$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6a95303c-703a-3f8f-957c-4acc3bd4c7d2.roa File: 6a95303c-703a-3f8f-957c-4acc3bd4c7d2.roa (raw, json) Hash identifier: uXLc05CKHdVsOCl6xnINupgDjNWLAT2XVaoU0sODSRU= Subject key identifier: C2:0F:C6:9D:AE:C1:1D:64:06:3C:B9:DA:FF:C2:4B:58:92:52:36:A2 Certificate issuer: /CN=6b40b2f9-8053-4405-96a0-dd415cb12c1a Certificate serial: 010D0C9F4328584AF9513991292564C9BFE41280 Authority key identifier: D2:DA:F2:C4:09:2B:FC:A1:08:8D:75:32:29:8D:BE:F2:04:EB:D3:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6a95303c-703a-3f8f-957c-4acc3bd4c7d2.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 397672 IP address blocks: 23.173.224.0/23 maxlen: 24 2602:fe06::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6b40b2f9-8053-4405-96a0-dd415cb12c1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6b40b2f9-8053-4405-96a0-dd415cb12c1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:39:91:29:25:64:c9:bf:e4:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b40b2f9-8053-4405-96a0-dd415cb12c1a Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=08285168-9df5-47d2-bb2b-8f6cd0f0543f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:14:ef:f1:cc:e8:d4:1c:44:cf:c3:5c:eb: a6:45:50:fc:ed:63:54:75:df:49:81:fa:a0:2f:d4: 35:81:82:07:71:1d:d4:dd:16:51:44:96:d2:ea:09: ea:70:55:b8:00:24:ca:ef:b9:d9:d9:1a:02:1a:db: b7:15:3d:39:77:da:7f:57:93:38:4f:bc:40:e0:65: b1:65:20:b4:5a:b8:82:17:ff:c1:75:8d:22:70:08: 0c:df:c2:b1:1c:07:5f:80:31:ec:98:05:a6:e5:5b: b2:ea:82:fc:c3:5f:10:0b:74:0e:6b:a8:85:1c:96: aa:6d:e4:6a:0b:d6:c7:2a:ec:0e:72:c7:f7:c9:60: c4:c8:38:64:1d:ec:15:13:92:22:db:d6:83:e4:60: 01:48:cc:ce:d6:82:42:96:fb:ef:25:ac:be:d3:ba: 8c:45:3f:a1:ec:a0:b5:60:76:f7:8b:82:c7:3c:0b: 31:99:42:7f:0f:3d:76:f8:56:e2:ed:f2:c3:1f:51: 11:84:2f:84:be:f2:89:74:4b:56:51:c1:0d:aa:40: e9:15:26:ee:1a:c8:08:12:7a:83:ab:5b:94:9c:96: ab:9d:6c:cc:2b:16:d2:97:f6:e0:9c:ce:8e:ad:74: 83:93:9b:d0:61:ea:63:ef:74:e3:79:fb:5d:6e:89: 9c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0F:C6:9D:AE:C1:1D:64:06:3C:B9:DA:FF:C2:4B:58:92:52:36:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6a95303c-703a-3f8f-957c-4acc3bd4c7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a/6b40b2f9-8053-4405-96a0-dd415cb12c1a.crl X509v3 Authority Key Identifier: keyid:D2:DA:F2:C4:09:2B:FC:A1:08:8D:75:32:29:8D:BE:F2:04:EB:D3:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6b40b2f9-8053-4405-96a0-dd415cb12c1a.cer sbgp-ipAddrBlock: critical IPv4: 23.173.224.0/23 IPv6: 2602:fe06::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:53:86:e5:10:f0:c1:cf:d2:22:3b:8a:d4:81:8f:73:c9:73: 79:76:8f:53:5b:f6:6b:e5:b9:c0:91:da:1d:29:74:6e:88:50: e4:9f:10:03:4d:42:64:23:77:ce:06:1d:24:45:b4:8b:9d:cc: 7f:7d:69:35:88:ec:1f:a0:5c:49:76:c8:92:d8:83:f4:03:3a: 63:3d:67:42:81:9e:c2:b5:c1:f4:70:f3:3f:80:80:d7:d8:d4: fc:d5:67:07:70:e0:97:c9:aa:db:5b:ae:a2:56:d7:6a:64:36: 70:ee:4e:11:1f:ba:a6:77:e8:cb:85:0b:6f:ac:a5:9a:3a:56: db:4d:84:27:24:2d:7f:24:b4:10:77:c4:5a:82:8a:a8:90:1b: a2:c1:fc:3a:75:3d:06:49:a7:e1:80:85:80:da:82:cb:e6:10: 54:4c:56:64:6a:51:90:85:a5:bb:4e:97:d4:42:82:f3:61:bd: 21:f4:39:84:c9:c6:2e:fc:19:a5:02:02:64:c6:18:26:18:02: 46:e1:89:14:f9:c4:2c:3d:20:f2:ae:2a:bc:3b:4c:98:cd:f6: 3c:42:13:10:89:dc:df:a4:cc:74:ce:29:a6:ef:c5:99:b3:2a: b9:6a:44:55:03:b9:70:c6:fe:3f:72:fe:19:1d:9b:27:89:a3: 53:18:9e:94 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEr5UTmRKSVkyb/kEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI0MGIyZjktODA1My00NDA1LTk2YTAtZGQ0MTVjYjEy YzFhMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDgyODUxNjgtOWRmNS00N2QyLWJiMmItOGY2Y2QwZjA1NDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLsU7/HM6NQcRM/DXOumRVD87WNUdd9Jgfqg L9Q1gYIHcR3U3RZRRJbS6gnqcFW4ACTK77nZ2RoCGtu3FT05d9p/V5M4T7xA4GWx ZSC0WriCF//BdY0icAgM38KxHAdfgDHsmAWm5Vuy6oL8w18QC3QOa6iFHJaqbeRq C9bHKuwOcsf3yWDEyDhkHewVE5Ii29aD5GABSMzO1oJClvvvJay+07qMRT+h7KC1 YHb3i4LHPAsxmUJ/Dz12+Fbi7fLDH1ERhC+EvvKJdEtWUcENqkDpFSbuGsgIEnqD q1uUnJarnWzMKxbSl/bgnM6OrXSDk5vQYepj73TjeftdbomcdwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMIPxp2uwR1kBjy52v/CS1iSUjaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YjQw YjJmOS04MDUzLTQ0MDUtOTZhMC1kZDQxNWNiMTJjMWEvNmE5NTMwM2MtNzAzYS0z ZjhmLTk1N2MtNGFjYzNiZDRjN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmI0MGIyZjktODA1My00NDA1LTk2 YTAtZGQ0MTVjYjEyYzFhLzZiNDBiMmY5LTgwNTMtNDQwNS05NmEwLWRkNDE1Y2Ix MmMxYS5jcmwwHwYDVR0jBBgwFoAU0tryxAkr/KEIjXUyKY2+8gTr04UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YjQwYjJmOS04MDUzLTQ0MDUtOTZhMC1kZDQx NWNiMTJjMWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF63gMA4E AgACMAgDBgQmAv4GADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApU4blEPDBz9IiO4rUgY9zyXN5do9TW/Zr 5bnAkdodKXRuiFDknxADTUJkI3fOBh0kRbSLncx/fWk1iOwfoFxJdsiS2IP0Azpj PWdCgZ7CtcH0cPM/gIDX2NT81WcHcOCXyarbW66iVtdqZDZw7k4RH7qmd+jLhQtv rKWaOlbbTYQnJC1/JLQQd8RagoqokBuiwfw6dT0GSafhgIWA2oLL5hBUTFZkalGQ haW7TpfUQoLzYb0h9DmEycYu/BmlAgJkxhgmGAJG4YkU+cQsPSDyriq8O0yYzfY8 QhMQidzfpMx0zimm78WZsyq5akRVA7lwxv4/cv4ZHZsniaNTGJ6U -----END CERTIFICATE-----Generated at Tue Oct 21 00:36:15 2025 by rpki-client