$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b3d7828-84e8-3b9c-bde9-77ecac15731a.roa File: 2b3d7828-84e8-3b9c-bde9-77ecac15731a.roa (raw, json) Hash identifier: w+gORlVtlBJWCm+n0aoABbe0vLWqAVCX35MM2xuXIH8= Subject key identifier: D3:63:76:67:20:2C:7E:65:AB:E6:13:30:DC:43:C8:44:45:16:CC:74 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075133FC4CFB04D6754F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b3d7828-84e8-3b9c-bde9-77ecac15731a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.211.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:51:33:fc:4c:fb:04:d6:75:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=d3e86fb4-6715-4a36-adb5-499e905b963b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d2:72:40:aa:a9:55:c5:34:d5:12:16:31:26: 71:83:a8:f6:4c:bb:dc:6f:af:52:25:ab:54:43:b5: 45:fc:53:90:2c:31:36:e5:98:df:7e:2f:c3:66:3a: 11:bc:21:a3:8b:d8:08:6c:9c:d7:c1:ec:69:1a:20: c4:db:57:fd:c3:44:71:64:3a:f4:95:bf:cf:c3:38: d5:1d:47:c5:d8:6f:28:ac:00:d4:c0:e5:50:96:1c: 32:15:be:85:cd:a6:a1:eb:ae:3e:68:52:53:d2:49: ac:26:34:50:72:27:01:25:83:a6:e0:ee:ea:01:f2: 3c:ba:55:ab:8c:f4:bc:fd:b9:67:cb:86:8b:19:4d: 74:2e:b6:3a:00:8a:14:c1:97:6b:43:67:16:2c:89: bf:c5:01:41:6c:50:c0:d7:79:8f:e1:4f:d8:e0:e2: a2:d6:8e:bb:c0:58:07:41:8e:7b:94:bb:a3:1a:78: a2:3b:33:22:84:6d:8e:a5:88:d2:3a:76:25:5a:2f: 35:27:5e:fe:0f:9d:1f:40:fa:8e:bd:36:d0:1c:e5: 8c:c9:3f:d4:17:57:0e:03:b9:fe:a2:c2:42:62:57: 25:28:65:41:78:09:f3:2f:be:f1:e1:9d:88:ad:78: 22:e8:88:58:e8:1c:68:d6:75:cd:2f:a3:29:05:66: 98:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:76:67:20:2C:7E:65:AB:E6:13:30:DC:43:C8:44:45:16:CC:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b3d7828-84e8-3b9c-bde9-77ecac15731a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:18:fb:ab:fa:24:47:67:47:6f:db:fb:47:60:f8:17:a3:73: 17:4f:f2:32:33:35:4b:b3:78:e2:c7:0e:92:99:81:c0:f0:c6: ef:86:dc:19:cd:86:7c:aa:7e:ad:4b:3b:50:55:a5:79:fa:42: 0b:fc:d0:6c:49:21:8b:28:89:cf:7b:ed:07:b6:76:d4:29:66: 9b:aa:13:fb:d7:63:8c:40:4e:ac:e5:02:96:b0:8a:74:78:2d: 20:15:63:6f:86:89:18:5b:fa:62:52:57:11:8b:fd:c7:2f:1a: 38:f0:a0:18:fa:f9:82:03:74:97:b9:21:3c:24:86:91:c9:39: 6a:10:fc:c7:d7:77:55:54:13:33:7c:44:8e:c6:e7:3a:78:d3: 6f:58:f0:7f:fd:3b:25:8b:6d:a9:80:2e:71:d8:c6:49:79:59: 3d:e5:cd:0a:2b:5c:1a:3a:58:51:71:57:ed:03:11:b2:fe:2d: 4e:2f:39:ff:23:d7:f1:dd:4d:3b:7c:65:a2:3a:0f:ba:6c:4c: e6:a7:eb:6e:4f:08:3d:ae:db:cb:d0:a3:bf:86:8b:fe:2d:e5: 95:2b:bb:64:c1:d4:01:1e:12:dc:08:ad:41:c5:b1:ed:48:09: 6d:9b:9d:11:b9:34:4f:d3:c8:e6:00:77:f5:57:95:40:f9:f1: 3e:16:b7:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1Ez/Ez7BNZ1TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZDNlODZmYjQtNjcxNS00YTM2LWFkYjUtNDk5ZTkwNWI5NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtJyQKqpVcU01RIWMSZxg6j2TLvcb69SJatU Q7VF/FOQLDE25Zjffi/DZjoRvCGji9gIbJzXwexpGiDE21f9w0RxZDr0lb/PwzjV HUfF2G8orADUwOVQlhwyFb6Fzaah664+aFJT0kmsJjRQcicBJYOm4O7qAfI8ulWr jPS8/blny4aLGU10LrY6AIoUwZdrQ2cWLIm/xQFBbFDA13mP4U/Y4OKi1o67wFgH QY57lLujGniiOzMihG2OpYjSOnYlWi81J17+D50fQPqOvTbQHOWMyT/UF1cOA7n+ osJCYlclKGVBeAnzL77x4Z2IrXgi6IhY6Bxo1nXNL6MpBWaYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNjdmcgLH5lq+YTMNxDyERFFsx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmIzZDc4MjgtODRlOC0z YjljLWJkZTktNzdlY2FjMTU3MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9O4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0Y+6v6JEdnR2/b+0dg+BejcxdP8jIzNUuzeOLHDpKZgcDwxu+G3BnN hnyqfq1LO1BVpXn6Qgv80GxJIYsoic977Qe2dtQpZpuqE/vXY4xATqzlApawinR4 LSAVY2+GiRhb+mJSVxGL/ccvGjjwoBj6+YIDdJe5ITwkhpHJOWoQ/MfXd1VUEzN8 RI7G5zp4029Y8H/9OyWLbamALnHYxkl5WT3lzQorXBo6WFFxV+0DEbL+LU4vOf8j 1/HdTTt8ZaI6D7psTOan625PCD2u28vQo7+Gi/4t5ZUru2TB1AEeEtwIrUHFse1I CW2bnRG5NE/TyOYAd/VXlUD58T4Wt/A= -----END CERTIFICATE-----Generated at Mon Oct 20 04:56:43 2025 by rpki-client