$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de0d5a7-6360-3ed2-9452-c0cd4b480559.roa File: 4de0d5a7-6360-3ed2-9452-c0cd4b480559.roa (raw, json) Hash identifier: 0DQ2mRtZR1Q5h9Gq8VtmTpjpEtpQeOVsxCxFuGJ5zZw= Subject key identifier: 36:BD:61:2D:A2:4D:E2:6D:62:12:BE:9B:C0:AE:76:6F:E2:8E:91:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075B7793826BF227F61900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de0d5a7-6360-3ed2-9452-c0cd4b480559.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.211.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5b:77:93:82:6b:f2:27:f6:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=04f65a8c-0828-4fc1-a201-8440428cf111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:11:8f:df:9b:2d:89:ef:9f:5d:fb:13:34: bb:50:8d:63:0b:ff:fc:8c:24:b9:17:82:78:b8:fe: bf:ac:f5:95:6a:4f:df:a9:52:86:b4:e4:00:81:c2: 7f:af:ff:e4:43:d3:d3:18:f3:8d:09:da:eb:99:67: 4a:8b:13:1e:bd:32:c3:69:64:f1:60:5c:25:cc:2d: b2:07:6f:70:3c:af:9a:e5:e5:37:71:c8:48:5e:cf: af:2b:11:2c:9a:54:7d:29:db:f4:c3:bc:bc:a3:ee: 70:ca:ed:3e:bb:0c:8a:30:39:29:bc:66:01:96:e6: 57:29:50:16:7c:6c:9f:65:76:aa:e3:26:66:e3:50: 01:07:80:ed:4c:ce:4c:b5:5c:ec:fa:28:a6:44:d6: fc:8e:ff:4b:a6:4f:ca:da:85:36:65:c2:8d:27:bb: 93:dd:d1:64:dd:fe:c5:05:a2:ee:b4:38:d8:17:95: 6e:63:0f:da:81:34:54:14:9a:37:7c:6d:3c:d3:18: 5a:07:68:55:2b:2f:17:47:de:29:a3:77:8e:34:c3: 9b:f2:02:97:23:66:c6:cd:54:5f:0d:d0:c9:a2:1e: e5:95:90:df:a3:66:a9:49:90:78:b1:c8:b4:64:4b: d2:d9:df:23:81:b8:21:49:99:7f:d9:ac:c9:c2:2a: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BD:61:2D:A2:4D:E2:6D:62:12:BE:9B:C0:AE:76:6F:E2:8E:91:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de0d5a7-6360-3ed2-9452-c0cd4b480559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:12:e5:1f:07:9b:1e:d0:04:d7:2e:0b:9c:79:e9:27:e1:26: 92:72:dd:a7:fb:e6:94:3f:d5:5f:bd:90:22:4c:b2:b0:0b:98: f5:f3:88:7d:f6:70:5c:d6:e0:84:ac:cc:52:16:73:7b:e9:fa: 91:26:43:8e:55:d5:b6:1e:a0:4f:dd:6c:87:e5:e5:3a:25:a0: aa:47:a0:75:34:cb:15:06:47:fc:91:2c:82:65:ce:ba:09:f3: 5c:a1:bf:92:23:01:39:da:d1:a0:ea:6f:f0:52:0c:1a:30:a0: 9a:31:9d:5e:73:f9:9f:bc:2c:31:68:a9:87:79:98:0b:fa:47: 73:36:79:57:ac:6b:de:4a:15:67:b8:34:88:48:05:79:8d:15: 64:5d:05:c5:fa:9b:b9:e6:4e:3c:26:13:bb:2d:d4:11:3d:73: 7b:7b:e0:df:ea:e6:32:04:52:9e:cc:ca:c8:a6:fe:38:2e:0d: d6:5a:25:c3:f1:11:c5:84:85:83:f2:7e:e7:69:63:95:84:53: 15:0d:76:ce:5a:af:e7:94:bd:e4:da:b2:d4:26:9e:a1:6c:f9: 20:18:66:59:58:29:15:1e:cf:1a:a4:16:0b:4b:f0:e6:bb:3b: f7:de:1e:83:90:d8:a3:40:9a:e8:7a:30:1d:c2:e7:5b:5a:4e: db:dc:03:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1t3k4Jr8if2GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MDRmNjVhOGMtMDgyOC00ZmMxLWEyMDEtODQ0MDQyOGNmMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4URj9+bLYnvn137EzS7UI1jC//8jCS5F4J4 uP6/rPWVak/fqVKGtOQAgcJ/r//kQ9PTGPONCdrrmWdKixMevTLDaWTxYFwlzC2y B29wPK+a5eU3cchIXs+vKxEsmlR9Kdv0w7y8o+5wyu0+uwyKMDkpvGYBluZXKVAW fGyfZXaq4yZm41ABB4DtTM5MtVzs+iimRNb8jv9Lpk/K2oU2ZcKNJ7uT3dFk3f7F BaLutDjYF5VuYw/agTRUFJo3fG080xhaB2hVKy8XR94po3eONMOb8gKXI2bGzVRf DdDJoh7llZDfo2apSZB4sci0ZEvS2d8jgbghSZl/2azJwipwOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa9YS2iTeJtYhK+m8Cudm/ijpEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRlMGQ1YTctNjM2MC0z ZWQyLTk0NTItYzBjZDRiNDgwNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9MgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoS5R8Hmx7QBNcuC5x56SfhJpJy3af75pQ/1V+9kCJMsrALmPXziH32 cFzW4ISszFIWc3vp+pEmQ45V1bYeoE/dbIfl5ToloKpHoHU0yxUGR/yRLIJlzroJ 81yhv5IjATna0aDqb/BSDBowoJoxnV5z+Z+8LDFoqYd5mAv6R3M2eVesa95KFWe4 NIhIBXmNFWRdBcX6m7nmTjwmE7st1BE9c3t74N/q5jIEUp7Mysim/jguDdZaJcPx EcWEhYPyfudpY5WEUxUNds5ar+eUveTastQmnqFs+SAYZllYKRUezxqkFgtL8Oa7 O/feHoOQ2KNAmuh6MB3C51taTtvcA44= -----END CERTIFICATE-----Generated at Mon Oct 20 02:43:22 2025 by rpki-client