$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114992f9-18ba-3de0-88ed-3d23f7e95654.roa File: 114992f9-18ba-3de0-88ed-3d23f7e95654.roa (raw, json) Hash identifier: V21zIu7edOkGpV/7maUSoPxryAuNuVeIitoYZM2BF48= Subject key identifier: 1D:EF:38:8A:7C:B0:CB:AA:3F:C1:3C:70:0C:53:3D:80:DA:CA:8E:BC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075CEEB4F43C062F245E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114992f9-18ba-3de0-88ed-3d23f7e95654.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.211.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5c:ee:b4:f4:3c:06:2f:24:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=07d794d7-c6ba-44fc-8da4-3bda444b106c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b6:d5:0b:fd:77:65:1e:83:d1:33:ad:75:39: 35:b3:a6:60:e7:17:4d:f1:eb:d8:e8:0a:3b:73:10: 7a:cd:8c:3d:12:8b:9a:39:65:13:3b:f7:c2:2f:ca: f1:bd:b8:e0:b8:ca:c4:55:43:87:1b:85:10:7c:16: 13:d0:f3:40:81:af:a2:9d:a5:17:43:d5:27:05:99: 0c:2a:82:24:24:c0:b6:81:09:19:53:5b:89:5e:eb: 00:cf:4e:70:dc:0a:0b:27:6f:7a:fe:ba:0e:0c:cf: e1:4e:8e:73:db:8e:fa:6d:68:ee:7d:d2:1e:23:bc: dd:61:4f:d8:5b:85:01:60:7b:57:61:0f:e9:03:ca: 2a:78:89:56:19:f7:2c:d3:f8:3c:91:79:33:1c:de: da:91:e9:ad:1e:43:92:2a:c5:90:d9:1f:1e:38:8c: 97:53:cb:da:e2:c5:13:f8:39:77:02:f1:1b:e8:fc: 8e:9e:a6:99:02:a2:3c:c0:b6:46:00:cf:43:4c:5a: e6:89:25:91:22:6a:c3:84:03:e4:a7:04:f7:06:1e: 7d:c2:81:ed:fc:4f:12:3b:25:b6:64:69:79:63:a7: 21:53:7f:ef:25:08:15:49:76:46:1f:57:8d:a7:12: 32:c2:5e:4b:e6:95:64:35:01:b4:f3:65:9f:f0:ab: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EF:38:8A:7C:B0:CB:AA:3F:C1:3C:70:0C:53:3D:80:DA:CA:8E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/114992f9-18ba-3de0-88ed-3d23f7e95654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:14:11:7e:d2:0c:23:10:cc:a6:53:78:d6:55:4d:75:fe:3b: 2c:01:37:6d:ef:a8:0f:83:c5:38:ac:25:8e:50:7c:67:c9:21: ce:1e:fe:06:39:dd:92:f6:df:3c:da:99:83:3c:4a:50:45:7f: 6b:be:c7:6e:3d:33:57:ad:f5:2b:87:bf:cc:73:ea:0d:41:e0: 26:d4:20:24:77:e2:a4:76:89:74:90:51:4c:e3:73:51:f2:c6: fe:26:bd:3f:ed:24:50:f5:b9:30:df:7e:e2:78:3f:3b:9c:65: bb:fd:d0:fb:ee:b5:7e:32:72:55:5a:13:f6:ac:e4:6f:58:96: 1b:98:77:ae:ab:da:3e:1b:13:85:4a:08:d7:34:11:70:37:50: 5a:2b:c5:87:07:ed:ba:23:99:29:68:da:bc:16:cf:a7:8c:6e: 5c:4d:43:ec:0f:ed:3f:d4:86:6d:66:01:59:ea:f9:7a:63:ad: af:e1:03:28:6a:a1:74:6a:dd:af:f5:fa:27:30:71:bf:fb:34: ae:76:83:29:53:98:3f:12:4b:f4:97:4b:d7:cf:f3:75:e6:ae: 24:d3:cd:04:10:ce:07:bb:06:a5:7f:bd:03:d2:ee:da:bf:8c: ad:cb:18:82:8e:50:4d:e5:b1:f6:cb:20:a4:d6:d7:e9:6b:e4: a2:0a:f1:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1zutPQ8Bi8kXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MDdkNzk0ZDctYzZiYS00NGZjLThkYTQtM2JkYTQ0NGIxMDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37bVC/13ZR6D0TOtdTk1s6Zg5xdN8evY6Ao7 cxB6zYw9EouaOWUTO/fCL8rxvbjguMrEVUOHG4UQfBYT0PNAga+inaUXQ9UnBZkM KoIkJMC2gQkZU1uJXusAz05w3AoLJ296/roODM/hTo5z2476bWjufdIeI7zdYU/Y W4UBYHtXYQ/pA8oqeIlWGfcs0/g8kXkzHN7akemtHkOSKsWQ2R8eOIyXU8va4sUT +Dl3AvEb6PyOnqaZAqI8wLZGAM9DTFrmiSWRImrDhAPkpwT3Bh59woHt/E8SOyW2 ZGl5Y6chU3/vJQgVSXZGH1eNpxIywl5L5pVkNQG082Wf8Kt1RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3vOIp8sMuqP8E8cAxTPYDayo68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTE0OTkyZjktMThiYS0z ZGUwLTg4ZWQtM2QyM2Y3ZTk1NjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9OMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgUEX7SDCMQzKZTeNZVTXX+OywBN23vqA+DxTisJY5QfGfJIc4e/gY5 3ZL23zzamYM8SlBFf2u+x249M1et9SuHv8xz6g1B4CbUICR34qR2iXSQUUzjc1Hy xv4mvT/tJFD1uTDffuJ4PzucZbv90PvutX4yclVaE/as5G9YlhuYd66r2j4bE4VK CNc0EXA3UForxYcH7bojmSlo2rwWz6eMblxNQ+wP7T/Uhm1mAVnq+Xpjra/hAyhq oXRq3a/1+icwcb/7NK52gylTmD8SS/SXS9fP83XmriTTzQQQzge7BqV/vQPS7tq/ jK3LGIKOUE3lsfbLIKTW1+lr5KIK8Xk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:33 2025 by rpki-client