$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2c6b6bae-ffdc-3418-b59b-f04590a471cc.roa File: 2c6b6bae-ffdc-3418-b59b-f04590a471cc.roa (raw, json) Hash identifier: 3vtrGoDjOFp2u5admNkdKbJrttljPFehMWL/Vqp56ZI= Subject key identifier: 72:D8:A7:FB:49:DD:21:FA:07:3B:6A:C3:6E:E5:04:B1:B5:FA:EA:C9 Certificate issuer: /CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Certificate serial: 010D0C9F4328584B6BC74FD01CD7C369262BC9E0 Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2c6b6bae-ffdc-3418-b59b-f04590a471cc.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 19054 IP address blocks: 23.131.224.0/24 maxlen: 24 104.225.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4f:d0:1c:d7:c3:69:26:2b:c9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=f20a14fb-6b90-4765-8ac3-47f54c2f434d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:7d:aa:b8:b9:22:11:5e:aa:9c:88:04:32: 29:12:47:21:33:a1:bc:e0:69:0f:6d:fd:7c:be:06: 93:2d:31:1a:d6:b2:a5:d2:06:df:77:fd:3e:b4:d1: 3d:b3:e0:2e:83:d2:e2:75:65:a2:d1:98:c7:73:81: b7:d9:b6:77:2f:83:fe:c3:29:1d:c5:3a:5e:58:ac: 05:fd:7a:2f:c2:d7:50:bc:e9:f6:85:22:fe:2f:c2: eb:01:c1:82:05:b6:56:98:21:e8:d0:37:24:37:01: bc:29:9c:b3:1b:4c:98:fb:d5:4b:ce:ac:4d:02:d0: 61:02:31:a2:22:80:f6:70:b0:5b:f8:8c:ca:36:3b: 25:3a:86:77:d9:d1:7f:b4:4a:a4:7d:a8:b3:0f:db: da:e9:d0:53:6d:15:e5:ca:44:f0:d8:52:34:3c:91: 31:86:2c:8d:a4:9a:31:88:1f:53:9f:26:6c:91:74: 4b:c3:96:47:e1:31:d1:30:a6:c8:a9:68:fb:66:68: 72:8d:47:d9:93:b4:e3:97:47:61:e2:3b:df:6d:8a: 34:07:60:86:82:8f:2e:02:1c:8e:33:06:96:0e:eb: bf:98:4f:96:a3:7d:b9:73:15:c0:82:45:25:a2:98: 1a:0f:89:38:b4:6d:a6:b0:c3:e0:2e:4e:fc:de:a6: 8a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D8:A7:FB:49:DD:21:FA:07:3B:6A:C3:6E:E5:04:B1:B5:FA:EA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/2c6b6bae-ffdc-3418-b59b-f04590a471cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl X509v3 Authority Key Identifier: keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer sbgp-ipAddrBlock: critical IPv4: 23.131.224.0/24 104.225.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0a:8b:13:4b:86:73:17:d1:94:c6:d7:c1:90:90:77:9c:9f: 19:63:8d:a6:c8:db:f0:2c:c3:c1:be:99:e2:8b:31:c2:13:06: bc:e2:12:7d:b6:3c:88:8b:20:79:57:d8:cd:d7:08:7a:ce:02: e4:70:43:20:19:57:36:9c:55:7a:04:64:86:a3:82:1e:a4:7e: ea:7e:e1:78:b8:0f:bc:73:f5:f3:d1:7a:34:ff:08:a6:c1:2e: 2c:f2:15:16:e3:5d:50:79:aa:0d:0b:58:0f:2e:e5:d5:ae:06: fe:12:16:fb:9a:61:f2:75:d6:55:2c:3c:ed:fc:ed:ba:e2:0a: b7:89:84:e2:2c:1e:19:9b:d9:13:40:6a:f6:9c:5b:68:e4:bf: ce:4a:a9:e6:d9:b6:0b:85:57:9c:92:5c:65:d8:43:5e:ac:04: 39:bf:ee:70:37:8a:75:20:ee:1f:64:c9:47:fa:cc:ee:0f:5c: 01:79:16:29:4e:09:15:c7:50:d0:fa:6a:9a:bb:75:15:a9:4a: 73:ea:4a:a7:b3:29:32:c3:45:33:9a:71:ea:4e:64:63:fc:ac: 07:99:63:1d:ab:2d:ae:79:41:02:84:9e:3c:e6:9d:f5:50:e4: 0c:ee:63:e1:90:ec:0f:8b:50:98:69:66:d5:f5:29:f0:cc:1d: 4a:12:cf:c5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtrx0/QHNfDaSYryeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhYTQ1ODktNjZkOC00Njc1LTg1MzgtZTA3NWJhODBl Y2QzMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk ZjIwYTE0ZmItNmI5MC00NzY1LThhYzMtNDdmNTRjMmY0MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGB9qri5IhFeqpyIBDIpEkchM6G84GkPbf18 vgaTLTEa1rKl0gbfd/0+tNE9s+Aug9LidWWi0ZjHc4G32bZ3L4P+wykdxTpeWKwF /XovwtdQvOn2hSL+L8LrAcGCBbZWmCHo0DckNwG8KZyzG0yY+9VLzqxNAtBhAjGi IoD2cLBb+IzKNjslOoZ32dF/tEqkfaizD9va6dBTbRXlykTw2FI0PJExhiyNpJox iB9TnyZskXRLw5ZH4THRMKbIqWj7ZmhyjUfZk7Tjl0dh4jvfbYo0B2CGgo8uAhyO MwaWDuu/mE+Wo325cxXAgkUlopgaD4k4tG2msMPgLk783qaKkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHLYp/tJ3SH6Bztqw27lBLG1+urJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFh NDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1YmE4MGVjZDMvMmM2YjZiYWUtZmZkYy0z NDE4LWI1OWItZjA0NTkwYTQ3MWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2RhYTQ1ODktNjZkOC00Njc1LTg1 MzgtZTA3NWJhODBlY2QzLzdkYWE0NTg5LTY2ZDgtNDY3NS04NTM4LWUwNzViYTgw ZWNkMy5jcmwwHwYDVR0jBBgwFoAUv9T+9wqpQOy4VAn0Nps0P4ZaCgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83ZGFhNDU4OS02NmQ4LTQ2NzUtODUzOC1lMDc1 YmE4MGVjZDMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4PgAwQA aOHRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGQKixNLhnMX0ZTG18GQkHecnxljjabI2/Asw8G+meKLMcIT BrziEn22PIiLIHlX2M3XCHrOAuRwQyAZVzacVXoEZIajgh6kfup+4Xi4D7xz9fPR ejT/CKbBLizyFRbjXVB5qg0LWA8u5dWuBv4SFvuaYfJ11lUsPO387briCreJhOIs Hhmb2RNAavacW2jkv85KqebZtguFV5ySXGXYQ16sBDm/7nA3inUg7h9kyUf6zO4P XAF5FilOCRXHUND6apq7dRWpSnPqSqezKTLDRTOacepOZGP8rAeZYx2rLa55QQKE njzmnfVQ5AzuY+GQ7A+LUJhpZtX1KfDMHUoSz8U= -----END CERTIFICATE-----Generated at Mon Oct 20 15:23:02 2025 by rpki-client