$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08ae3e03-4c71-3bf2-a252-cdb18c5d3bf6.roa File: 08ae3e03-4c71-3bf2-a252-cdb18c5d3bf6.roa (raw, json) Hash identifier: kGz52PhM+PoJo2nIRU4uByX7pRxFoN9oqv0wZDPKl2w= Subject key identifier: D4:61:C1:6C:13:A8:F0:C1:81:29:DD:C6:91:D6:F5:8A:1A:37:6B:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FC9E9A2812D895E34F8D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08ae3e03-4c71-3bf2-a252-cdb18c5d3bf6.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.218.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9e:9a:28:12:d8:95:e3:4f:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=14801df6-3291-4faa-a2c5-7b8179084d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a6:3b:42:6f:07:2a:66:19:b9:62:a2:cd:c4: ff:fa:d3:70:b7:85:7e:7e:5f:c7:b2:42:06:27:16: 7c:50:b4:c8:e8:ab:ed:cb:7a:87:15:7e:43:b0:0e: b6:1d:cc:0b:61:00:42:9b:91:3b:10:3a:7e:ce:db: 4a:c0:2a:ec:86:e7:70:ca:89:5c:8c:ef:94:32:f6: cf:4e:d6:91:63:c6:27:34:d0:35:d2:90:86:d8:26: 13:dc:8a:12:f3:d3:a7:7d:bd:be:d4:d2:a3:b9:b4: 6b:37:fd:5b:50:91:77:ee:d9:e6:46:55:00:1b:e1: 07:d0:76:1e:8c:75:27:8e:af:88:c3:7d:56:ff:c9: a8:97:85:de:e0:a4:56:08:5f:e9:9a:b5:35:12:12: 19:91:8c:af:80:64:b5:77:91:a6:d2:a2:14:1a:ff: 1e:4d:46:57:ac:6f:1f:68:52:d0:f3:1b:80:48:79: 1c:05:a5:c9:41:9b:ae:88:e6:c7:0a:68:c1:fe:bd: d6:25:2e:92:e9:b9:6b:b8:b1:73:13:1b:be:1e:67: 43:80:f1:e5:8b:ae:5d:30:c0:05:17:67:5e:0d:18: ce:d8:3f:b6:33:5b:52:b4:01:98:e6:e2:52:52:12: fe:60:29:f5:88:64:9b:f7:95:98:3f:88:2f:e7:59: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:61:C1:6C:13:A8:F0:C1:81:29:DD:C6:91:D6:F5:8A:1A:37:6B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/08ae3e03-4c71-3bf2-a252-cdb18c5d3bf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:82:22:d1:90:6f:36:1d:98:24:ac:97:d3:1f:d5:ac:74:37: 3f:e7:62:64:e4:47:74:9e:ed:d9:5b:0f:0f:93:dc:53:99:9a: 57:81:ad:8c:fe:86:ad:5f:6b:29:ff:27:0a:f3:79:5b:58:97: 95:99:a8:4e:d7:59:1f:55:0c:a1:5f:d2:8c:aa:75:0a:3b:d5: 4b:67:c1:7b:17:4d:63:75:c9:f7:b5:f1:e0:e5:94:1b:06:f5: f5:e1:18:18:38:41:3a:1d:3e:fb:3f:83:78:f8:6d:99:19:e9: dc:87:e9:ab:0e:7d:6e:ac:93:90:15:d7:20:7b:18:f5:f7:71: 33:ad:be:10:88:4a:7c:9a:bd:23:74:b7:4d:9a:92:28:19:7b: e6:d4:a5:d0:17:1f:23:2f:df:87:48:d4:1a:e3:67:80:45:02: 03:aa:fb:44:a4:f4:b8:4b:29:9c:cb:45:ec:da:22:7a:af:b5: 13:a6:aa:a7:61:40:ed:6d:c2:8e:44:13:10:04:6e:a6:73:76: 7c:37:7c:99:99:59:15:f6:d6:ec:4d:6e:1a:49:07:02:1a:49: 08:99:8c:75:26:58:c7:3b:f7:a2:ec:52:fc:eb:45:37:6c:9a: 25:1f:6b:91:cf:ca:17:bd:c4:c5:cc:25:04:c8:59:f9:79:d9: c2:cf:8b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J6aKBLYleNPjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk MTQ4MDFkZjYtMzI5MS00ZmFhLWEyYzUtN2I4MTc5MDg0ZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKY7Qm8HKmYZuWKizcT/+tNwt4V+fl/HskIG JxZ8ULTI6Kvty3qHFX5DsA62HcwLYQBCm5E7EDp+zttKwCrshudwyolcjO+UMvbP TtaRY8YnNNA10pCG2CYT3IoS89Onfb2+1NKjubRrN/1bUJF37tnmRlUAG+EH0HYe jHUnjq+Iw31W/8mol4Xe4KRWCF/pmrU1EhIZkYyvgGS1d5Gm0qIUGv8eTUZXrG8f aFLQ8xuASHkcBaXJQZuuiObHCmjB/r3WJS6S6blruLFzExu+HmdDgPHli65dMMAF F2deDRjO2D+2M1tStAGY5uJSUhL+YCn1iGSb95WYP4gv51lzDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRhwWwTqPDBgSndxpHW9YoaN2uXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDhhZTNlMDMtNGM3MS0z YmYyLWEyNTItY2RiMThjNWQzYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOCItGQbzYdmCSsl9Mf1ax0Nz/nYmTkR3Se7dlbDw+T3FOZmleBrYz+ hq1fayn/JwrzeVtYl5WZqE7XWR9VDKFf0oyqdQo71UtnwXsXTWN1yfe18eDllBsG 9fXhGBg4QTodPvs/g3j4bZkZ6dyH6asOfW6sk5AV1yB7GPX3cTOtvhCISnyavSN0 t02akigZe+bUpdAXHyMv34dI1BrjZ4BFAgOq+0Sk9LhLKZzLRezaInqvtROmqqdh QO1two5EExAEbqZzdnw3fJmZWRX21uxNbhpJBwIaSQiZjHUmWMc796LsUvzrRTds miUfa5HPyhe9xMXMJQTIWfl52cLPi1Y= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:04 2025 by rpki-client