$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa File: 8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa (raw, json) Hash identifier: KAXof+WbFpEsJamyBvognxqJAT+H3uwFWTVi8ZzNpsM= Subject key identifier: 79:47:D0:50:A6:D4:53:CD:EF:15:AC:68:DD:83:ED:A4:DA:CB:D4:1B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4F2138C1A50E23C33600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.214.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4f:21:38:c1:a5:0e:23:c3:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=d65c9067-2359-4c04-b5ef-d42c53ecbb72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:51:1f:01:67:55:08:f9:cf:a8:ff:4b:87: 48:e3:03:62:2b:02:92:76:ec:3a:ca:28:cc:3a:fe: f4:de:18:84:91:19:de:af:56:42:c9:04:94:60:4e: 51:1f:48:91:eb:b4:dc:53:80:66:b3:07:f7:84:d0: cf:2d:94:ce:53:11:b3:f8:1f:b2:bc:3f:53:5f:0b: 7b:35:30:ce:14:7e:05:d4:2e:5c:f9:65:70:44:24: 01:5f:c3:e4:de:a6:30:e9:67:6f:5b:6d:68:d0:c8: e8:a4:c4:79:63:ab:0b:ce:2c:d5:55:db:d2:6c:bd: 77:42:8c:80:5d:64:92:e0:89:ed:a7:d7:14:63:92: 4f:1c:9f:68:32:f0:04:c1:3a:a1:46:bf:84:6b:17: 7d:ff:c4:99:c9:54:d6:22:35:c9:ee:e5:86:da:63: c2:72:b8:46:1f:98:1b:67:95:54:73:de:cb:8a:78: 50:9f:0c:28:79:7c:10:42:1a:09:ec:6b:cb:ab:bc: ee:93:08:c5:7f:17:9a:1c:39:76:bd:78:2e:20:31: dc:01:bb:38:f6:9a:61:b0:5c:2f:de:de:43:32:fe: 53:5b:a8:bc:d9:84:d8:84:b5:5a:b1:3d:b0:2e:e7: 1d:df:a4:c4:24:6f:53:81:1e:87:28:32:85:9f:ef: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:47:D0:50:A6:D4:53:CD:EF:15:AC:68:DD:83:ED:A4:DA:CB:D4:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8afbceab-86d6-36b5-83f2-9d31bb4c6d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6a:cf:11:16:94:6b:b0:45:b8:4d:df:ec:81:90:3e:1a:80: 55:c9:af:03:c3:70:32:aa:ee:99:fe:ae:3c:19:16:97:eb:b8: 89:f0:d6:fb:54:8d:db:73:72:f5:ec:0b:d7:97:b7:05:9d:11: df:4e:03:c1:04:e0:e4:2a:4d:0e:8a:4c:6a:01:d0:5e:2b:f3: d1:16:32:ed:b4:7a:f3:02:36:77:67:80:da:5f:a1:e0:2d:fc: d5:ab:92:f6:d2:b8:ce:82:3c:38:2e:1d:d2:7c:64:25:0c:d6: 3a:f3:78:f9:57:0a:60:53:19:0d:3f:de:22:05:54:9e:c0:ea: e6:af:f7:b1:47:d0:9a:43:44:73:3b:9a:5e:6f:65:d7:32:42: 11:1e:68:27:f0:41:e6:79:ab:4e:16:e8:6d:8c:fc:7e:35:1a: 48:7a:64:a9:81:42:4f:e2:c5:ed:97:09:fd:91:6e:57:40:71: 78:ca:57:3a:b1:bc:a7:ce:93:f1:34:53:e8:6b:8d:f9:3b:6d: e7:dd:51:b2:af:84:05:ac:7d:9d:3a:77:8c:b4:9f:93:ee:32: c9:29:6d:36:82:68:e6:98:69:ad:78:bc:42:65:f3:cf:99:a0: af:2e:89:ca:dd:cc:c2:2b:56:39:b9:49:fc:50:ad:df:e0:ab: 5d:bc:83:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjE8hOMGlDiPDNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDY1YzkwNjctMjM1OS00YzA0LWI1ZWYtZDQyYzUzZWNiYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O5RHwFnVQj5z6j/S4dI4wNiKwKSduw6yijM Ov703hiEkRner1ZCyQSUYE5RH0iR67TcU4Bmswf3hNDPLZTOUxGz+B+yvD9TXwt7 NTDOFH4F1C5c+WVwRCQBX8Pk3qYw6WdvW21o0MjopMR5Y6sLzizVVdvSbL13QoyA XWSS4Intp9cUY5JPHJ9oMvAEwTqhRr+Eaxd9/8SZyVTWIjXJ7uWG2mPCcrhGH5gb Z5VUc97LinhQnwwoeXwQQhoJ7GvLq7zukwjFfxeaHDl2vXguIDHcAbs49pphsFwv 3t5DMv5TW6i82YTYhLVasT2wLucd36TEJG9TgR6HKDKFn+/5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlH0FCm1FPN7xWsaN2D7aTay9QbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGFmYmNlYWItODZkNi0z NmI1LTgzZjItOWQzMWJiNGM2ZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9arMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBqzxEWlGuwRbhN3+yBkD4agFXJrwPDcDKq7pn+rjwZFpfruInw1vtU jdtzcvXsC9eXtwWdEd9OA8EE4OQqTQ6KTGoB0F4r89EWMu20evMCNndngNpfoeAt /NWrkvbSuM6CPDguHdJ8ZCUM1jrzePlXCmBTGQ0/3iIFVJ7A6uav97FH0JpDRHM7 ml5vZdcyQhEeaCfwQeZ5q04W6G2M/H41Gkh6ZKmBQk/ixe2XCf2RbldAcXjKVzqx vKfOk/E0U+hrjfk7befdUbKvhAWsfZ06d4y0n5PuMskpbTaCaOaYaa14vEJl88+Z oK8uicrdzMIrVjm5SfxQrd/gq128g14= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:02 2025 by rpki-client