$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/453527a2-dbfe-312b-9bfe-6a6e4386269f.roa File: 453527a2-dbfe-312b-9bfe-6a6e4386269f.roa (raw, json) Hash identifier: 4E+isR+30FAMPC2hwFAVHpLSmPaT1uLEmCwFJEGLmn4= Subject key identifier: EA:09:63:54:76:00:B3:9B:B8:E5:9D:2E:E8:BA:7B:2C:F9:85:2D:E6 Certificate issuer: /CN=623d1527-5b57-4129-8bda-7e41b87729f6 Certificate serial: 010D0C9F4328584B23319772E1C1E03298C49B80 Authority key identifier: 9A:77:E7:35:30:95:25:FE:9E:77:EC:C3:90:7A:1C:A0:44:67:0C:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/453527a2-dbfe-312b-9bfe-6a6e4386269f.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 376 IP address blocks: 132.215.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:97:72:e1:c1:e0:32:98:c4:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=623d1527-5b57-4129-8bda-7e41b87729f6 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=2de4b1ec-ec88-4c71-9052-f3f612e0b8cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:58:a7:45:51:95:e4:47:23:87:78:83:72: 6b:ce:52:96:e7:51:ee:41:6b:08:2b:40:98:6e:4d: de:bc:92:2d:1c:c0:33:be:3c:5d:31:dc:81:db:dc: eb:9c:d6:1c:df:b6:23:71:e9:18:0a:ca:39:1e:6c: 88:b6:0e:7d:95:c2:b5:b8:c8:f9:74:f0:28:e6:f8: 0a:14:0b:6c:88:de:50:37:c5:33:80:55:af:43:3c: f6:ea:57:6e:bf:99:58:22:12:25:89:66:85:9d:fa: 65:7e:32:48:53:6a:e4:83:bb:27:f6:9e:39:77:f8: bd:c0:85:51:fb:65:2e:04:93:ff:c1:18:32:bf:ae: dc:a4:4c:92:72:89:27:17:0b:e0:d6:50:9a:aa:79: 3b:3f:20:0d:fe:f2:23:74:51:87:3c:89:14:8c:6d: 65:8d:7e:6f:7d:98:c6:46:4c:38:cd:d2:4f:a3:93: da:49:03:96:26:8e:cb:ca:ae:82:4c:1b:a0:fc:3e: 4b:e8:28:8c:8c:83:cc:2b:87:0d:55:84:b2:be:13: 0f:25:83:54:85:e3:38:4b:63:01:dd:70:14:46:37: 6e:c0:ff:79:7f:42:b4:4c:18:8e:98:d4:17:ce:8c: 6e:33:19:61:6b:56:27:aa:82:a3:60:49:b8:d4:3a: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:09:63:54:76:00:B3:9B:B8:E5:9D:2E:E8:BA:7B:2C:F9:85:2D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/453527a2-dbfe-312b-9bfe-6a6e4386269f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.crl X509v3 Authority Key Identifier: keyid:9A:77:E7:35:30:95:25:FE:9E:77:EC:C3:90:7A:1C:A0:44:67:0C:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer sbgp-ipAddrBlock: critical IPv4: 132.215.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:73:ca:e3:5f:c1:c3:27:2f:db:5d:86:52:07:d6:91:c2:6b: be:a1:16:ad:5e:42:70:b5:f4:e5:87:22:9a:88:49:cf:aa:ac: dd:d6:b1:69:17:70:b1:3c:d8:3d:c3:b3:b9:01:8f:97:c1:23: e2:10:88:33:03:99:cf:08:08:7e:69:f6:de:d5:23:e0:ef:03: 46:31:07:6b:9c:0e:d5:e1:a5:d7:2b:49:10:63:87:25:4d:d6: 02:b8:f6:77:11:7f:59:8f:b0:12:78:0f:13:11:13:a1:90:53: a8:61:a1:6b:3d:06:39:69:20:12:bf:1c:d6:e5:c7:2a:52:f9: e8:02:bc:d9:3b:e9:4d:d8:d7:53:2c:d7:df:b3:4b:ae:6d:37: b6:93:d1:c2:c9:01:7e:ff:05:b6:f0:87:bb:9b:f8:5c:f1:48: d8:ad:dd:2c:ab:fa:ca:6e:45:d2:08:c5:a7:d0:14:78:af:a5: 96:55:21:96:7e:84:53:a5:34:32:6f:b9:d3:45:08:bd:de:d1: 15:08:d6:ca:7a:53:bf:63:e1:f0:ae:4c:10:cb:6f:01:93:7b: 73:f0:2d:39:06:8e:02:6d:f8:c3:2c:0b:ad:57:c1:1c:a0:78: 2d:87:a4:9c:0a:56:b5:31:56:8c:7c:58:56:81:26:07:e7:ce: 5d:16:de:e1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsjMZdy4cHgMpjEm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjIzZDE1MjctNWI1Ny00MTI5LThiZGEtN2U0MWI4Nzcy OWY2MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MmRlNGIxZWMtZWM4OC00YzcxLTkwNTItZjNmNjEyZTBiOGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3FYp0VRleRHI4d4g3JrzlKW51HuQWsIK0CY bk3evJItHMAzvjxdMdyB29zrnNYc37YjcekYCso5HmyItg59lcK1uMj5dPAo5vgK FAtsiN5QN8UzgFWvQzz26lduv5lYIhIliWaFnfplfjJIU2rkg7sn9p45d/i9wIVR +2UuBJP/wRgyv67cpEyScoknFwvg1lCaqnk7PyAN/vIjdFGHPIkUjG1ljX5vfZjG Rkw4zdJPo5PaSQOWJo7Lyq6CTBug/D5L6CiMjIPMK4cNVYSyvhMPJYNUheM4S2MB 3XAURjduwP95f0K0TBiOmNQXzoxuMxlha1YnqoKjYEm41Dpn3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOoJY1R2ALObuOWdLui6eyz5hS3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82MjNk MTUyNy01YjU3LTQxMjktOGJkYS03ZTQxYjg3NzI5ZjYvNDUzNTI3YTItZGJmZS0z MTJiLTliZmUtNmE2ZTQzODYyNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjIzZDE1MjctNWI1Ny00MTI5LThi ZGEtN2U0MWI4NzcyOWY2LzYyM2QxNTI3LTViNTctNDEyOS04YmRhLTdlNDFiODc3 MjlmNi5jcmwwHwYDVR0jBBgwFoAUmnfnNTCVJf6ed+zDkHocoERnDDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82MjNkMTUyNy01YjU3LTQxMjktOGJkYS03ZTQx Yjg3NzI5ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUHPK41/Bwycv212GUgfWkcJrvqEWrV5CcLX05YcimohJz6qs3daxaRdw sTzYPcOzuQGPl8Ej4hCIMwOZzwgIfmn23tUj4O8DRjEHa5wO1eGl1ytJEGOHJU3W Arj2dxF/WY+wEngPExEToZBTqGGhaz0GOWkgEr8c1uXHKlL56AK82TvpTdjXUyzX 37NLrm03tpPRwskBfv8FtvCHu5v4XPFI2K3dLKv6ym5F0gjFp9AUeK+lllUhln6E U6U0Mm+500UIvd7RFQjWynpTv2Ph8K5MEMtvAZN7c/AtOQaOAm34wywLrVfBHKB4 LYeknApWtTFWjHxYVoEmB+fOXRbe4Q== -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:36 2025 by rpki-client