$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa File: 571e1e21-5bb7-32bb-9449-889782fa7daf.roa (raw, json) Hash identifier: 7tGiHtqc+kvpjeYX0uJJ0ANSCnZa615Nljls1KQoUYY= Subject key identifier: FF:0B:2B:FB:79:E6:EC:4F:6E:E5:ED:3E:60:E6:3B:35:45:50:23:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07541C5092545460DBC400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.212.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:54:1c:50:92:54:54:60:db:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=814d733f-1965-4d5a-b791-5746dc3e7d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:05:2b:04:ad:5c:d2:92:64:44:a4:cf:21: ec:32:59:fe:f0:41:6e:0c:aa:bd:3b:5b:d7:50:eb: fa:a5:b2:bf:96:13:25:f4:7f:80:11:ee:8a:ce:ab: bc:38:35:0a:b1:f3:fa:4c:d1:43:bb:31:16:c7:fe: 45:70:7b:d4:d5:1b:69:5b:27:f4:e6:63:db:f8:f2: 9e:8e:46:cb:ba:6a:4e:c5:08:21:36:dd:c7:f0:09: a2:9d:c7:1c:a7:94:dc:70:b9:7b:e2:03:73:91:80: 51:2f:6d:df:01:5c:05:01:e7:d7:50:ca:60:9b:d1: 08:8f:9b:cb:b7:9b:9f:f5:16:f7:65:7c:b9:09:02: bf:8c:47:02:3b:58:74:a4:1c:83:19:8c:8e:34:8a: f8:3f:9b:c2:c6:4e:4b:b0:2e:eb:8d:f1:3c:d1:6a: b1:71:44:77:f3:50:8f:38:3a:f5:df:02:93:5a:0c: c1:bb:ff:df:5c:e0:a1:d2:0f:d3:4d:68:10:01:00: 7c:92:42:b9:a1:75:7d:08:7d:c3:bb:4f:1f:8f:22: a4:25:ff:5f:71:1f:96:da:77:63:ff:6e:de:19:15: b4:4f:19:85:3e:e1:08:76:b1:fa:4c:cb:48:2a:87: b3:17:44:4d:11:72:4e:3b:c7:c2:0e:cb:1c:bb:09: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0B:2B:FB:79:E6:EC:4F:6E:E5:ED:3E:60:E6:3B:35:45:50:23:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/571e1e21-5bb7-32bb-9449-889782fa7daf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7a:3e:b3:cb:a0:e4:dd:26:e6:43:05:7d:dd:5b:2e:d9:f1: ec:4d:ce:f8:29:10:d0:9f:bc:b2:90:cc:af:dd:0d:5b:cd:7f: 9d:6f:2f:80:02:b0:29:23:ec:26:52:56:68:10:64:2f:ea:4c: 60:a3:fe:48:fb:e7:27:62:9d:ee:e4:7f:a0:01:65:ac:39:10: c6:51:9c:ba:c9:38:54:2d:16:d5:2f:6f:16:bc:44:6c:e1:a4: a8:3a:07:24:45:66:0c:4e:b3:63:5a:54:bb:e1:e8:6e:1a:18: e0:f5:9f:62:ce:c4:c7:51:df:ed:1d:35:3d:b1:a0:fd:1a:36: 08:58:9a:64:fc:a9:4f:74:8a:54:16:a6:d7:e1:75:04:ff:f2: a3:0d:8b:5f:98:cf:4d:c8:7a:8d:b4:44:63:d2:87:f5:23:53: e5:80:bb:26:a0:35:f1:5d:28:1d:25:7d:55:32:aa:04:46:fe: 19:b8:02:44:f6:5f:84:b0:68:5a:7b:64:75:79:2c:5f:a8:c2: c5:9b:2b:e4:7e:f1:e0:12:99:23:d4:15:11:34:80:6f:1c:78: c7:0b:fe:91:f7:de:f8:4d:67:ee:fd:11:66:60:8a:41:8f:06: 10:44:1f:7e:ca:38:eb:00:c8:7c:7c:5c:1f:90:a4:21:cf:23: b8:53:08:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1QcUJJUVGDbxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODE0ZDczM2YtMTk2NS00ZDVhLWI3OTEtNTc0NmRjM2U3ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcEFKwStXNKSZESkzyHsMln+8EFuDKq9O1vX UOv6pbK/lhMl9H+AEe6Kzqu8ODUKsfP6TNFDuzEWx/5FcHvU1RtpWyf05mPb+PKe jkbLumpOxQghNt3H8Amincccp5TccLl74gNzkYBRL23fAVwFAefXUMpgm9EIj5vL t5uf9Rb3ZXy5CQK/jEcCO1h0pByDGYyONIr4P5vCxk5LsC7rjfE80WqxcUR381CP ODr13wKTWgzBu//fXOCh0g/TTWgQAQB8kkK5oXV9CH3Du08fjyKkJf9fcR+W2ndj /27eGRW0TxmFPuEIdrH6TMtIKoezF0RNEXJOO8fCDsscuwl2RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8LK/t55uxPbuXtPmDmOzVFUCP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTcxZTFlMjEtNWJiNy0z MmJiLTk0NDktODg5NzgyZmE3ZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd6PrPLoOTdJuZDBX3dWy7Z8exNzvgpENCfvLKQzK/dDVvNf51vL4AC sCkj7CZSVmgQZC/qTGCj/kj75ydine7kf6ABZaw5EMZRnLrJOFQtFtUvbxa8RGzh pKg6ByRFZgxOs2NaVLvh6G4aGOD1n2LOxMdR3+0dNT2xoP0aNghYmmT8qU90ilQW ptfhdQT/8qMNi1+Yz03Ieo20RGPSh/UjU+WAuyagNfFdKB0lfVUyqgRG/hm4AkT2 X4SwaFp7ZHV5LF+owsWbK+R+8eASmSPUFRE0gG8ceMcL/pH33vhNZ+79EWZgikGP BhBEH37KOOsAyHx8XB+QpCHPI7hTCBE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:12:41 2025 by rpki-client