$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35acf899-2ec0-3d47-b0b2-5384aa4c04d3.roa File: 35acf899-2ec0-3d47-b0b2-5384aa4c04d3.roa (raw, json) Hash identifier: LscSmoXhHcCs2Z6dmdwDGZoze+oRnxogtJj+aucVtVc= Subject key identifier: F0:79:49:B3:F1:D6:22:36:56:6F:4E:F4:78:81:1D:C5:7D:D2:21:D8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715D098695DCD0DF5A5EA440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35acf899-2ec0-3d47-b0b2-5384aa4c04d3.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16625 IP address blocks: 23.35.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:09:86:95:dc:d0:df:5a:5e:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=f1a13e19-50f4-4b4b-a0e3-b2dd8c37a3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:12:17:32:06:e8:92:de:3f:e6:c1:64:cc: 83:1a:1a:25:ac:3f:bf:c3:56:e9:1e:74:7b:ec:8e: 62:93:a3:7e:00:05:90:ec:81:0a:7f:24:78:43:78: ea:7b:a8:30:02:bc:d7:48:31:ac:e3:29:5d:1a:08: 7e:91:67:de:f0:85:34:7a:c7:92:dd:e7:57:b5:90: fa:27:8b:bc:19:a3:dd:1a:b0:59:e5:5b:a9:92:80: fd:ba:cd:9e:34:a2:79:a4:6b:14:a2:de:b1:bd:0a: cf:21:4c:cb:91:ea:e9:72:58:20:b1:c6:2a:f5:e7: a6:06:6f:d8:22:79:bc:9c:c2:b9:9d:bc:01:f7:5f: ef:2b:bd:a5:72:81:02:4b:f0:32:f9:ce:6d:f7:f7: fb:79:2c:40:c5:93:6a:8b:8e:5b:cb:69:93:cb:ae: 66:c0:f6:ed:ec:36:5a:03:e6:aa:bf:4e:69:e8:1d: e2:20:1e:36:12:d8:5b:43:1c:70:a5:b3:47:52:61: d0:b4:80:f5:38:ad:f4:46:20:62:28:af:e8:48:37: f6:93:22:73:08:dd:ea:0a:f9:23:24:70:a4:35:dc: 9d:2b:c0:cd:de:f1:c6:42:e2:16:18:a5:bd:7a:ad: ae:b1:fe:bf:cd:8d:c7:2a:f5:f2:0c:1d:20:ff:91: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:49:B3:F1:D6:22:36:56:6F:4E:F4:78:81:1D:C5:7D:D2:21:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35acf899-2ec0-3d47-b0b2-5384aa4c04d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:39:bc:f8:a0:26:03:f1:aa:8a:42:a1:21:c5:a6:00:e8:61: 64:86:6d:bf:dc:36:f0:f5:1e:97:63:4c:73:d3:e9:f8:7e:ae: d9:ef:4d:3d:a1:8b:fd:b4:d9:20:ee:e6:63:d1:85:93:b6:dc: 4a:05:7e:3e:ff:eb:9a:43:5d:58:a5:86:c8:90:8b:ae:23:36: cf:8c:3e:f5:86:fa:98:9a:34:98:6e:30:c6:35:c9:57:79:f4: 57:e3:fe:fd:64:55:92:05:0c:97:27:32:ec:cb:57:e6:73:4d: 94:4e:ff:a7:7c:47:ad:c8:e6:b0:3b:f3:7a:14:ce:3b:92:9a: 21:df:26:11:06:39:b7:da:35:b5:a8:e0:5e:e1:37:93:38:c9: f9:82:61:e7:76:bf:d2:14:aa:fd:a4:00:da:b2:b1:28:da:a5: fa:db:b0:c3:1b:e1:b2:52:17:f7:f1:14:65:92:44:07:a9:7d: 4e:ea:88:9b:f9:ec:aa:75:1d:9d:11:8e:76:68:4e:7f:63:17: 98:21:98:9c:e9:17:e0:ed:fd:45:9d:95:ff:6c:43:02:49:b0: 12:e1:56:12:36:19:d0:47:60:53:f1:a6:0d:88:44:87:10:7c: c9:65:25:ac:59:05:f6:e9:cf:c2:a1:c8:bb:7d:72:15:bd:69: e3:4c:95:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQmGldzQ31pepEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZjFhMTNlMTktNTBmNC00YjRiLWEwZTMtYjJkZDhjMzdhM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyUSFzIG6JLeP+bBZMyDGholrD+/w1bpHnR7 7I5ik6N+AAWQ7IEKfyR4Q3jqe6gwArzXSDGs4yldGgh+kWfe8IU0eseS3edXtZD6 J4u8GaPdGrBZ5VupkoD9us2eNKJ5pGsUot6xvQrPIUzLkerpclggscYq9eemBm/Y Inm8nMK5nbwB91/vK72lcoECS/Ay+c5t9/f7eSxAxZNqi45by2mTy65mwPbt7DZa A+aqv05p6B3iIB42EthbQxxwpbNHUmHQtID1OK30RiBiKK/oSDf2kyJzCN3qCvkj JHCkNdydK8DN3vHGQuIWGKW9eq2usf6/zY3HKvXyDB0g/5HOswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPB5SbPx1iI2Vm9O9HiBHcV90iHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzVhY2Y4OTktMmVjMC0z ZDQ3LWIwYjItNTM4NGFhNGMwNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC45vPigJgPxqopCoSHFpgDoYWSGbb/cNvD1HpdjTHPT6fh+rtnvTT2h i/202SDu5mPRhZO23EoFfj7/65pDXVilhsiQi64jNs+MPvWG+piaNJhuMMY1yVd5 9Ffj/v1kVZIFDJcnMuzLV+ZzTZRO/6d8R63I5rA783oUzjuSmiHfJhEGObfaNbWo 4F7hN5M4yfmCYed2v9IUqv2kANqysSjapfrbsMMb4bJSF/fxFGWSRAepfU7qiJv5 7Kp1HZ0RjnZoTn9jF5ghmJzpF+Dt/UWdlf9sQwJJsBLhVhI2GdBHYFPxpg2IRIcQ fMllJaxZBfbpz8KhyLt9chW9aeNMlXA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:38 2025 by rpki-client