$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa File: 731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa (raw, json) Hash identifier: zanFfngq+Z/UgspnY/lSdOAIhRAHc6XUBlQWMIRkUEY= Subject key identifier: 16:9B:39:7C:49:E6:22:C7:C1:9C:C1:0F:82:3A:76:BB:1B:B9:65:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4CBF576E354A2BF7F100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.209.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4c:bf:57:6e:35:4a:2b:f7:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=f7bddf28-143d-4dd3-b609-c13fbbcd5f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c4:97:99:3c:0b:35:01:71:12:19:2e:7c:98: 4e:d6:31:69:72:17:20:e6:40:6e:93:90:7e:16:1e: a7:b3:e9:92:25:6d:5b:0a:0c:8a:5e:83:a8:b8:d6: 79:7d:6d:aa:76:86:71:27:8b:7f:91:dd:5c:49:ea: 61:e5:10:ae:d1:26:fb:20:24:e1:07:c3:af:d5:23: fc:10:f2:c2:f9:b6:fa:df:01:99:6f:91:c1:e8:b9: d1:36:1c:ed:1b:98:4e:96:0b:49:84:41:62:6f:03: 12:7a:bd:59:a7:cf:42:d4:a3:41:e5:ce:f1:42:fd: 8f:6a:fc:8c:dc:12:4c:54:6d:50:85:9c:ab:b8:83: 5f:35:0b:5f:9e:ff:06:33:c4:1b:9d:e6:9a:ad:f4: 2e:93:1d:e4:3b:40:92:49:c9:02:90:6b:d5:73:e1: ba:18:91:19:eb:93:64:c9:56:a2:13:94:f8:ae:ff: 71:43:ce:7b:3b:a6:7d:e9:c0:44:63:6b:92:fc:0f: 31:9a:b8:de:90:5e:47:61:55:d0:76:e4:ff:d6:91: 37:fc:9b:c1:67:07:38:f9:90:47:8c:c4:4e:b5:23: da:55:87:f0:40:e7:1c:4a:45:d7:10:06:95:a3:fb: 7a:56:ed:2f:6c:c5:77:aa:71:de:87:89:00:5d:47: 24:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9B:39:7C:49:E6:22:C7:C1:9C:C1:0F:82:3A:76:BB:1B:B9:65:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/731fc2ee-480b-3e64-8ef1-4301fe4dd333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4a:53:a8:96:d0:ed:dc:58:e4:96:95:3b:76:de:d4:ed:ea: 1e:29:7f:3d:f9:ac:6e:79:78:27:e5:35:30:dd:64:fa:af:5e: a4:b4:7d:84:d7:5c:a6:86:82:61:8c:b6:67:7c:e3:d5:ed:0c: 7d:87:85:dd:80:50:96:6c:4e:c4:fa:e6:ce:3d:30:5f:bf:d1: 13:a4:55:6a:00:40:73:cc:62:4e:5e:6a:58:94:6e:ed:d3:82: 65:a0:b4:a2:a7:42:6a:f2:1f:51:80:cb:26:0c:ea:cb:5f:ab: 98:77:10:fc:82:95:e5:ab:99:07:c6:1d:50:c7:af:13:14:e3: 90:5b:90:76:88:a0:e6:fa:96:26:89:21:17:47:77:7d:26:bc: eb:78:20:93:e7:b2:72:22:a3:f6:86:aa:26:83:ea:c9:1c:07: da:45:90:d1:3c:f1:73:46:b7:4e:de:58:38:a8:c7:76:a4:b0: 42:4e:34:89:19:20:f6:77:0d:50:40:4d:93:54:60:e2:ad:62: 7b:01:60:06:16:4a:cb:f6:21:5b:0b:da:9f:cf:3a:da:3c:be: 8e:fa:d3:f9:d4:f2:81:2a:a4:22:84:bb:13:91:b6:db:e0:3d: f3:d5:09:7d:c6:cf:91:83:08:ed:e9:e1:d4:44:88:bf:b3:f4: d4:d6:33:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEy/V241Siv38QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjdiZGRmMjgtMTQzZC00ZGQzLWI2MDktYzEzZmJiY2Q1ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8SXmTwLNQFxEhkufJhO1jFpchcg5kBuk5B+ Fh6ns+mSJW1bCgyKXoOouNZ5fW2qdoZxJ4t/kd1cSeph5RCu0Sb7ICThB8Ov1SP8 EPLC+bb63wGZb5HB6LnRNhztG5hOlgtJhEFibwMSer1Zp89C1KNB5c7xQv2PavyM 3BJMVG1QhZyruINfNQtfnv8GM8QbneaarfQukx3kO0CSSckCkGvVc+G6GJEZ65Nk yVaiE5T4rv9xQ857O6Z96cBEY2uS/A8xmrjekF5HYVXQduT/1pE3/JvBZwc4+ZBH jMROtSPaVYfwQOccSkXXEAaVo/t6Vu0vbMV3qnHeh4kAXUckjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBabOXxJ5iLHwZzBD4I6drsbuWUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzMxZmMyZWUtNDgwYi0z ZTY0LThlZjEtNDMwMWZlNGRkMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9GpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1KU6iW0O3cWOSWlTt23tTt6h4pfz35rG55eCflNTDdZPqvXqS0fYTX XKaGgmGMtmd849XtDH2Hhd2AUJZsTsT65s49MF+/0ROkVWoAQHPMYk5ealiUbu3T gmWgtKKnQmryH1GAyyYM6stfq5h3EPyCleWrmQfGHVDHrxMU45BbkHaIoOb6liaJ IRdHd30mvOt4IJPnsnIio/aGqiaD6skcB9pFkNE88XNGt07eWDiox3aksEJONIkZ IPZ3DVBATZNUYOKtYnsBYAYWSsv2IVsL2p/POto8vo760/nU8oEqpCKEuxORttvg PfPVCX3Gz5GDCO3p4dREiL+z9NTWM/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:45 2025 by rpki-client