$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16868f13-93a4-362d-9d0d-8b3141debb0b.roa File: 16868f13-93a4-362d-9d0d-8b3141debb0b.roa (raw, json) Hash identifier: ITYGPLNNko0591ii5/gAvRptxGpneL+Vg3WC/P5azmk= Subject key identifier: 42:AD:29:26:56:AB:C7:2C:8D:BA:3D:71:20:80:F2:95:77:2F:5E:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07574400BE66B27852A58E Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16868f13-93a4-362d-9d0d-8b3141debb0b.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.213.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:57:44:00:be:66:b2:78:52:a5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=0f0a3511-bb03-4f94-93ce-e4be33f19ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:e3:02:ad:05:a2:66:18:2b:c2:a3:19:f2: bf:36:76:df:b3:1c:97:63:8b:84:5e:50:d3:6d:12: 4a:01:f3:2c:0b:45:85:b1:46:82:04:5c:4b:6e:ad: 2a:10:9c:30:e2:55:4e:a4:32:eb:44:9c:2f:b8:8e: 01:c1:e6:c4:ea:35:95:c1:ac:e2:37:00:d4:4c:d3: 28:6a:32:18:2d:54:32:72:2e:9d:7d:c6:7a:e0:98: a4:c0:f9:78:0d:7c:bc:c1:a1:30:7d:a9:99:cd:61: 3a:ca:cb:96:ca:db:7e:4c:d2:f8:d8:6d:ba:24:06: 34:97:6b:e2:4f:b3:f9:3f:80:58:37:f7:60:c2:03: 32:7c:bf:e6:bc:79:a3:b4:e4:d4:8e:42:46:e2:54: e0:e4:31:89:51:b3:8d:92:75:99:ce:59:ec:49:8f: ec:ae:38:c8:9f:18:ea:98:cf:a5:12:f0:8a:63:00: 3d:6d:9d:29:eb:70:44:42:b8:4d:da:68:e5:f9:b4: a1:c5:5b:06:04:b8:47:18:87:45:88:0e:7c:df:86: 8b:8c:48:e0:b9:11:77:04:d9:06:01:ec:69:7a:a3: 4c:8b:17:f7:be:1e:62:bd:86:b4:05:8f:ca:58:90: 48:b9:6e:e7:be:18:0d:5c:61:ed:dd:d6:27:89:80: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:29:26:56:AB:C7:2C:8D:BA:3D:71:20:80:F2:95:77:2F:5E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16868f13-93a4-362d-9d0d-8b3141debb0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fc:b5:39:2d:61:9f:4a:7c:6c:47:6e:76:6f:ab:c4:fb:03: e3:4f:af:4c:b2:c0:63:44:27:75:d3:fb:fa:b5:65:66:f9:27: 42:fc:ed:df:c5:a7:f5:a2:5b:b0:46:1c:53:50:f6:e5:30:c8: 29:cc:d3:0a:92:b9:22:86:48:80:4e:7d:b2:f3:3d:62:83:76: c5:a5:58:cb:5e:7d:a9:13:6b:45:47:59:00:e6:2d:de:85:0a: 62:12:f6:88:b1:df:6d:57:f7:40:2d:b6:8c:7b:ae:d1:f6:a1: b8:84:6c:6e:c8:31:af:b8:df:d7:f7:3e:5b:6e:28:37:ea:2b: 0f:7d:60:ac:06:da:96:bc:4f:9c:bb:df:2a:1e:7b:07:e8:8e: 33:20:11:2f:72:f5:a1:6a:76:3c:0b:fb:0e:80:30:9b:67:11: 17:f3:27:47:96:85:15:3f:dc:af:2c:17:fa:5b:70:78:a4:30: 55:4e:df:b6:d7:9b:be:1b:e1:6d:c2:8c:7e:73:e8:2f:04:d2: fb:c3:8b:bc:70:6d:12:2b:1b:90:b1:52:53:ab:c8:53:b5:f3: 40:5d:7b:25:01:58:cb:34:7c:9d:76:03:aa:9f:f3:ac:03:cc: cf:15:bb:c0:d0:d7:51:3c:c1:28:cd:8f:7a:31:dc:f1:8b:2b: f3:2d:e7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1dEAL5msnhSpY4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MGYwYTM1MTEtYmIwMy00Zjk0LTkzY2UtZTRiZTMzZjE5ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCTjAq0FomYYK8KjGfK/NnbfsxyXY4uEXlDT bRJKAfMsC0WFsUaCBFxLbq0qEJww4lVOpDLrRJwvuI4BwebE6jWVwaziNwDUTNMo ajIYLVQyci6dfcZ64JikwPl4DXy8waEwfamZzWE6ysuWytt+TNL42G26JAY0l2vi T7P5P4BYN/dgwgMyfL/mvHmjtOTUjkJG4lTg5DGJUbONknWZzlnsSY/srjjInxjq mM+lEvCKYwA9bZ0p63BEQrhN2mjl+bShxVsGBLhHGIdFiA5834aLjEjguRF3BNkG AexpeqNMixf3vh5ivYa0BY/KWJBIuW7nvhgNXGHt3dYniYBNRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKtKSZWq8csjbo9cSCA8pV3L157MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY4NjhmMTMtOTNhNC0z NjJkLTlkMGQtOGIzMTQxZGViYjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb8tTktYZ9KfGxHbnZvq8T7A+NPr0yywGNEJ3XT+/q1ZWb5J0L87d/F p/WiW7BGHFNQ9uUwyCnM0wqSuSKGSIBOfbLzPWKDdsWlWMtefakTa0VHWQDmLd6F CmIS9oix321X90Attox7rtH2obiEbG7IMa+439f3PltuKDfqKw99YKwG2pa8T5y7 3yoeewfojjMgES9y9aFqdjwL+w6AMJtnERfzJ0eWhRU/3K8sF/pbcHikMFVO37bX m74b4W3CjH5z6C8E0vvDi7xwbRIrG5CxUlOryFO180BdeyUBWMs0fJ12A6qf86wD zM8Vu8DQ11E8wSjNj3ox3PGLK/Mt52M= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:55 2025 by rpki-client