$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/560a4e68-3c0d-3be7-9c2a-979f8c02ee38.roa File: 560a4e68-3c0d-3be7-9c2a-979f8c02ee38.roa (raw, json) Hash identifier: fX1nkgu00E2Q5RAEGc9FanoV2URAg+41mKPDuPme69E= Subject key identifier: BC:0D:1D:B7:5C:0A:E8:92:13:3D:F2:09:02:E6:4B:EB:ED:98:5F:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1F7D495177353BD815C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/560a4e68-3c0d-3be7-9c2a-979f8c02ee38.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 35994 IP address blocks: 23.214.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f7:d4:95:17:73:53:bd:81:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=5df3b7bb-5375-4a7e-9184-95cb2e337e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:ac:a1:d1:0b:4e:4e:58:83:8f:22:1f:11: cc:01:c4:cc:c2:76:d3:8c:60:ca:38:27:b1:e2:11: b7:24:76:66:e7:b8:cc:b8:a4:ae:4c:5c:c4:e8:ac: 93:9e:de:56:d1:31:d6:33:c9:45:cd:04:39:93:6b: a2:1f:37:5a:cc:a6:a8:d8:4f:78:3a:db:e2:63:6f: 74:d6:79:39:41:d6:53:0d:9f:5e:fb:9f:58:55:e4: 59:70:b5:1e:80:af:d5:47:45:de:46:d0:83:5c:6f: 5f:c3:bc:11:15:ab:e6:09:87:a6:53:8c:89:fc:0e: af:2d:9d:2a:00:8e:8c:90:8b:bd:82:e3:eb:64:d8: e8:a0:cb:54:f6:53:84:89:6a:68:ac:5a:ea:4a:ec: d7:d7:3b:44:f0:f4:68:23:c1:df:a8:20:8e:44:aa: 1f:6d:23:ca:f9:aa:64:45:0a:e0:d7:78:bf:0c:f3: 41:78:4e:58:25:00:bc:de:36:79:ae:80:6d:b8:51: d3:ca:64:5f:d3:cf:c5:37:91:e5:65:93:6d:23:e1: 0d:d8:e8:9f:5a:9a:cc:40:83:96:45:f7:29:76:c8: 57:1f:22:0c:c6:ed:35:da:f9:d6:4a:83:a0:83:69: 0e:eb:c2:fa:99:1d:2d:fa:a7:bb:f0:15:75:f2:80: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0D:1D:B7:5C:0A:E8:92:13:3D:F2:09:02:E6:4B:EB:ED:98:5F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/560a4e68-3c0d-3be7-9c2a-979f8c02ee38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:49:d3:ba:e4:20:16:26:c0:cc:71:49:38:2b:5a:73:b6:0f: 95:4f:f3:97:52:6e:7a:33:64:c4:31:9a:49:2d:9f:5a:77:e9: 78:92:c6:c8:8c:22:e0:80:b3:34:01:e7:d3:df:2b:ab:6b:07: 1b:2e:8d:3b:5b:4d:46:57:0c:e2:7b:ff:22:4a:59:53:2b:22: f1:a1:41:1e:47:c6:c2:7d:ef:b8:83:ce:cf:66:7f:df:0c:67: 8d:91:52:3a:dc:47:6b:74:22:03:a6:12:a7:0c:34:1a:35:ce: 64:3d:1d:23:45:59:67:b7:58:02:1f:40:e2:86:d9:8d:c1:12: c5:29:f0:9f:d7:b7:83:ed:c8:91:53:d2:c0:15:35:64:cd:da: 14:75:78:de:1b:14:56:5a:66:b9:5f:11:6c:d1:73:fd:f4:4b: c2:92:c9:01:69:63:3a:e2:e0:33:d1:9a:9b:0c:5e:5a:7b:14: 9b:1d:af:0a:8e:20:29:9c:0a:38:b7:5a:e7:29:94:b7:8a:06: 99:9f:6f:d8:f5:28:e0:2f:cb:56:64:5d:53:e9:6d:a2:0a:f6: c3:39:d1:2b:25:07:7f:d9:40:b0:23:e9:8e:75:57:46:bb:50: f0:0c:47:b9:d6:5d:66:c0:b6:92:29:60:7d:81:62:4f:f1:9d: 45:fc:a1:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0ffUlRdzU72BXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NWRmM2I3YmItNTM3NS00YTdlLTkxODQtOTVjYjJlMzM3ZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/KsodELTk5Yg48iHxHMAcTMwnbTjGDKOCex 4hG3JHZm57jMuKSuTFzE6KyTnt5W0THWM8lFzQQ5k2uiHzdazKao2E94OtviY290 1nk5QdZTDZ9e+59YVeRZcLUegK/VR0XeRtCDXG9fw7wRFavmCYemU4yJ/A6vLZ0q AI6MkIu9guPrZNjooMtU9lOEiWporFrqSuzX1ztE8PRoI8HfqCCORKofbSPK+apk RQrg13i/DPNBeE5YJQC83jZ5roBtuFHTymRf08/FN5HlZZNtI+EN2OifWprMQIOW RfcpdshXHyIMxu012vnWSoOgg2kO68L6mR0t+qe78BV18oAT6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwNHbdcCuiSEz3yCQLmS+vtmF+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTYwYTRlNjgtM2MwZC0z YmU3LTljMmEtOTc5ZjhjMDJlZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlJ07rkIBYmwMxxSTgrWnO2D5VP85dSbnozZMQxmkktn1p36XiSxsiM IuCAszQB59PfK6trBxsujTtbTUZXDOJ7/yJKWVMrIvGhQR5HxsJ977iDzs9mf98M Z42RUjrcR2t0IgOmEqcMNBo1zmQ9HSNFWWe3WAIfQOKG2Y3BEsUp8J/Xt4PtyJFT 0sAVNWTN2hR1eN4bFFZaZrlfEWzRc/30S8KSyQFpYzri4DPRmpsMXlp7FJsdrwqO ICmcCji3WucplLeKBpmfb9j1KOAvy1ZkXVPpbaIK9sM50SslB3/ZQLAj6Y51V0a7 UPAMR7nWXWbAtpIpYH2BYk/xnUX8obw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:35:29 2025 by rpki-client