$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa File: a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa (raw, json) Hash identifier: eTFzF80lGBkmdkosgqcHVYQJCGlxDmKhp1cecw4L2uk= Subject key identifier: 3C:A8:B1:01:F4:31:10:68:43:7F:D0:78:59:8C:F1:C5:8D:81:67:2A Certificate issuer: /CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Certificate serial: 010D0C9F4328584BC53B367851CFF04C9F425980 Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 17024 IP address blocks: 23.154.56.0/24 maxlen: 24 198.135.185.0/24 maxlen: 24 2602:2d1::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:36:78:51:cf:f0:4c:9f:42:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=afc9afdb-f476-467f-bdcc-6f7514a51fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:6a:c8:b3:50:be:3f:f1:e5:79:fe:86:3c: c5:dc:0f:54:2e:86:44:83:f3:e7:7c:67:56:55:d3: f9:b1:b6:b3:d6:9c:96:13:16:f3:32:3f:d4:35:8e: e5:e4:45:0e:51:11:ae:71:a7:05:a6:1d:28:4c:42: ec:cf:e2:39:e9:8d:ce:c9:70:a5:4e:81:bb:cf:68: 36:31:8a:49:55:ad:a8:a3:83:27:2e:d3:d9:21:e1: ac:5f:62:61:86:a3:cd:ff:e8:60:e6:49:89:a7:bc: ae:51:89:a4:c8:77:55:cf:93:ef:c5:d9:e8:d3:31: ee:f4:74:de:01:84:31:f4:c8:a6:6c:3b:45:35:d0: 1e:46:b1:f0:94:ab:47:6e:af:3d:1c:f5:46:1c:5b: f0:d2:9c:e2:2f:a3:6e:40:95:b2:af:e3:05:dc:82: fe:45:bc:26:34:3c:de:e3:a4:a4:0f:3a:66:7d:57: 06:83:65:1a:99:c5:91:74:8d:3d:a1:3d:aa:b1:38: 38:c0:a0:0a:77:ab:33:55:ab:36:a7:3d:6a:2d:c6: ef:40:34:2e:83:10:df:ea:f2:ef:91:e0:88:e9:24: d3:56:3d:bb:b2:2b:eb:0f:94:12:12:06:07:f3:f1: 95:b9:e7:92:a3:5c:53:0e:84:4b:11:7a:ba:20:ae: 06:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A8:B1:01:F4:31:10:68:43:7F:D0:78:59:8C:F1:C5:8D:81:67:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/a18a88be-f95e-3fbc-aa79-e95d5a9435f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl X509v3 Authority Key Identifier: keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer sbgp-ipAddrBlock: critical IPv4: 23.154.56.0/24 198.135.185.0/24 IPv6: 2602:2d1::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ff:84:cb:33:ad:ce:d5:f7:17:c9:71:1a:37:05:23:60:34: 75:35:0d:37:cb:01:6d:05:e5:6e:fb:5a:18:0b:f0:c8:68:ba: 25:cc:6b:8e:e4:bc:92:95:18:c9:38:b8:0e:f5:5c:98:aa:ab: bf:8e:6d:6e:f8:c0:a2:04:1e:1c:6e:2c:99:6e:78:07:40:d8: c8:44:d9:f7:9f:ae:1f:0e:b5:05:85:ca:a3:23:a1:f6:e9:f0: 32:5d:52:c9:c3:e1:98:84:09:7a:c1:b4:4b:c7:cd:55:8c:d9: 85:39:83:89:cd:73:66:4c:3b:c0:db:d8:d5:4c:a5:1a:b1:74: 83:c3:41:64:08:3e:92:d3:30:ed:bb:39:ec:60:6a:ca:b1:67: 77:cd:ac:2d:e6:a0:98:9f:8e:d9:50:0d:9c:c7:c4:49:c3:be: d8:e5:32:09:87:b9:4e:20:7c:0a:b2:8b:c2:81:e2:59:3f:4d: 17:61:f7:43:b1:30:a8:ab:7d:25:25:2a:aa:bb:23:25:ca:ed: 26:81:4c:7a:21:2d:6c:fa:e7:e8:d2:25:c5:e0:50:a7:37:d1: 9c:17:46:68:02:49:2a:b6:b9:28:6b:84:29:21:ce:f6:5b:8c: 51:ad:95:33:fc:6e:4b:5c:6e:ad:42:1b:d1:65:ac:0d:42:44: 03:41:37:e4 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEvFOzZ4Uc/wTJ9CWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz Zjg3MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWZjOWFmZGItZjQ3Ni00NjdmLWJkY2MtNmY3NTE0YTUxZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngRqyLNQvj/x5Xn+hjzF3A9ULoZEg/PnfGdW VdP5sbaz1pyWExbzMj/UNY7l5EUOURGucacFph0oTELsz+I56Y3OyXClToG7z2g2 MYpJVa2oo4MnLtPZIeGsX2JhhqPN/+hg5kmJp7yuUYmkyHdVz5Pvxdno0zHu9HTe AYQx9MimbDtFNdAeRrHwlKtHbq89HPVGHFvw0pziL6NuQJWyr+MF3IL+RbwmNDze 46SkDzpmfVcGg2UamcWRdI09oT2qsTg4wKAKd6szVas2pz1qLcbvQDQugxDf6vLv keCI6STTVj27sivrD5QSEgYH8/GVueeSo1xTDoRLEXq6IK4G6QIDAQABo4IDazCC A2cwHQYDVR0OBBYEFDyosQH0MRBoQ3/QeFmM8cWNgWcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvYTE4YTg4YmUtZjk1ZS0z ZmJjLWFhNzktZTk1ZDVhOTQzNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh YmVhMjNmODcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5o4AwQA xoe5MA4EAgACMAgDBgImAgLRADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7/4TLM63O1fcXyXEaNwUjYDR1 NQ03ywFtBeVu+1oYC/DIaLolzGuO5LySlRjJOLgO9VyYqqu/jm1u+MCiBB4cbiyZ bngHQNjIRNn3n64fDrUFhcqjI6H26fAyXVLJw+GYhAl6wbRLx81VjNmFOYOJzXNm TDvA29jVTKUasXSDw0FkCD6S0zDtuznsYGrKsWd3zawt5qCYn47ZUA2cx8RJw77Y 5TIJh7lOIHwKsovCgeJZP00XYfdDsTCoq30lJSqquyMlyu0mgUx6IS1s+ufo0iXF 4FCnN9GcF0ZoAkkqtrkoa4QpIc72W4xRrZUz/G5LXG6tQhvRZawNQkQDQTfk -----END CERTIFICATE-----Generated at Mon Nov 10 03:10:07 2025 by rpki-client