$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa File: 71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa (raw, json) Hash identifier: +SLQnSi7UuLZi9SlHNkjvdvevb1AoLPgvr7NTrR7pZM= Subject key identifier: E8:E2:5A:E1:17:86:15:85:63:92:0E:C4:60:A2:52:FF:8A:9D:0A:BB Certificate issuer: /CN=a28c0165-b200-4b04-831e-e344861ac9ad Certificate serial: 010D0C9F4328584BAD624B56195F5FA28181E800 Authority key identifier: C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 399870 IP address blocks: 23.134.212.0/24 maxlen: 24 2602:f6e0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4b:56:19:5f:5f:a2:81:81:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a28c0165-b200-4b04-831e-e344861ac9ad Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=bab573a8-2314-43de-9ef5-5855ff46a4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:07:43:be:dd:56:28:ce:71:a8:97:b9:d0: 89:26:dc:34:16:8e:ad:48:d1:32:73:e5:3c:2d:3f: 41:d8:13:db:8b:23:c0:a4:0f:b8:37:72:8e:29:b2: e2:24:75:70:a3:fc:23:96:6f:56:72:0b:17:fa:e1: c3:61:ed:d3:78:fd:6d:b5:4f:eb:6e:d5:96:68:71: 97:0d:4c:d6:4f:a9:38:27:88:aa:96:86:7a:7b:9a: c9:9e:6d:32:aa:65:b0:11:73:5b:57:b4:41:eb:d5: 69:a2:5f:f7:dd:5c:15:1d:2b:a4:ea:a4:aa:42:53: 1f:ff:59:f0:cf:f3:59:1a:bc:5b:e9:f3:d3:7d:59: 74:05:63:25:de:ce:0b:1c:53:0c:c5:6f:2b:2c:7e: 89:88:0d:5e:4a:60:af:1b:8d:b1:d6:59:70:ec:9a: e2:36:0a:ff:c4:56:2b:3c:5a:6c:ac:fc:85:d4:f8: 18:09:57:3a:d0:0a:16:c8:9c:a8:2f:72:5b:62:d6: d0:c5:b7:69:01:7e:61:c7:99:e2:46:95:33:2b:f9: 9d:c9:53:30:c0:5a:b0:39:27:df:00:94:11:ac:b1: 07:9a:cb:54:c9:2f:73:7d:f5:77:27:4e:41:ef:1e: b6:98:3a:0c:5d:62:0e:e3:ff:70:65:0a:cb:be:eb: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E2:5A:E1:17:86:15:85:63:92:0E:C4:60:A2:52:FF:8A:9D:0A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl X509v3 Authority Key Identifier: keyid:C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer sbgp-ipAddrBlock: critical IPv4: 23.134.212.0/24 IPv6: 2602:f6e0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:bc:58:fc:34:8c:c3:34:03:82:b5:6b:03:b4:e6:18:a6:b2: 5c:d5:29:78:53:6e:1b:65:a1:cd:79:b9:72:c4:54:7c:75:67: ab:df:38:87:e5:4d:94:3a:e5:90:1d:b5:79:27:a3:ea:2f:1a: 4e:aa:91:9f:bf:36:ed:9b:22:33:20:cb:5d:6e:12:87:69:6b: 85:44:55:00:18:bd:24:c5:a6:a3:1d:e9:47:a7:0f:b4:69:73: bf:41:f7:57:3f:36:45:0e:bc:f7:fb:cc:a4:27:ac:cd:45:fd: 24:a5:0e:dd:90:93:4c:33:6e:59:48:b2:60:88:71:90:30:31: 13:a4:53:fd:02:68:b0:c3:96:5f:5c:d1:49:b1:b5:88:19:17: ab:02:8e:8a:80:3a:6e:73:2b:ec:34:36:7b:8b:bd:f2:2e:66: cf:45:65:8d:fc:4d:6d:9b:bd:21:2b:a2:27:fb:5c:7e:2e:2e: d6:8e:7f:d0:c5:43:f2:a2:8a:3a:35:3a:5b:b8:dd:23:af:f7: da:0b:76:e5:b2:ed:17:d0:16:2c:e3:22:45:4d:a8:63:f9:d7: 59:b9:8e:7c:14:b8:49:63:6d:92:da:a5:8d:3c:fc:6b:eb:32: f3:37:97:bc:d7:10:72:c8:74:0c:ff:95:63:8a:ea:70:28:67: 65:64:04:a2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEutYktWGV9fooGB6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4YzAxNjUtYjIwMC00YjA0LTgzMWUtZTM0NDg2MWFj OWFkMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YmFiNTczYTgtMjMxNC00M2RlLTllZjUtNTg1NWZmNDZhNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrEHQ77dVijOcaiXudCJJtw0Fo6tSNEyc+U8 LT9B2BPbiyPApA+4N3KOKbLiJHVwo/wjlm9WcgsX+uHDYe3TeP1ttU/rbtWWaHGX DUzWT6k4J4iqloZ6e5rJnm0yqmWwEXNbV7RB69Vpol/33VwVHSuk6qSqQlMf/1nw z/NZGrxb6fPTfVl0BWMl3s4LHFMMxW8rLH6JiA1eSmCvG42x1llw7JriNgr/xFYr PFpsrPyF1PgYCVc60AoWyJyoL3JbYtbQxbdpAX5hx5niRpUzK/mdyVMwwFqwOSff AJQRrLEHmstUyS9zffV3J05B7x62mDoMXWIO4/9wZQrLvuvpMwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOjiWuEXhhWFY5IOxGCiUv+KnQq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMjhj MDE2NS1iMjAwLTRiMDQtODMxZS1lMzQ0ODYxYWM5YWQvNzFiZDZkNzItMTFiNS0z ZDkyLWJjZmYtMGYzYTc3ZDVjZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTI4YzAxNjUtYjIwMC00YjA0LTgz MWUtZTM0NDg2MWFjOWFkL2EyOGMwMTY1LWIyMDAtNGIwNC04MzFlLWUzNDQ4NjFh YzlhZC5jcmwwHwYDVR0jBBgwFoAUxXxQB2upKTX0kUoX2k8eJIPteUUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMjhjMDE2NS1iMjAwLTRiMDQtODMxZS1lMzQ0 ODYxYWM5YWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4bUMA4E AgACMAgDBgAmAvbgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3vFj8NIzDNAOCtWsDtOYYprJc1Sl4U24b ZaHNeblyxFR8dWer3ziH5U2UOuWQHbV5J6PqLxpOqpGfvzbtmyIzIMtdbhKHaWuF RFUAGL0kxaajHelHpw+0aXO/QfdXPzZFDrz3+8ykJ6zNRf0kpQ7dkJNMM25ZSLJg iHGQMDETpFP9Amiww5ZfXNFJsbWIGRerAo6KgDpucyvsNDZ7i73yLmbPRWWN/E1t m70hK6In+1x+Li7Wjn/QxUPyooo6NTpbuN0jr/faC3blsu0X0BYs4yJFTahj+ddZ uY58FLhJY22S2qWNPPxr6zLzN5e81xByyHQM/5VjiupwKGdlZASi -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:09 2025 by rpki-client