$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa File: 243c2121-9527-32f8-8657-ae22867f3928.roa (raw, json) Hash identifier: hsNM+xVhsi5wki9yHNBqdJcuOYfrlosMJmL4/xGYm5E= Subject key identifier: 21:69:E5:A8:B2:AB:E9:22:B7:9D:A6:69:6D:64:41:33:13:D4:63:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD206182E936F17D9F0FF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.217.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:06:18:2e:93:6f:17:d9:f0:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=f79c27fd-fe11-41eb-bea8-bd53a6399e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:78:99:99:98:5f:4c:f8:d0:bd:6a:3d:1c: 28:c3:8b:09:23:cb:17:ad:f3:96:0a:73:64:d6:df: e1:62:ab:d0:1c:bb:b7:b2:38:75:e8:02:2d:2b:a5: 17:49:eb:83:6a:9e:20:70:fb:bd:df:57:37:4b:08: 64:41:af:13:55:68:9a:21:c3:5c:68:88:9e:8e:c3: 9d:7f:0b:62:1d:21:4b:bb:1c:69:da:53:2a:81:d8: 1f:08:34:52:7b:16:b2:98:98:76:f7:77:b7:0c:f8: a1:3b:9a:94:b2:c4:38:47:dd:c1:4f:28:ed:0e:fe: 0c:c9:86:2a:1d:e4:d8:41:a8:55:39:92:ea:4e:81: 1b:8f:af:69:2a:46:fc:1a:41:2c:4e:31:b1:0a:4f: 83:db:a7:4b:93:ef:ec:2c:57:61:04:d6:f6:ba:d2: 45:e4:e1:31:51:80:6f:b4:1a:47:ca:dd:03:fb:06: 2c:74:2a:47:29:c4:0b:79:c6:c4:e2:0a:0a:64:d0: ec:c0:a1:84:7f:61:42:1a:d9:70:ad:e6:50:53:9d: c5:26:99:ba:58:f2:e0:30:c8:e4:6f:39:49:c5:e5: 77:62:be:40:70:3b:2c:e2:1c:ba:3d:72:ea:93:b7: 44:56:7d:ec:bc:97:4a:e8:dc:03:3f:d3:2e:c3:c5: 4b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:E5:A8:B2:AB:E9:22:B7:9D:A6:69:6D:64:41:33:13:D4:63:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/243c2121-9527-32f8-8657-ae22867f3928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:df:61:68:fb:42:7c:cf:59:0d:f4:bd:f1:cd:1c:b2:61:9f: 44:d3:08:2b:bf:cc:b5:1e:f2:90:f7:50:6a:d7:93:1c:0f:db: 11:2b:74:7c:1f:46:f5:48:ba:d3:61:44:67:2f:7c:91:72:24: 87:3b:ee:73:25:b4:b2:20:35:30:21:ce:13:75:d4:38:63:a5: 74:dc:15:ef:ec:6f:33:8a:85:65:4f:08:8b:e3:21:49:9b:28: 88:f3:cf:34:54:9e:18:65:18:a7:d5:23:7c:a6:dc:ba:40:07: 96:e3:17:4d:0e:53:68:52:4b:22:55:c5:54:b1:c2:a4:a1:de: 99:47:fb:25:9e:75:b1:27:9d:0b:91:6e:a6:a8:11:36:88:c9: db:7d:4e:f4:6a:80:c7:ea:d6:04:84:c8:b4:b4:a8:d7:81:7f: b5:79:a5:96:af:09:92:a5:98:09:46:33:a8:79:f5:1a:50:03: d0:95:96:9b:b3:91:f2:10:5d:cb:1c:65:a8:71:3a:92:f5:d8: f7:58:3f:95:ba:82:0f:b0:2a:72:fb:43:53:be:64:83:80:17: 6c:df:e5:06:3f:93:5c:50:15:43:da:b6:25:60:52:b9:d1:b1: f9:59:1b:d8:8b:97:55:61:9d:6f:55:08:3f:b0:a3:a2:e8:ef: bf:ff:ed:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gYYLpNvF9nw/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Zjc5YzI3ZmQtZmUxMS00MWViLWJlYTgtYmQ1M2E2Mzk5ZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc94mZmYX0z40L1qPRwow4sJI8sXrfOWCnNk 1t/hYqvQHLu3sjh16AItK6UXSeuDap4gcPu931c3SwhkQa8TVWiaIcNcaIiejsOd fwtiHSFLuxxp2lMqgdgfCDRSexaymJh293e3DPihO5qUssQ4R93BTyjtDv4MyYYq HeTYQahVOZLqToEbj69pKkb8GkEsTjGxCk+D26dLk+/sLFdhBNb2utJF5OExUYBv tBpHyt0D+wYsdCpHKcQLecbE4goKZNDswKGEf2FCGtlwreZQU53FJpm6WPLgMMjk bzlJxeV3Yr5AcDss4hy6PXLqk7dEVn3svJdK6NwDP9Muw8VLKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFp5aiyq+kit52maW1kQTMT1GMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQzYzIxMjEtOTUyNy0z MmY4LTg2NTctYWUyMjg2N2YzOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDfYWj7QnzPWQ30vfHNHLJhn0TTCCu/zLUe8pD3UGrXkxwP2xErdHwf RvVIutNhRGcvfJFyJIc77nMltLIgNTAhzhN11DhjpXTcFe/sbzOKhWVPCIvjIUmb KIjzzzRUnhhlGKfVI3ym3LpAB5bjF00OU2hSSyJVxVSxwqSh3plH+yWedbEnnQuR bqaoETaIydt9TvRqgMfq1gSEyLS0qNeBf7V5pZavCZKlmAlGM6h59RpQA9CVlpuz kfIQXcscZahxOpL12PdYP5W6gg+wKnL7Q1O+ZIOAF2zf5QY/k1xQFUPatiVgUrnR sflZG9iLl1VhnW9VCD+wo6Lo77//7Rg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:29 2025 by rpki-client