$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f0850d1-dbef-3b39-92e5-c8011246d392.roa File: 3f0850d1-dbef-3b39-92e5-c8011246d392.roa (raw, json) Hash identifier: 004f9EZTdNf9oyF+C6SAKM4+RcXdG+IDgnJ6pA+PXmE= Subject key identifier: 20:D4:A8:01:A9:EF:B1:F2:40:7D:5B:1C:6C:58:10:91:4F:C0:84:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583CA38A09991BC2D22BE100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f0850d1-dbef-3b39-92e5-c8011246d392.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.206.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a3:8a:09:99:1b:c2:d2:2b:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=37bcc33c-cb16-477c-9ca3-48b1fb5b3ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:82:f8:a2:c4:25:9d:f2:09:0a:0d:b8:bb: d9:e6:5b:bc:78:0f:0f:5b:1d:61:fc:2e:42:23:ea: 6f:3b:a1:cc:4b:d5:54:22:7f:90:f7:5b:2f:d1:a7: 68:82:f6:c0:2b:5a:c4:4c:93:4f:8b:85:a5:77:4e: 8f:b6:6e:03:c5:d8:7d:76:c2:ec:5d:34:bb:8b:56: 3a:ac:88:0a:95:3f:43:26:4e:30:89:b1:dd:24:d0: 86:cd:af:67:46:0d:34:8a:0a:c5:25:19:73:d9:26: 2e:28:90:38:17:5a:27:75:e9:e0:06:d9:90:2c:5a: 06:68:03:99:2b:fa:17:cb:da:37:24:b3:88:69:f7: c8:08:29:67:2d:84:20:94:52:68:75:1d:26:94:50: 90:a1:21:9b:e8:48:ca:f9:73:17:56:6a:28:20:0b: a6:b4:e6:b1:67:1d:a3:04:4e:09:ff:e2:26:fb:6f: 13:33:05:00:77:73:78:e5:89:90:1a:76:53:3a:30: 05:94:ce:3a:af:8f:b3:61:49:59:40:3b:59:94:4c: 3f:3e:68:ea:62:b6:c8:79:23:ef:aa:6e:98:e8:5f: 21:f2:03:fc:ef:cd:df:a5:a1:47:bf:f5:44:26:9f: a1:c0:3b:f3:cf:e7:92:30:09:8e:f6:28:a6:e8:60: 06:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D4:A8:01:A9:EF:B1:F2:40:7D:5B:1C:6C:58:10:91:4F:C0:84:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f0850d1-dbef-3b39-92e5-c8011246d392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e9:bc:36:27:28:90:9b:c3:f9:4a:28:b7:c0:18:f5:49:ca: 50:41:a7:28:e2:33:a8:7a:11:91:37:7b:7b:d2:35:6c:aa:45: 5e:eb:36:21:56:4e:cb:86:52:9c:ed:15:c2:0d:34:84:a9:63: 28:56:72:c6:7a:a2:73:0b:c7:1b:26:31:ea:1d:6a:2d:55:67: a6:1d:db:93:9d:8f:22:7a:c4:43:04:3c:f0:cf:d9:50:9a:f1: 56:9e:9e:28:50:38:e7:49:0d:49:d1:bb:ff:62:24:6f:4e:40: c9:90:db:b4:8a:47:86:33:e7:eb:c0:cf:99:14:25:ba:44:22: 32:28:ca:29:0c:71:f9:d8:ff:6b:a9:84:60:73:1c:30:87:89: 10:fc:22:92:6b:7a:94:f4:75:bf:8a:a5:5d:61:b5:d1:f9:b8: 30:c9:8d:ba:b0:f6:9f:49:de:07:97:13:35:73:b9:8c:03:83: 62:1d:5b:8a:28:54:c0:c1:7e:f6:13:9f:ce:63:00:ed:80:29: 48:70:51:a9:bf:b5:49:75:9d:9e:03:c4:e6:4a:60:36:1a:de: 7f:ff:cb:07:8b:bf:84:30:18:62:b7:2e:b8:5d:02:e9:b0:4a: ba:7d:5c:b8:cf:77:bc:44:0d:dc:89:b7:a3:64:67:ba:ca:ca: d6:3f:d9:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKOKCZkbwtIr4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzdiY2MzM2MtY2IxNi00NzdjLTljYTMtNDhiMWZiNWIzYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisqC+KLEJZ3yCQoNuLvZ5lu8eA8PWx1h/C5C I+pvO6HMS9VUIn+Q91sv0adogvbAK1rETJNPi4Wld06Ptm4Dxdh9dsLsXTS7i1Y6 rIgKlT9DJk4wibHdJNCGza9nRg00igrFJRlz2SYuKJA4F1ondengBtmQLFoGaAOZ K/oXy9o3JLOIaffICClnLYQglFJodR0mlFCQoSGb6EjK+XMXVmooIAumtOaxZx2j BE4J/+Im+28TMwUAd3N45YmQGnZTOjAFlM46r4+zYUlZQDtZlEw/PmjqYrbIeSPv qm6Y6F8h8gP8783fpaFHv/VEJp+hwDvzz+eSMAmO9iim6GAGAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDUqAGp77HyQH1bHGxYEJFPwIS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YwODUwZDEtZGJlZi0z YjM5LTkyZTUtYzgwMTEyNDZkMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF850MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjpvDYnKJCbw/lKKLfAGPVJylBBpyjiM6h6EZE3e3vSNWyqRV7rNiFW TsuGUpztFcINNISpYyhWcsZ6onMLxxsmMeodai1VZ6Yd25OdjyJ6xEMEPPDP2VCa 8VaenihQOOdJDUnRu/9iJG9OQMmQ27SKR4Yz5+vAz5kUJbpEIjIoyikMcfnY/2up hGBzHDCHiRD8IpJrepT0db+KpV1htdH5uDDJjbqw9p9J3geXEzVzuYwDg2IdW4oo VMDBfvYTn85jAO2AKUhwUam/tUl1nZ4DxOZKYDYa3n//yweLv4QwGGK3LrhdAumw Srp9XLjPd7xEDdyJt6NkZ7rKytY/2Xc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:07 2025 by rpki-client