$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4095c566-e584-3215-a6d3-feee01e287a9.roa File: 4095c566-e584-3215-a6d3-feee01e287a9.roa (raw, json) Hash identifier: zAVXgBZPkSMv174TYClxxxGnjIXiq7EqKgdwCBEOwfk= Subject key identifier: 59:C6:1A:8D:B5:F8:1A:2A:A9:A3:E7:DE:B4:92:3E:B0:42:27:E7:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07517B080F912FD9D29080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4095c566-e584-3215-a6d3-feee01e287a9.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.211.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:51:7b:08:0f:91:2f:d9:d2:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=bd3b9f4e-69dd-4661-8d66-ef45dc69b503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:9a:7d:95:dc:18:9a:d1:9c:f2:df:a6:91: 67:7f:06:ed:9d:9e:80:68:59:15:41:52:60:ef:6d: 09:67:8a:3c:83:52:09:dd:76:2d:83:d3:ac:d0:aa: c0:5f:93:88:e3:b4:30:b6:6d:d1:40:76:ed:ab:c9: dd:b2:6d:8e:64:70:ca:be:ba:97:3f:b5:13:84:af: c4:ed:11:ec:61:d0:1a:f4:92:40:ee:2c:af:88:a8: d3:b0:e9:f8:60:13:83:42:75:07:10:5c:52:91:9e: 6c:47:55:57:92:0c:4f:5d:ba:db:0a:cb:89:5b:8a: d0:9a:4e:4b:4d:02:64:d7:28:51:10:da:91:17:d8: d4:36:27:77:c1:b9:32:9c:c8:e3:03:69:db:3b:fc: 53:0f:03:6c:cb:ca:10:e0:77:95:7d:9e:95:f2:b0: 1e:8c:f3:45:79:bb:56:56:f1:db:b7:13:cb:4e:a1: fd:43:6b:11:3b:35:fb:b6:fb:04:a9:f7:04:75:8b: ef:60:ee:43:78:03:a7:10:c4:67:62:34:93:c6:f8: 14:10:65:16:b1:31:16:a4:a4:ee:4f:9e:a6:d5:9e: f1:b1:f3:fc:94:1b:c8:ad:5c:5d:c7:e3:39:68:b7: d5:52:44:3e:8c:3f:e4:64:a0:b1:b7:80:4a:6b:b3: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C6:1A:8D:B5:F8:1A:2A:A9:A3:E7:DE:B4:92:3E:B0:42:27:E7:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4095c566-e584-3215-a6d3-feee01e287a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:21:ac:6a:bf:5d:d0:ee:27:27:9b:fe:37:8b:81:14:ac:5c: 8d:d7:3d:49:89:83:fa:11:b7:af:72:06:36:59:ff:6a:af:35: 18:0d:44:8b:3e:d1:e1:8f:60:35:5e:e6:75:74:7b:99:d5:ca: 91:00:bf:86:c2:b4:a7:3b:1c:02:0c:98:6e:21:f0:f8:e9:35: 60:06:90:ff:15:cb:96:3d:ea:2d:0f:c4:59:7b:18:a6:5a:72: 45:33:5a:82:ec:d0:45:a8:09:fb:9c:55:68:aa:50:24:51:fc: cc:db:2c:b6:ef:5f:b9:88:ae:47:b0:5f:a0:e3:11:47:ca:a8: 41:88:7c:99:53:2f:32:b4:6a:c4:36:17:c3:4d:30:6a:89:78: ff:bb:bb:7c:0f:ad:46:be:b2:05:d0:16:fa:e9:0a:f6:a3:58: 1c:4d:a3:5b:b7:ae:40:a0:3b:29:e4:8b:95:28:d0:5d:66:93: 36:6c:df:46:c6:2d:73:a0:a5:80:b9:f5:c0:b5:30:62:30:2a: 34:2b:26:25:9e:77:37:71:52:e8:29:53:db:2c:3f:cc:54:db: a9:09:64:f3:d0:3c:0a:18:aa:c9:61:9f:a2:6c:60:58:7e:f6: a7:70:05:9c:98:c3:02:9d:40:ad:1d:a4:ee:00:02:d9:7b:d6: 07:83:04:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1F7CA+RL9nSkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YmQzYjlmNGUtNjlkZC00NjYxLThkNjYtZWY0NWRjNjliNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojyafZXcGJrRnPLfppFnfwbtnZ6AaFkVQVJg 720JZ4o8g1IJ3XYtg9Os0KrAX5OI47Qwtm3RQHbtq8ndsm2OZHDKvrqXP7UThK/E 7RHsYdAa9JJA7iyviKjTsOn4YBODQnUHEFxSkZ5sR1VXkgxPXbrbCsuJW4rQmk5L TQJk1yhRENqRF9jUNid3wbkynMjjA2nbO/xTDwNsy8oQ4HeVfZ6V8rAejPNFebtW VvHbtxPLTqH9Q2sROzX7tvsEqfcEdYvvYO5DeAOnEMRnYjSTxvgUEGUWsTEWpKTu T56m1Z7xsfP8lBvIrVxdx+M5aLfVUkQ+jD/kZKCxt4BKa7M1uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnGGo21+BoqqaPn3rSSPrBCJ+ecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDA5NWM1NjYtZTU4NC0z MjE1LWE2ZDMtZmVlZTAxZTI4N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9PsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEhrGq/XdDuJyeb/jeLgRSsXI3XPUmJg/oRt69yBjZZ/2qvNRgNRIs+ 0eGPYDVe5nV0e5nVypEAv4bCtKc7HAIMmG4h8PjpNWAGkP8Vy5Y96i0PxFl7GKZa ckUzWoLs0EWoCfucVWiqUCRR/MzbLLbvX7mIrkewX6DjEUfKqEGIfJlTLzK0asQ2 F8NNMGqJeP+7u3wPrUa+sgXQFvrpCvajWBxNo1u3rkCgOynki5Uo0F1mkzZs30bG LXOgpYC59cC1MGIwKjQrJiWedzdxUugpU9ssP8xU26kJZPPQPAoYqslhn6JsYFh+ 9qdwBZyYwwKdQK0dpO4AAtl71geDBN8= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:23 2025 by rpki-client