$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/a809f4a0-6268-3eaa-9865-5bcde9f9ee2f.roa File: a809f4a0-6268-3eaa-9865-5bcde9f9ee2f.roa (raw, json) Hash identifier: cLK44dOYuqFMD/xbkWUhjzdmpI2fT4XSypeMf/qYxV4= Subject key identifier: 3A:0C:27:D8:09:3F:C5:6D:CB:E2:DF:63:D6:6F:9B:25:AC:21:11:12 Certificate issuer: /CN=95280188-8bb7-4cee-9c9c-6ad9b785e0c3 Certificate serial: 010D0C9F4328584BA39D155CBE235D7A069D8160 Authority key identifier: 9C:BB:F4:D6:88:8A:45:17:B2:27:10:57:A4:76:FE:73:EB:63:03:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/a809f4a0-6268-3eaa-9865-5bcde9f9ee2f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 2914 IP address blocks: 23.134.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:15:5c:be:23:5d:7a:06:9d:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95280188-8bb7-4cee-9c9c-6ad9b785e0c3 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=65104a08-fb47-4a35-a742-cd448d594971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:a1:81:27:3a:95:69:50:3e:af:82:c2:58: c2:5e:84:d4:ec:4e:6a:eb:d8:63:48:7d:d3:02:c9: db:ec:6a:fd:a9:bf:96:68:36:6a:8b:9c:5b:80:1b: 11:93:76:c4:f8:d4:be:53:35:76:06:00:8a:ee:1e: 0b:d5:c7:f5:1f:03:89:a2:09:51:28:c6:b8:05:de: bd:e8:17:71:74:b7:2e:7b:73:83:05:1e:a2:de:29: b7:06:88:2a:5f:82:a9:7f:b1:f3:b6:1c:0e:2f:5b: 07:76:94:8c:51:b5:e2:73:81:46:3f:02:6b:98:ff: 0a:d5:3a:78:12:2f:d8:f4:a0:b0:29:2a:72:4c:9b: 68:ac:65:a4:f0:a6:5b:c1:5a:dd:6e:72:ac:c8:63: 9f:eb:e5:62:23:3e:64:7b:a9:93:88:85:fd:09:4d: e7:0a:1c:8d:1b:d6:46:ad:be:28:9d:b9:7e:3e:64: f8:30:4e:6b:7c:5e:b4:3c:30:5b:00:65:d4:ce:00: ee:12:00:a7:71:6a:8b:6a:6e:ea:45:70:12:d2:88: ce:0d:27:a6:26:8e:9b:53:71:c0:25:7b:e2:93:a2: 39:24:7f:00:92:05:13:91:02:6b:8f:3c:b8:91:fd: 94:a5:88:83:82:04:9d:17:d9:e8:82:13:3a:96:11: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0C:27:D8:09:3F:C5:6D:CB:E2:DF:63:D6:6F:9B:25:AC:21:11:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/a809f4a0-6268-3eaa-9865-5bcde9f9ee2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.crl X509v3 Authority Key Identifier: keyid:9C:BB:F4:D6:88:8A:45:17:B2:27:10:57:A4:76:FE:73:EB:63:03:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/95280188-8bb7-4cee-9c9c-6ad9b785e0c3.cer sbgp-ipAddrBlock: critical IPv4: 23.134.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5f:6c:8c:cd:0f:de:2f:a9:14:2b:6d:ac:b5:1a:8f:4f:ce: b4:40:67:85:73:15:a6:bc:f4:d7:37:7d:21:e3:9e:cc:88:17: 45:1d:16:76:8a:1c:62:40:ec:09:c3:d7:e1:9f:50:ef:6b:89: df:9a:9e:3d:ba:f7:52:30:97:b9:6c:eb:61:f3:14:eb:af:cc: c9:60:0f:4e:24:8d:71:f0:35:63:dc:b2:c0:35:d7:53:ae:33: 10:8a:a4:2f:35:25:15:9b:bd:6f:da:37:90:b9:b6:78:8f:8a: 75:f0:82:37:f5:be:3c:e8:9e:5b:f6:1b:1f:78:96:f6:49:96: 2d:e5:b9:52:40:06:81:aa:92:f5:35:40:a1:c2:ec:a9:d6:8b: 37:92:ee:9b:bf:65:01:a7:7a:e9:9c:19:c9:a8:7f:bc:54:58: a0:ee:2e:d8:69:2c:26:24:6e:00:f6:4e:57:c2:c3:83:35:fc: 23:c9:88:3f:85:75:77:5c:80:51:08:27:3b:f4:58:bc:59:7c: 7b:f0:1d:31:81:7a:80:60:29:cc:1c:45:85:c6:08:a1:a3:cd: 21:41:95:ab:d9:36:ee:f4:38:2b:5c:1f:a4:a4:2a:07:a9:48: aa:49:36:fd:32:84:f9:e5:f9:08:c3:bc:4c:db:c7:56:24:35: 43:ba:d3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRVcviNdegadgWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUyODAxODgtOGJiNy00Y2VlLTljOWMtNmFkOWI3ODVl MGMzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NjUxMDRhMDgtZmI0Ny00YTM1LWE3NDItY2Q0NDhkNTk0OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZyhgSc6lWlQPq+CwljCXoTU7E5q69hjSH3T Asnb7Gr9qb+WaDZqi5xbgBsRk3bE+NS+UzV2BgCK7h4L1cf1HwOJoglRKMa4Bd69 6BdxdLcue3ODBR6i3im3BogqX4Kpf7HzthwOL1sHdpSMUbXic4FGPwJrmP8K1Tp4 Ei/Y9KCwKSpyTJtorGWk8KZbwVrdbnKsyGOf6+ViIz5ke6mTiIX9CU3nChyNG9ZG rb4onbl+PmT4ME5rfF60PDBbAGXUzgDuEgCncWqLam7qRXAS0ojODSemJo6bU3HA JXvik6I5JH8AkgUTkQJrjzy4kf2UpYiDggSdF9noghM6lhFcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoMJ9gJP8Vty+LfY9ZvmyWsIRESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NTI4 MDE4OC04YmI3LTRjZWUtOWM5Yy02YWQ5Yjc4NWUwYzMvYTgwOWY0YTAtNjI2OC0z ZWFhLTk4NjUtNWJjZGU5ZjllZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTUyODAxODgtOGJiNy00Y2VlLTlj OWMtNmFkOWI3ODVlMGMzLzk1MjgwMTg4LThiYjctNGNlZS05YzljLTZhZDliNzg1 ZTBjMy5jcmwwHwYDVR0jBBgwFoAUnLv01oiKRReyJxBXpHb+c+tjAwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NTI4MDE4OC04YmI3LTRjZWUtOWM5Yy02YWQ5 Yjc4NWUwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9fbIzND94vqRQrbay1Go9PzrRAZ4VzFaa89Nc3fSHjnsyIF0UdFnaK HGJA7AnD1+GfUO9rid+anj2691Iwl7ls62HzFOuvzMlgD04kjXHwNWPcssA111Ou MxCKpC81JRWbvW/aN5C5tniPinXwgjf1vjzonlv2Gx94lvZJli3luVJABoGqkvU1 QKHC7KnWizeS7pu/ZQGneumcGcmof7xUWKDuLthpLCYkbgD2TlfCw4M1/CPJiD+F dXdcgFEIJzv0WLxZfHvwHTGBeoBgKcwcRYXGCKGjzSFBlavZNu70OCtcH6SkKgep SKpJNv0yhPnl+QjDvEzbx1YkNUO600Q= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:14 2025 by rpki-client