$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3383f0-9de7-3038-b87f-5107245fe767.roa File: 3d3383f0-9de7-3038-b87f-5107245fe767.roa (raw, json) Hash identifier: BIRv9YKfWJrSLhzVZKS/olkEW7X4i5YYxWaaewxGI5g= Subject key identifier: C9:59:B5:71:95:CE:6C:EA:40:2E:A9:57:AE:83:6E:E4:E7:44:27:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA0E4B05D4A1B37AD8400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3383f0-9de7-3038-b87f-5107245fe767.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.218.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a0:e4:b0:5d:4a:1b:37:ad:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=60687273-ccf1-4549-8d4a-f635e98fbdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:41:11:b6:e2:9b:93:80:20:9b:8c:ac:8b:ae: 34:1d:f7:b3:6b:12:ab:68:cb:f2:9f:35:cd:b6:07: 3b:b6:df:7c:dc:b7:ce:84:16:b7:36:d3:a7:70:e7: ea:3a:bf:61:ef:59:d4:db:fb:a9:22:e5:e4:20:88: 6a:8e:6e:6b:4d:31:3a:8d:67:ca:67:f0:0a:6f:21: 77:e3:90:a1:f7:47:f7:c8:95:a1:6c:82:59:7d:f9: b8:1f:7c:99:07:28:bb:7b:70:f7:d4:76:12:1a:e4: a8:16:50:20:08:07:19:ee:ea:cc:f8:94:e8:6b:af: 9b:34:b6:6a:53:84:50:bb:68:10:62:76:b8:44:da: b5:6d:7e:5e:d8:7c:d1:20:8f:b2:18:02:dd:06:11: 3b:4a:6c:a8:3b:71:0e:ac:b4:b2:fa:fa:93:36:b3: 59:34:25:e5:33:cf:48:de:a4:62:e5:b9:7c:06:dd: 20:e4:4c:a7:d2:4e:36:14:d5:ec:56:b1:1a:53:24: e4:6c:1f:d6:69:5d:95:43:d3:b4:24:4e:af:1f:e8: e0:45:d7:47:63:d9:b0:fa:e0:d1:e7:3d:f6:40:ba: 88:de:1b:ac:e3:61:a3:bf:d8:74:54:67:38:7a:df: f9:ef:ed:8d:b3:2c:4e:a0:fa:8e:af:97:59:40:84: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:59:B5:71:95:CE:6C:EA:40:2E:A9:57:AE:83:6E:E4:E7:44:27:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d3383f0-9de7-3038-b87f-5107245fe767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:03:87:72:3e:27:3f:aa:f4:03:c2:d6:95:c1:24:5b:2d:eb: 6d:23:f5:81:8c:db:c5:15:5c:23:31:ac:56:a8:ce:c4:55:ac: 74:84:d4:ae:63:1a:21:ac:35:fb:0e:c7:d0:ca:82:ac:24:1e: 60:b9:80:60:f7:c9:a5:69:9f:54:0f:f4:e3:75:54:a9:94:8d: f1:78:c8:ed:9d:4d:86:ec:37:18:2e:fc:4e:d4:77:ef:52:b3: 53:89:1f:64:9c:10:0f:76:0c:f6:2f:b0:c8:0c:71:ad:c4:c4: 0d:26:8e:82:ea:58:07:cf:71:f7:b0:5e:c4:51:29:c1:dd:3c: f2:b5:4c:55:58:79:85:cd:5e:e0:29:fb:fd:5c:95:27:63:e3: c4:1e:14:ed:c2:57:15:4a:91:59:53:7b:f9:ab:32:94:aa:09: 72:5b:05:a8:09:f2:31:49:a3:5a:94:aa:46:94:c6:0d:14:ae: ca:49:db:41:1e:da:08:71:71:75:bd:0a:2f:48:5e:d6:b4:fc: eb:eb:de:22:db:20:04:41:7e:f8:b5:23:23:a6:d9:54:13:20: ed:c3:da:7e:be:6a:b8:b5:f3:1d:c1:96:9d:c7:d8:bd:fa:ac: 94:22:d2:74:d0:52:4d:bd:79:29:a1:af:b9:80:39:c8:ea:95: 2f:4b:7b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KDksF1KGzethAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NjA2ODcyNzMtY2NmMS00NTQ5LThkNGEtZjYzNWU5OGZiZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUERtuKbk4Agm4ysi640HfezaxKraMvynzXN tgc7tt983LfOhBa3NtOncOfqOr9h71nU2/upIuXkIIhqjm5rTTE6jWfKZ/AKbyF3 45Ch90f3yJWhbIJZffm4H3yZByi7e3D31HYSGuSoFlAgCAcZ7urM+JToa6+bNLZq U4RQu2gQYna4RNq1bX5e2HzRII+yGALdBhE7SmyoO3EOrLSy+vqTNrNZNCXlM89I 3qRi5bl8Bt0g5Eyn0k42FNXsVrEaUyTkbB/WaV2VQ9O0JE6vH+jgRddHY9mw+uDR 5z32QLqI3hus42Gjv9h0VGc4et/57+2NsyxOoPqOr5dZQISvcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlZtXGVzmzqQC6pV66DbuTnRCdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QzMzgzZjAtOWRlNy0z MDM4LWI4N2YtNTEwNzI0NWZlNzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwDh3I+Jz+q9APC1pXBJFst620j9YGM28UVXCMxrFaozsRVrHSE1K5j GiGsNfsOx9DKgqwkHmC5gGD3yaVpn1QP9ON1VKmUjfF4yO2dTYbsNxgu/E7Ud+9S s1OJH2ScEA92DPYvsMgMca3ExA0mjoLqWAfPcfewXsRRKcHdPPK1TFVYeYXNXuAp +/1clSdj48QeFO3CVxVKkVlTe/mrMpSqCXJbBagJ8jFJo1qUqkaUxg0UrspJ20Ee 2ghxcXW9Ci9IXta0/Ovr3iLbIARBfvi1IyOm2VQTIO3D2n6+ari18x3Blp3H2L36 rJQi0nTQUk29eSmhr7mAOcjqlS9Le7M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:46 2025 by rpki-client