$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/af2f829b-0e8b-37ab-9952-c4e11edc9d3b.roa File: af2f829b-0e8b-37ab-9952-c4e11edc9d3b.roa (raw, json) Hash identifier: fJ2H5uQZ1spVVeqEspzTX16+Inl/QCtFTSlUWFmZ9cg= Subject key identifier: D9:91:23:8D:44:46:BE:21:F9:A9:27:0A:82:91:56:9D:99:33:C1:0E Certificate issuer: /CN=9fa1f513-7800-4b16-b8c2-e28305418287 Certificate serial: 010D0C9F4328584B970D076FAF63306089C7CB00 Authority key identifier: 34:88:0B:1F:A7:A3:6B:26:FA:0D:04:4E:D1:99:B2:DD:34:13:2A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/af2f829b-0e8b-37ab-9952-c4e11edc9d3b.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 401370 IP address blocks: 23.142.196.0/24 maxlen: 24 162.247.73.0/24 maxlen: 24 162.247.74.0/24 maxlen: 24 162.247.75.0/24 maxlen: 24 2602:f651::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:07:6f:af:63:30:60:89:c7:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa1f513-7800-4b16-b8c2-e28305418287 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=0cb5ed26-232e-4040-9218-e1edbf175a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:2a:29:ca:c6:c9:00:b8:79:70:51:46:01: 02:41:2c:de:f5:b7:67:fc:d5:ed:6d:bc:a7:24:54: de:0e:28:17:03:34:23:0d:a8:0a:ac:ed:1f:a8:38: 95:9e:d1:b3:ee:9e:13:3e:f4:a8:03:21:bc:c3:43: b1:6c:8e:23:cc:47:56:e3:f3:be:0a:78:96:07:1c: 5c:ce:df:81:c0:7b:f6:1f:c6:a6:b1:90:f1:17:bd: 51:d4:1e:74:c4:70:63:dc:c1:28:c7:41:6f:44:93: 55:e7:b3:30:b8:b5:77:dc:5a:57:19:d2:d7:bb:a4: 11:86:1e:e1:91:a7:05:62:cc:ec:e0:e9:7f:f6:8d: 59:a0:88:48:b3:95:f3:ae:6a:80:ab:8f:11:1e:bf: 02:cd:e8:db:b3:fe:a3:42:19:68:df:20:d4:7d:e3: 16:c0:be:21:4e:56:9c:c8:0a:aa:03:84:68:7c:9b: fc:96:9b:4f:05:ec:f8:06:8a:b4:30:f9:ae:c9:b4: 71:3d:80:0a:ed:9f:c0:66:47:d2:d5:e2:c3:30:fb: 59:e5:7d:77:60:29:47:c7:9c:59:9d:70:c2:42:ef: 3e:d0:16:d2:52:99:4d:d6:f2:09:1a:44:30:1a:ab: c5:cc:bf:94:90:29:5d:46:b3:4d:14:53:76:15:e1: 59:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:91:23:8D:44:46:BE:21:F9:A9:27:0A:82:91:56:9D:99:33:C1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/af2f829b-0e8b-37ab-9952-c4e11edc9d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287/9fa1f513-7800-4b16-b8c2-e28305418287.crl X509v3 Authority Key Identifier: keyid:34:88:0B:1F:A7:A3:6B:26:FA:0D:04:4E:D1:99:B2:DD:34:13:2A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9fa1f513-7800-4b16-b8c2-e28305418287.cer sbgp-ipAddrBlock: critical IPv4: 23.142.196.0/24 162.247.73.0-162.247.75.255 IPv6: 2602:f651::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:bd:07:f8:17:3c:be:be:b4:38:bc:db:88:21:76:dc:ac:e5: b3:01:4f:36:45:9b:89:49:91:48:75:e1:73:ab:7b:a9:34:59: 2d:93:77:d8:13:25:ae:26:9d:7c:3e:85:22:ef:f8:e3:c9:05: eb:a3:8d:38:85:92:03:7a:e2:fb:44:51:83:3a:47:d7:1e:98: e0:9e:2b:d6:36:0e:aa:a6:65:10:b4:74:9d:ae:97:97:c7:cc: df:71:5c:75:78:76:06:1f:43:57:ec:c2:42:2f:ba:12:b7:e0: a7:42:7c:43:dd:f9:9e:72:41:05:94:e5:e3:a3:8e:60:ce:19: 80:88:1f:c4:3f:d0:9c:e9:6c:bb:27:d9:38:25:ea:1d:c6:1b: f8:86:2b:a2:43:8f:bc:df:fa:a7:3d:0d:c0:ee:79:ed:c5:b3: 6f:d0:fe:e2:5a:de:6d:33:12:4c:7e:bf:60:b9:f1:54:fb:af: 37:bb:50:55:35:4a:93:0c:bc:5a:57:08:29:0a:5b:6b:13:9f: cb:38:0e:a2:f0:5a:c3:d2:d1:f6:03:d6:e4:c8:65:82:dd:4d: a7:81:68:32:70:0a:2f:c5:19:0d:c7:cd:89:27:cc:c2:2d:f4: 2c:48:ad:2d:68:9e:05:0f:9b:8a:90:83:ec:67:f5:22:2e:1e: 7d:d7:33:66 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEuXDQdvr2MwYInHywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhMWY1MTMtNzgwMC00YjE2LWI4YzItZTI4MzA1NDE4 Mjg3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MGNiNWVkMjYtMjMyZS00MDQwLTkyMTgtZTFlZGJmMTc1YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZgqKcrGyQC4eXBRRgECQSze9bdn/NXtbbyn JFTeDigXAzQjDagKrO0fqDiVntGz7p4TPvSoAyG8w0OxbI4jzEdW4/O+CniWBxxc zt+BwHv2H8amsZDxF71R1B50xHBj3MEox0FvRJNV57MwuLV33FpXGdLXu6QRhh7h kacFYszs4Ol/9o1ZoIhIs5XzrmqAq48RHr8Czejbs/6jQhlo3yDUfeMWwL4hTlac yAqqA4RofJv8lptPBez4Boq0MPmuybRxPYAK7Z/AZkfS1eLDMPtZ5X13YClHx5xZ nXDCQu8+0BbSUplN1vIJGkQwGqvFzL+UkCldRrNNFFN2FeFZfwIDAQABo4IDczCC A28wHQYDVR0OBBYEFNmRI41ERr4h+aknCoKRVp2ZM8EOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85ZmEx ZjUxMy03ODAwLTRiMTYtYjhjMi1lMjgzMDU0MTgyODcvYWYyZjgyOWItMGU4Yi0z N2FiLTk5NTItYzRlMTFlZGM5ZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOWZhMWY1MTMtNzgwMC00YjE2LWI4 YzItZTI4MzA1NDE4Mjg3LzlmYTFmNTEzLTc4MDAtNGIxNi1iOGMyLWUyODMwNTQx ODI4Ny5jcmwwHwYDVR0jBBgwFoAUNIgLH6ejayb6DQRO0Zmy3TQTKocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85ZmExZjUxMy03ODAwLTRiMTYtYjhjMi1lMjgz MDU0MTgyODcuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUAwQAF47EMAwD BACi90kDBAKi90gwDgQCAAIwCAMGBCYC9lEAMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGO9B/gXPL6+tDi8 24ghdtys5bMBTzZFm4lJkUh14XOre6k0WS2Td9gTJa4mnXw+hSLv+OPJBeujjTiF kgN64vtEUYM6R9cemOCeK9Y2DqqmZRC0dJ2ul5fHzN9xXHV4dgYfQ1fswkIvuhK3 4KdCfEPd+Z5yQQWU5eOjjmDOGYCIH8Q/0JzpbLsn2Tgl6h3GG/iGK6JDj7zf+qc9 DcDuee3Fs2/Q/uJa3m0zEkx+v2C58VT7rze7UFU1SpMMvFpXCCkKW2sTn8s4DqLw WsPS0fYD1uTIZYLdTaeBaDJwCi/FGQ3HzYknzMIt9CxIrS1ongUPm4qQg+xn9SIu Hn3XM2Y= -----END CERTIFICATE-----Generated at Tue Oct 28 13:12:11 2025 by rpki-client