$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa File: 70dd68fe-7e33-3081-a8a1-918560928fca.roa (raw, json) Hash identifier: W7VqKAC1vRKW3p4E+GykbJyVd77p1tImrWvp/scnptk= Subject key identifier: 41:65:64:B1:C3:4C:1B:20:54:F5:7B:6B:8E:84:8B:83:DE:02:60:E3 Certificate issuer: /CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5 Certificate serial: 010D0C9F4328584B82B134D6F372D68D6E4FED80 Authority key identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 396872 IP address blocks: 23.132.224.0/24 maxlen: 24 23.132.225.0/24 maxlen: 24 130.12.128.0/22 maxlen: 24 142.202.24.0/22 maxlen: 24 155.254.200.0/22 maxlen: 24 170.205.44.0/22 maxlen: 24 216.39.236.0/22 maxlen: 24 2602:fe65::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:b1:34:d6:f3:72:d6:8d:6e:4f:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=d294582c-c1b3-4bed-b68c-de29a5a2c22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:57:1d:b1:01:6e:d5:36:25:62:58:04:8c: ea:4e:9e:22:9a:21:03:db:70:45:93:13:54:0a:e5: ac:e5:7f:42:48:09:86:86:b4:5c:9c:58:9d:8f:b6: f3:38:da:b1:2d:83:3f:7e:6e:44:10:0d:0e:e0:7c: 69:c3:3d:6b:02:f2:74:6e:d2:c9:37:59:3e:fa:2c: 5a:fa:a8:df:56:db:20:1a:1d:18:14:c7:8d:cc:c7: 77:f9:df:99:7b:dc:4f:e7:3f:20:b5:24:1c:de:f1: 3e:98:40:2b:2a:8d:4e:33:7a:39:6f:cc:a7:6f:ba: 7d:6f:b8:c6:a5:0c:64:d0:79:28:09:08:14:e3:87: c9:52:c4:bf:3e:34:e5:23:3e:bf:ab:7c:48:9f:21: 64:52:12:c2:f2:62:b2:0b:da:80:76:3a:b4:91:26: 0d:ec:b2:29:ae:d5:a3:f2:f6:d5:4e:e4:b5:84:46: 22:3b:20:0d:df:da:09:75:3f:19:e7:4a:39:18:96: 6d:3d:6c:57:58:22:0d:6a:93:02:0a:c4:9a:84:96: e6:d1:3c:4b:a2:92:b1:83:b5:d6:0f:6a:b3:e6:18: 22:e1:97:7b:e8:95:42:fb:e9:64:e1:bb:6c:6a:ec: b2:53:d5:21:47:a8:4e:71:9b:2f:54:6a:2f:0d:ac: 93:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:65:64:B1:C3:4C:1B:20:54:F5:7B:6B:8E:84:8B:83:DE:02:60:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/70dd68fe-7e33-3081-a8a1-918560928fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl X509v3 Authority Key Identifier: keyid:BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer sbgp-ipAddrBlock: critical IPv4: 23.132.224.0/23 130.12.128.0/22 142.202.24.0/22 155.254.200.0/22 170.205.44.0/22 216.39.236.0/22 IPv6: 2602:fe65::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e3:22:7e:a8:ac:49:78:80:24:45:8d:b9:ef:6a:6f:fc:68:5c: bb:00:1a:88:08:9f:6a:09:f8:5d:37:15:59:aa:aa:d5:c8:a5: 88:bb:42:73:cb:7f:9f:dc:5e:e9:f2:3d:4d:0f:50:9c:5a:d8: 7f:d0:be:f4:5f:4d:82:63:9f:7a:dd:3c:67:d1:74:f6:eb:b8: 46:e7:c6:21:af:65:2d:35:4f:5b:0c:a0:c9:95:39:c8:c2:96: a3:59:7c:35:c8:d6:ed:b3:76:42:a0:e8:d0:c6:f4:14:21:5e: f2:a7:a8:04:60:a7:8a:ac:23:88:99:34:5a:76:25:2d:be:5a: 12:16:6e:f7:13:45:c5:53:3e:55:79:83:e3:51:1c:78:f9:b3: 5d:03:96:d9:bf:ca:32:dd:2e:e2:68:89:aa:7f:04:80:26:14: de:3d:eb:91:d0:94:94:1f:5e:33:6b:10:1e:f3:f1:a6:91:4b: 81:ba:b6:6b:41:9d:39:7d:52:cc:14:1b:eb:8e:4a:65:fe:9b: 5a:4c:6c:40:7c:9c:d7:d0:4f:ed:85:b9:b0:4b:08:53:02:1d: 97:8b:82:2e:d3:48:29:23:75:7e:72:fa:ca:d0:5e:25:76:7c: e0:e4:05:83:a9:2e:d4:06:a9:9d:85:c7:4b:ef:a8:70:4a:d3: 88:bf:bd:09 -----BEGIN CERTIFICATE----- MIIGcTCCBVmgAwIBAgIUAQ0Mn0MoWEuCsTTW83LWjW5P7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFiZDUtNzczMjllN2Rm ZmQ1MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk ZDI5NDU4MmMtYzFiMy00YmVkLWI2OGMtZGUyOWE1YTJjMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzxXHbEBbtU2JWJYBIzqTp4imiED23BFkxNU CuWs5X9CSAmGhrRcnFidj7bzONqxLYM/fm5EEA0O4Hxpwz1rAvJ0btLJN1k++ixa +qjfVtsgGh0YFMeNzMd3+d+Ze9xP5z8gtSQc3vE+mEArKo1OM3o5b8ynb7p9b7jG pQxk0HkoCQgU44fJUsS/PjTlIz6/q3xInyFkUhLC8mKyC9qAdjq0kSYN7LIprtWj 8vbVTuS1hEYiOyAN39oJdT8Z50o5GJZtPWxXWCINapMCCsSahJbm0TxLopKxg7XW D2qz5hgi4Zd76JVC++lk4btsauyyU9UhR6hOcZsvVGovDayTMQIDAQABo4IDgzCC A38wHQYDVR0OBBYEFEFlZLHDTBsgVPV7a46Ei4PeAmDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMDhk ZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMyOWU3ZGZmZDUvNzBkZDY4ZmUtN2UzMy0z MDgxLWE4YTEtOTE4NTYwOTI4ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFi ZDUtNzczMjllN2RmZmQ1L2QwOGRlN2NiLWU2N2YtNGY2ZS1hYmQ1LTc3MzI5ZTdk ZmZkNS5jcmwwHwYDVR0jBBgwFoAUuyRRy9dQ7hcsOzFdv4xB/fqWLMowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kMDhkZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMy OWU3ZGZmZDUuY2VyME0GCCsGAQUFBwEHAQH/BD4wPDAqBAIAATAkAwQBF4TgAwQC ggyAAwQCjsoYAwQCm/7IAwQCqs0sAwQC2CfsMA4EAgACMAgDBgQmAv5lADBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQDjIn6orEl4gCRFjbnvam/8aFy7ABqICJ9qCfhdNxVZqqrVyKWIu0Jzy3+f 3F7p8j1ND1CcWth/0L70X02CY5963Txn0XT267hG58Yhr2UtNU9bDKDJlTnIwpaj WXw1yNbts3ZCoOjQxvQUIV7yp6gEYKeKrCOImTRadiUtvloSFm73E0XFUz5VeYPj URx4+bNdA5bZv8oy3S7iaImqfwSAJhTePeuR0JSUH14zaxAe8/GmkUuBurZrQZ05 fVLMFBvrjkpl/ptaTGxAfJzX0E/thbmwSwhTAh2Xi4Iu00gpI3V+cvrK0F4ldnzg 5AWDqS7UBqmdhcdL76hwStOIv70J -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:04 2025 by rpki-client