: 12:c2:49:50:a2:6f:13:aa:d7:15:fa:36:6c:c9:ff:0c:b5:81: f6:00:35:1c:81:ab:e8:17:40:fd:9c:dc:c1:ef:f1:fe:0a:e0: 06:08:73:d9:ef:94:c0:c6:d4:cb:1d:18:58:bd:9c:f5:b8:29: ad:de:60:3f:a8:4c:77:1c:3f:eb:76:2b:10:96:a9:b6:cd:2c: de:c5:75:12:31:25:8f:3b:fb:7a:8c:e2:ba:90:3b:99:f9:1f: 74:52:53:3d:ca:03:c8:7e:c6:3f:3a:cc:4b:21:4c:65:04:22: 72:0d:04:14 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErp9mxlBNixF68uS+UwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJlMzU0NTUtZTAxMi00ODk3LTgwZjYtYzYzODZhOWY3 NzljMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NjgwMDZlNjUtODg2MC00MjUyLWFhMjYtODcwYTIwOGIzZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8/o4XlJc2a0pIaJWjoTKpM8XgXKyzIHPBBE lQLxwTgzPxfJNduRMe10RLKa1cXyJgRTk3QCEo7r1Q/apD6g3xOLLYYS4vzulpOI YRPknbD3nUuR6Ncy0MtvV76jPNpqfsg4+aucq+mrv/JPFgm/f9oeD87WltNTzU6W Ty8bdu9xa+bjPLvipeRWvoaOwq8N/c2jwvAOXNlSk/aeMqPokfwiS/6c5+MMMlYw 99b8NoIEztD7D0i0WC/54pdgWuVC8njR129YDhvq5UxLkL90CwRLhQvpbS+g9NOu gK71H0ql50R2eySoC+mjeferDwxiaRBdzPsg/1szMivyI3lt4QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKTy35dKX5c5uqpNb5yvrTtCQ6PuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kMmUz NTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4NmE5Zjc3OWMvOTMyZmExN2ItNDI2MC0z YTg3LTk2YmQtZTAyYmFhOWZjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDJlMzU0NTUtZTAxMi00ODk3LTgw ZjYtYzYzODZhOWY3NzljL2QyZTM1NDU1LWUwMTItNDg5Ny04MGY2LWM2Mzg2YTlm Nzc5Yy5jcmwwHwYDVR0jBBgwFoAUvEWEw2iY1M2b5naDXDNTw2OoF3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kMmUzNTQ1NS1lMDEyLTQ4OTctODBmNi1jNjM4 NmE5Zjc3OWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6tYMA4E AgACMAgDBgQmAvmHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBS1FN2NodzEVDbvYM3bC4gPZoKBVi2xhOo zoOGYj9/WFTe4s1LAgG6uEwncGy367+gcLK5KPahtp1E4oBkK7rDhIuthrSOffqz ia5rLurIx9SvYhavuxVXSV5cPcyCgRf7I8xwrbLJ+zpdBo1PPMpXHbCZlObs1NgC RVpzOngwHETIGbcZEXgkiFmnZ0JSZAYSwklQom8TqtcV+jZsyf8MtYH2ADUcgavo F0D9nNzB7/H+CuAGCHPZ75TAxtTLHRhYvZz1uCmt3mA/qEx3HD/rdisQlqm2zSze xXUSMSWPO/t6jOK6kDuZ+R90UlM9ygPIfsY/OsxLIUxlBCJyDQQU -----END CERTIFICATE-----Generated at Mon Nov 3 08:48:29 2025 by rpki-client