$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa File: cb858b9e-023b-313c-891a-00a6d1fa8853.roa (raw, json) Hash identifier: 5X4TabOFEcoZio+K986FYr+3Brsj9ZDqKgEEEV7mQHE= Subject key identifier: 6A:35:91:1B:E1:21:D0:E5:2D:E2:DF:5C:45:00:0F:E5:C5:58:A1:5D Certificate issuer: /CN=70a36240-104b-454c-b230-bf415e356e88 Certificate serial: 010D0C9F4328584B6A61DEA58E3884514372E530 Authority key identifier: 60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 31898 IP address blocks: 23.128.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:de:a5:8e:38:84:51:43:72:e5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70a36240-104b-454c-b230-bf415e356e88 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=3414d278-271c-4c8b-bc25-3a0954b3a2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:58:a7:2a:0f:97:bd:4e:d5:e5:fb:e9:6f: 66:20:d7:24:1e:20:55:da:a0:4a:ac:b6:a0:41:1c: 05:d3:a2:d8:c7:31:b1:25:6c:ea:18:d3:ee:de:0b: 62:9c:e4:0b:66:7a:59:7c:1d:6d:f7:90:f4:6b:ca: 86:e6:ff:d3:ea:dc:7a:17:8f:ce:15:8c:4f:5a:c3: 5f:c3:cc:b5:45:f0:e6:1b:a6:39:5c:32:4a:56:6b: 89:07:01:8b:d4:89:48:ff:82:47:f1:f2:47:5a:50: 44:84:76:26:39:40:a8:4f:7f:1c:8e:fd:41:3c:a4: 43:dc:9c:32:cb:a5:22:73:f3:e9:59:0c:e4:e1:9f: ec:96:53:0e:1e:81:c4:a4:64:4e:72:d2:f8:ed:a4: c4:21:0e:b6:70:0e:a1:82:8a:4e:43:f5:c7:f4:d2: 61:4e:c5:e2:f7:06:0b:79:9b:b4:81:1d:a8:24:3f: 76:18:d1:06:54:e9:70:a1:cd:c2:f4:95:7d:e1:af: b0:30:78:e9:13:10:7a:ab:a5:91:e2:11:36:ac:1c: 26:35:95:57:c3:e9:af:d4:b2:d5:5a:37:4c:8a:01: 89:e5:de:c9:0e:bd:c7:6c:45:b4:44:4c:94:e0:6e: eb:36:95:6a:f9:e4:56:5d:e6:7a:4c:64:61:d4:71: d7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:91:1B:E1:21:D0:E5:2D:E2:DF:5C:45:00:0F:E5:C5:58:A1:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/cb858b9e-023b-313c-891a-00a6d1fa8853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88/70a36240-104b-454c-b230-bf415e356e88.crl X509v3 Authority Key Identifier: keyid:60:31:9D:80:02:90:58:C3:7E:6A:A4:E6:DB:D7:B7:CA:4E:8C:7B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/70a36240-104b-454c-b230-bf415e356e88.cer sbgp-ipAddrBlock: critical IPv4: 23.128.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:06:97:f1:3a:62:5c:11:24:4b:88:40:34:36:ab:c2:c8:1d: f0:29:81:0b:fd:91:fe:ec:5b:1f:f6:1e:1d:d6:e3:25:c3:df: fa:62:a7:f4:22:75:31:c4:45:f8:7a:4b:4e:ff:01:67:9a:c5: 50:b0:24:1d:a8:40:a8:5b:f0:7c:81:57:68:a8:65:88:ff:05: 1a:4a:04:2e:e7:34:33:c8:78:83:c1:ab:a0:4d:b3:ff:95:52: 42:3d:c1:b6:c7:d8:e4:c3:59:79:71:0b:8e:dc:6a:36:7d:08: a5:22:60:01:19:53:57:fa:21:a6:c6:a2:0e:a4:ae:03:0b:7f: fc:5e:1b:73:81:78:21:8a:64:05:ba:c8:47:a9:e3:0c:9c:2c: fe:3f:96:4a:3e:2d:28:1f:37:6b:db:2e:d5:c3:d8:7f:08:5b: e5:52:94:1f:74:16:ed:b7:80:65:48:47:17:8a:f4:8d:50:4a: ca:07:35:11:79:ec:e5:6a:a4:aa:eb:31:35:58:5e:44:7b:ef: be:9e:14:c6:0c:9d:d9:3c:61:c5:92:20:46:20:d8:25:8c:8d: 66:62:71:90:6c:dd:ea:df:1d:9a:08:e7:fb:59:e3:bb:96:7e: 37:85:92:74:90:bb:ee:ef:f7:76:18:94:bd:e4:21:0e:95:01: 39:04:73:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYd6ljjiEUUNy5TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBhMzYyNDAtMTA0Yi00NTRjLWIyMzAtYmY0MTVlMzU2 ZTg4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MzQxNGQyNzgtMjcxYy00YzhiLWJjMjUtM2EwOTU0YjNhMmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz9YpyoPl71O1eX76W9mINckHiBV2qBKrLag QRwF06LYxzGxJWzqGNPu3gtinOQLZnpZfB1t95D0a8qG5v/T6tx6F4/OFYxPWsNf w8y1RfDmG6Y5XDJKVmuJBwGL1IlI/4JH8fJHWlBEhHYmOUCoT38cjv1BPKRD3Jwy y6Uic/PpWQzk4Z/sllMOHoHEpGROctL47aTEIQ62cA6hgopOQ/XH9NJhTsXi9wYL eZu0gR2oJD92GNEGVOlwoc3C9JV94a+wMHjpExB6q6WR4hE2rBwmNZVXw+mv1LLV WjdMigGJ5d7JDr3HbEW0REyU4G7rNpVq+eRWXeZ6TGRh1HHXzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGo1kRvhIdDlLeLfXEUAD+XFWKFdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83MGEz NjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQxNWUzNTZlODgvY2I4NThiOWUtMDIzYi0z MTNjLTg5MWEtMDBhNmQxZmE4ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzBhMzYyNDAtMTA0Yi00NTRjLWIy MzAtYmY0MTVlMzU2ZTg4LzcwYTM2MjQwLTEwNGItNDU0Yy1iMjMwLWJmNDE1ZTM1 NmU4OC5jcmwwHwYDVR0jBBgwFoAUYDGdgAKQWMN+aqTm29e3yk6Me+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83MGEzNjI0MC0xMDRiLTQ1NGMtYjIzMC1iZjQx NWUzNTZlODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwGl/E6YlwRJEuIQDQ2q8LIHfApgQv9kf7sWx/2Hh3W4yXD3/pip/Qi dTHERfh6S07/AWeaxVCwJB2oQKhb8HyBV2ioZYj/BRpKBC7nNDPIeIPBq6BNs/+V UkI9wbbH2OTDWXlxC47cajZ9CKUiYAEZU1f6IabGog6krgMLf/xeG3OBeCGKZAW6 yEep4wycLP4/lko+LSgfN2vbLtXD2H8IW+VSlB90Fu23gGVIRxeK9I1QSsoHNRF5 7OVqpKrrMTVYXkR7776eFMYMndk8YcWSIEYg2CWMjWZicZBs3erfHZoI5/tZ47uW fjeFknSQu+7v93YYlL3kIQ6VATkEc4M= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:29 2025 by rpki-client