$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa File: bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa (raw, json) Hash identifier: uniO33JvhEjZ0r9wDwI6U/B//ONYufwfsoWTibtzhvs= Subject key identifier: 39:DE:75:F2:D3:35:97:E7:42:B2:13:71:A2:62:09:D7:B6:90:30:8F Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Certificate serial: 010D0C9F4328584B7F52060F84CDAD54BEBDEE20 Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 399624 IP address blocks: 23.129.68.0/24 maxlen: 24 2602:f7a7::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:06:0f:84:cd:ad:54:be:bd:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3f248fb1-a492-4388-bae3-bc7bccaaa895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:74:69:c8:b2:a1:95:08:d5:b5:4a:7e:65:31: 0f:cd:16:be:24:ed:0e:86:72:02:54:07:41:7c:98: 00:20:cd:ae:e1:04:f8:42:fb:9a:f8:5d:bc:ed:20: c4:09:ec:ce:38:28:b7:0f:dd:06:0e:a3:f6:84:8f: 07:1c:6f:87:97:e8:8d:6f:c5:68:5d:01:1e:d0:5f: a1:37:f8:da:26:64:bc:31:58:0f:79:d0:67:26:c7: 5a:0e:3f:a3:1a:50:00:24:b5:14:fc:74:6d:f3:cf: a3:62:41:03:3f:4b:80:d4:a2:f4:58:8a:ad:a1:4c: e4:a3:3b:84:b3:f5:84:84:a3:23:10:28:fb:48:5e: 06:38:15:0e:80:eb:96:b4:d3:47:11:d6:bd:0c:41: 20:6c:5f:25:5f:32:53:d5:54:08:53:6e:6f:85:4b: 99:c7:ec:61:b8:47:60:92:a7:c5:a3:0a:30:b5:35: fb:08:3f:d3:e4:e2:aa:fb:4f:c4:b8:f5:ce:20:5a: 5a:60:3e:0a:d6:ce:65:a7:8f:0b:69:33:6d:43:8a: ec:ec:2e:2b:63:1e:ce:2c:a7:9c:e8:4b:d9:15:72: 91:52:46:03:25:54:83:3a:6c:b0:e3:f8:1d:b3:0a: 02:a0:dd:d7:29:9b:c8:21:ec:91:5c:4d:0d:91:08: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:75:F2:D3:35:97:E7:42:B2:13:71:A2:62:09:D7:B6:90:30:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/bd9fa510-4cb1-36ac-b6ef-d4748c094e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl X509v3 Authority Key Identifier: keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer sbgp-ipAddrBlock: critical IPv4: 23.129.68.0/24 IPv6: 2602:f7a7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1a:4f:48:53:b9:dc:d0:32:8a:16:23:63:09:90:24:d8:98: 82:26:2e:cf:89:1d:28:2b:2a:95:21:73:a5:a8:1a:5c:5f:9b: 3b:06:ac:1f:f1:83:8e:20:90:17:9d:72:73:65:9f:30:25:a7: 39:38:cf:ae:24:2b:e5:66:77:9b:82:92:71:ef:f6:71:fc:59: 38:31:e4:5e:f4:b4:1d:c8:0a:a1:2e:f7:6d:8d:c1:c6:ca:0e: fb:45:ee:6a:bb:46:75:73:91:40:6d:a4:6e:52:64:71:0c:ff: a3:25:49:c5:aa:c2:ac:f7:e8:49:81:71:03:25:61:35:31:14: 01:10:8c:68:b3:d0:ef:4c:27:43:0e:5f:61:5c:8d:29:bc:04: 59:96:c2:19:9d:47:c8:ce:4d:e0:be:85:4d:e6:57:4c:4a:92: b8:3b:09:d0:4a:f2:3f:ec:31:d4:ab:a9:76:f6:c0:1a:bc:d3: 3d:73:6e:d8:53:1e:af:9e:49:39:8f:b8:c3:27:c2:7e:91:73: c5:46:eb:fe:52:2d:bf:08:10:1b:f1:a9:2d:9b:fb:03:b7:6b: 63:79:e7:34:2c:7a:37:eb:23:ef:c6:07:e3:5b:71:4d:3f:67: 51:c8:38:c4:f8:ac:3e:50:79:2c:eb:03:ee:03:13:ef:c1:e9: cb:b1:51:82 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEt/UgYPhM2tVL697iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0 NmNjMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk M2YyNDhmYjEtYTQ5Mi00Mzg4LWJhZTMtYmM3YmNjYWFhODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHRpyLKhlQjVtUp+ZTEPzRa+JO0OhnICVAdB fJgAIM2u4QT4Qvua+F287SDECezOOCi3D90GDqP2hI8HHG+Hl+iNb8VoXQEe0F+h N/jaJmS8MVgPedBnJsdaDj+jGlAAJLUU/HRt88+jYkEDP0uA1KL0WIqtoUzkozuE s/WEhKMjECj7SF4GOBUOgOuWtNNHEda9DEEgbF8lXzJT1VQIU25vhUuZx+xhuEdg kqfFowowtTX7CD/T5OKq+0/EuPXOIFpaYD4K1s5lp48LaTNtQ4rs7C4rYx7OLKec 6EvZFXKRUkYDJVSDOmyw4/gdswoCoN3XKZvIIeyRXE0NkQgfdwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDnedfLTNZfnQrITcaJiCde2kDCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvYmQ5ZmE1MTAtNGNiMS0z NmFjLWI2ZWYtZDQ3NDhjMDk0ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5 NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm YWMzOTQ2Y2MuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4FEMA4E AgACMAgDBgAmAvenADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5Gk9IU7nc0DKKFiNjCZAk2JiCJi7PiR0o KyqVIXOlqBpcX5s7Bqwf8YOOIJAXnXJzZZ8wJac5OM+uJCvlZnebgpJx7/Zx/Fk4 MeRe9LQdyAqhLvdtjcHGyg77Re5qu0Z1c5FAbaRuUmRxDP+jJUnFqsKs9+hJgXED JWE1MRQBEIxos9DvTCdDDl9hXI0pvARZlsIZnUfIzk3gvoVN5ldMSpK4OwnQSvI/ 7DHUq6l29sAavNM9c27YUx6vnkk5j7jDJ8J+kXPFRuv+Ui2/CBAb8aktm/sDt2tj eec0LHo36yPvxgfjW3FNP2dRyDjE+Kw+UHks6wPuAxPvwenLsVGC -----END CERTIFICATE-----Generated at Mon Oct 20 15:24:59 2025 by rpki-client