$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/072c410a-d706-39ef-b01c-9f81f164a15e.roa File: 072c410a-d706-39ef-b01c-9f81f164a15e.roa (raw, json) Hash identifier: RMTLGaeGm1WoMlpRI+Mlf3qybOuoKrUmL5cIYj+zwcM= Subject key identifier: 5F:9F:A4:19:FB:C6:16:87:C4:F0:33:32:81:E2:C7:F1:68:65:F2:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3556F43834133700E701A680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/072c410a-d706-39ef-b01c-9f81f164a15e.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 3786 IP address blocks: 23.219.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f4:38:34:13:37:00:e7:01:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=89e5e6ac-98d0-4745-912c-b5dc6ef86989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:88:a6:57:78:3c:17:00:35:37:5e:bd:5b:f2: 06:ae:75:b5:e4:4e:ca:ef:a5:2c:ba:55:29:cc:60: 52:e0:d0:67:90:5d:f0:bc:c5:34:8e:80:8a:5b:20: c4:53:04:1a:f4:96:96:26:18:00:1a:45:cc:f3:36: 49:d8:8e:93:b6:4b:e0:7a:c6:8d:2a:2f:20:91:d7: ba:e9:1a:03:5b:ca:67:0d:97:8b:02:91:b5:f2:bf: cc:3f:ae:d5:f0:06:55:0d:55:87:31:1a:2e:e8:44: 20:8d:b8:8e:63:3d:a6:f2:69:5f:20:b7:19:49:8f: dc:2a:f6:f9:94:40:93:6f:3c:5a:c3:01:35:c0:94: 11:3c:2f:17:9b:ee:31:cf:a9:3d:55:ba:87:7b:6e: 15:9d:f0:1f:85:dc:1e:d2:0d:97:83:9f:56:d3:ab: 0d:04:29:bf:2d:5c:71:85:21:29:58:8d:64:55:2b: 0c:67:98:d9:e1:68:ff:cd:cf:e2:49:50:8f:2d:10: b7:d9:51:5a:f9:78:a1:71:e7:8f:81:7a:99:e6:ef: bb:fc:5f:85:89:6b:66:66:a0:7a:fe:65:e5:41:17: 55:74:5c:ea:f6:d4:a7:10:0c:aa:49:43:cf:3c:ed: b1:16:41:35:57:55:d4:a3:f2:b3:05:29:75:15:51: 24:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9F:A4:19:FB:C6:16:87:C4:F0:33:32:81:E2:C7:F1:68:65:F2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/072c410a-d706-39ef-b01c-9f81f164a15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c6:4f:84:a0:09:0f:80:71:e5:dc:21:7c:ab:7c:e2:e6:79: ee:ef:8e:ef:d3:ff:87:2d:92:7d:e8:06:f8:06:4c:f5:dc:a6: a8:2e:32:93:a1:cd:94:1e:2f:08:9d:d8:f4:60:42:63:33:45: 29:32:19:37:c6:b9:c8:40:4d:6b:b1:89:04:f8:3f:62:6d:b9: fe:bb:8c:17:ae:ff:42:95:81:9b:1d:0f:0e:d1:34:50:f0:75: bf:df:1a:ba:dc:9a:af:a3:93:3d:0e:92:76:ea:de:ed:07:1c: c7:bd:1a:b1:8b:9c:45:1f:54:69:61:a6:b5:c5:a6:7a:a6:f2: 74:1f:f7:87:b8:52:a1:37:28:42:4d:f4:6e:a4:ee:fd:29:52: 6d:22:89:d8:64:89:3d:fa:81:f4:60:99:ad:00:f8:11:10:92: c2:bd:a2:f3:5e:c5:50:08:45:53:db:72:fa:11:df:7f:69:3f: 01:ea:1f:36:2b:23:94:eb:35:31:88:60:53:8e:ed:74:0f:b8: a4:75:cb:c4:14:9d:f8:15:64:a3:ff:a6:00:fc:3b:f3:5e:cd: 39:45:76:80:90:93:da:85:ce:a0:0a:9a:ef:15:14:ab:cd:ac: 27:74:4c:3a:78:1a:5a:aa:3e:39:4a:1d:4a:db:27:d3:3b:f1: 61:b9:3d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvQ4NBM3AOcBpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ODllNWU2YWMtOThkMC00NzQ1LTkxMmMtYjVkYzZlZjg2OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoimV3g8FwA1N169W/IGrnW15E7K76UsulUp zGBS4NBnkF3wvMU0joCKWyDEUwQa9JaWJhgAGkXM8zZJ2I6TtkvgesaNKi8gkde6 6RoDW8pnDZeLApG18r/MP67V8AZVDVWHMRou6EQgjbiOYz2m8mlfILcZSY/cKvb5 lECTbzxawwE1wJQRPC8Xm+4xz6k9VbqHe24VnfAfhdwe0g2Xg59W06sNBCm/LVxx hSEpWI1kVSsMZ5jZ4Wj/zc/iSVCPLRC32VFa+XihceePgXqZ5u+7/F+FiWtmZqB6 /mXlQRdVdFzq9tSnEAyqSUPPPO2xFkE1V1XUo/KzBSl1FVEkzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+fpBn7xhaHxPAzMoHix/FoZfKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDcyYzQxMGEtZDcwNi0z OWVmLWIwMWMtOWY4MWYxNjRhMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9sQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7GT4SgCQ+AceXcIXyrfOLmee7vju/T/4ctkn3oBvgGTPXcpqguMpOh zZQeLwid2PRgQmMzRSkyGTfGuchATWuxiQT4P2Jtuf67jBeu/0KVgZsdDw7RNFDw db/fGrrcmq+jkz0Oknbq3u0HHMe9GrGLnEUfVGlhprXFpnqm8nQf94e4UqE3KEJN 9G6k7v0pUm0iidhkiT36gfRgma0A+BEQksK9ovNexVAIRVPbcvoR339pPwHqHzYr I5TrNTGIYFOO7XQPuKR1y8QUnfgVZKP/pgD8O/NezTlFdoCQk9qFzqAKmu8VFKvN rCd0TDp4GlqqPjlKHUrbJ9M78WG5PWo= -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:35 2025 by rpki-client