$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f444297-eafa-3731-b955-0bf40fc7896b.roa File: 8f444297-eafa-3731-b955-0bf40fc7896b.roa (raw, json) Hash identifier: rAC2yLrgHFFzx1Pzog/w/BP8wta1/67MVm/06Kmpk50= Subject key identifier: F7:EB:52:02:22:23:65:1A:CA:B2:A2:ED:22:8B:74:06:47:AE:9E:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FE662C9AFAD1F31D2680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f444297-eafa-3731-b955-0bf40fc7896b.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.217.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fe:66:2c:9a:fa:d1:f3:1d:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=132a438d-8fa9-484d-9a83-955875986097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:54:6e:fe:bb:d0:88:d8:60:b4:52:73:71:7c: 7a:1c:61:0d:10:e4:1c:43:75:8b:77:c3:26:44:10: d8:28:38:61:9f:94:84:10:15:85:e8:3d:e7:f4:fa: e7:7a:58:fa:12:63:8c:86:62:fd:82:6b:bf:51:e8: c4:29:43:df:35:50:3c:63:44:1c:f1:62:97:e3:b5: 80:4a:3c:06:ea:11:0d:13:58:69:e0:1b:8a:c4:0e: 19:c3:d7:6d:8e:80:4a:f6:8f:d1:1e:ca:29:76:af: ca:c3:39:13:e4:c4:63:73:6f:f9:8e:6c:0f:1e:12: 35:0d:28:5d:61:6c:8a:d1:bd:6a:46:f6:19:c2:20: 33:e0:c9:26:46:36:f1:6e:86:af:ea:fb:d9:06:33: cb:07:e1:c2:94:c2:93:0c:a2:ab:be:a8:97:1e:1f: 00:93:c6:d7:96:d7:a6:cd:f0:f5:94:dc:7f:cb:fe: e6:b5:43:d8:21:64:d3:fb:41:05:d6:fd:8c:d4:53: 73:2e:4a:51:ba:e6:d9:4d:de:40:6e:97:5a:3e:1f: ac:d3:80:6c:a7:0d:a8:6a:f5:eb:55:d6:5a:50:75: 24:f9:fc:6e:36:97:bf:83:b0:70:ac:3f:d1:70:b8: b9:98:70:9f:b7:d0:89:16:1e:c7:95:e0:0a:29:bd: 9c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EB:52:02:22:23:65:1A:CA:B2:A2:ED:22:8B:74:06:47:AE:9E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f444297-eafa-3731-b955-0bf40fc7896b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:91:25:89:7d:76:a6:a0:c6:27:39:59:07:b1:fa:47:33:03: d8:00:0c:92:bb:7a:8c:7f:89:9c:ad:23:f4:b2:f6:27:30:61: ed:70:56:73:9a:44:2d:38:2b:b9:82:d5:4e:20:f5:79:0b:47: 52:ca:06:80:f9:40:c6:c7:7d:c7:aa:07:7a:3e:99:61:9c:67: db:da:75:91:90:61:ea:c2:04:65:6c:23:a3:4d:5f:d1:d4:37: ea:6d:4f:e3:56:78:c4:08:df:8a:06:46:5f:98:0a:f2:ae:74: 43:bb:37:f2:7e:8b:5d:1d:78:96:55:58:5f:af:e1:a7:b6:df: 19:a7:ff:10:82:d7:bc:d9:f0:34:33:5f:4e:98:a1:b4:7e:b2: 26:31:f1:38:b2:e0:86:c9:f5:78:19:59:8d:a9:dd:ac:40:f4: a5:74:26:d6:e6:09:8a:ff:26:3d:8d:60:dc:24:20:f7:08:98: 74:b8:bd:15:58:9c:00:32:3e:4d:07:9f:1f:04:92:20:5d:a6: 35:26:3c:fd:00:27:52:b3:df:61:a6:45:73:2d:51:b1:5a:24: 19:f4:21:2b:2c:b9:95:26:8e:44:64:d3:ba:2a:e1:5b:30:37: 64:bd:4b:ce:c3:e8:ba:5a:82:2d:0b:eb:19:eb:2d:ce:52:31: 07:07:5e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0f5mLJr60fMdJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MTMyYTQzOGQtOGZhOS00ODRkLTlhODMtOTU1ODc1OTg2MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1Ru/rvQiNhgtFJzcXx6HGENEOQcQ3WLd8Mm RBDYKDhhn5SEEBWF6D3n9Prnelj6EmOMhmL9gmu/UejEKUPfNVA8Y0Qc8WKX47WA SjwG6hENE1hp4BuKxA4Zw9dtjoBK9o/RHsopdq/KwzkT5MRjc2/5jmwPHhI1DShd YWyK0b1qRvYZwiAz4MkmRjbxboav6vvZBjPLB+HClMKTDKKrvqiXHh8Ak8bXltem zfD1lNx/y/7mtUPYIWTT+0EF1v2M1FNzLkpRuubZTd5AbpdaPh+s04Bspw2oavXr VdZaUHUk+fxuNpe/g7BwrD/RcLi5mHCft9CJFh7HleAKKb2cswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfrUgIiI2UayrKi7SKLdAZHrp5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY0NDQyOTctZWFmYS0z NzMxLWI5NTUtMGJmNDBmYzc4OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyRJYl9dqagxic5WQex+kczA9gADJK7eox/iZytI/Sy9icwYe1wVnOa RC04K7mC1U4g9XkLR1LKBoD5QMbHfceqB3o+mWGcZ9vadZGQYerCBGVsI6NNX9HU N+ptT+NWeMQI34oGRl+YCvKudEO7N/J+i10deJZVWF+v4ae23xmn/xCC17zZ8DQz X06YobR+siYx8Tiy4IbJ9XgZWY2p3axA9KV0JtbmCYr/Jj2NYNwkIPcImHS4vRVY nAAyPk0Hnx8EkiBdpjUmPP0AJ1Kz32GmRXMtUbFaJBn0ISssuZUmjkRk07oq4Vsw N2S9S87D6Lpagi0L6xnrLc5SMQcHXpg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:12 2025 by rpki-client