$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532387df-aa9b-315a-b943-6e4aba991842.roa File: 532387df-aa9b-315a-b943-6e4aba991842.roa (raw, json) Hash identifier: 8Ra8NkFb6JfQOCSsh2h/WLVpAh+N/ix10knXHAokQYM= Subject key identifier: 1C:44:4F:D4:4E:7F:54:9E:10:F2:E5:4B:FC:1F:7A:57:D0:EC:BE:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1D308691E0B2A302FED80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532387df-aa9b-315a-b943-6e4aba991842.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 8966 IP address blocks: 23.208.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d3:08:69:1e:0b:2a:30:2f:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=56f2da86-2a77-48d9-80b7-17e3df7ef205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3a:2b:b1:4d:fe:ae:39:e2:42:b0:b8:ff:7c: 09:af:c3:79:f2:f2:4c:9a:3d:8b:7e:bd:c9:a8:94: 7d:0c:94:ea:ea:93:74:92:51:43:95:d3:57:76:49: 9c:b9:cd:32:9d:0e:81:78:dd:04:ee:e0:d9:e3:cb: b7:57:a3:5a:10:6a:11:56:bf:10:4f:e4:df:22:21: 19:a0:9c:66:d4:41:aa:7f:fd:26:37:1c:63:30:14: 60:62:bd:f4:27:85:97:54:cf:d7:48:bb:e3:e0:fe: e2:77:a7:29:be:a1:b7:44:3c:86:5c:eb:98:4c:fd: 8e:63:1b:27:73:af:87:1e:e0:e2:7a:20:9e:f0:0b: 39:ef:3b:76:39:35:e3:b4:5b:4f:87:0e:e6:12:f2: 8a:68:cc:01:21:5a:f4:23:35:0e:34:4f:0c:d2:ad: 69:3b:4f:f4:37:5f:ec:5f:c5:7c:a4:f3:40:2e:a9: 51:e9:1a:8b:01:f1:c4:0c:8f:50:61:04:6a:c0:24: 54:49:b4:d0:f5:e3:62:81:69:b1:e8:c8:f7:a7:ee: a0:40:22:d7:f3:fc:68:df:eb:99:06:30:d6:63:38: 03:c5:ee:58:70:6c:24:63:4b:58:50:7e:ee:c7:1e: 05:87:71:f4:95:64:41:8f:70:f3:bd:16:83:7d:4a: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:4F:D4:4E:7F:54:9E:10:F2:E5:4B:FC:1F:7A:57:D0:EC:BE:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/532387df-aa9b-315a-b943-6e4aba991842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:49:f8:69:be:d6:0d:f8:f8:e2:2e:61:09:bc:67:6e:9a:c6: c3:4e:89:5a:73:d8:02:41:9d:88:a3:70:cc:19:1a:ee:53:08: 4f:49:a6:98:52:3d:e8:6f:cb:96:6c:ed:bf:07:d1:b2:6c:00: 36:6f:6b:37:4a:a8:d9:49:c1:5e:ed:d4:ce:3e:dc:ae:b2:56: f7:f7:45:06:e2:34:77:84:be:81:67:d3:e3:62:71:c0:19:99: ec:73:80:d5:c9:78:d7:95:50:ff:c5:e9:8b:02:3e:b7:31:d5: 00:3f:7d:44:3d:44:3c:73:f7:6b:6f:36:43:56:ed:0e:b4:43: 83:b0:87:f4:8d:68:b0:45:1a:de:2e:db:9f:3f:69:7c:9b:be: 35:e9:f0:06:b4:0e:65:4c:4b:8b:48:eb:a8:98:7f:43:e6:95: 15:a0:67:74:39:5d:b3:77:d9:3a:6d:ed:4c:51:3e:ad:65:20: 5e:34:11:7a:1f:4b:ae:3b:0c:cf:0e:84:b6:26:a2:5e:a7:5a: 94:df:0b:ce:a2:e1:50:89:cb:55:da:6d:64:45:32:19:ae:cf: 34:40:0f:fa:51:2a:a0:c8:b6:dd:a4:4f:43:6b:a4:51:3b:bb: 45:b7:1a:ff:9c:b5:c2:b7:3b:1a:2c:f0:94:7a:e5:35:8e:5a: 96:d6:05:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZodMIaR4LKjAv7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NTZmMmRhODYtMmE3Ny00OGQ5LTgwYjctMTdlM2RmN2VmMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DorsU3+rjniQrC4/3wJr8N58vJMmj2Lfr3J qJR9DJTq6pN0klFDldNXdkmcuc0ynQ6BeN0E7uDZ48u3V6NaEGoRVr8QT+TfIiEZ oJxm1EGqf/0mNxxjMBRgYr30J4WXVM/XSLvj4P7id6cpvqG3RDyGXOuYTP2OYxsn c6+HHuDieiCe8As57zt2OTXjtFtPhw7mEvKKaMwBIVr0IzUONE8M0q1pO0/0N1/s X8V8pPNALqlR6RqLAfHEDI9QYQRqwCRUSbTQ9eNigWmx6Mj3p+6gQCLX8/xo3+uZ BjDWYzgDxe5YcGwkY0tYUH7uxx4Fh3H0lWRBj3DzvRaDfUreCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxET9ROf1SeEPLlS/wfelfQ7L5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTMyMzg3ZGYtYWE5Yi0z MTVhLWI5NDMtNmU0YWJhOTkxODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRJ+Gm+1g34+OIuYQm8Z26axsNOiVpz2AJBnYijcMwZGu5TCE9JpphS Pehvy5Zs7b8H0bJsADZvazdKqNlJwV7t1M4+3K6yVvf3RQbiNHeEvoFn0+NiccAZ mexzgNXJeNeVUP/F6YsCPrcx1QA/fUQ9RDxz92tvNkNW7Q60Q4Owh/SNaLBFGt4u 258/aXybvjXp8Aa0DmVMS4tI66iYf0PmlRWgZ3Q5XbN32Tpt7UxRPq1lIF40EXof S647DM8OhLYmol6nWpTfC86i4VCJy1XabWRFMhmuzzRAD/pRKqDItt2kT0NrpFE7 u0W3Gv+ctcK3Oxos8JR65TWOWpbWBd8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:44 2025 by rpki-client