$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa File: 784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa (raw, json) Hash identifier: tncAxtksF0RypCBOHayyK7wupC2qKc3Na7J5FJI0aEA= Subject key identifier: F9:A4:D6:E0:A0:8F:1B:FB:47:FE:4D:DD:7F:63:D3:A7:40:EE:29:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1F8F7A9CC598571223100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.214.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:f8:f7:a9:cc:59:85:71:22:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=38fed780-16a9-4860-9ac0-2ec5937ed227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a4:8c:e1:c9:c6:d3:80:0a:c1:70:da:72:8e: 15:2c:00:ef:5a:22:7b:c0:8d:60:c2:1e:61:6c:56: 0e:48:60:4b:6d:c8:a3:02:8d:0b:1c:3d:e8:9c:10: bc:31:a3:01:08:9c:68:eb:6d:5b:07:c3:81:5d:f4: 7c:01:95:6f:a2:61:fa:fc:81:89:50:da:27:35:1f: c9:62:ec:8b:2c:fe:af:9a:f4:28:0a:92:12:c4:93: 03:e7:6e:27:d8:59:a7:50:cf:bb:55:72:a0:05:a4: 19:18:35:42:c3:f1:ff:1d:c3:36:f4:0e:9d:94:b6: ff:b7:a2:7c:90:dc:fd:68:a8:a5:ea:fe:51:b7:97: 86:a6:a2:89:75:4d:7f:7e:6c:d9:8f:13:f8:3a:8d: 82:85:5c:75:ac:2b:bf:17:27:97:11:68:33:cb:d3: 1c:c7:71:0f:fc:9b:ef:2a:f3:27:ee:98:b7:1b:df: 60:a1:9b:3b:5a:a7:d4:e5:f1:8a:c7:7c:ff:e5:de: c7:33:ea:f9:9a:6f:5c:fa:74:e9:0b:4e:a1:21:f3: 25:a6:7d:63:db:5a:10:dd:fe:0a:08:48:52:7b:8e: fc:9a:54:a0:f1:3e:26:b5:14:2c:5b:72:43:8d:34: f0:f2:30:49:dd:00:47:0e:71:3e:0b:9d:43:da:2f: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A4:D6:E0:A0:8F:1B:FB:47:FE:4D:DD:7F:63:D3:A7:40:EE:29:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/784a4a3c-cd8c-33d6-a553-80be2a325e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:a5:26:0b:fe:d6:2f:e1:55:ea:d8:a1:93:b2:3e:88:9b:fc: 05:ab:8e:d7:89:4a:88:85:77:44:e5:5f:3c:7e:fb:a1:2a:e6: 6e:fe:a5:98:80:c8:50:b3:fa:ba:06:49:eb:55:55:e6:21:88: 1e:ab:6e:db:44:eb:09:61:9e:f1:e2:1b:a8:5d:da:46:2c:20: 47:29:60:ec:23:8d:ec:5f:f9:5c:c1:16:ea:ae:2f:38:db:cd: c4:d3:4d:76:05:66:03:e1:be:47:c6:1c:c7:a7:db:51:74:95: eb:df:e2:cb:a8:09:97:96:c9:89:9d:b8:36:f3:89:be:1b:3c: 02:2f:1c:7a:7b:3a:58:e9:a5:8d:1e:bb:cc:20:87:06:6a:3c: 86:2f:a6:94:38:c6:77:ce:8c:71:3d:12:d0:2c:05:a0:7e:e6: a5:b8:e1:38:47:66:47:79:e2:97:33:2e:77:a0:8b:99:46:fd: a3:c1:fe:55:77:84:e9:7f:50:b9:e8:20:24:d5:99:95:e0:8b: 5a:01:d9:21:26:1c:55:24:b1:2f:f9:b8:9b:b4:01:aa:57:84: ab:0a:11:1e:f3:4f:d9:0f:27:dc:a3:6b:a0:d3:77:10:fb:b2: 91:c6:11:d6:2d:27:61:da:61:a6:16:30:c3:5b:bb:8a:86:bc: 2e:27:3f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fj3qcxZhXEiMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MzhmZWQ3ODAtMTZhOS00ODYwLTlhYzAtMmVjNTkzN2VkMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6SM4cnG04AKwXDaco4VLADvWiJ7wI1gwh5h bFYOSGBLbcijAo0LHD3onBC8MaMBCJxo621bB8OBXfR8AZVvomH6/IGJUNonNR/J YuyLLP6vmvQoCpISxJMD524n2FmnUM+7VXKgBaQZGDVCw/H/HcM29A6dlLb/t6J8 kNz9aKil6v5Rt5eGpqKJdU1/fmzZjxP4Oo2ChVx1rCu/FyeXEWgzy9Mcx3EP/Jvv KvMn7pi3G99goZs7WqfU5fGKx3z/5d7HM+r5mm9c+nTpC06hIfMlpn1j21oQ3f4K CEhSe478mlSg8T4mtRQsW3JDjTTw8jBJ3QBHDnE+C51D2i9ltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmk1uCgjxv7R/5N3X9j06dA7intMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzg0YTRhM2MtY2Q4Yy0z M2Q2LWE1NTMtODBiZTJhMzI1ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9bMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIilJgv+1i/hVerYoZOyPoib/AWrjteJSoiFd0TlXzx++6Eq5m7+pZiA yFCz+roGSetVVeYhiB6rbttE6wlhnvHiG6hd2kYsIEcpYOwjjexf+VzBFuquLzjb zcTTTXYFZgPhvkfGHMen21F0levf4suoCZeWyYmduDbzib4bPAIvHHp7OljppY0e u8wghwZqPIYvppQ4xnfOjHE9EtAsBaB+5qW44ThHZkd54pczLnegi5lG/aPB/lV3 hOl/ULnoICTVmZXgi1oB2SEmHFUksS/5uJu0AapXhKsKER7zT9kPJ9yja6DTdxD7 spHGEdYtJ2HaYaYWMMNbu4qGvC4nPx8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:06 2025 by rpki-client