$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ee86cad-6e6f-33a8-bce0-d59b80822b09.roa File: 4ee86cad-6e6f-33a8-bce0-d59b80822b09.roa (raw, json) Hash identifier: l+L9tUboBwJxSEwBODk3XGPgpcNt1TXz1BISQlEE4i8= Subject key identifier: FE:03:2D:9F:E6:3C:9E:DA:91:C0:37:88:71:77:39:56:57:EC:34:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075DE446C0F4855C7B5900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ee86cad-6e6f-33a8-bce0-d59b80822b09.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.211.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5d:e4:46:c0:f4:85:5c:7b:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=c5faef1a-c0a4-4697-80be-b21d291cb664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6d:2f:39:aa:67:72:fd:13:10:26:56:4f:5f: 88:89:0d:c2:2a:9b:3a:30:83:c0:de:4b:56:8a:8b: df:89:5f:8f:e5:ca:38:4a:63:ae:ef:f2:c5:19:4d: bb:89:8c:77:a0:99:a2:9d:8b:d8:f3:3b:ff:e9:a7: 1c:b7:f7:ca:41:4a:24:b3:8c:02:02:3f:68:52:46: 66:f4:d0:47:20:3c:32:3b:57:60:61:f9:fb:cb:1e: d0:bf:95:26:b8:7a:af:30:3b:7c:f0:69:88:93:4f: a1:75:de:e3:36:43:8c:cb:06:5f:c2:41:2a:63:55: b8:61:58:a2:12:5d:0b:c4:53:e3:81:2c:43:48:18: 9e:39:1d:8d:45:4a:cf:53:54:a7:0e:49:3e:1b:13: 72:49:ca:79:d7:9c:b7:62:f6:cb:92:03:42:4c:0c: e4:bc:ec:4b:fa:b4:c0:26:f2:69:97:4f:2b:81:46: 65:7c:e2:30:20:ab:65:27:58:95:c6:32:a6:8d:1a: 7c:64:c3:71:86:cf:90:58:9e:06:60:1a:6b:42:36: 7b:3b:1a:60:d6:ef:91:28:76:31:5e:98:50:0b:b1: da:e3:12:6f:55:e3:4f:d8:b0:31:7e:d4:03:c3:69: e6:49:dd:d0:92:84:5c:1d:b6:6d:d6:a1:5c:b9:6b: 80:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:03:2D:9F:E6:3C:9E:DA:91:C0:37:88:71:77:39:56:57:EC:34:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ee86cad-6e6f-33a8-bce0-d59b80822b09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:66:88:38:10:43:f9:c6:fe:37:dc:63:64:56:23:2b:59:ca: b0:bb:23:28:22:66:70:38:63:42:55:39:98:a2:2f:4d:ce:26: ad:a2:ec:9b:ba:c2:13:39:65:b9:18:de:4d:5f:dc:c0:dd:a0: f1:9a:82:41:d5:1a:c7:b7:03:1c:b4:13:0e:30:74:d8:60:08: d9:74:7a:ca:ff:dd:c1:49:db:35:9c:b1:8f:5f:c0:7c:92:6b: 31:49:83:02:29:d9:1d:b4:d1:b0:9e:6b:3c:3b:36:b4:36:22: c3:1c:e2:6b:f2:4c:9c:d4:63:3b:ce:3b:67:0e:b0:b5:5b:0f: a4:0a:0e:4b:85:cf:94:98:82:64:48:02:bd:78:31:b7:6e:23: c8:63:8a:3b:f5:88:41:24:5b:8f:dd:89:cd:bd:76:d7:89:fc: 91:b4:eb:51:11:62:91:2d:4c:cd:51:99:91:6b:63:aa:4c:ea: 1c:69:44:74:f5:d6:9e:fd:63:57:15:76:4c:64:5e:22:c6:3c: be:16:91:81:78:d5:ad:96:82:a1:45:91:61:a2:06:a0:61:bb: b1:3e:2a:59:b6:80:0a:c7:a4:1e:2c:34:2c:1f:26:df:2e:c5: 77:16:84:96:49:95:63:bd:8f:e3:d0:d4:75:40:e0:f9:b6:89: b2:21:01:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB13kRsD0hVx7WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YzVmYWVmMWEtYzBhNC00Njk3LTgwYmUtYjIxZDI5MWNiNjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW0vOapncv0TECZWT1+IiQ3CKps6MIPA3ktW iovfiV+P5co4SmOu7/LFGU27iYx3oJminYvY8zv/6acct/fKQUoks4wCAj9oUkZm 9NBHIDwyO1dgYfn7yx7Qv5UmuHqvMDt88GmIk0+hdd7jNkOMywZfwkEqY1W4YVii El0LxFPjgSxDSBieOR2NRUrPU1SnDkk+GxNyScp515y3YvbLkgNCTAzkvOxL+rTA JvJpl08rgUZlfOIwIKtlJ1iVxjKmjRp8ZMNxhs+QWJ4GYBprQjZ7Oxpg1u+RKHYx XphQC7Ha4xJvVeNP2LAxftQDw2nmSd3QkoRcHbZt1qFcuWuAYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4DLZ/mPJ7akcA3iHF3OVZX7DQKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGVlODZjYWQtNmU2Zi0z M2E4LWJjZTAtZDU5YjgwODIyYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9P+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5miDgQQ/nG/jfcY2RWIytZyrC7IygiZnA4Y0JVOZiiL03OJq2i7Ju6 whM5ZbkY3k1f3MDdoPGagkHVGse3Axy0Ew4wdNhgCNl0esr/3cFJ2zWcsY9fwHyS azFJgwIp2R200bCeazw7NrQ2IsMc4mvyTJzUYzvOO2cOsLVbD6QKDkuFz5SYgmRI Ar14MbduI8hjijv1iEEkW4/dic29dteJ/JG061ERYpEtTM1RmZFrY6pM6hxpRHT1 1p79Y1cVdkxkXiLGPL4WkYF41a2WgqFFkWGiBqBhu7E+Klm2gArHpB4sNCwfJt8u xXcWhJZJlWO9j+PQ1HVA4Pm2ibIhAZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:01 2025 by rpki-client