$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa File: 5094b170-7783-383b-add6-8db0ea7f91ad.roa (raw, json) Hash identifier: +wLoJ1zqxC+D/Su4AkyLFrs34ierlhSoh/6X5Gmcb7E= Subject key identifier: 0C:A6:EA:53:DA:72:8E:E4:FC:A0:B3:19:7B:76:40:9C:0F:7A:7C:4A Certificate issuer: /CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Certificate serial: 010D0C9F4328584BA39D176D514F1D0910408280 Authority key identifier: C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 2914 IP address blocks: 23.134.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:17:6d:51:4f:1d:09:10:40:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=49af1ef7-1b60-40d2-81a1-a5dd0b732e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:31:2a:73:4b:b9:06:de:f6:01:7a:ef:51: c8:4d:a2:e1:57:77:56:e2:aa:69:26:91:7b:e4:12: 62:97:02:a8:c5:e0:08:bc:45:9c:7a:91:fb:d5:3c: fd:a3:99:21:02:3d:9a:3e:81:6d:e6:9c:f1:4b:53: 6c:28:77:74:d7:7f:bb:55:d6:5e:09:ec:c5:f5:eb: c9:c0:3f:54:cc:8b:a5:4e:c7:51:dd:17:d6:e1:bf: cd:75:db:43:fc:a5:7d:e5:d8:35:55:12:72:a7:3b: 95:f2:e6:69:d7:05:53:6b:42:77:b9:a7:24:14:5c: 48:b2:0a:d6:0c:5a:86:5d:16:59:cb:e4:09:c9:bd: 1a:82:cf:af:be:3e:4e:26:79:d0:1d:07:5b:55:cc: a8:7e:ec:ac:53:d7:38:d1:34:84:9c:12:c4:f4:ac: 78:6b:7d:69:e3:8a:77:8f:0f:c7:8b:3b:34:37:4b: 59:3b:2d:af:b8:5a:b7:ec:89:00:f2:01:a1:74:14: 51:c8:7a:79:b6:0a:18:a4:a8:6a:20:ca:67:4b:4b: 00:f9:d7:ce:a9:1b:94:94:c0:1a:bb:51:58:b0:9a: 76:ce:f2:b1:3b:75:7e:25:9f:52:73:6a:14:4b:db: 1f:af:42:b1:6b:5d:65:81:61:fe:06:2b:aa:05:64: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A6:EA:53:DA:72:8E:E4:FC:A0:B3:19:7B:76:40:9C:0F:7A:7C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl X509v3 Authority Key Identifier: keyid:C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer sbgp-ipAddrBlock: critical IPv4: 23.134.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:66:6b:5c:f6:3c:74:16:48:5a:21:ed:dd:61:46:7c:1a:12: 51:9c:07:ba:1d:3e:dc:4a:bc:b7:37:7e:93:24:b3:d0:5b:b7: 58:d8:7a:3d:e8:ce:26:67:df:fe:7f:75:a3:e1:d5:27:59:64: df:cd:ef:f9:12:76:63:8d:59:35:03:df:5a:ad:ce:38:e7:92: 05:14:16:d9:bf:52:7e:79:cc:28:49:1a:e3:22:a1:c6:9c:d1: ed:72:07:29:c1:36:6f:78:65:16:4f:ca:92:6d:d9:ca:61:a8: 3b:4a:b7:6a:72:d4:4a:2d:26:07:81:1c:56:67:1e:cf:fb:9f: 46:25:95:77:98:3d:18:f0:a6:62:00:58:6f:89:04:ae:2c:02: 43:5c:95:c9:93:34:0b:29:de:93:32:22:ce:43:32:99:96:c9: 46:ae:4a:32:b4:98:66:f4:52:af:71:11:bc:60:64:37:72:55: 8f:5d:6d:c7:01:bb:3f:38:51:a4:f0:91:10:4f:48:d8:2a:7e: 49:27:3c:2b:48:93:a2:df:3a:b4:de:db:fd:b0:2e:2a:53:b2: 85:e2:95:a5:a6:fd:5b:ce:d3:6b:81:97:08:06:0e:e3:e7:71: de:bc:06:c6:5e:eb:2b:71:ca:30:48:7e:93:9a:76:0f:77:c6: ee:90:97:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRdtUU8dCRBAgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyZDViODYtY2NhMC00ZjJhLTg3YTQtODc0ZjVlOTZl ZWQ4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDlhZjFlZjctMWI2MC00MGQyLTgxYTEtYTVkZDBiNzMyZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipUxKnNLuQbe9gF671HITaLhV3dW4qppJpF7 5BJilwKoxeAIvEWcepH71Tz9o5khAj2aPoFt5pzxS1NsKHd013+7VdZeCezF9evJ wD9UzIulTsdR3RfW4b/NddtD/KV95dg1VRJypzuV8uZp1wVTa0J3uackFFxIsgrW DFqGXRZZy+QJyb0ags+vvj5OJnnQHQdbVcyofuysU9c40TSEnBLE9Kx4a31p44p3 jw/Hizs0N0tZOy2vuFq37IkA8gGhdBRRyHp5tgoYpKhqIMpnS0sA+dfOqRuUlMAa u1FYsJp2zvKxO3V+JZ9Sc2oUS9sfr0Kxa11lgWH+BiuqBWRX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAym6lPaco7k/KCzGXt2QJwPenxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTJk NWI4Ni1jY2EwLTRmMmEtODdhNC04NzRmNWU5NmVlZDgvNTA5NGIxNzAtNzc4My0z ODNiLWFkZDYtOGRiMGVhN2Y5MWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmEyZDViODYtY2NhMC00ZjJhLTg3 YTQtODc0ZjVlOTZlZWQ4L2JhMmQ1Yjg2LWNjYTAtNGYyYS04N2E0LTg3NGY1ZTk2 ZWVkOC5jcmwwHwYDVR0jBBgwFoAUx3nB3TW8aFEyWWvPV4E7fcTjJM0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTJkNWI4Ni1jY2EwLTRmMmEtODdhNC04NzRm NWU5NmVlZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZma1z2PHQWSFoh7d1hRnwaElGcB7odPtxKvLc3fpMks9Bbt1jYej3o ziZn3/5/daPh1SdZZN/N7/kSdmONWTUD31qtzjjnkgUUFtm/Un55zChJGuMiocac 0e1yBynBNm94ZRZPypJt2cphqDtKt2py1EotJgeBHFZnHs/7n0YllXeYPRjwpmIA WG+JBK4sAkNclcmTNAsp3pMyIs5DMpmWyUauSjK0mGb0Uq9xEbxgZDdyVY9dbccB uz84UaTwkRBPSNgqfkknPCtIk6LfOrTe2/2wLipTsoXilaWm/VvO02uBlwgGDuPn cd68BsZe6ytxyjBIfpOadg93xu6Qlxo= -----END CERTIFICATE-----Generated at Tue Nov 4 23:40:24 2025 by rpki-client