$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a40eea8-3a06-3efb-8ee2-ea241672b810.roa File: 6a40eea8-3a06-3efb-8ee2-ea241672b810.roa (raw, json) Hash identifier: isRGF+m8q1KM29n34TE2unznQ7+XSDv+PnTylr3Hu5k= Subject key identifier: DD:DD:39:54:95:85:02:95:08:7D:11:83:3F:C0:6D:2E:F3:6C:2C:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07587EF86BD66380899530 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a40eea8-3a06-3efb-8ee2-ea241672b810.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.209.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:58:7e:f8:6b:d6:63:80:89:95:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9d3c346d-61aa-469a-b436-16d7c922bcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:d0:d6:96:d3:cc:5b:26:32:06:28:06:22: 3a:e9:d4:ee:c3:fa:30:72:a4:12:e1:fa:a5:8a:f4: 13:9c:c4:f0:4f:dc:e0:dd:89:77:bd:eb:73:84:2b: 24:23:ed:a2:9d:30:11:2b:9e:20:d5:be:44:0a:d6: 70:3a:ec:c6:35:e0:ed:18:22:b6:46:e9:61:47:db: 07:e7:81:35:ad:40:23:10:b9:5a:a1:eb:1f:4d:36: 60:12:8a:b7:99:17:b9:4e:07:3a:4c:bf:d5:ff:b7: 6a:9e:b8:95:ea:2a:1d:8a:4b:9b:82:b1:a0:f1:1a: e0:6d:90:a2:8d:d7:c2:16:65:91:23:2c:39:9e:b7: bb:79:e0:d7:ea:cc:b1:d4:90:af:1b:e0:5c:e6:bc: d8:4a:7e:b7:0c:bd:fd:43:9f:41:ec:1e:15:8b:60: 39:5f:30:3f:e3:a8:45:5a:6d:9f:db:c7:f5:2a:34: c0:69:d0:e6:4f:3a:68:e6:83:c9:65:f1:aa:5f:54: 03:e1:5d:b5:ff:e0:ca:67:53:3d:1d:fa:70:9a:cc: fa:b5:78:36:c9:f5:c6:17:b8:62:15:67:ad:2c:79: 3b:63:ab:28:5a:57:d8:71:73:d0:40:39:ae:19:73: d1:bf:9c:a1:34:81:15:41:8c:75:3a:fa:1f:19:1c: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DD:39:54:95:85:02:95:08:7D:11:83:3F:C0:6D:2E:F3:6C:2C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a40eea8-3a06-3efb-8ee2-ea241672b810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7f:a1:41:46:05:2d:09:bc:3c:da:62:82:b2:71:dd:8c:f9: 8e:94:5e:6a:51:28:81:bf:12:e7:18:e5:8b:db:76:85:db:84: 2a:bd:a2:57:e9:8c:30:5e:20:e4:ef:18:d7:fa:46:8b:18:aa: d4:6d:84:ff:a6:9a:ad:29:66:54:b0:15:41:36:ad:36:de:98: 7f:76:c9:e0:97:ff:aa:01:dd:ad:54:4b:21:29:31:c4:58:2c: 84:48:27:90:35:8e:cf:a6:a3:14:bb:9e:c2:79:bb:37:85:43: 01:73:4e:b1:27:ae:66:2c:aa:bf:3e:ef:16:75:b2:38:56:83: 6e:ba:e4:f2:36:33:c1:6b:1b:c4:33:bb:3b:88:71:e5:74:50: 26:79:2a:66:83:99:ae:f2:d7:c6:aa:54:1e:3b:5f:0f:64:54: 43:bf:c6:00:21:b4:0e:5a:0e:7f:e2:95:ad:12:eb:90:ef:55: 66:a2:eb:eb:ae:9a:c7:cf:69:56:93:70:a9:43:62:23:1e:70: c2:06:f9:f0:2f:2c:c3:1f:9f:f0:4f:88:1d:62:34:9d:48:48: e0:e0:64:58:13:b5:29:ea:10:f1:4a:a9:7c:c3:f5:9d:55:94: e5:5c:b4:e0:4f:4a:93:ce:04:17:bc:3a:77:83:6a:72:95:1a: 31:b0:2c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1h++GvWY4CJlTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWQzYzM0NmQtNjFhYS00NjlhLWI0MzYtMTZkN2M5MjJiY2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+nQ1pbTzFsmMgYoBiI66dTuw/owcqQS4fql ivQTnMTwT9zg3Yl3vetzhCskI+2inTARK54g1b5ECtZwOuzGNeDtGCK2RulhR9sH 54E1rUAjELlaoesfTTZgEoq3mRe5Tgc6TL/V/7dqnriV6iodikubgrGg8RrgbZCi jdfCFmWRIyw5nre7eeDX6syx1JCvG+Bc5rzYSn63DL39Q59B7B4Vi2A5XzA/46hF Wm2f28f1KjTAadDmTzpo5oPJZfGqX1QD4V21/+DKZ1M9Hfpwmsz6tXg2yfXGF7hi FWetLHk7Y6soWlfYcXPQQDmuGXPRv5yhNIEVQYx1OvofGRwKSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3dOVSVhQKVCH0Rgz/AbS7zbCwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmE0MGVlYTgtM2EwNi0z ZWZiLThlZTItZWEyNDE2NzJiODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9EuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt/oUFGBS0JvDzaYoKycd2M+Y6UXmpRKIG/EucY5YvbdoXbhCq9olfp jDBeIOTvGNf6RosYqtRthP+mmq0pZlSwFUE2rTbemH92yeCX/6oB3a1USyEpMcRY LIRIJ5A1js+moxS7nsJ5uzeFQwFzTrEnrmYsqr8+7xZ1sjhWg2665PI2M8FrG8Qz uzuIceV0UCZ5KmaDma7y18aqVB47Xw9kVEO/xgAhtA5aDn/ila0S65DvVWai6+uu msfPaVaTcKlDYiMecMIG+fAvLMMfn/BPiB1iNJ1ISODgZFgTtSnqEPFKqXzD9Z1V lOVctOBPSpPOBBe8OneDanKVGjGwLEY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:05 2025 by rpki-client