$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cdf958-21aa-381a-b875-4c27fe4c8048.roa File: 57cdf958-21aa-381a-b875-4c27fe4c8048.roa (raw, json) Hash identifier: AatBS1rvpIc3w9M+LvEez7moq3EenJ8zoOJA2F9OF28= Subject key identifier: AA:47:A4:FD:DA:93:36:54:3F:1F:86:3A:EF:3A:6B:F2:4D:C7:E2:08 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075B0B280C1822942F7600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cdf958-21aa-381a-b875-4c27fe4c8048.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.210.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5b:0b:28:0c:18:22:94:2f:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=f9b988cd-a492-4c7b-9749-eb9aea9d9d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6c:08:f8:d7:0b:51:b1:64:bd:6d:53:5d:68: ec:ac:53:a3:f2:6d:ea:6a:32:fe:94:9d:20:b4:62: 87:a4:b8:2a:97:e6:f8:8d:3b:e4:29:61:dd:e5:e9: 2a:42:d7:c5:c5:fd:1d:3c:c8:7e:7e:b9:83:1c:86: b1:de:38:30:c6:b8:02:f8:4d:dd:9e:9f:b9:50:de: 8e:aa:9d:5b:e8:a4:c3:74:7c:08:6d:13:93:80:0a: a7:95:94:e9:e0:a6:35:35:7d:22:91:f6:f4:1d:86: 04:77:5f:04:53:fe:8b:b3:05:23:2a:fa:8a:c1:be: 6c:2e:61:dc:bb:ae:88:a2:e3:6e:d5:b6:c3:87:af: 4f:9d:b3:c9:36:23:a5:7b:86:e4:81:5e:ac:cb:b6: 4b:d8:27:3d:61:8f:d8:83:f3:b0:94:55:95:56:95: 36:94:09:4d:88:4c:77:7c:83:1d:0d:97:40:11:76: 76:d0:47:9d:c2:d8:e2:80:6d:3a:f0:1b:d1:d4:2e: b1:d3:84:8e:49:4e:8f:6a:3b:63:53:8f:7d:f5:07: 49:69:ee:fd:84:44:f2:88:23:e5:b5:ba:09:04:8d: e1:57:95:27:e3:bf:f6:ca:0c:0a:18:41:87:5a:1c: fa:3b:49:41:34:77:cd:3c:a3:2c:16:a5:15:a6:7a: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:47:A4:FD:DA:93:36:54:3F:1F:86:3A:EF:3A:6B:F2:4D:C7:E2:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57cdf958-21aa-381a-b875-4c27fe4c8048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9a:74:02:97:53:64:66:13:51:7b:54:5e:2d:31:91:10:45: dc:35:f0:4a:09:24:e5:fa:d8:ad:1d:c7:00:82:1d:0b:ae:c4: 9a:ae:56:55:da:f8:6c:98:c7:62:dc:f5:2e:73:d4:5d:41:0c: 12:3b:83:55:0f:06:01:6a:23:e0:2c:4a:8c:e7:fc:7e:80:10: d4:49:83:42:82:24:ef:77:8b:db:57:ee:fd:45:12:59:e3:c9: be:ab:8f:4d:1c:39:cb:46:a0:e0:a3:a1:12:f4:24:9f:61:72: 50:41:43:6d:d9:4e:c2:33:32:f9:84:4a:0d:56:67:f2:92:c6: ac:40:66:20:06:aa:a9:00:15:d2:9c:fb:82:38:d8:83:47:7c: 41:d1:f9:d5:99:9c:c5:15:7e:a2:f4:a0:16:7e:24:38:97:ec: d4:88:2b:79:0a:c8:30:87:c8:95:0c:b9:27:c2:23:f7:77:e1: 1e:d9:fb:fc:95:5d:59:ef:90:88:e6:ff:51:ae:57:d1:f0:2f: c8:e4:a6:1b:e9:30:f1:31:26:05:bb:69:33:96:5b:b3:5a:a1: 28:b2:c0:cf:c7:41:49:80:ea:88:7a:a9:31:db:8b:64:31:28: fb:8a:88:18:c1:0b:37:b2:3b:65:67:44:98:8c:0b:9c:8d:a2: 17:03:93:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1sLKAwYIpQvdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZjliOTg4Y2QtYTQ5Mi00YzdiLTk3NDktZWI5YWVhOWQ5ZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2wI+NcLUbFkvW1TXWjsrFOj8m3qajL+lJ0g tGKHpLgql+b4jTvkKWHd5ekqQtfFxf0dPMh+frmDHIax3jgwxrgC+E3dnp+5UN6O qp1b6KTDdHwIbROTgAqnlZTp4KY1NX0ikfb0HYYEd18EU/6LswUjKvqKwb5sLmHc u66IouNu1bbDh69PnbPJNiOle4bkgV6sy7ZL2Cc9YY/Yg/OwlFWVVpU2lAlNiEx3 fIMdDZdAEXZ20EedwtjigG068BvR1C6x04SOSU6PajtjU4999QdJae79hETyiCPl tboJBI3hV5Un47/2ygwKGEGHWhz6O0lBNHfNPKMsFqUVpnqjVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpHpP3akzZUPx+GOu86a/JNx+IIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdjZGY5NTgtMjFhYS0z ODFhLWI4NzUtNGMyN2ZlNGM4MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9L3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOadAKXU2RmE1F7VF4tMZEQRdw18EoJJOX62K0dxwCCHQuuxJquVlXa +GyYx2Lc9S5z1F1BDBI7g1UPBgFqI+AsSozn/H6AENRJg0KCJO93i9tX7v1FElnj yb6rj00cOctGoOCjoRL0JJ9hclBBQ23ZTsIzMvmESg1WZ/KSxqxAZiAGqqkAFdKc +4I42INHfEHR+dWZnMUVfqL0oBZ+JDiX7NSIK3kKyDCHyJUMuSfCI/d34R7Z+/yV XVnvkIjm/1GuV9HwL8jkphvpMPExJgW7aTOWW7NaoSiywM/HQUmA6oh6qTHbi2Qx KPuKiBjBCzeyO2VnRJiMC5yNohcDk3Y= -----END CERTIFICATE-----Generated at Mon Oct 20 02:51:54 2025 by rpki-client