$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8fd083-3a30-3525-9a9a-b010cb3a57c5.roa File: 1b8fd083-3a30-3525-9a9a-b010cb3a57c5.roa (raw, json) Hash identifier: eQMuqFxNV9ku/7Qsjw7vI03zlQmcMB3lnZQ4zvpJj0g= Subject key identifier: 6E:03:44:60:77:CE:9D:87:5C:21:18:61:63:E9:2B:8C:11:63:F9:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FCB7BCF984403F4EB280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8fd083-3a30-3525-9a9a-b010cb3a57c5.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.216.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fc:b7:bc:f9:84:40:3f:4e:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=2e28da8c-a515-4881-8319-19a626e51010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:43:f0:53:67:14:55:3e:01:12:0a:13:bd: 03:9c:73:7e:9c:4d:6a:c3:f9:ff:1f:df:2b:31:f7: b0:5f:a6:14:8b:a5:27:d9:1c:06:34:6f:73:17:6b: 03:1d:ae:a2:df:db:19:0d:91:8e:21:19:fb:33:ae: e5:59:9e:3b:d6:bf:fc:e1:7b:89:4a:ce:2d:36:84: f1:d7:8b:78:1f:8f:84:a2:a5:33:b6:60:6a:2a:10: f1:e0:1c:94:51:d9:0f:2f:39:46:a7:41:92:3e:ee: f6:02:a0:52:89:47:c0:5f:04:9d:01:a2:51:de:ff: 63:a2:50:63:3e:ac:4f:e1:b3:af:86:d5:82:72:64: a5:dd:36:0c:f8:5c:99:e0:0e:6a:ab:14:24:7c:ed: 37:2c:bc:9c:b0:d6:43:9e:cd:43:ec:3e:c5:d0:e9: 26:03:33:6a:55:16:8f:e4:e6:03:00:64:8f:49:24: fa:cb:49:7d:ff:04:64:76:43:a7:69:b4:49:6a:b9: a8:1b:94:ef:4e:47:6f:9b:e8:18:50:bf:04:f2:d8: bd:fe:f2:e2:0a:10:fe:ec:45:58:aa:8a:fa:1b:84: 3f:6f:cb:04:6d:93:c2:f2:d7:7d:e9:db:b4:7f:b4: 58:35:8f:b9:24:cf:bc:c2:db:ae:ee:15:4a:b9:08: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:03:44:60:77:CE:9D:87:5C:21:18:61:63:E9:2B:8C:11:63:F9:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8fd083-3a30-3525-9a9a-b010cb3a57c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:d6:e7:66:5c:15:d7:ad:39:99:96:ef:69:60:11:d9:a1:a0: 83:0c:2b:e4:40:3f:61:40:14:49:24:15:d4:d2:98:06:87:b1: 18:c9:fd:4a:cd:d9:9b:2f:ff:20:27:e7:7d:b9:8d:6a:aa:cb: aa:2c:f7:71:bd:1f:74:91:8a:6a:7c:30:df:17:3a:3e:60:58: 23:4d:ae:c2:af:9a:05:03:1a:ff:f3:b2:f1:6b:db:0d:ec:49: 21:f1:57:2c:35:f1:bf:b9:58:bf:fc:fc:5e:b2:58:18:ae:4d: 9a:6d:5f:f8:c5:af:62:fd:e7:35:3d:7d:ea:61:0e:44:26:9d: b9:b8:d0:78:20:5a:f7:f7:f0:fa:56:35:88:26:b4:3d:54:cb: b2:d1:0c:14:89:93:66:71:64:cd:eb:f3:04:be:71:58:4e:3b: 7f:b9:3e:0c:16:3f:8d:46:b2:96:85:9e:79:85:c3:9f:f8:6d: 74:97:ed:21:32:b8:6f:c4:46:6b:e5:8b:c9:1b:b3:c9:2c:5f: e2:0a:87:26:23:ba:ef:bb:d8:92:c4:82:e2:65:83:e7:95:32: a4:4a:05:76:68:65:d7:9f:43:42:87:0c:b6:a5:d3:70:d3:6e: ed:ec:29:d2:86:e2:da:e8:80:c8:f6:64:75:d3:76:df:54:98: f2:29:18:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fy3vPmEQD9OsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MmUyOGRhOGMtYTUxNS00ODgxLTgzMTktMTlhNjI2ZTUxMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3pD8FNnFFU+ARIKE70DnHN+nE1qw/n/H98r MfewX6YUi6Un2RwGNG9zF2sDHa6i39sZDZGOIRn7M67lWZ471r/84XuJSs4tNoTx 14t4H4+EoqUztmBqKhDx4ByUUdkPLzlGp0GSPu72AqBSiUfAXwSdAaJR3v9jolBj PqxP4bOvhtWCcmSl3TYM+FyZ4A5qqxQkfO03LLycsNZDns1D7D7F0OkmAzNqVRaP 5OYDAGSPSST6y0l9/wRkdkOnabRJarmoG5TvTkdvm+gYUL8E8ti9/vLiChD+7EVY qor6G4Q/b8sEbZPC8td96du0f7RYNY+5JM+8wtuu7hVKuQjOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4DRGB3zp2HXCEYYWPpK4wRY/l8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI4ZmQwODMtM2EzMC0z NTI1LTlhOWEtYjAxMGNiM2E1N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXW52ZcFdetOZmW72lgEdmhoIMMK+RAP2FAFEkkFdTSmAaHsRjJ/UrN 2Zsv/yAn5325jWqqy6os93G9H3SRimp8MN8XOj5gWCNNrsKvmgUDGv/zsvFr2w3s SSHxVyw18b+5WL/8/F6yWBiuTZptX/jFr2L95zU9fephDkQmnbm40HggWvf38PpW NYgmtD1Uy7LRDBSJk2ZxZM3r8wS+cVhOO3+5PgwWP41GspaFnnmFw5/4bXSX7SEy uG/ERmvli8kbs8ksX+IKhyYjuu+72JLEguJlg+eVMqRKBXZoZdefQ0KHDLal03DT bu3sKdKG4trogMj2ZHXTdt9UmPIpGBI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:35 2025 by rpki-client