$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4f81f4-5487-38db-abc7-4573f9d5ca34.roa File: 8d4f81f4-5487-38db-abc7-4573f9d5ca34.roa (raw, json) Hash identifier: JqECZFx3T2agVcunfSvn1CiAQuCsqqwz2bjX4vjAh8A= Subject key identifier: FA:EA:43:01:A1:34:18:AB:FF:A2:8A:BF:5A:9D:9C:5D:13:F5:AE:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD204D598BF7FADB752B300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4f81f4-5487-38db-abc7-4573f9d5ca34.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.216.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:04:d5:98:bf:7f:ad:b7:52:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=a2dff6b7-8ae2-4b6d-a003-0c04b594311f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:22:e7:af:66:ad:46:f8:1d:aa:85:ec:ef:a9: 28:fb:b9:09:f7:41:ac:6d:05:32:cb:8c:04:a4:d4: 7b:6f:bb:68:fc:de:c9:92:19:c8:ea:23:81:35:39: f3:5e:8f:ae:8e:e5:d5:2d:d8:15:cf:76:f6:bd:5f: 28:28:0f:17:7c:6e:e7:ba:3c:37:72:8e:ab:99:b0: 4a:b1:d4:b7:84:b8:9b:f3:46:0e:cf:34:24:49:ba: e3:cd:cc:e5:ee:4a:c1:35:ae:43:64:2a:3e:ea:fe: fd:68:81:94:44:91:c8:59:01:be:76:77:ba:21:4f: b1:47:14:da:0c:5a:cc:58:18:77:df:8e:6b:8e:10: 4c:6d:e6:69:bf:5b:b1:c6:72:18:cb:cb:de:13:1a: 98:da:0d:f0:70:d2:79:7e:1f:36:03:94:3b:0b:6b: f3:d3:ef:ec:1f:c6:c2:8d:d4:73:d3:4c:ec:37:b0: 6d:c8:87:fa:b5:05:22:0d:24:8f:50:bc:5e:62:91: 7a:bf:ee:3e:26:cf:36:13:02:7c:37:3f:26:5d:84: 42:91:31:d1:fb:47:fb:f1:4f:62:e7:98:6f:4a:bb: be:2d:3f:e7:7c:1b:f2:77:f1:df:d4:70:44:5d:47: 52:e8:8c:7a:1b:92:f3:99:91:ea:1d:bf:f7:bc:8e: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EA:43:01:A1:34:18:AB:FF:A2:8A:BF:5A:9D:9C:5D:13:F5:AE:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d4f81f4-5487-38db-abc7-4573f9d5ca34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:80:cf:5a:b4:95:f4:5d:2d:c2:45:8f:9a:5f:7a:db:29:0b: ab:10:f4:dc:e6:c2:43:0e:fc:34:7b:e3:eb:9a:f5:75:e1:22: 12:47:65:e8:89:d1:5e:eb:e4:f6:98:8c:2b:d5:e4:03:2c:cb: 65:f7:12:fa:fb:f2:fc:b4:e0:0c:35:fd:e6:5c:cc:ce:9a:bd: 08:fa:a1:7e:c0:36:c4:1d:05:d0:45:32:03:13:5b:6a:a1:5a: a8:95:34:a7:c6:c6:71:b9:bf:62:e1:29:6e:38:bf:9b:4d:0e: 11:53:38:70:15:b5:e1:3e:b1:8d:d4:fd:23:f3:46:82:4e:22: 91:40:94:6a:d4:e7:98:e7:b6:1c:12:2b:5f:fb:78:3c:b7:72: 8e:52:45:8f:78:f2:81:51:09:59:e7:f9:27:f4:02:07:ee:66: 4a:76:8a:77:e4:a2:55:f1:a0:52:3e:71:e8:98:e9:33:52:c9: 5b:ad:b2:c3:0c:b5:15:af:58:8a:32:1d:a7:d6:0c:0f:0b:4e: 2e:75:ee:32:35:a2:fb:6e:72:21:41:56:71:5b:31:d3:c0:ac: 9b:56:19:83:75:51:a6:56:e8:2e:f1:3a:bc:cc:c1:47:75:93: 2e:b0:27:b5:e2:a2:e6:91:c3:6d:cc:a9:06:ad:99:5e:a8:bf: 04:4e:9f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gTVmL9/rbdSswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YTJkZmY2YjctOGFlMi00YjZkLWEwMDMtMGMwNGI1OTQzMTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSLnr2atRvgdqoXs76ko+7kJ90GsbQUyy4wE pNR7b7to/N7JkhnI6iOBNTnzXo+ujuXVLdgVz3b2vV8oKA8XfG7nujw3co6rmbBK sdS3hLib80YOzzQkSbrjzczl7krBNa5DZCo+6v79aIGURJHIWQG+dne6IU+xRxTa DFrMWBh3345rjhBMbeZpv1uxxnIYy8veExqY2g3wcNJ5fh82A5Q7C2vz0+/sH8bC jdRz00zsN7BtyIf6tQUiDSSPULxeYpF6v+4+Js82EwJ8Nz8mXYRCkTHR+0f78U9i 55hvSru+LT/nfBvyd/Hf1HBEXUdS6Ix6G5LzmZHqHb/3vI4dewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrqQwGhNBir/6KKv1qdnF0T9a7tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGQ0ZjgxZjQtNTQ4Ny0z OGRiLWFiYzctNDU3M2Y5ZDVjYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9iUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWAz1q0lfRdLcJFj5pfetspC6sQ9NzmwkMO/DR74+ua9XXhIhJHZeiJ 0V7r5PaYjCvV5AMsy2X3Evr78vy04Aw1/eZczM6avQj6oX7ANsQdBdBFMgMTW2qh WqiVNKfGxnG5v2LhKW44v5tNDhFTOHAVteE+sY3U/SPzRoJOIpFAlGrU55jnthwS K1/7eDy3co5SRY948oFRCVnn+Sf0AgfuZkp2infkolXxoFI+ceiY6TNSyVutssMM tRWvWIoyHafWDA8LTi517jI1ovtuciFBVnFbMdPArJtWGYN1UaZW6C7xOrzMwUd1 ky6wJ7XiouaRw23MqQatmV6ovwROn1I= -----END CERTIFICATE-----Generated at Mon Oct 20 02:30:19 2025 by rpki-client