$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa File: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (raw, json) Hash identifier: 75qkTcBZ9fnuy8oUHUdOiV38t0/RU+na4k5w9gPiegM= Subject key identifier: 39:C6:54:10:BF:67:5B:E7:34:E8:B3:4F:B8:F3:B3:15:55:9C:A3:D1 Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584B6115410538A7E4C72F858100 Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa Signing time: Wed 01 Oct 2025 17:03:56 +0000 ROA not before: Wed 01 Oct 2025 17:03:56 +0000 ROA not after: Tue 30 Dec 2025 18:03:56 +0000 asID: 400656 IP address blocks: 23.135.152.0/23 maxlen: 23 2606:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:15:41:05:38:a7:e4:c7:2f:85:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: Oct 1 17:03:56 2025 GMT Not After : Dec 30 18:03:56 2025 GMT Subject: CN=a5c75cb9-9a55-4b0a-8bc4-f6b73f6320e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:78:1f:39:8f:39:60:13:20:91:b9:34:34: c9:0a:87:19:6e:10:52:51:b2:a1:12:b3:c5:54:86: d7:b7:9c:e4:5b:51:85:ef:2d:23:49:6b:74:df:db: 09:64:2e:dc:04:fb:8f:11:12:f4:af:04:8a:ee:02: b2:3e:ab:b4:15:81:bb:84:e7:d5:ba:13:2a:4f:d6: 84:1e:ca:c8:9b:68:6a:ac:c9:27:2b:1b:53:68:81: 1d:d5:d3:f4:2b:5b:f7:23:c4:f2:a3:02:a3:7f:c9: 71:ba:0b:38:1d:ff:94:85:ae:8c:77:f6:84:3e:d9: 32:ae:5d:12:90:c4:07:2f:d1:f3:33:27:8c:1e:77: 99:fa:e6:a0:a0:7f:aa:26:ca:a1:50:11:86:02:ab: b3:77:17:5d:0d:30:e2:4d:68:1d:75:b3:2e:0e:10: 07:a8:6a:f6:9e:65:97:94:07:31:22:04:33:38:14: c4:d7:07:8d:8d:02:aa:61:c4:dc:cc:d1:22:17:96: 82:e7:1e:b6:fc:ca:01:8f:9a:3d:6d:10:db:3b:67: 5f:1d:9c:bb:09:d6:2d:9c:16:13:67:b5:de:87:df: 0b:3d:84:93:49:d2:21:66:59:98:06:9e:5c:a7:6a: 3c:b7:f9:9a:6d:6e:a4:b0:7d:f7:86:49:70:72:20: e2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C6:54:10:BF:67:5B:E7:34:E8:B3:4F:B8:F3:B3:15:55:9C:A3:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: 23.135.152.0/23 IPv6: 2606:cb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:88:95:49:5a:10:17:ba:3e:da:9b:d1:8b:c3:c9:6e:b1:21: 5c:16:9f:47:ed:b0:03:fd:94:38:50:15:a2:82:d1:ee:17:72: 31:ad:55:5d:c1:a3:c1:44:24:11:ee:7e:83:b3:2e:3a:4c:69: 81:ba:a7:78:95:a6:70:2d:ac:02:40:89:88:db:3d:43:db:14: f1:3f:2e:1b:74:9e:50:29:62:47:c5:87:a7:35:4b:c2:4d:ae: f6:33:55:25:98:fb:c1:24:e4:bf:ac:70:4b:4c:b3:20:8e:60: 11:48:14:9c:17:e1:ca:24:1d:56:60:34:db:4f:40:2d:2c:39: 6c:aa:23:86:e0:80:4e:d2:88:80:b1:b6:f2:b4:4e:7a:27:8e: af:68:b5:ee:ba:5f:ee:47:e3:b2:0b:de:ba:39:06:ba:f2:9f: bd:1d:a1:7c:10:85:44:76:2e:96:7b:d2:70:32:63:01:41:4c: 0c:77:79:0c:7c:ad:99:5f:69:ec:f6:45:b8:17:0a:66:22:fb: 2e:dc:74:b7:56:2a:e4:96:c3:92:db:e4:1f:88:65:1d:02:ed: 07:27:41:70:80:ba:c1:f8:8c:6c:e4:87:bb:37:cc:4f:56:5c: fd:42:c0:24:d7:12:bd:86:89:df:c5:47:86:44:ba:02:33:84: 48:a0:9c:f9 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEthFUEFOKfkxy+FgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI1MTAwMTE3MDM1NloXDTI1MTIzMDE4MDM1NlowLzEtMCsGA1UEAxMk YTVjNzVjYjktOWE1NS00YjBhLThiYzQtZjZiNzNmNjMyMGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWx4HzmPOWATIJG5NDTJCocZbhBSUbKhErPF VIbXt5zkW1GF7y0jSWt039sJZC7cBPuPERL0rwSK7gKyPqu0FYG7hOfVuhMqT9aE HsrIm2hqrMknKxtTaIEd1dP0K1v3I8TyowKjf8lxugs4Hf+Uha6Md/aEPtkyrl0S kMQHL9HzMyeMHneZ+uagoH+qJsqhUBGGAquzdxddDTDiTWgddbMuDhAHqGr2nmWX lAcxIgQzOBTE1weNjQKqYcTczNEiF5aC5x62/MoBj5o9bRDbO2dfHZy7CdYtnBYT Z7Xeh98LPYSTSdIhZlmYBp5cp2o8t/mabW6ksH33hklwciDiIwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDnGVBC/Z1vnNOizT7jzsxVVnKPRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvMmRmZTMxYzctNTRlZS0z MDE3LTg2MzctY2U2N2ZkNTNiNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF4eYMA0E AgACMAcDBQAmBstAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIOIlUlaEBe6Ptqb0YvDyW6xIVwWn0ftsAP9 lDhQFaKC0e4XcjGtVV3Bo8FEJBHufoOzLjpMaYG6p3iVpnAtrAJAiYjbPUPbFPE/ Lht0nlApYkfFh6c1S8JNrvYzVSWY+8Ek5L+scEtMsyCOYBFIFJwX4cokHVZgNNtP QC0sOWyqI4bggE7SiICxtvK0Tnonjq9ote66X+5H47IL3ro5Brryn70doXwQhUR2 LpZ70nAyYwFBTAx3eQx8rZlfaez2RbgXCmYi+y7cdLdWKuSWw5Lb5B+IZR0C7Qcn QXCAusH4jGzkh7s3zE9WXP1CwCTXEr2Gid/FR4ZEugIzhEignPk= -----END CERTIFICATE-----Generated at Wed Nov 5 16:55:44 2025 by rpki-client