$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e306a4e-b972-34b2-a5d9-0da9c82329cc.roa File: 2e306a4e-b972-34b2-a5d9-0da9c82329cc.roa (raw, json) Hash identifier: eYQdDV5zQy1gvaBMMpvqSnxhbc25+nYvj1QZE0ca/nY= Subject key identifier: CE:EF:97:67:24:3C:6D:66:B7:D9:15:99:BD:88:36:E2:F9:27:E7:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07552F2248884EA1D98A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e306a4e-b972-34b2-a5d9-0da9c82329cc.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.213.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:55:2f:22:48:88:4e:a1:d9:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=c20ae843-6ab0-41f1-a05a-2e8cd782f5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:5b:b2:1b:42:ef:0b:37:82:2e:51:4a:00: e3:23:8f:4f:a3:0b:6e:f2:84:1e:48:5e:a5:a0:dd: 37:13:c0:04:30:ac:d1:3a:40:e0:ba:4b:c0:77:3d: 77:d8:f9:ae:ba:e7:c5:76:20:4a:4d:97:88:34:ba: 65:cd:1e:8c:cd:ff:91:78:e4:d0:17:95:f5:8d:ea: ee:f2:2d:2b:b1:61:96:77:00:0d:dd:1e:13:23:56: 78:38:0f:86:e9:d5:39:59:ab:ca:35:64:54:11:e3: 73:5e:56:7d:9f:0c:fe:27:16:51:60:88:ab:9f:62: 96:cc:51:1a:6b:bd:6e:23:04:f3:58:b2:b2:47:06: 49:92:f0:cc:00:c8:c1:0a:bc:e1:47:27:be:ba:e0: 78:2e:46:c2:77:05:ca:ea:a1:cd:ad:85:58:f0:2a: 92:d7:d2:a4:b1:45:53:e8:f3:a2:09:fb:e0:76:e4: 13:d5:cf:66:86:32:a8:3c:16:43:e1:ef:ef:c3:87: 71:a5:8e:16:17:ff:6e:ff:38:fe:c9:b3:cf:5b:a7: 87:11:94:82:94:20:d3:8c:be:48:cf:9d:c4:4a:61: 9a:78:8a:53:98:85:e7:6e:c5:61:48:77:84:94:01: 01:1a:4c:77:b0:46:4e:3d:e0:09:08:8f:58:53:75: 4d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:97:67:24:3C:6D:66:B7:D9:15:99:BD:88:36:E2:F9:27:E7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e306a4e-b972-34b2-a5d9-0da9c82329cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:de:78:45:8d:e0:d8:39:7f:f5:ca:65:aa:e1:ec:ab:3c:4f: 47:d1:94:28:a4:9d:bf:26:08:cd:7d:55:88:6c:39:09:20:e1: 42:9b:29:50:42:bd:fb:bf:b5:e5:36:8e:21:79:3d:18:dd:96: a5:df:ea:4e:ed:53:e7:93:61:fc:b7:42:8b:ca:e0:fa:ad:28: c4:57:81:58:d9:fd:a0:e1:2f:ea:53:9c:c8:6b:ca:d1:0b:65: a2:aa:1c:b4:67:3e:7c:6b:56:24:60:8b:f8:92:29:8e:9a:de: c8:18:eb:ec:65:6a:41:94:4a:2a:cc:77:c1:ec:9f:29:8a:03: 39:81:c8:0b:2c:4a:65:a8:02:59:8c:48:14:dd:cf:21:d7:49: e7:b0:97:0d:c0:0f:49:b4:d7:d6:95:cb:6c:0d:b7:96:62:15: ab:ce:9d:9e:ae:f2:98:ed:c0:62:8e:df:be:c2:4e:41:8e:dc: 40:67:9b:fe:7c:6a:1f:b9:d2:3f:e3:a8:8a:7f:53:0b:59:64: 04:72:50:9c:63:b7:89:e7:1d:4d:1b:5f:4a:9b:e4:38:17:81: 16:df:48:1e:fa:45:8a:9e:68:ad:46:15:27:0d:77:ca:6a:df: 07:4d:eb:26:37:e8:f3:06:6c:8a:30:39:a5:8f:af:50:2e:17: bf:31:a5:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1UvIkiITqHZikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YzIwYWU4NDMtNmFiMC00MWYxLWEwNWEtMmU4Y2Q3ODJmNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0NbshtC7ws3gi5RSgDjI49Powtu8oQeSF6l oN03E8AEMKzROkDgukvAdz132PmuuufFdiBKTZeINLplzR6Mzf+ReOTQF5X1jeru 8i0rsWGWdwAN3R4TI1Z4OA+G6dU5WavKNWRUEeNzXlZ9nwz+JxZRYIirn2KWzFEa a71uIwTzWLKyRwZJkvDMAMjBCrzhRye+uuB4LkbCdwXK6qHNrYVY8CqS19KksUVT 6POiCfvgduQT1c9mhjKoPBZD4e/vw4dxpY4WF/9u/zj+ybPPW6eHEZSClCDTjL5I z53ESmGaeIpTmIXnbsVhSHeElAEBGkx3sEZOPeAJCI9YU3VNEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7vl2ckPG1mt9kVmb2INuL5J+ffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmUzMDZhNGUtYjk3Mi0z NGIyLWE1ZDktMGRhOWM4MjMyOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILeeEWN4Ng5f/XKZarh7Ks8T0fRlCiknb8mCM19VYhsOQkg4UKbKVBC vfu/teU2jiF5PRjdlqXf6k7tU+eTYfy3QovK4PqtKMRXgVjZ/aDhL+pTnMhrytEL ZaKqHLRnPnxrViRgi/iSKY6a3sgY6+xlakGUSirMd8HsnymKAzmByAssSmWoAlmM SBTdzyHXSeewlw3AD0m019aVy2wNt5ZiFavOnZ6u8pjtwGKO377CTkGO3EBnm/58 ah+50j/jqIp/UwtZZARyUJxjt4nnHU0bX0qb5DgXgRbfSB76RYqeaK1GFScNd8pq 3wdN6yY36PMGbIowOaWPr1AuF78xpVs= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:18 2025 by rpki-client