$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa File: 7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa (raw, json) Hash identifier: 0ZhdgX91nqT8iK1opi7XH3/U247EOs6yP10edNUwQgU= Subject key identifier: 22:1E:D8:E8:5C:A5:52:89:D0:A7:3A:FC:80:87:6E:F4:09:62:5D:A8 Certificate issuer: /CN=b85c4b41-e743-408d-bbcc-41aa5d4d01c1 Certificate serial: 010D0C9F4328584B9B3CE2E5C678EEDC3AB374F0 Authority key identifier: 39:9F:D3:90:48:6B:29:16:B3:1E:EC:75:69:82:4F:08:2B:13:CE:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 30162 IP address blocks: 23.149.24.0/24 maxlen: 24 23.170.208.0/24 maxlen: 24 23.170.209.0/24 maxlen: 24 64.250.96.0/20 maxlen: 24 208.87.120.0/21 maxlen: 24 2605:d780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e2:e5:c6:78:ee:dc:3a:b3:74:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85c4b41-e743-408d-bbcc-41aa5d4d01c1 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3984247c-e169-4f6e-bbb8-5c21ef79d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:45:f0:ea:3f:e1:7f:df:b3:22:a9:92:6c: 7c:6d:44:09:6d:3c:0d:be:de:60:e8:36:5b:4e:37: 95:53:5e:b3:3a:65:ba:91:f5:57:72:99:93:51:af: 18:f1:e6:63:bd:45:37:57:26:00:c7:56:a0:49:65: 90:3f:33:35:79:64:36:be:49:67:d2:b8:f0:ba:bb: 67:d2:db:33:23:30:03:fe:7d:87:83:2b:c3:4a:18: 04:4a:15:cf:38:df:1b:b4:db:ad:1b:39:19:d8:aa: f2:8c:57:dc:5b:ba:eb:8b:37:6e:b5:a4:c8:81:d8: 31:16:27:cc:3b:8a:4e:c9:c6:16:73:58:ad:ce:a5: 66:29:05:69:e5:84:37:f3:30:48:6a:24:c6:a8:00: 36:ae:94:a5:47:92:ae:67:fc:2d:4b:09:f8:8f:f9: 18:cc:6b:5a:99:b6:61:eb:69:18:41:0f:00:7b:4f: 1a:3f:72:f0:74:4d:08:9a:8c:c3:5e:54:b8:17:6a: 43:17:fc:cb:80:8c:64:5a:ca:72:18:09:19:13:f0: e6:b2:36:4d:c9:b2:7b:e2:b6:27:6f:71:dd:7a:49: 82:05:af:91:e7:ee:05:ba:e9:97:2c:53:21:a5:f2: f5:83:5f:a7:0c:52:9c:ac:c5:1b:cd:a3:73:ab:bc: 17:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1E:D8:E8:5C:A5:52:89:D0:A7:3A:FC:80:87:6E:F4:09:62:5D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/7059a3a8-5c8e-36df-b506-12bf33d7c10d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.crl X509v3 Authority Key Identifier: keyid:39:9F:D3:90:48:6B:29:16:B3:1E:EC:75:69:82:4F:08:2B:13:CE:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b85c4b41-e743-408d-bbcc-41aa5d4d01c1.cer sbgp-ipAddrBlock: critical IPv4: 23.149.24.0/24 23.170.208.0/23 64.250.96.0/20 208.87.120.0/21 IPv6: 2605:d780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:35:22:20:5e:a6:90:04:d8:00:97:94:de:62:24:33:39:76: 25:e4:db:cc:bd:f5:ef:a9:2d:2b:f4:0d:a6:ab:32:e5:24:23: 2b:d4:24:24:9b:b1:f7:c7:93:42:c6:85:02:a3:47:b9:2d:5f: df:6a:7a:8b:dc:cb:af:68:c7:8f:1c:69:51:a1:ad:f5:31:9a: df:50:89:bd:6a:e5:5b:f4:aa:de:d1:4a:6f:15:de:7a:c3:9c: 02:23:12:71:58:c2:57:24:46:9b:e4:21:6e:be:9d:a6:10:bd: ee:a8:6c:0e:cd:16:59:4b:24:bd:54:1e:96:21:34:bf:79:66: 60:95:1e:da:39:0a:f5:c4:9c:77:5d:82:b5:4c:71:04:56:39: 49:a7:96:3d:33:93:f6:d4:9b:28:75:a4:41:30:4b:7b:e0:46: cd:a3:4b:c7:dc:1f:fe:c1:36:cf:7b:f8:da:9d:3a:6e:ab:b5: 52:72:63:24:83:01:3e:5d:30:d4:31:c7:84:1b:b9:5e:09:af: e5:69:99:3c:20:6a:67:2b:72:43:4d:c4:c2:03:31:5b:e7:9c: 12:48:6d:33:a0:3f:ed:56:c3:81:1a:b0:8c:69:b7:91:cc:e6: 77:f5:25:ad:80:7f:7b:3d:95:b0:f6:2a:70:41:83:20:a5:ea: 22:de:27:6e -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWEubPOLlxnju3DqzdPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg1YzRiNDEtZTc0My00MDhkLWJiY2MtNDFhYTVkNGQw MWMxMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk Mzk4NDI0N2MtZTE2OS00ZjZlLWJiYjgtNWMyMWVmNzlkN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbFF8Oo/4X/fsyKpkmx8bUQJbTwNvt5g6DZb TjeVU16zOmW6kfVXcpmTUa8Y8eZjvUU3VyYAx1agSWWQPzM1eWQ2vkln0rjwurtn 0tszIzAD/n2HgyvDShgEShXPON8btNutGzkZ2KryjFfcW7rrizdutaTIgdgxFifM O4pOycYWc1itzqVmKQVp5YQ38zBIaiTGqAA2rpSlR5KuZ/wtSwn4j/kYzGtambZh 62kYQQ8Ae08aP3LwdE0ImozDXlS4F2pDF/zLgIxkWspyGAkZE/DmsjZNybJ74rYn b3HdekmCBa+R5+4FuumXLFMhpfL1g1+nDFKcrMUbzaNzq7wXQwIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFCIe2OhcpVKJ0Kc6/ICHbvQJYl2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iODVj NGI0MS1lNzQzLTQwOGQtYmJjYy00MWFhNWQ0ZDAxYzEvNzA1OWEzYTgtNWM4ZS0z NmRmLWI1MDYtMTJiZjMzZDdjMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjg1YzRiNDEtZTc0My00MDhkLWJi Y2MtNDFhYTVkNGQwMWMxL2I4NWM0YjQxLWU3NDMtNDA4ZC1iYmNjLTQxYWE1ZDRk MDFjMS5jcmwwHwYDVR0jBBgwFoAUOZ/TkEhrKRazHux1aYJPCCsTzmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iODVjNGI0MS1lNzQzLTQwOGQtYmJjYy00MWFh NWQ0ZDAxYzEuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAF5UYAwQB F6rQAwQEQPpgAwQD0Fd4MA0EAgACMAcDBQAmBdeAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFI1IiBeppAE 2ACXlN5iJDM5diXk28y99e+pLSv0DaarMuUkIyvUJCSbsffHk0LGhQKjR7ktX99q eovcy69ox48caVGhrfUxmt9Qib1q5Vv0qt7RSm8V3nrDnAIjEnFYwlckRpvkIW6+ naYQve6obA7NFllLJL1UHpYhNL95ZmCVHto5CvXEnHddgrVMcQRWOUmnlj0zk/bU myh1pEEwS3vgRs2jS8fcH/7BNs97+NqdOm6rtVJyYySDAT5dMNQxx4QbuV4Jr+Vp mTwgamcrckNNxMIDMVvnnBJIbTOgP+1Ww4EasIxpt5HM5nf1Ja2Af3s9lbD2KnBB gyCl6iLeJ24= -----END CERTIFICATE-----Generated at Tue Oct 28 13:08:05 2025 by rpki-client