$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa File: c5f99082-735a-3bc4-848d-adbcd08fa635.roa (raw, json) Hash identifier: gR7/QKIaUxS6KR01Im955c6HdSpnIIDk30Ag0R6UBQM= Subject key identifier: E8:DB:45:2B:2E:B9:8F:48:72:99:E7:FC:82:88:DC:47:23:43:5A:D7 Certificate issuer: /CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Certificate serial: 010D0C9F4328584AFAB68A1DB7CAECA72F3E2740 Authority key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa Signing time: Tue 26 Aug 2025 01:00:32 +0000 ROA not before: Tue 26 Aug 2025 01:00:32 +0000 ROA not after: Mon 24 Nov 2025 02:00:32 +0000 asID: 21859 IP address blocks: 23.139.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fa:b6:8a:1d:b7:ca:ec:a7:2f:3e:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Validity Not Before: Aug 26 01:00:32 2025 GMT Not After : Nov 24 02:00:32 2025 GMT Subject: CN=725aae50-0c12-4ba4-9ad2-a9e3cec322cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:14:19:bd:b6:42:fd:43:b2:61:32:6e:3c: a9:12:22:f9:dd:f4:bb:24:b6:22:46:86:08:6e:c9: 3f:74:63:c4:0c:b2:c1:4a:75:4d:7a:c6:ed:e7:1f: 5d:56:98:bf:b1:97:3f:e4:1e:e3:8a:af:73:b4:c9: dd:7e:00:25:5f:21:cd:b3:7a:60:fa:cf:d7:9d:e1: d7:14:77:f7:04:b2:1f:36:12:c1:69:99:31:e5:b0: 83:11:a6:78:4e:4a:d4:64:cc:01:a6:b8:51:68:63: 8c:de:5f:a8:df:6f:dd:c9:41:0f:71:57:6e:0d:e6: 85:87:16:c4:0e:fd:f3:d7:54:fb:36:03:44:69:d1: 1d:eb:89:71:b5:53:41:92:0d:8b:2a:e2:70:9e:8f: 62:f6:20:75:b9:b2:24:c2:6e:b7:e2:70:0b:d3:33: 4f:44:75:18:2b:15:4d:f5:ec:1d:45:0c:2c:2b:3a: 87:06:0d:85:09:fa:cc:b1:5a:05:dc:50:0b:83:58: 23:12:9a:f0:72:90:d5:b7:a2:91:79:9e:3e:d1:0c: 03:01:09:2a:28:8b:2a:db:7c:63:32:13:38:25:cf: 7d:75:14:9c:9a:9e:f7:6e:68:1a:f0:60:2c:d0:da: 27:ab:45:3d:4f:66:6f:94:f3:dd:c5:41:5c:af:9f: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DB:45:2B:2E:B9:8F:48:72:99:E7:FC:82:88:DC:47:23:43:5A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl X509v3 Authority Key Identifier: keyid:D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer sbgp-ipAddrBlock: critical IPv4: 23.139.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d4:d9:a3:b7:ae:89:8f:8b:50:f0:c5:88:54:20:28:a7:3a: fc:3b:04:2b:2c:31:01:d2:7d:d0:3b:03:1d:b0:78:2f:66:1c: d2:e7:02:b6:3c:86:a6:4b:75:db:d1:87:e9:c8:37:48:f3:c8: 8b:32:17:c4:d4:c2:d2:e6:f3:70:db:11:79:bf:25:fa:f6:e5: c7:85:68:9a:a9:35:27:49:4f:df:f8:21:a8:4f:df:e0:e5:e1: 58:00:53:91:a7:dc:3a:1b:33:4e:1c:68:97:5d:4c:cf:54:76: 3e:50:75:d9:8f:d3:78:0f:86:73:33:2c:68:3d:a2:5e:c5:2e: 0b:4f:49:07:a3:b8:2c:c0:bf:26:24:48:bc:93:35:ea:a0:42: da:a5:b9:3e:b5:9a:97:ae:c3:dd:4e:27:ed:1a:88:df:3f:ca: 7d:88:3b:f3:82:04:a9:11:e3:ff:8d:cb:55:f8:10:a5:13:c1: 0a:33:ed:9c:f6:96:6d:ec:10:7a:da:fe:dd:4d:2b:ca:33:1a: 8d:9a:dc:2b:21:f0:3e:9b:c9:ef:fc:62:42:cb:93:55:a1:39: 09:c5:63:9f:01:d1:42:a2:cf:f5:5c:09:be:cd:f6:f0:68:0a: 9b:64:74:8b:96:2b:f5:8f:82:a8:cf:35:23:57:3c:24:f1:1e: 3b:62:15:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr6toodt8rspy8+J0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmMmYxYTctMDdlNS00MmY4LWIxYWEtMWUyZTk1YTY1 ZmY4MB4XDTI1MDgyNjAxMDAzMloXDTI1MTEyNDAyMDAzMlowLzEtMCsGA1UEAxMk NzI1YWFlNTAtMGMxMi00YmE0LTlhZDItYTllM2NlYzMyMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uMUGb22Qv1DsmEybjypEiL53fS7JLYiRoYI bsk/dGPEDLLBSnVNesbt5x9dVpi/sZc/5B7jiq9ztMndfgAlXyHNs3pg+s/XneHX FHf3BLIfNhLBaZkx5bCDEaZ4TkrUZMwBprhRaGOM3l+o32/dyUEPcVduDeaFhxbE Dv3z11T7NgNEadEd64lxtVNBkg2LKuJwno9i9iB1ubIkwm634nAL0zNPRHUYKxVN 9ewdRQwsKzqHBg2FCfrMsVoF3FALg1gjEprwcpDVt6KReZ4+0QwDAQkqKIsq23xj MhM4Jc99dRScmp73bmga8GAs0Nonq0U9T2ZvlPPdxUFcr5+YuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjbRSsuuY9Icpnn/IKI3EcjQ1rXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYy ZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVhNjVmZjgvYzVmOTkwODItNzM1YS0z YmM0LTg0OGQtYWRiY2QwOGZhNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRmMmYxYTctMDdlNS00MmY4LWIx YWEtMWUyZTk1YTY1ZmY4L2E0ZjJmMWE3LTA3ZTUtNDJmOC1iMWFhLTFlMmU5NWE2 NWZmOC5jcmwwHwYDVR0jBBgwFoAU1qWC4Tn6LXUH223MkamWkgxxO64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJl OTVhNjVmZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4v8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInU2aO3romPi1DwxYhUICinOvw7BCssMQHSfdA7Ax2weC9mHNLnArY8 hqZLddvRh+nIN0jzyIsyF8TUwtLm83DbEXm/Jfr25ceFaJqpNSdJT9/4IahP3+Dl 4VgAU5Gn3DobM04caJddTM9Udj5QddmP03gPhnMzLGg9ol7FLgtPSQejuCzAvyYk SLyTNeqgQtqluT61mpeuw91OJ+0aiN8/yn2IO/OCBKkR4/+Ny1X4EKUTwQoz7Zz2 lm3sEHra/t1NK8ozGo2a3Csh8D6bye/8YkLLk1WhOQnFY58B0UKiz/VcCb7N9vBo CptkdIuWK/WPgqjPNSNXPCTxHjtiFec= -----END CERTIFICATE-----Generated at Mon Nov 3 09:34:50 2025 by rpki-client