$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81a91c2f-3da2-32b6-a557-846292a85d4c.roa File: 81a91c2f-3da2-32b6-a557-846292a85d4c.roa (raw, json) Hash identifier: R0mUm+nFWvQbgfgd5CXKfdyjPegU77mbh7aldGSXcRg= Subject key identifier: CA:DF:38:18:7A:68:DE:26:85:4A:C8:7C:6A:D4:47:BD:8C:F0:0A:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C49E1E719F9670BC61900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81a91c2f-3da2-32b6-a557-846292a85d4c.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 7303 IP address blocks: 23.216.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:49:e1:e7:19:f9:67:0b:c6:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=7b83603d-2884-4fe6-9c9a-b81cf6f6b30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:fc:dc:60:67:42:8f:64:53:db:73:dd:b7: 33:44:ad:bd:60:78:26:ba:df:a9:8b:10:be:30:9c: e0:91:49:77:8c:47:85:64:cb:c3:1a:39:6c:b4:48: c0:f3:89:ee:71:da:38:a9:22:0d:3a:cf:7f:ee:2a: 71:c9:38:ab:d8:7f:7f:66:98:3f:d5:1c:98:aa:76: 74:24:3a:7b:54:74:36:2d:5a:12:6b:c4:e1:45:65: 0b:4e:a1:cb:27:9c:97:d5:23:6e:4f:23:3c:0a:ce: 62:3c:50:ef:99:c3:4b:19:c2:71:ad:f5:6c:ea:50: c8:e4:a5:c7:75:b9:af:5b:c8:49:de:f8:56:b3:73: c1:83:1a:61:88:b5:ce:2c:fe:e0:d5:c1:59:83:3e: 2c:c4:85:75:57:f4:c6:fa:cd:d6:86:30:ff:bf:de: 5e:d4:8f:34:d6:f5:a8:f6:3a:97:cc:da:e4:1f:e8: 6d:d4:06:b3:f8:2c:57:8d:79:23:9e:62:8b:0b:03: f3:64:08:03:fc:ea:18:8b:16:1b:9b:2b:fb:7d:81: 56:c1:79:9a:15:e9:94:22:9b:90:66:7d:54:c5:ff: 57:6e:f8:d4:3e:75:63:b7:d2:50:fe:ad:9f:8a:69: 01:0a:9e:36:12:19:a3:00:09:28:16:6d:b1:d1:cf: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DF:38:18:7A:68:DE:26:85:4A:C8:7C:6A:D4:47:BD:8C:F0:0A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/81a91c2f-3da2-32b6-a557-846292a85d4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5b:d2:bd:ed:9b:dc:a2:f4:47:62:a2:84:9f:64:a7:6e:82: 16:f6:1b:fb:03:40:b2:94:92:1f:5b:26:4d:32:76:18:a5:a0: 40:71:e6:59:f6:b3:ac:74:8b:a7:45:c2:70:ce:e4:2f:c9:d4: 3d:d3:24:2e:f1:70:83:f5:9f:07:85:30:bd:af:dc:53:2f:a6: d2:28:d8:38:9a:99:1a:7c:61:fd:ea:b5:d1:81:a5:8c:aa:c4: 64:0a:49:68:23:d2:83:19:00:94:6c:2c:d3:a6:0c:f9:19:89: a2:57:7e:8e:50:59:8f:3d:33:53:ce:e6:72:86:53:1d:23:04: 92:b0:28:ec:7c:e0:da:56:86:96:f2:29:0c:71:19:22:03:00: e1:4a:27:51:22:79:2d:3e:35:3b:2d:1d:b0:d9:d8:c8:5a:00: b5:97:ea:14:5c:89:b8:a7:4f:ac:57:43:c4:51:97:b2:aa:72: 5f:14:07:b7:de:ca:6b:e2:93:34:5e:de:bb:fb:40:4c:3b:08: 25:f5:17:2c:12:f0:38:09:f5:8c:9c:00:ec:a9:fc:35:14:ca: 66:6b:b5:5f:6d:9c:24:8a:fe:62:4a:33:86:b7:23:ef:03:39: 37:15:b3:20:10:2d:1c:f9:37:f7:0a:39:ba:db:48:72:9c:71: 1d:e8:5d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEnh5xn5ZwvGGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk N2I4MzYwM2QtMjg4NC00ZmU2LTljOWEtYjgxY2Y2ZjZiMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMz83GBnQo9kU9tz3bczRK29YHgmut+pixC+ MJzgkUl3jEeFZMvDGjlstEjA84nucdo4qSINOs9/7ipxyTir2H9/Zpg/1RyYqnZ0 JDp7VHQ2LVoSa8ThRWULTqHLJ5yX1SNuTyM8Cs5iPFDvmcNLGcJxrfVs6lDI5KXH dbmvW8hJ3vhWs3PBgxphiLXOLP7g1cFZgz4sxIV1V/TG+s3WhjD/v95e1I801vWo 9jqXzNrkH+ht1Aaz+CxXjXkjnmKLCwPzZAgD/OoYixYbmyv7fYFWwXmaFemUIpuQ Zn1Uxf9XbvjUPnVjt9JQ/q2fimkBCp42EhmjAAkoFm2x0c+9LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrfOBh6aN4mhUrIfGrUR72M8ApsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODFhOTFjMmYtM2RhMi0z MmI2LWE1NTctODQ2MjkyYTg1ZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1b0r3tm9yi9EdiooSfZKdughb2G/sDQLKUkh9bJk0ydhiloEBx5ln2 s6x0i6dFwnDO5C/J1D3TJC7xcIP1nweFML2v3FMvptIo2DiamRp8Yf3qtdGBpYyq xGQKSWgj0oMZAJRsLNOmDPkZiaJXfo5QWY89M1PO5nKGUx0jBJKwKOx84NpWhpby KQxxGSIDAOFKJ1EieS0+NTstHbDZ2MhaALWX6hRcibinT6xXQ8RRl7Kqcl8UB7fe ymvikzRe3rv7QEw7CCX1FywS8DgJ9YycAOyp/DUUymZrtV9tnCSK/mJKM4a3I+8D OTcVsyAQLRz5N/cKObrbSHKccR3oXXc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:29 2025 by rpki-client