$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa File: 3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa (raw, json) Hash identifier: xqZza+q4280Z/xFqdc18QxTl5EW+bgzc9EJQTC3gDxA= Subject key identifier: D4:43:CA:73:B2:FA:16:7F:BD:00:DE:0E:76:46:1B:A6:30:C1:95:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FF32855DAEF5C86BC980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.217.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:ff:32:85:5d:ae:f5:c8:6b:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=39df0057-a044-4e3e-b687-b30a30d9269d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:0f:63:7b:fd:32:c2:e9:8a:67:02:8c:fe: 3f:32:ea:e8:a8:90:6e:e6:fd:c3:87:2d:41:ed:60: 90:fa:e4:ef:ae:a2:76:8f:5f:1d:29:a6:36:c1:02: 93:2e:c7:a1:48:3d:94:14:fb:ab:8a:15:95:87:37: cd:b4:e1:70:d7:6f:59:3f:9a:d2:61:28:7c:d0:e9: 55:0c:75:a2:43:3e:e5:6c:60:d1:eb:b6:ec:da:08: b7:db:ec:41:ea:d7:18:16:7e:48:62:da:db:8a:e6: b9:3d:9e:57:ee:83:b2:fe:12:22:2f:81:94:7f:b2: f2:86:46:ba:de:7c:0c:96:45:13:9f:f0:33:99:f8: ed:05:3a:eb:bd:c2:08:e4:5d:11:3a:2d:92:b5:9e: 4c:4f:4d:0b:23:90:bf:63:3d:34:37:9c:2e:b0:5d: 8b:fa:7b:ff:67:18:f6:77:17:8e:c8:cb:e2:91:13: b7:72:ee:9f:22:df:43:15:49:b2:a5:16:f7:e3:28: 1f:3e:11:dc:61:99:e0:52:42:96:4f:ed:36:81:b4: 4e:da:6e:13:f8:27:1e:a7:d1:18:b2:52:c0:b6:05: 6e:76:39:ef:f9:8a:49:1b:37:bb:09:12:62:47:63: a6:1f:a9:bc:d3:3d:42:15:58:96:9e:72:f7:72:5d: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:43:CA:73:B2:FA:16:7F:BD:00:DE:0E:76:46:1B:A6:30:C1:95:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:44:41:44:c7:b7:dd:5b:90:32:9e:76:18:a9:ec:1f:91:fb: b3:a1:4e:5d:2c:6c:e6:7a:1d:cf:c0:f0:73:ae:1f:46:97:fa: 4b:35:03:f4:83:3f:85:28:fe:50:44:fe:6a:a4:ef:08:62:ef: 70:5e:76:ec:50:1f:f2:0c:9e:f6:dd:25:5a:63:1b:85:06:9c: c1:a9:ea:a9:07:49:ae:2a:ed:42:9f:e2:52:e4:e5:e1:7d:e1: 97:07:4d:aa:7f:cb:54:df:63:5b:03:57:47:b8:af:c0:c5:de: ce:30:9a:7f:62:28:4f:39:8b:31:9c:eb:93:22:2c:5f:79:eb: 20:9b:6d:65:60:9b:0b:ac:a3:94:47:31:13:1d:b7:20:de:93: 26:49:a4:47:af:2d:17:d7:27:31:3d:44:0d:7d:4f:ad:e0:93: 89:29:a0:32:48:d1:31:47:f5:92:f0:3a:c2:a0:97:3d:68:64: ec:11:0d:a8:ec:85:69:77:fb:e0:52:34:ac:b5:37:38:fa:c6: a0:8d:0d:d6:66:c2:4b:0b:61:13:f2:ea:5e:e4:c1:30:7a:c8: ee:89:10:97:27:2e:07:ea:75:7b:39:bc:cd:c9:a8:a0:ed:2f: 85:e6:cd:31:99:6e:7b:7d:58:3e:e7:59:a5:30:27:18:ca:bb: fa:cb:a2:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0f8yhV2u9chryYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MzlkZjAwNTctYTA0NC00ZTNlLWI2ODctYjMwYTMwZDkyNjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaQPY3v9MsLpimcCjP4/MuroqJBu5v3Dhy1B 7WCQ+uTvrqJ2j18dKaY2wQKTLsehSD2UFPurihWVhzfNtOFw129ZP5rSYSh80OlV DHWiQz7lbGDR67bs2gi32+xB6tcYFn5IYtrbiua5PZ5X7oOy/hIiL4GUf7Lyhka6 3nwMlkUTn/AzmfjtBTrrvcII5F0ROi2StZ5MT00LI5C/Yz00N5wusF2L+nv/Zxj2 dxeOyMvikRO3cu6fIt9DFUmypRb34ygfPhHcYZngUkKWT+02gbRO2m4T+Ccep9EY slLAtgVudjnv+YpJGze7CRJiR2OmH6m80z1CFViWnnL3cl0bNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRDynOy+hZ/vQDeDnZGG6YwwZXyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MxNjMxYjItODE5Mi0z YWE2LWEwYzUtN2ZlMThhMGVmNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9nEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5EQUTHt91bkDKedhip7B+R+7OhTl0sbOZ6Hc/A8HOuH0aX+ks1A/SD P4Uo/lBE/mqk7whi73BeduxQH/IMnvbdJVpjG4UGnMGp6qkHSa4q7UKf4lLk5eF9 4ZcHTap/y1TfY1sDV0e4r8DF3s4wmn9iKE85izGc65MiLF956yCbbWVgmwuso5RH MRMdtyDekyZJpEevLRfXJzE9RA19T63gk4kpoDJI0TFH9ZLwOsKglz1oZOwRDajs hWl3++BSNKy1Nzj6xqCNDdZmwksLYRPy6l7kwTB6yO6JEJcnLgfqdXs5vM3JqKDt L4XmzTGZbnt9WD7nWaUwJxjKu/rLot4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:42 2025 by rpki-client