$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa File: c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa (raw, json) Hash identifier: MV7RZ0aX7AqPpc/11xOT+JK+vs7kNUSUI2b9ydk+bV8= Subject key identifier: 5D:57:DF:84:91:06:8F:C0:C4:CB:CC:C1:1E:9F:6A:0A:2F:99:DD:9D Certificate issuer: /CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d Certificate serial: 010D0C9F4328584BA7CD178EFA82A4466F66CE00 Authority key identifier: A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 62646 IP address blocks: 23.92.0.0/20 maxlen: 24 2604:e280::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:17:8e:fa:82:a4:46:6f:66:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa696b5e-f83b-4ee8-b1c8-846215cd5e4d Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=26c5ba30-2b4d-48d1-9075-7e9b5db22a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:21:13:5f:fc:b8:bf:1f:d5:d4:14:8c:e5: a4:c1:64:da:33:39:20:4a:93:c7:72:9c:44:46:71: 30:9b:06:f6:d0:6b:b8:ea:97:6f:e7:42:0d:40:a2: f9:f1:c6:75:0b:f3:d5:de:fe:46:c2:f2:89:4a:bb: d6:9d:94:0e:99:3c:fd:19:18:6c:58:08:5c:d5:61: 0a:71:b4:6d:87:0c:c1:e2:0e:5c:56:c4:3f:5d:97: 6d:df:57:90:c0:5f:2b:40:3d:13:05:ae:4f:bb:32: 67:c4:c9:bc:a1:1d:7a:3b:a9:80:79:6f:cb:0f:14: ed:85:54:bf:72:3a:4e:ce:6c:7d:82:e7:a7:d5:2a: c4:b9:bd:a6:b0:50:d9:66:0f:f4:37:c0:bf:19:3c: 99:f2:cc:6f:c5:f1:dd:5f:44:7b:35:15:f4:98:de: 0f:9c:8b:85:54:f3:8a:0a:7d:c9:19:c1:23:90:71: 83:10:ee:4f:d8:3c:92:61:87:6f:bb:c1:db:be:8a: eb:7c:3a:33:8d:ce:af:d2:fe:c4:36:85:5f:90:f0: 71:81:63:d1:e6:77:7c:a2:3a:2e:27:c6:2c:cf:4d: 11:ab:28:fd:29:ef:42:4d:3f:b7:bf:73:24:ed:4b: 55:2f:0d:53:77:8b:2f:66:4b:42:90:b1:a9:5b:03: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:57:DF:84:91:06:8F:C0:C4:CB:CC:C1:1E:9F:6A:0A:2F:99:DD:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/c3d514ee-5a10-38f4-a32b-6c0e216327a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.crl X509v3 Authority Key Identifier: keyid:A9:60:36:9B:A5:E0:51:35:4B:F8:4F:DE:0C:A0:20:75:DE:9B:64:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa696b5e-f83b-4ee8-b1c8-846215cd5e4d.cer sbgp-ipAddrBlock: critical IPv4: 23.92.0.0/20 IPv6: 2604:e280::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:4e:93:b1:45:c1:c6:68:d3:02:4a:a8:80:09:f2:22:02:f0: 1e:7f:0e:64:70:79:b5:b4:f3:c9:6c:3c:2e:ca:4d:f9:fe:5b: f4:0b:c8:87:5c:36:53:0e:fa:75:83:36:42:19:f6:b5:90:39: 49:6e:a7:f6:f1:48:17:be:2f:8c:df:12:a0:31:a9:05:17:79: d2:c9:1b:cb:2d:7f:ac:65:65:50:17:a3:b4:8e:5c:af:89:0c: c9:17:f2:c0:94:50:be:f5:fb:3a:a2:e0:2a:ed:c7:ca:73:1c: d4:e7:60:e0:f5:2f:69:3a:db:00:1c:b6:2c:07:b0:16:f8:b4: 68:9d:f5:0d:3b:6d:d2:89:ba:bb:aa:af:49:2e:b8:43:a9:f9: 2f:a6:9e:02:14:cd:2e:9b:8e:2d:a3:76:09:77:61:5e:8e:12: aa:94:ff:74:bf:82:80:28:18:cf:6e:af:af:11:05:03:2b:26: 9c:3a:2f:c1:08:61:e2:17:9c:3d:f5:8a:37:f0:9e:8a:e9:e5: f9:07:78:39:2f:31:d6:b3:da:72:18:22:0e:74:2f:91:40:6f: 30:44:fe:3f:a1:8a:65:ed:1d:1a:8c:a8:fe:63:e4:31:15:87: af:e9:b4:70:86:a0:cb:27:d8:07:d5:bc:06:ff:35:2e:2a:e7: c1:2c:55:31 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEunzReO+oKkRm9mzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE2OTZiNWUtZjgzYi00ZWU4LWIxYzgtODQ2MjE1Y2Q1 ZTRkMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MjZjNWJhMzAtMmI0ZC00OGQxLTkwNzUtN2U5YjVkYjIyYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJghE1/8uL8f1dQUjOWkwWTaMzkgSpPHcpxE RnEwmwb20Gu46pdv50INQKL58cZ1C/PV3v5GwvKJSrvWnZQOmTz9GRhsWAhc1WEK cbRthwzB4g5cVsQ/XZdt31eQwF8rQD0TBa5PuzJnxMm8oR16O6mAeW/LDxTthVS/ cjpOzmx9guen1SrEub2msFDZZg/0N8C/GTyZ8sxvxfHdX0R7NRX0mN4PnIuFVPOK Cn3JGcEjkHGDEO5P2DySYYdvu8HbvorrfDozjc6v0v7ENoVfkPBxgWPR5nd8ojou J8Ysz00Rqyj9Ke9CTT+3v3Mk7UtVLw1Td4svZktCkLGpWwP0EQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFF1X34SRBo/AxMvMwR6fagovmd2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYTY5 NmI1ZS1mODNiLTRlZTgtYjFjOC04NDYyMTVjZDVlNGQvYzNkNTE0ZWUtNWExMC0z OGY0LWEzMmItNmMwZTIxNjMyN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWE2OTZiNWUtZjgzYi00ZWU4LWIx YzgtODQ2MjE1Y2Q1ZTRkL2FhNjk2YjVlLWY4M2ItNGVlOC1iMWM4LTg0NjIxNWNk NWU0ZC5jcmwwHwYDVR0jBBgwFoAUqWA2m6XgUTVL+E/eDKAgdd6bZEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYTY5NmI1ZS1mODNiLTRlZTgtYjFjOC04NDYy MTVjZDVlNGQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEF1wAMA0E AgACMAcDBQQmBOKAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAI9Ok7FFwcZo0wJKqIAJ8iIC8B5/DmRwebW0 88lsPC7KTfn+W/QLyIdcNlMO+nWDNkIZ9rWQOUlup/bxSBe+L4zfEqAxqQUXedLJ G8stf6xlZVAXo7SOXK+JDMkX8sCUUL71+zqi4Crtx8pzHNTnYOD1L2k62wActiwH sBb4tGid9Q07bdKJuruqr0kuuEOp+S+mngIUzS6bji2jdgl3YV6OEqqU/3S/goAo GM9ur68RBQMrJpw6L8EIYeIXnD31ijfwnorp5fkHeDkvMdaz2nIYIg50L5FAbzBE /j+himXtHRqMqP5j5DEVh6/ptHCGoMsn2AfVvAb/NS4q58EsVTE= -----END CERTIFICATE-----Generated at Tue Oct 28 13:17:51 2025 by rpki-client