$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70aa126b-2d47-3cde-9d70-bd11a53d10ad.roa File: 70aa126b-2d47-3cde-9d70-bd11a53d10ad.roa (raw, json) Hash identifier: XDVhE7guk3ajLs5IlFTizjykLnCDjcrXrmqHNnYzWko= Subject key identifier: DE:01:1A:C4:9D:0F:6E:1B:A2:6B:49:69:79:EC:2D:03:95:D1:E5:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075627F5314244B86A59C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70aa126b-2d47-3cde-9d70-bd11a53d10ad.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 35994 IP address blocks: 23.213.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:56:27:f5:31:42:44:b8:6a:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=be545687-dc2a-4d3d-853b-8240da3af61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:c7:7c:c9:a5:d5:5b:87:77:bf:8f:d8:7a: 5c:34:1b:61:e7:95:34:0a:d9:df:f3:98:53:7c:76: 31:e9:e5:b4:ce:22:ac:4d:f3:c2:01:ad:fb:7c:fc: 78:92:a8:2b:b3:be:c7:2c:80:81:2d:40:3c:a5:34: 68:99:56:9c:c4:8e:ed:8e:5a:dc:98:2a:cd:8c:93: 77:bb:47:a2:ec:6d:ce:e1:0c:f7:72:c7:c2:c8:6c: 74:a2:c0:48:f2:8c:e3:14:f8:40:7d:71:6e:f4:a0: f2:49:ff:81:d3:7a:64:c4:1b:07:4a:1c:f8:5e:b3: c9:ba:53:0f:c6:da:75:3e:d9:c0:2d:b3:1d:89:c7: 14:8d:5b:b0:33:f7:1e:3d:6f:f3:3c:ab:f4:f6:15: a1:9f:65:54:54:4f:fb:5d:cb:15:21:bf:88:07:cf: 41:e3:66:39:24:ab:ae:96:49:d3:fe:03:fc:c2:49: 45:70:27:ea:38:01:78:bd:8b:aa:2a:9a:0b:19:cc: c2:c8:98:1d:d1:d6:af:b7:77:a7:77:23:ea:f8:51: ea:e8:4f:47:09:1f:2e:d7:72:72:b0:a6:57:09:13: cd:d5:7a:c1:78:55:a5:79:c2:4b:de:4c:81:80:d1: 87:61:3f:f0:b6:e9:4c:34:8f:8d:c8:01:c6:fc:12: 44:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:01:1A:C4:9D:0F:6E:1B:A2:6B:49:69:79:EC:2D:03:95:D1:E5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/70aa126b-2d47-3cde-9d70-bd11a53d10ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5e:67:b3:be:b9:48:c1:57:a7:29:5f:c1:c0:2d:fb:5c:bd: e2:74:76:3a:61:1c:93:9c:c1:46:13:83:c3:9c:be:7d:df:a2: 62:c6:02:1f:d6:80:e3:69:ba:21:34:79:c7:f7:72:0d:1c:a2: 6c:23:d7:0f:21:9a:81:bf:41:08:a9:a6:9c:77:f9:90:84:7a: 51:80:1f:a6:2e:6a:4f:9b:a0:58:de:6c:6f:83:e8:35:63:d3: 30:f9:0f:51:c2:c9:bb:3f:a0:51:d7:ef:6f:3c:ac:3e:3e:18: f4:d8:94:ac:12:69:6c:26:11:5c:10:b2:5f:c1:b0:b6:10:3f: 2a:54:ca:3e:0d:54:36:94:5d:66:bc:d5:00:3b:65:ba:db:24: 74:b6:dd:15:83:3d:33:e7:df:c3:2b:be:cd:67:30:ff:b8:82: 23:4f:2b:6a:1c:0d:89:68:77:52:13:99:96:03:71:b7:50:d9: 1a:ed:08:dc:36:92:dd:10:ef:5c:4a:c2:f9:22:de:d5:b1:e2: 64:a3:88:70:8d:62:ee:92:3e:9b:83:48:f7:06:a7:ef:53:ed: 75:a0:1a:67:b6:8f:62:90:59:84:af:96:68:6d:ad:fb:bc:62: 8b:6b:f1:b3:20:e2:ad:1d:9d:13:5e:a1:12:aa:c6:a6:45:15: 6b:fb:d4:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1Yn9TFCRLhqWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YmU1NDU2ODctZGMyYS00ZDNkLTg1M2ItODI0MGRhM2FmNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tnHfMml1VuHd7+P2HpcNBth55U0Ctnf85hT fHYx6eW0ziKsTfPCAa37fPx4kqgrs77HLICBLUA8pTRomVacxI7tjlrcmCrNjJN3 u0ei7G3O4Qz3csfCyGx0osBI8ozjFPhAfXFu9KDySf+B03pkxBsHShz4XrPJulMP xtp1PtnALbMdiccUjVuwM/cePW/zPKv09hWhn2VUVE/7XcsVIb+IB89B42Y5JKuu lknT/gP8wklFcCfqOAF4vYuqKpoLGczCyJgd0davt3endyPq+FHq6E9HCR8u13Jy sKZXCRPN1XrBeFWlecJL3kyBgNGHYT/wtulMNI+NyAHG/BJE/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4BGsSdD24bomtJaXnsLQOV0eU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzBhYTEyNmItMmQ0Ny0z Y2RlLTlkNzAtYmQxMWE1M2QxMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdeZ7O+uUjBV6cpX8HALftcveJ0djphHJOcwUYTg8Ocvn3fomLGAh/W gONpuiE0ecf3cg0comwj1w8hmoG/QQipppx3+ZCEelGAH6Yuak+boFjebG+D6DVj 0zD5D1HCybs/oFHX7288rD4+GPTYlKwSaWwmEVwQsl/BsLYQPypUyj4NVDaUXWa8 1QA7ZbrbJHS23RWDPTPn38Mrvs1nMP+4giNPK2ocDYlod1ITmZYDcbdQ2RrtCNw2 kt0Q71xKwvki3tWx4mSjiHCNYu6SPpuDSPcGp+9T7XWgGme2j2KQWYSvlmhtrfu8 Yotr8bMg4q0dnRNeoRKqxqZFFWv71Gg= -----END CERTIFICATE-----Generated at Mon Oct 20 17:35:16 2025 by rpki-client