$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa File: 7108cb79-914e-3bcb-be90-fa39e1b08f83.roa (raw, json) Hash identifier: Qjg+gXf7JWajddVE8OVtNKF6bT8dfHOIxDxzmZtWZE8= Subject key identifier: 8D:09:6F:FA:20:F5:B5:4F:C7:83:D9:BC:A4:0B:76:2E:77:52:7C:2F Certificate issuer: /CN=9d5e8807-643a-46c3-a245-693c793610e4 Certificate serial: 010D0C9F4328584BBFA5A6A7D8F83AA621F093C0 Authority key identifier: 11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 5065 IP address blocks: 23.129.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a6:a7:d8:f8:3a:a6:21:f0:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5e8807-643a-46c3-a245-693c793610e4 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=5974ae69-e36d-4c4e-827b-5df7f0e6b962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:5c:2d:5b:4e:ea:54:80:9c:9e:0c:ce:c5: 26:8f:66:8f:97:fe:00:15:f4:2b:ed:94:ae:3a:9d: 77:c1:9b:eb:cc:49:00:18:4e:60:25:3f:de:64:67: c6:8a:a2:10:45:5f:67:c7:22:43:0f:79:db:63:74: 1f:42:7d:84:d5:67:6d:94:a2:68:37:6f:10:eb:84: f2:87:9f:9e:d8:14:d8:b1:32:14:b4:83:19:cb:cc: 9d:ab:5c:66:8d:6d:ee:d6:7c:5e:ce:bc:db:99:78: 76:67:ca:64:1f:cd:f7:47:f2:b3:06:93:ac:cd:b4: 93:ad:1b:a1:c3:50:77:d4:db:17:cd:ce:71:e9:57: a6:70:a2:85:1c:c8:19:f8:8b:81:1c:f8:fb:0b:f0: 69:3f:b7:b9:f7:b8:87:7c:87:da:b8:d8:56:c5:fc: 23:6e:13:dd:18:63:65:d0:55:0f:cc:a5:64:38:6d: 86:0a:60:2c:39:f9:33:c7:3c:ad:ca:14:9e:50:00: 36:e2:2b:5d:5b:a3:94:66:cb:dc:ba:42:5d:60:75: 49:b5:fc:e1:4b:0a:b9:06:c1:a8:ea:e5:8b:d4:e5: d8:a7:5e:d4:5c:b7:48:29:e1:2e:fa:e3:d8:42:58: 16:9a:88:f3:6e:be:84:ec:84:40:2c:2e:de:64:cf: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:09:6F:FA:20:F5:B5:4F:C7:83:D9:BC:A4:0B:76:2E:77:52:7C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/7108cb79-914e-3bcb-be90-fa39e1b08f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4/9d5e8807-643a-46c3-a245-693c793610e4.crl X509v3 Authority Key Identifier: keyid:11:4F:A0:4D:D4:E3:78:3B:8A:F0:63:E9:49:24:2C:99:63:83:3C:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d5e8807-643a-46c3-a245-693c793610e4.cer sbgp-ipAddrBlock: critical IPv4: 23.129.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:28:59:8b:ea:b9:aa:dc:2a:78:f9:af:bf:68:a8:47:f0:a0: 26:2f:6a:c4:b8:72:0e:fd:6f:0f:57:4b:e2:9f:c1:e4:f8:b1: 25:84:1a:ad:74:1e:36:a8:92:07:b8:e2:b0:7c:a6:42:f9:5e: 92:e8:cd:a1:39:7c:be:14:0b:ae:00:dc:61:68:03:b8:38:90: 9e:65:d4:b8:41:f0:8d:a2:93:f9:32:67:57:31:1c:27:79:4c: 9f:4b:25:a5:2f:eb:5f:61:73:55:45:0d:75:67:26:ce:70:dd: 24:bb:c0:22:dc:19:3e:8f:bb:2c:39:1a:8e:3d:69:94:41:80: 0c:27:27:8d:84:0b:cb:ae:a3:e6:3c:2f:e2:5a:56:70:20:6b: 9e:46:2c:83:af:37:7d:6d:17:d9:4e:ba:20:3a:79:41:91:cb: 62:99:94:4b:c8:12:fa:79:45:bf:2c:1b:1d:1c:15:30:1a:a5: 86:01:62:dc:34:b4:bf:f8:c7:45:10:a6:c8:18:57:d9:9a:85: 3b:c8:93:67:8f:9b:3d:22:65:ce:7e:2d:34:ec:ee:a6:73:d1: 28:84:7e:7c:fa:6f:12:d1:96:1b:78:3b:3d:ae:df:3f:ee:5c: b0:9e:58:4a:ca:a9:0b:b7:7e:b2:2a:05:5b:c3:bb:19:15:64: d4:0c:df:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paan2Pg6piHwk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ1ZTg4MDctNjQzYS00NmMzLWEyNDUtNjkzYzc5MzYx MGU0MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NTk3NGFlNjktZTM2ZC00YzRlLTgyN2ItNWRmN2YwZTZiOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyhcLVtO6lSAnJ4MzsUmj2aPl/4AFfQr7ZSu Op13wZvrzEkAGE5gJT/eZGfGiqIQRV9nxyJDD3nbY3QfQn2E1WdtlKJoN28Q64Ty h5+e2BTYsTIUtIMZy8ydq1xmjW3u1nxezrzbmXh2Z8pkH833R/KzBpOszbSTrRuh w1B31NsXzc5x6VemcKKFHMgZ+IuBHPj7C/BpP7e597iHfIfauNhWxfwjbhPdGGNl 0FUPzKVkOG2GCmAsOfkzxzytyhSeUAA24itdW6OUZsvcukJdYHVJtfzhSwq5BsGo 6uWL1OXYp17UXLdIKeEu+uPYQlgWmojzbr6E7IRALC7eZM/bLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0Jb/og9bVPx4PZvKQLdi53UnwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDVl ODgwNy02NDNhLTQ2YzMtYTI0NS02OTNjNzkzNjEwZTQvNzEwOGNiNzktOTE0ZS0z YmNiLWJlOTAtZmEzOWUxYjA4ZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQ1ZTg4MDctNjQzYS00NmMzLWEy NDUtNjkzYzc5MzYxMGU0LzlkNWU4ODA3LTY0M2EtNDZjMy1hMjQ1LTY5M2M3OTM2 MTBlNC5jcmwwHwYDVR0jBBgwFoAUEU+gTdTjeDuK8GPpSSQsmWODPMswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDVlODgwNy02NDNhLTQ2YzMtYTI0NS02OTNj NzkzNjEwZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgoWYvquarcKnj5r79oqEfwoCYvasS4cg79bw9XS+KfweT4sSWEGq10 Hjaokge44rB8pkL5XpLozaE5fL4UC64A3GFoA7g4kJ5l1LhB8I2ik/kyZ1cxHCd5 TJ9LJaUv619hc1VFDXVnJs5w3SS7wCLcGT6Puyw5Go49aZRBgAwnJ42EC8uuo+Y8 L+JaVnAga55GLIOvN31tF9lOuiA6eUGRy2KZlEvIEvp5Rb8sGx0cFTAapYYBYtw0 tL/4x0UQpsgYV9mahTvIk2ePmz0iZc5+LTTs7qZz0SiEfnz6bxLRlht4Oz2u3z/u XLCeWErKqQu3frIqBVvDuxkVZNQM3+c= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:07 2025 by rpki-client