$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a6b140d-e629-37ad-9191-5771bf35389a.roa File: 7a6b140d-e629-37ad-9191-5771bf35389a.roa (raw, json) Hash identifier: zkbMPIQdrbMg8I9fSST1Z5HLjWsYbBWi6cOR/s0yL0I= Subject key identifier: D6:EC:F0:B7:30:94:3B:AE:DE:45:AC:A6:3C:E1:08:8D:09:6D:77:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA97946202E2BE29043A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a6b140d-e629-37ad-9191-5771bf35389a.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.219.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a9:79:46:20:2e:2b:e2:90:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=2a3d3dd2-e207-48b4-b053-719be99aca45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6d:25:88:31:b9:28:f6:cb:bd:ed:82:3a:5a: 55:c9:40:cc:9f:84:1f:13:cc:d8:56:f8:b6:ab:bc: 67:c4:a6:f8:9f:7c:c9:4b:5f:a2:5e:d3:af:3e:d5: 42:32:20:34:b0:a4:0e:8f:49:f6:d0:b0:4c:82:4e: 7d:44:f9:25:e2:76:2b:f4:bd:10:70:50:35:17:74: 95:c0:cc:c3:20:f5:5f:87:bf:17:37:4d:e9:ac:20: 0d:7c:ce:74:8c:0c:52:83:08:38:f3:98:00:4f:f2: f6:8d:de:64:88:8b:cb:ae:d0:4b:3e:b7:12:06:37: b4:9d:1b:0e:52:a0:b2:fc:23:39:ec:6c:99:22:b8: 15:f0:0d:a1:8d:d1:56:52:40:3a:c0:99:43:cc:b2: 2b:33:cd:96:aa:e4:d8:6f:6a:95:1d:db:26:36:6d: bf:48:4e:43:72:ee:21:30:56:5a:33:e2:dc:fb:d3: c6:fa:56:a6:a4:ec:c3:b1:31:d3:12:65:ad:fd:5a: 25:c5:66:a8:e6:d1:d2:76:d3:8f:0a:fa:0f:34:49: 0a:31:c0:02:7c:83:b7:33:c1:12:cb:0f:d0:ad:b2: 6e:68:66:64:ab:fc:80:fe:76:19:57:0a:9a:61:4a: 39:1b:68:e0:1e:58:cf:d6:a7:4e:65:94:b4:38:2c: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EC:F0:B7:30:94:3B:AE:DE:45:AC:A6:3C:E1:08:8D:09:6D:77:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7a6b140d-e629-37ad-9191-5771bf35389a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e6:97:12:c6:ce:58:0b:88:06:5b:81:f9:3e:f4:5b:c2:49: 68:e0:30:05:ef:40:91:00:da:56:52:3d:57:12:fd:64:65:ee: 39:06:27:5b:88:c0:bf:28:bc:40:ed:f9:4c:3a:f3:94:70:d6: 89:3e:0d:6f:2e:18:fd:6b:43:0e:7b:8c:b7:a5:20:4c:8e:a3: ac:21:b9:c4:5e:18:e9:17:e6:ef:48:f0:26:b7:a3:6f:e2:19: 78:eb:70:41:53:c8:b8:84:6c:d3:60:83:3c:43:ef:0e:fd:d0: 20:ae:db:6a:11:5f:96:d7:4b:ef:01:24:5d:af:af:c4:1d:ca: d2:c3:f9:c0:72:49:16:4c:a7:11:a6:1e:6a:ab:06:7a:fc:59: 2b:02:03:d4:7c:98:52:49:7c:2e:28:31:11:ca:36:88:ce:24: 44:c2:59:4e:6e:8c:47:9e:9a:35:54:54:db:2d:52:8a:98:4e: 2d:83:f3:ed:6d:b5:6e:72:9c:44:56:12:71:62:c2:28:8d:42: 79:69:46:98:94:42:84:ae:3c:62:9e:26:ea:87:c5:d0:19:0f: c9:d4:42:f3:76:85:46:80:11:59:e6:53:dc:71:0e:cb:72:29: 38:e2:91:58:c3:5f:0c:40:12:c0:9f:b2:b9:60:7b:52:24:36: 11:65:9b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/Kl5RiAuK+KQQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk MmEzZDNkZDItZTIwNy00OGI0LWIwNTMtNzE5YmU5OWFjYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA320liDG5KPbLve2COlpVyUDMn4QfE8zYVvi2 q7xnxKb4n3zJS1+iXtOvPtVCMiA0sKQOj0n20LBMgk59RPkl4nYr9L0QcFA1F3SV wMzDIPVfh78XN03prCANfM50jAxSgwg485gAT/L2jd5kiIvLrtBLPrcSBje0nRsO UqCy/CM57GyZIrgV8A2hjdFWUkA6wJlDzLIrM82WquTYb2qVHdsmNm2/SE5Dcu4h MFZaM+Lc+9PG+lampOzDsTHTEmWt/VolxWao5tHSdtOPCvoPNEkKMcACfIO3M8ES yw/QrbJuaGZkq/yA/nYZVwqaYUo5G2jgHljP1qdOZZS0OCx4EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbs8LcwlDuu3kWspjzhCI0JbXcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2E2YjE0MGQtZTYyOS0z N2FkLTkxOTEtNTc3MWJmMzUzODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9vYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTmlxLGzlgLiAZbgfk+9FvCSWjgMAXvQJEA2lZSPVcS/WRl7jkGJ1uI wL8ovEDt+Uw685Rw1ok+DW8uGP1rQw57jLelIEyOo6whucReGOkX5u9I8Ca3o2/i GXjrcEFTyLiEbNNggzxD7w790CCu22oRX5bXS+8BJF2vr8QdytLD+cBySRZMpxGm HmqrBnr8WSsCA9R8mFJJfC4oMRHKNojOJETCWU5ujEeemjVUVNstUoqYTi2D8+1t tW5ynERWEnFiwiiNQnlpRpiUQoSuPGKeJuqHxdAZD8nUQvN2hUaAEVnmU9xxDsty KTjikVjDXwxAEsCfsrlge1IkNhFlmyo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:36 2025 by rpki-client