$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09593d82-d76c-3a3d-a550-8de087bb2e76.roa File: 09593d82-d76c-3a3d-a550-8de087bb2e76.roa (raw, json) Hash identifier: dBXcVd+zVWE2KPTn0X7UX47cTLERP+MXbawLzc7bMvc= Subject key identifier: 3D:26:DC:88:78:22:22:0F:B3:2C:40:C5:E0:19:0A:E9:E2:10:5B:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B33F1AAD7BCE81153A0E4EE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09593d82-d76c-3a3d-a550-8de087bb2e76.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 55836 IP address blocks: 23.218.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:aa:d7:bc:e8:11:53:a0:e4:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=850cda9f-965c-4a4d-9b02-0172cf13efa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8a:9c:54:a3:22:d4:19:8f:18:20:54:bc:43: d9:3b:c7:a0:21:87:a3:a8:04:00:ba:35:52:50:9f: 7b:50:53:bb:13:da:26:c0:86:d8:93:26:93:b7:3c: 3c:e9:88:d4:9e:a6:cd:89:91:9c:30:3d:1a:77:92: 76:70:1d:e5:1b:74:fc:65:cc:3e:ac:52:f4:45:7e: aa:7a:63:5f:22:f5:b1:e6:21:c9:56:4d:99:ee:a1: 19:1d:de:80:bb:e0:9a:da:b8:fa:d4:f2:df:47:0e: 93:1e:04:df:cc:2c:9f:8f:03:b5:39:9f:66:d6:e6: af:60:dc:4e:b8:b3:19:70:6c:26:e0:db:80:3b:d8: b5:17:de:13:2b:bd:c7:dc:a5:b5:68:3e:52:34:24: 7c:3e:94:c8:7d:b4:62:84:ea:21:dc:09:40:ec:9d: 3f:86:52:7e:76:4f:12:9e:22:17:8f:62:2c:f4:f8: 26:7c:65:e0:5a:fa:96:94:f9:6a:f9:2b:28:84:96: 3f:eb:18:cd:b3:a8:83:48:cb:8d:4a:54:33:9d:de: 16:c5:e3:3c:fa:2a:9a:a9:83:0d:12:f9:95:88:64: 0a:86:e2:9f:4c:56:da:0f:cc:5e:d8:eb:50:11:f4: e7:88:88:c8:87:ee:f5:29:ab:8e:81:09:a7:1d:15: da:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:26:DC:88:78:22:22:0F:B3:2C:40:C5:E0:19:0A:E9:E2:10:5B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09593d82-d76c-3a3d-a550-8de087bb2e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f9:9c:41:88:4d:3f:c0:60:1c:5f:63:7f:5d:b1:06:ff:28: 9f:50:61:4f:a6:66:74:6f:c2:22:87:bc:c3:c1:09:9b:9a:a9: df:df:30:10:a9:ee:d9:ec:23:68:4c:ba:29:e2:9f:64:28:34: a1:9f:30:79:ba:4b:6b:cc:61:67:f8:06:de:d5:02:24:01:b1: 41:14:ce:4f:c7:c5:12:48:62:24:cd:8d:0e:5f:9d:e6:61:f3: 5d:87:c2:25:a6:4f:fe:b3:75:5a:bf:8f:70:ca:2d:82:8a:e5: e3:a9:80:5f:d3:2a:9d:f1:5a:d4:74:9a:3b:2f:04:7d:75:bd: cd:8d:16:bd:22:f4:d2:8e:d1:24:ff:41:47:95:7a:4a:fe:8a: 94:e9:70:39:79:ba:ce:36:9b:e4:4f:d1:8a:ec:84:e8:c8:c8: 8a:d6:c1:7c:24:91:a0:95:c3:b9:36:d8:69:3b:b9:49:e3:f1: aa:c0:47:30:54:44:a6:21:e3:e0:fc:4c:98:74:32:7f:75:20: 7f:88:ec:f5:aa:13:9a:ee:ec:30:b2:ac:d1:ba:5c:d5:00:f0: a0:d6:7f:f5:f0:df:43:8d:d2:a3:67:b6:2d:2d:b2:1f:18:59: 22:43:75:36:ab:36:85:b5:34:bc:ec:bc:19:61:67:17:04:67: b3:e6:2c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8arXvOgRU6Dk7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk ODUwY2RhOWYtOTY1Yy00YTRkLTliMDItMDE3MmNmMTNlZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoqcVKMi1BmPGCBUvEPZO8egIYejqAQAujVS UJ97UFO7E9omwIbYkyaTtzw86YjUnqbNiZGcMD0ad5J2cB3lG3T8Zcw+rFL0RX6q emNfIvWx5iHJVk2Z7qEZHd6Au+Ca2rj61PLfRw6THgTfzCyfjwO1OZ9m1uavYNxO uLMZcGwm4NuAO9i1F94TK73H3KW1aD5SNCR8PpTIfbRihOoh3AlA7J0/hlJ+dk8S niIXj2Is9PgmfGXgWvqWlPlq+SsohJY/6xjNs6iDSMuNSlQznd4WxeM8+iqaqYMN EvmViGQKhuKfTFbaD8xe2OtQEfTniIjIh+71KauOgQmnHRXa0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0m3Ih4IiIPsyxAxeAZCuniEFuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDk1OTNkODItZDc2Yy0z YTNkLWE1NTAtOGRlMDg3YmIyZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9pUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb5nEGITT/AYBxfY39dsQb/KJ9QYU+mZnRvwiKHvMPBCZuaqd/fMBCp 7tnsI2hMuinin2QoNKGfMHm6S2vMYWf4Bt7VAiQBsUEUzk/HxRJIYiTNjQ5fneZh 812HwiWmT/6zdVq/j3DKLYKK5eOpgF/TKp3xWtR0mjsvBH11vc2NFr0i9NKO0ST/ QUeVekr+ipTpcDl5us42m+RP0YrshOjIyIrWwXwkkaCVw7k22Gk7uUnj8arARzBU RKYh4+D8TJh0Mn91IH+I7PWqE5ru7DCyrNG6XNUA8KDWf/Xw30ON0qNnti0tsh8Y WSJDdTarNoW1NLzsvBlhZxcEZ7PmLCs= -----END CERTIFICATE-----Generated at Mon Oct 20 04:35:18 2025 by rpki-client