$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/467fe62c-59a6-3719-9f43-46a4f0f44c06.roa File: 467fe62c-59a6-3719-9f43-46a4f0f44c06.roa (raw, json) Hash identifier: UUUdUU3V2N6XIwMUrLxZ7NOmCtuBGO4e9e0OTRqgt7E= Subject key identifier: 95:12:CB:8F:B5:5F:A6:74:6B:FC:D7:EB:E9:5E:C7:D4:D4:C6:B0:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0756487F273561B06C0600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/467fe62c-59a6-3719-9f43-46a4f0f44c06.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.213.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:56:48:7f:27:35:61:b0:6c:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=73e9cf77-ca4b-49df-bb7b-1a0e0759434c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e0:ba:8a:88:26:5b:8e:5c:61:bf:d6:3a:6c: cd:40:81:2f:f6:23:5d:18:35:fa:59:f4:81:cc:f3: 0c:d9:51:f3:29:c3:64:3c:3f:65:75:18:a8:e5:a0: d1:91:b0:c3:9e:76:b6:8d:23:c6:4b:c7:74:49:d6: 4f:7f:c7:35:e9:ca:8a:f8:48:2a:0e:9d:f8:7b:40: b7:75:a7:83:14:66:86:73:cb:21:b1:75:0c:4b:35: c2:97:7a:dc:54:d2:7f:a7:0f:e3:67:1c:ca:55:c0: ba:86:2b:18:8e:24:26:fb:03:ff:9f:ec:da:a2:19: d7:0c:74:ae:37:66:63:96:1f:5a:05:81:e1:a2:28: f8:2a:a8:f4:b9:d4:6b:b4:14:cc:5d:96:12:f5:f2: cc:af:b8:ef:67:d8:b3:2d:80:66:65:7d:c5:4b:d0: 85:0c:49:06:ec:6f:ed:57:69:4c:48:d8:18:3f:4b: 0c:36:f1:58:29:30:0b:64:87:b9:35:7b:ba:57:e3: d1:29:3d:1a:6a:26:38:ce:ab:30:cd:52:6f:d1:df: 32:32:be:75:15:43:0a:8b:fb:63:1d:e3:18:25:44: df:07:16:9f:84:b6:e6:f5:03:60:5c:61:37:70:31: fe:61:28:bc:99:ae:aa:2a:e6:27:12:8f:f5:1a:71: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:12:CB:8F:B5:5F:A6:74:6B:FC:D7:EB:E9:5E:C7:D4:D4:C6:B0:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/467fe62c-59a6-3719-9f43-46a4f0f44c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:17:3a:9d:cb:b3:18:06:5d:7d:15:0c:88:28:a5:f0:d6:97: 56:ba:b3:ae:df:91:0e:e2:04:a7:d3:78:fe:e4:d8:c1:74:d9: 5d:91:bb:c5:df:0f:41:89:04:7d:ba:c6:31:44:8c:7c:c5:90: f7:b1:2b:e0:1c:9b:ef:7b:a4:a6:8e:a7:e9:5e:69:4d:52:cf: 49:a4:05:f2:b5:a9:37:bb:1d:cc:dd:83:10:8f:18:9c:1d:32: af:63:ec:35:11:a7:2f:ee:ee:0b:78:6b:fc:fe:e5:ff:47:16: cf:a6:15:4a:26:db:ad:73:19:af:c4:cc:da:84:eb:03:81:37: cb:a2:54:a4:55:a5:28:31:b1:1c:d3:ff:12:1e:87:b3:49:2d: da:8d:77:af:69:07:70:9f:bd:1d:a7:81:fc:d8:fa:4a:85:61: 31:53:ce:38:8f:cd:7d:12:19:41:35:2b:e5:9e:ff:8c:26:e7: ce:7e:67:5d:72:2c:2a:2a:6e:16:ad:1c:bc:ed:d8:ad:62:0c: 49:ea:8b:19:2b:a9:af:2c:04:ba:e3:cf:55:5f:13:14:81:1a: 3e:a0:3e:b9:37:bf:ed:3c:c9:6e:a3:a4:2b:76:5d:3d:20:3b: 35:cb:a6:bd:c7:5d:5c:6b:ab:d9:d2:55:9e:63:f1:23:42:7a: 3f:7e:b6:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1ZIfyc1YbBsBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NzNlOWNmNzctY2E0Yi00OWRmLWJiN2ItMWEwZTA3NTk0MzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uC6iogmW45cYb/WOmzNQIEv9iNdGDX6WfSB zPMM2VHzKcNkPD9ldRio5aDRkbDDnna2jSPGS8d0SdZPf8c16cqK+EgqDp34e0C3 daeDFGaGc8shsXUMSzXCl3rcVNJ/pw/jZxzKVcC6hisYjiQm+wP/n+zaohnXDHSu N2Zjlh9aBYHhoij4Kqj0udRrtBTMXZYS9fLMr7jvZ9izLYBmZX3FS9CFDEkG7G/t V2lMSNgYP0sMNvFYKTALZIe5NXu6V+PRKT0aaiY4zqswzVJv0d8yMr51FUMKi/tj HeMYJUTfBxafhLbm9QNgXGE3cDH+YSi8ma6qKuYnEo/1GnFMYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUSy4+1X6Z0a/zX6+lex9TUxrB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDY3ZmU2MmMtNTlhNi0z NzE5LTlmNDMtNDZhNGYwZjQ0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcXOp3LsxgGXX0VDIgopfDWl1a6s67fkQ7iBKfTeP7k2MF02V2Ru8Xf D0GJBH26xjFEjHzFkPexK+Acm+97pKaOp+leaU1Sz0mkBfK1qTe7HczdgxCPGJwd Mq9j7DURpy/u7gt4a/z+5f9HFs+mFUom261zGa/EzNqE6wOBN8uiVKRVpSgxsRzT /xIeh7NJLdqNd69pB3CfvR2ngfzY+kqFYTFTzjiPzX0SGUE1K+We/4wm585+Z11y LCoqbhatHLzt2K1iDEnqixkrqa8sBLrjz1VfExSBGj6gPrk3v+08yW6jpCt2XT0g OzXLpr3HXVxrq9nSVZ5j8SNCej9+tic= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:34 2025 by rpki-client