$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa File: 21ef2631-7095-3964-83b6-6ac40b6fb023.roa (raw, json) Hash identifier: vbdn+yWkwBoPRFewi6JccSufAet9AQjm2HiIHUBKkHU= Subject key identifier: A1:3B:6B:A3:E2:9C:C2:7D:1C:7B:5D:46:B0:C5:DD:23:07:72:3F:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3C51A9C1CC56DE83630D9300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.43.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:a9:c1:cc:56:de:83:63:0d:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=bd196a70-3d80-4987-9205-bd99c8e52e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:28:e0:1f:e1:2f:c5:21:c1:12:73:44:11: 5a:2c:8d:82:a6:75:fd:cb:a1:fe:86:65:0b:a1:86: 07:34:72:05:5a:39:b5:be:b9:e2:d6:03:1a:fb:76: a6:8d:6c:6a:10:1a:af:c8:ca:ed:c8:41:dc:40:ca: 0e:98:e7:80:4e:a4:c1:ae:98:cc:bb:a9:c2:86:80: 73:ca:bb:6a:5b:cb:4c:25:8c:3d:31:84:16:8e:2f: df:9d:cf:77:f7:8a:01:9d:27:35:cd:78:35:3a:ab: c0:e4:e7:46:96:de:0e:bb:72:3a:ea:6d:6d:aa:4e: f3:30:d6:80:e2:b2:31:1d:10:9f:fb:36:61:be:c6: 34:04:e4:d0:91:ff:46:5a:41:f9:01:90:10:f8:08: bc:73:5e:ab:1a:1f:f8:27:38:10:01:9e:78:f7:7b: 7f:dc:8b:08:86:77:54:37:fc:e8:02:84:f0:13:40: 30:f3:1b:38:5b:6b:eb:a1:d3:9f:ff:e0:25:ca:f6: 5e:93:68:9d:0f:bd:2b:71:be:04:47:bc:c0:a2:c6: 69:45:1e:f8:ca:b6:b0:06:9b:da:8a:c9:1c:e0:e0: 09:54:9e:39:74:3f:74:56:76:12:46:af:12:87:2c: 6c:6e:af:ba:c8:6a:f9:30:6c:04:6b:92:09:c8:59: 1c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3B:6B:A3:E2:9C:C2:7D:1C:7B:5D:46:B0:C5:DD:23:07:72:3F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21ef2631-7095-3964-83b6-6ac40b6fb023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:35:62:af:bf:0f:9f:71:90:29:13:ff:b0:8c:6b:5e:72:79: 8f:fb:b0:2b:ff:1e:78:3c:e1:ee:58:0d:d3:86:54:bd:5b:58: 7a:af:1d:0e:9d:bd:02:fc:4d:26:ec:ad:7c:85:ad:42:14:a6: a5:10:bf:c0:f4:4c:eb:d5:5b:db:d2:78:92:b2:c5:53:06:6c: 40:8b:8a:bc:92:d1:8b:17:26:e9:1f:d5:5a:41:15:96:32:48: c9:b4:e3:eb:b0:b6:d2:2a:02:58:d7:65:e6:70:e5:9e:94:fa: 33:59:51:bc:11:e1:04:31:f4:97:05:c0:45:86:28:3a:ad:6d: b2:80:64:59:66:d4:36:13:ab:75:07:fd:ec:79:e4:7e:7a:e3: fb:e2:a3:36:02:2d:43:7c:2d:96:6b:50:5b:05:7e:00:a0:24: c5:32:16:2a:d2:8e:5e:64:18:45:64:7b:3b:5f:de:19:07:fe: 47:d4:fb:54:f6:df:84:12:87:f4:ae:8b:b3:1c:1f:80:57:99: 22:65:00:23:92:7a:df:39:85:ad:ff:97:31:88:4e:8a:46:7f: e8:d9:02:e0:62:8f:60:a1:fd:0c:d1:a5:8f:ca:d9:35:23:9f: 6e:1f:cc:84:e1:b7:e2:23:21:47:bd:e2:25:60:1f:ea:32:52: 3e:c7:92:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UanBzFbeg2MNkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk YmQxOTZhNzAtM2Q4MC00OTg3LTkyMDUtYmQ5OWM4ZTUyZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEso4B/hL8UhwRJzRBFaLI2CpnX9y6H+hmUL oYYHNHIFWjm1vrni1gMa+3amjWxqEBqvyMrtyEHcQMoOmOeATqTBrpjMu6nChoBz yrtqW8tMJYw9MYQWji/fnc9394oBnSc1zXg1OqvA5OdGlt4Ou3I66m1tqk7zMNaA 4rIxHRCf+zZhvsY0BOTQkf9GWkH5AZAQ+Ai8c16rGh/4JzgQAZ5493t/3IsIhndU N/zoAoTwE0Aw8xs4W2vrodOf/+AlyvZek2idD70rcb4ER7zAosZpRR74yrawBpva iskc4OAJVJ45dD90VnYSRq8Shyxsbq+6yGr5MGwEa5IJyFkcbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE7a6PinMJ9HHtdRrDF3SMHcj++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFlZjI2MzEtNzA5NS0z OTY0LTgzYjYtNmFjNDBiNmZiMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM1Yq+/D59xkCkT/7CMa15yeY/7sCv/Hng84e5YDdOGVL1bWHqvHQ6d vQL8TSbsrXyFrUIUpqUQv8D0TOvVW9vSeJKyxVMGbECLiryS0YsXJukf1VpBFZYy SMm04+uwttIqAljXZeZw5Z6U+jNZUbwR4QQx9JcFwEWGKDqtbbKAZFlm1DYTq3UH /ex55H564/viozYCLUN8LZZrUFsFfgCgJMUyFirSjl5kGEVkeztf3hkH/kfU+1T2 34QSh/Sui7McH4BXmSJlACOSet85ha3/lzGITopGf+jZAuBij2Ch/QzRpY/K2TUj n24fzITht+IjIUe94iVgH+oyUj7HksM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:45 2025 by rpki-client