$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa File: cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa (raw, json) Hash identifier: z0xGKqVgsWfh96v0HsUL1VeR0n//LZJXyWJ8LL5N79k= Subject key identifier: B2:81:BE:F6:8E:42:33:8A:16:83:78:70:27:70:F5:6A:97:21:B0:3B Certificate issuer: /CN=896f0624-c28d-44c0-93cf-3f879f877518 Certificate serial: 010D0C9F4328584B004BE8D8D66948761C0A5600 Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 400503 IP address blocks: 23.133.56.0/24 maxlen: 24 23.133.57.0/24 maxlen: 24 2602:fbb4::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e8:d8:d6:69:48:76:1c:0a:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=ac7b679c-b9d8-4390-868a-44936b864f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:d6:c2:98:4b:66:22:b3:7b:3e:6b:97:3d: f8:3b:b9:aa:2d:ae:86:6e:5b:22:4a:a1:3b:36:27: d5:d6:72:f5:7a:1a:5b:c2:7d:c6:3f:99:22:d9:b2: ed:50:2a:ec:5d:ca:01:99:20:9e:69:f0:e4:12:9f: 03:d4:a8:f7:82:d8:29:f5:e9:32:9a:43:97:81:88: 8a:6a:ae:3c:de:fd:d3:02:cc:ec:13:60:4d:09:38: df:32:7d:51:73:b0:be:a3:7b:dd:4c:91:b2:87:7d: 48:c3:25:a2:5e:d4:72:49:33:2b:b7:5e:e0:03:aa: 6a:42:f6:27:7c:7c:0a:eb:ee:1a:14:37:f8:49:fa: 5f:e2:0c:e4:fd:7e:4f:82:92:2a:93:37:0b:36:0d: b7:d8:fd:1f:8c:0d:67:c7:7d:65:87:2b:d2:57:0b: 2f:e1:b2:61:9f:25:f0:34:61:e7:fa:6d:44:09:69: a5:3d:a3:0d:40:4f:f6:57:69:22:e6:fd:a4:26:9b: 5e:c5:aa:a6:eb:60:91:a1:02:13:54:d1:c9:32:fc: 52:a5:0c:22:91:1c:44:cc:cf:85:fc:ff:0e:76:ae: b6:26:40:34:78:96:cb:e4:ed:16:d1:ef:b6:73:06: 3d:db:27:4d:bc:38:8d:4a:95:68:6f:00:d4:1d:b1: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:81:BE:F6:8E:42:33:8A:16:83:78:70:27:70:F5:6A:97:21:B0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl X509v3 Authority Key Identifier: keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer sbgp-ipAddrBlock: critical IPv4: 23.133.56.0/23 IPv6: 2602:fbb4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:8d:42:7f:e1:50:66:9f:36:9f:72:a5:1b:27:41:b4:a5:82: 17:26:0c:a0:b4:53:6f:0d:82:e7:e0:98:15:60:e0:ce:74:3d: 59:55:4c:83:3c:98:82:30:3f:26:e7:7a:5b:97:93:3c:d0:71: 59:fb:60:0f:6a:24:67:6a:a7:e9:63:f2:79:ca:30:32:e2:6a: 70:4d:09:b0:12:34:7a:a5:d4:da:ba:55:b6:0c:9b:49:af:1f: 2c:31:c2:8e:69:5c:0c:11:ea:c0:0b:aa:34:88:3f:e1:da:66: 9a:46:b9:bc:0a:94:b4:5c:f1:1f:9f:a2:cd:7b:45:60:bc:a1: 42:86:1f:25:9a:39:56:6d:29:e8:1b:c3:e5:9c:a4:35:3e:f8: ba:97:7c:76:ef:17:c4:42:1c:52:f5:9a:f6:29:cd:93:fe:7c: 8b:04:55:0a:8c:bd:c0:88:3a:79:c0:ee:3a:57:c8:47:82:34: 84:bc:e5:5c:ad:5e:19:aa:2c:11:26:12:ac:ff:45:1d:5e:5c: 54:de:46:03:48:5d:6d:05:eb:c2:85:15:29:d3:45:a1:9f:bd: 02:10:60:bb:00:48:8f:8d:38:73:6a:a8:bb:2f:54:13:03:bf: c5:30:7c:45:bd:87:72:c8:6b:91:d3:c1:82:c2:e7:42:5f:a5: 73:49:5a:6d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEsAS+jY1mlIdhwKVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2ZjA2MjQtYzI4ZC00NGMwLTkzY2YtM2Y4NzlmODc3 NTE4MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YWM3YjY3OWMtYjlkOC00MzkwLTg2OGEtNDQ5MzZiODY0ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviDWwphLZiKzez5rlz34O7mqLa6GblsiSqE7 NifV1nL1ehpbwn3GP5ki2bLtUCrsXcoBmSCeafDkEp8D1Kj3gtgp9ekymkOXgYiK aq483v3TAszsE2BNCTjfMn1Rc7C+o3vdTJGyh31IwyWiXtRySTMrt17gA6pqQvYn fHwK6+4aFDf4Sfpf4gzk/X5PgpIqkzcLNg232P0fjA1nx31lhyvSVwsv4bJhnyXw NGHn+m1ECWmlPaMNQE/2V2ki5v2kJptexaqm62CRoQITVNHJMvxSpQwikRxEzM+F /P8Odq62JkA0eJbL5O0W0e+2cwY92ydNvDiNSpVobwDUHbFv7wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLKBvvaOQjOKFoN4cCdw9WqXIbA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OTZm MDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4Nzc1MTgvY2RlOWNlOGItYjdmOS0z NjE5LTlkYWUtYmEyZDQ2Y2I5Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODk2ZjA2MjQtYzI4ZC00NGMwLTkz Y2YtM2Y4NzlmODc3NTE4Lzg5NmYwNjI0LWMyOGQtNDRjMC05M2NmLTNmODc5Zjg3 NzUxOC5jcmwwHwYDVR0jBBgwFoAUrmWc8Fd9XFyJ0WDpAS8noau2rwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3 OWY4Nzc1MTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF4U4MA4E AgACMAgDBgAmAvu0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRjUJ/4VBmnzafcqUbJ0G0pYIXJgygtFNv DYLn4JgVYODOdD1ZVUyDPJiCMD8m53pbl5M80HFZ+2APaiRnaqfpY/J5yjAy4mpw TQmwEjR6pdTaulW2DJtJrx8sMcKOaVwMEerAC6o0iD/h2maaRrm8CpS0XPEfn6LN e0VgvKFChh8lmjlWbSnoG8PlnKQ1Pvi6l3x27xfEQhxS9Zr2Kc2T/nyLBFUKjL3A iDp5wO46V8hHgjSEvOVcrV4ZqiwRJhKs/0UdXlxU3kYDSF1tBevChRUp00Whn70C EGC7AEiPjThzaqi7L1QTA7/FMHxFvYdyyGuR08GCwudCX6VzSVpt -----END CERTIFICATE-----Generated at Fri Oct 17 11:36:42 2025 by rpki-client