$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b543965-9fad-3a4c-8589-b2a0842851d3.roa File: 5b543965-9fad-3a4c-8589-b2a0842851d3.roa (raw, json) Hash identifier: Ms8CJHYcoJQleBjrkUGV6bpA+VXJAOh1Cw2IOUcE13E= Subject key identifier: 45:7D:90:39:DF:46:81:71:98:CA:67:A9:73:B3:01:01:89:CF:0F:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FC9F8BF099FE3A4440EA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b543965-9fad-3a4c-8589-b2a0842851d3.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.218.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9f:8b:f0:99:fe:3a:44:40:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=2b659d3d-b24c-4bdc-b726-c63c3d9154c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:31:c9:c6:64:40:ae:af:63:fa:c0:db:b6:8a: 4e:09:29:db:9c:c8:80:05:02:19:db:6d:eb:bc:8c: 8c:07:43:d6:1d:0e:fc:f3:21:00:5e:50:d1:f3:c1: 60:3a:ce:3b:2c:b5:f5:bf:f4:7d:91:c9:f2:e2:d2: 75:2f:2d:1b:26:bb:7d:db:f5:13:c8:75:fd:bb:3c: 0f:41:9f:61:d1:f2:d2:8f:93:0f:d9:4a:91:c2:bb: 40:d6:35:4f:d4:09:26:e5:3d:c8:8b:8f:fa:15:c6: 58:04:a5:0a:00:70:46:a5:44:00:10:5d:55:31:ff: 2a:8a:1f:7d:04:9a:c2:f2:8f:4c:db:ab:09:62:5f: 1f:76:b1:d9:f2:bb:87:ad:d8:03:7a:ed:ec:40:02: e7:2d:05:f8:ca:2d:dc:5f:b8:6f:d3:56:50:8a:07: 5d:5e:a6:5c:78:3f:d4:7d:a1:ba:31:13:4b:18:af: de:df:4f:38:48:9f:ff:8c:f7:c8:b9:bf:d8:ae:c6: 2f:eb:05:ba:fa:9f:83:88:a2:cb:2b:67:db:bb:fb: fd:35:2d:ba:46:35:51:3a:09:f4:c2:dc:c5:d6:ac: 05:05:e9:c9:24:da:ce:61:b2:13:b0:06:72:f1:df: 94:25:c8:fd:65:51:fa:86:a5:2f:a7:5e:00:40:0b: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7D:90:39:DF:46:81:71:98:CA:67:A9:73:B3:01:01:89:CF:0F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b543965-9fad-3a4c-8589-b2a0842851d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:90:bc:cb:84:5d:c1:51:43:89:60:e3:28:57:1b:1c:84:ab: 43:88:98:f2:de:e6:b3:41:71:3e:44:62:79:c5:cb:41:43:c9: ff:83:5e:eb:d0:ea:23:67:34:da:1a:f9:31:af:1a:b2:df:5e: d5:b6:38:42:8c:f4:ca:47:06:ea:07:ff:d5:26:46:5f:34:10: 40:32:4a:f1:dc:f2:39:c6:82:c3:32:7d:64:80:bd:9c:f1:03: d9:e8:5c:d0:51:6e:ce:03:b8:66:09:37:2c:3a:44:a1:dd:2f: b6:c5:22:7c:96:db:84:f0:d1:aa:fd:e0:53:43:c8:40:e6:e0: 2f:0c:29:93:83:96:e7:bb:33:47:bd:a5:f0:09:b2:c9:99:7c: 0c:2d:f9:10:5e:81:1c:97:9a:c6:3e:eb:b4:6e:93:11:d4:91: 74:2b:93:a4:ab:a0:1d:8b:51:03:22:53:f1:5e:05:0c:47:50: d8:d5:f6:08:3c:de:d3:bf:9d:5d:89:62:3d:4f:f8:09:0c:19: c1:48:5f:e1:ea:01:9a:55:4f:39:f1:03:c9:01:f4:8b:83:37: 4e:80:4c:1f:71:58:38:c7:28:a4:f1:16:50:4e:bd:1a:ec:07: 90:fb:6e:fc:81:47:4f:a0:19:5a:cf:3c:28:c4:5e:46:b4:7a: 52:b5:a9:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J+L8Jn+OkRA6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk MmI2NTlkM2QtYjI0Yy00YmRjLWI3MjYtYzYzYzNkOTE1NGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTHJxmRArq9j+sDbtopOCSnbnMiABQIZ223r vIyMB0PWHQ788yEAXlDR88FgOs47LLX1v/R9kcny4tJ1Ly0bJrt92/UTyHX9uzwP QZ9h0fLSj5MP2UqRwrtA1jVP1Akm5T3Ii4/6FcZYBKUKAHBGpUQAEF1VMf8qih99 BJrC8o9M26sJYl8fdrHZ8ruHrdgDeu3sQALnLQX4yi3cX7hv01ZQigddXqZceD/U faG6MRNLGK/e3084SJ//jPfIub/YrsYv6wW6+p+DiKLLK2fbu/v9NS26RjVROgn0 wtzF1qwFBenJJNrOYbITsAZy8d+UJcj9ZVH6hqUvp14AQAsasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV9kDnfRoFxmMpnqXOzAQGJzw8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWI1NDM5NjUtOWZhZC0z YTRjLTg1ODktYjJhMDg0Mjg1MWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9qcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmQvMuEXcFRQ4lg4yhXGxyEq0OImPLe5rNBcT5EYnnFy0FDyf+DXuvQ 6iNnNNoa+TGvGrLfXtW2OEKM9MpHBuoH/9UmRl80EEAySvHc8jnGgsMyfWSAvZzx A9noXNBRbs4DuGYJNyw6RKHdL7bFInyW24Tw0ar94FNDyEDm4C8MKZODlue7M0e9 pfAJssmZfAwt+RBegRyXmsY+67RukxHUkXQrk6SroB2LUQMiU/FeBQxHUNjV9gg8 3tO/nV2JYj1P+AkMGcFIX+HqAZpVTznxA8kB9IuDN06ATB9xWDjHKKTxFlBOvRrs B5D7bvyBR0+gGVrPPCjEXka0elK1qcI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:35 2025 by rpki-client