$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa File: 9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa (raw, json) Hash identifier: 4nGDUy76dbv0utJJZzb8YT9tBMlF76k6xD5lptbJuK4= Subject key identifier: 55:34:1F:18:4E:1D:C2:25:DD:D6:B9:92:AC:AB:76:A3:5F:87:73:D8 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584AECC12550D2ED5AA2F0A72DC0 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 13780 IP address blocks: 23.128.88.0/24 maxlen: 24 2602:fc09::/36 maxlen: 36 2602:fc09::/40 maxlen: 40 2602:fc09:800::/40 maxlen: 40 2602:fc09:805::/48 maxlen: 48 2602:fc09:818::/48 maxlen: 48 2602:fc09:a00::/40 maxlen: 40 2602:fc09:d2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:25:50:d2:ed:5a:a2:f0:a7:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=93da1f79-fd01-4d1c-80f5-9870d0a76169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:d5:f4:21:ca:d8:aa:e1:6e:38:aa:35:1d: 6e:66:5d:d8:e7:56:16:2b:0d:49:7a:5c:ba:ee:83: 9d:da:9b:95:29:c7:a0:00:c8:d5:3e:b3:62:7d:4d: dd:3c:74:af:ba:47:cb:62:c6:e7:0d:c1:57:e6:d6: aa:b0:9e:8a:ed:19:1f:f7:81:b1:64:d3:e9:cb:70: 38:ca:29:a7:56:51:0a:e7:b5:8d:b8:97:af:1a:22: ba:ca:56:92:29:ce:42:4e:bc:94:9e:30:a3:64:1d: da:67:84:df:10:9d:ef:3d:c1:f6:cd:0e:8c:58:63: 26:41:3f:09:bb:86:e9:72:20:e7:a7:f6:c1:f7:29: a6:6b:4a:6b:56:02:b1:a9:14:5d:e4:a6:87:44:63: 4a:84:cd:f7:e4:77:2c:f2:8c:2d:ff:7f:03:91:28: 45:f6:b7:98:58:ef:ac:24:cc:d3:97:f2:79:05:3b: dd:4d:93:93:45:59:72:58:e9:6c:b9:a4:d1:e8:60: 09:66:33:2e:ab:1e:ee:3c:08:9e:2e:c1:7e:c3:5a: 42:14:eb:ba:a3:15:43:17:28:7d:7f:3e:77:2c:73: 0a:8e:eb:88:5d:61:53:a9:69:19:93:ec:1e:df:ba: 4b:04:5b:51:bd:49:a8:67:e0:f7:21:ac:df:a2:1f: ec:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:34:1F:18:4E:1D:C2:25:DD:D6:B9:92:AC:AB:76:A3:5F:87:73:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 23.128.88.0/24 IPv6: 2602:fc09::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:74:f2:8d:8d:83:90:a2:c9:23:4a:eb:84:a0:f3:d8:12:df: ac:c6:74:e8:d0:ff:50:78:d9:f2:45:45:43:87:e2:46:85:ff: 11:66:79:6d:22:99:c0:74:c6:d0:47:8a:c8:2f:d5:fd:9c:30: 2e:b4:80:39:76:d4:bc:1f:8e:b4:1c:24:29:bf:e3:2c:2c:56: 8f:3d:e7:a7:cc:8c:a9:f5:f1:b2:63:a9:b6:b9:db:ea:a5:50: 94:ce:41:70:99:f6:c2:c1:e0:2b:af:54:e4:c0:da:94:18:98: 03:e3:56:92:67:ef:5d:dc:e7:17:b2:05:86:bf:96:24:1b:08: a8:13:79:24:fd:8e:6a:d1:1e:13:d8:23:2d:d2:08:09:4a:3c: bb:69:31:a8:6e:da:79:6b:80:ec:c0:45:ac:5d:75:11:00:16: 41:12:fc:c1:93:f0:9a:15:a3:ed:2c:85:2e:fb:14:6d:41:69: 72:76:27:6a:0c:86:a8:2e:66:00:03:aa:d5:49:99:be:a2:4d: f6:56:f3:c7:15:74:c5:f6:29:2c:47:67:b3:e3:d8:a1:65:bf: 02:4a:2e:69:6d:01:8b:59:8c:bb:b0:3a:45:41:6f:a9:7a:44: 15:58:27:09:c3:45:f3:d5:a7:e7:16:cb:3c:8c:9d:b6:dd:91: 5a:0b:66:4c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWErswSVQ0u1aovCnLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk OTNkYTFmNzktZmQwMS00ZDFjLTgwZjUtOTg3MGQwYTc2MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hHV9CHK2KrhbjiqNR1uZl3Y51YWKw1Jely6 7oOd2puVKcegAMjVPrNifU3dPHSvukfLYsbnDcFX5taqsJ6K7Rkf94GxZNPpy3A4 yimnVlEK57WNuJevGiK6ylaSKc5CTryUnjCjZB3aZ4TfEJ3vPcH2zQ6MWGMmQT8J u4bpciDnp/bB9ymma0prVgKxqRRd5KaHRGNKhM335Hcs8owt/38DkShF9reYWO+s JMzTl/J5BTvdTZOTRVlyWOlsuaTR6GAJZjMuqx7uPAieLsF+w1pCFOu6oxVDFyh9 fz53LHMKjuuIXWFTqWkZk+we37pLBFtRvUmoZ+D3Iazfoh/s0wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFU0HxhOHcIl3da5kqyrdqNfh3PYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOWZkZTJhNjktYzUzZi0z M2JmLWI5M2UtNmFlYWFkMzBkMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BYMA4E AgACMAgDBgQmAvwJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMdPKNjYOQoskjSuuEoPPYEt+sxnTo0P9Q eNnyRUVDh+JGhf8RZnltIpnAdMbQR4rIL9X9nDAutIA5dtS8H460HCQpv+MsLFaP PeenzIyp9fGyY6m2udvqpVCUzkFwmfbCweArr1TkwNqUGJgD41aSZ+9d3OcXsgWG v5YkGwioE3kk/Y5q0R4T2CMt0ggJSjy7aTGobtp5a4DswEWsXXURABZBEvzBk/Ca FaPtLIUu+xRtQWlydidqDIaoLmYAA6rVSZm+ok32VvPHFXTF9iksR2ez49ihZb8C Si5pbQGLWYy7sDpFQW+pekQVWCcJw0Xz1afnFss8jJ223ZFaC2ZM -----END CERTIFICATE-----Generated at Sun Nov 2 22:53:46 2025 by rpki-client