$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd75524-b4e1-371c-acca-f7b110225262.roa File: 1dd75524-b4e1-371c-acca-f7b110225262.roa (raw, json) Hash identifier: tqRo7e6xoo3RxibDwBG1Jcf7+jUmtkrjx3n6hk7aB+Y= Subject key identifier: F5:4A:97:19:30:32:4A:B6:63:04:F9:70:70:E2:B6:6B:61:C6:41:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FE544324584CB02532C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd75524-b4e1-371c-acca-f7b110225262.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.217.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fe:54:43:24:58:4c:b0:25:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=1949bf24-bbf9-43f0-b527-2139c07b764d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:50:9c:d8:44:9e:96:6d:92:cc:0f:56:2e: 3c:2d:c7:99:76:7d:e4:96:34:7a:b0:94:c3:b1:19: 25:1a:98:da:23:45:30:80:8a:98:7b:be:2b:96:8a: d7:1e:80:43:98:f7:4b:4f:a8:4c:6e:4d:16:f1:56: 55:4f:42:ba:bb:cd:8d:43:db:9d:72:36:50:c3:25: 74:d2:f3:f0:b1:c5:6a:14:e2:ee:24:f3:7f:32:8a: 76:cf:fe:29:90:0d:d3:f0:c3:7c:8c:23:1c:69:76: c5:f1:8e:3b:71:be:4a:75:04:ac:f9:fa:2c:c1:95: fd:81:2b:62:7c:48:55:00:e7:10:e9:b9:eb:32:be: d9:95:e0:23:cb:88:e9:d7:cd:e5:48:f8:18:bc:ed: 2e:84:08:68:b1:90:65:6a:a4:d1:3c:f0:da:37:fc: 79:d1:36:b1:a3:e7:54:90:f5:83:f8:02:c0:19:1d: e9:aa:96:ec:07:08:0f:b3:24:50:23:59:92:dd:d1: 37:ef:80:a5:2e:d6:f6:ee:73:e0:8c:09:0e:c0:01: 00:09:ae:ba:15:93:d1:6d:31:38:9a:7c:ef:0e:cd: fc:d2:49:a7:52:80:ae:68:d9:2d:a3:53:4d:7d:04: ec:68:dd:02:67:6e:85:a2:04:fe:f7:5c:3b:ca:d9: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4A:97:19:30:32:4A:B6:63:04:F9:70:70:E2:B6:6B:61:C6:41:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1dd75524-b4e1-371c-acca-f7b110225262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:32:37:9e:ad:ef:b6:ea:56:75:35:c8:ba:06:77:37:87:47: 9e:2f:77:1d:08:fa:2a:d3:11:30:9b:02:0d:d3:9d:2a:2e:7a: b3:0a:85:2a:13:60:57:0c:03:53:cd:91:c3:b8:50:9e:b6:50: 96:70:bd:75:85:ef:00:d2:be:02:ea:53:9c:37:da:24:9c:54: 80:1b:b2:cd:60:6d:18:21:24:91:fa:4e:c0:9e:25:d0:fd:83: f0:a4:15:27:7e:4b:e5:8c:aa:66:d2:e5:a1:10:1c:6e:93:be: 6a:71:64:4a:c1:0a:7c:7f:b9:4b:b6:5f:ee:64:6e:bb:2c:e7: e7:1f:eb:37:1b:8f:78:ea:53:95:84:fd:32:f4:b8:c9:b7:1a: 11:d7:e6:79:55:70:49:70:0d:6a:db:73:e1:22:95:2a:6e:47: 17:b8:b4:3e:51:4e:55:62:4f:84:da:f7:10:bf:f8:82:9f:2d: 8d:a0:e9:94:63:94:32:7e:98:20:73:37:ea:83:41:7a:47:a2: 52:9d:6c:94:9e:9c:8a:35:de:ff:18:46:46:3d:92:d1:af:d2: 24:28:a3:fc:62:76:0e:c8:7e:c9:5d:5c:25:b2:d2:c1:ee:a5: 55:35:92:86:c2:d3:09:ca:42:2b:07:19:7f:6b:e4:40:04:52: 09:fb:b2:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0f5UQyRYTLAlMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MTk0OWJmMjQtYmJmOS00M2YwLWI1MjctMjEzOWMwN2I3NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4FQnNhEnpZtkswPVi48LceZdn3kljR6sJTD sRklGpjaI0UwgIqYe74rlorXHoBDmPdLT6hMbk0W8VZVT0K6u82NQ9udcjZQwyV0 0vPwscVqFOLuJPN/Mop2z/4pkA3T8MN8jCMcaXbF8Y47cb5KdQSs+foswZX9gSti fEhVAOcQ6bnrMr7ZleAjy4jp183lSPgYvO0uhAhosZBlaqTRPPDaN/x50Taxo+dU kPWD+ALAGR3pqpbsBwgPsyRQI1mS3dE374ClLtb27nPgjAkOwAEACa66FZPRbTE4 mnzvDs380kmnUoCuaNkto1NNfQTsaN0CZ26FogT+91w7ytmrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVKlxkwMkq2YwT5cHDitmthxkG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWRkNzU1MjQtYjRlMS0z NzFjLWFjY2EtZjdiMTEwMjI1MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYyN56t77bqVnU1yLoGdzeHR54vdx0I+irTETCbAg3TnSouerMKhSoT YFcMA1PNkcO4UJ62UJZwvXWF7wDSvgLqU5w32iScVIAbss1gbRghJJH6TsCeJdD9 g/CkFSd+S+WMqmbS5aEQHG6TvmpxZErBCnx/uUu2X+5kbrss5+cf6zcbj3jqU5WE /TL0uMm3GhHX5nlVcElwDWrbc+EilSpuRxe4tD5RTlViT4Ta9xC/+IKfLY2g6ZRj lDJ+mCBzN+qDQXpHolKdbJSenIo13v8YRkY9ktGv0iQoo/xidg7IfsldXCWy0sHu pVU1kobC0wnKQisHGX9r5EAEUgn7su8= -----END CERTIFICATE-----Generated at Mon Oct 20 05:07:41 2025 by rpki-client