$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f45f6ab-8f9a-318d-b44e-3782fd3a179e.roa File: 8f45f6ab-8f9a-318d-b44e-3782fd3a179e.roa (raw, json) Hash identifier: YC4AimG3Smfw1Iz4ZJMgQNLqUYAQdgjkPevme2CrGvw= Subject key identifier: 27:AA:75:76:BF:9A:7B:A4:A3:AC:C3:55:DC:CF:E5:E3:9F:D4:F8:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075A94F4D73EE4D7CEF100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f45f6ab-8f9a-318d-b44e-3782fd3a179e.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 35994 IP address blocks: 23.210.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5a:94:f4:d7:3e:e4:d7:ce:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=3e9ea651-67cd-4e65-9cfe-83871c081b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:01:65:f7:dc:c8:f4:b5:ca:c7:29:28:d3: 56:06:64:31:cd:b1:e2:88:c0:e2:fb:05:14:10:cd: 25:2e:a4:db:dd:a4:79:2d:f3:a5:9a:e6:6c:60:49: af:98:5f:36:80:f0:d9:d7:0c:a7:58:d6:3d:a2:32: 8e:f9:b8:75:ca:19:73:fa:1e:f6:81:bf:e2:78:4d: 32:24:82:ad:81:6f:ed:be:1a:b5:3d:60:05:ec:fc: a6:5e:13:9a:4f:a2:75:51:fd:bb:b0:c5:a3:b9:4a: 3d:06:6b:46:8b:9e:db:cc:4b:cb:a4:b3:a7:94:8e: ed:bb:9a:5e:df:bb:a6:44:26:16:d2:d9:9c:b2:ca: 29:d9:fa:a0:bc:4a:76:5e:8d:14:9a:9f:b0:d0:2e: 83:31:95:15:17:3d:83:24:a0:49:fd:94:28:82:da: 54:98:f1:1b:7e:c3:94:36:c2:73:cd:61:84:f2:dc: 06:47:1b:39:bf:02:3d:d3:7c:74:7d:fb:50:4b:3b: d9:56:34:e2:2b:a8:48:9b:e0:75:a6:4d:0f:f9:6e: b3:c7:23:7f:fe:be:93:2b:05:52:1b:b6:b1:87:fb: 14:47:4c:9c:f1:4d:1b:8d:8a:17:76:7b:f0:b7:e1: de:56:90:d4:92:89:94:d2:7c:9b:71:9c:84:1d:7f: 78:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AA:75:76:BF:9A:7B:A4:A3:AC:C3:55:DC:CF:E5:E3:9F:D4:F8:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f45f6ab-8f9a-318d-b44e-3782fd3a179e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9e:b5:83:69:d2:ed:8e:c0:59:c3:32:71:5d:69:33:39:89: 93:3c:9e:22:a3:dc:85:1b:30:e4:fe:45:6b:60:97:11:f6:19: b2:f1:7a:b6:ba:3e:72:74:cd:56:38:dd:9e:7b:c2:b5:d1:a5: 24:b6:54:47:ed:ee:2c:6f:23:49:e1:5c:41:1f:c1:f9:2c:03: 3c:cd:ac:87:4e:20:24:5f:da:a1:65:48:18:75:3a:e6:d7:72: fe:e8:ac:d2:93:8e:41:9e:ff:cf:d2:30:72:55:a5:54:58:b9: 98:0d:8f:a8:4f:48:a0:9d:5a:7d:b5:c8:da:e8:a0:29:92:d8: 0d:36:4f:37:ee:1c:17:95:1d:3e:a6:a6:1d:ec:60:b9:c1:4c: 1e:0e:0c:e4:24:ab:c5:11:85:a6:40:1e:4b:fe:a9:de:0c:3c: 4e:c0:71:91:01:55:8c:c2:22:f3:3e:a0:41:0f:95:a1:9e:b8: da:21:d8:49:e8:81:60:b3:66:e0:71:f4:8f:11:2d:70:ae:22: e9:fa:9a:7a:a6:32:1e:c9:4d:82:c9:f4:cd:83:c5:c4:99:57: 30:f6:6f:b7:3a:d3:a3:a9:f0:dd:db:40:aa:52:45:cb:7e:de: e5:e2:9c:3d:1a:f2:05:47:32:dd:ff:58:6c:e0:b3:30:9a:97: e1:a9:40:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1qU9Nc+5NfO8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk M2U5ZWE2NTEtNjdjZC00ZTY1LTljZmUtODM4NzFjMDgxYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPwBZffcyPS1yscpKNNWBmQxzbHiiMDi+wUU EM0lLqTb3aR5LfOlmuZsYEmvmF82gPDZ1wynWNY9ojKO+bh1yhlz+h72gb/ieE0y JIKtgW/tvhq1PWAF7PymXhOaT6J1Uf27sMWjuUo9BmtGi57bzEvLpLOnlI7tu5pe 37umRCYW0tmcssop2fqgvEp2Xo0Ump+w0C6DMZUVFz2DJKBJ/ZQogtpUmPEbfsOU NsJzzWGE8twGRxs5vwI903x0fftQSzvZVjTiK6hIm+B1pk0P+W6zxyN//r6TKwVS G7axh/sUR0yc8U0bjYoXdnvwt+HeVpDUkomU0nybcZyEHX94lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeqdXa/mnuko6zDVdzP5eOf1PhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY0NWY2YWItOGY5YS0z MThkLWI0NGUtMzc4MmZkM2ExNzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9LZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGetYNp0u2OwFnDMnFdaTM5iZM8niKj3IUbMOT+RWtglxH2GbLxera6 PnJ0zVY43Z57wrXRpSS2VEft7ixvI0nhXEEfwfksAzzNrIdOICRf2qFlSBh1OubX cv7orNKTjkGe/8/SMHJVpVRYuZgNj6hPSKCdWn21yNrooCmS2A02TzfuHBeVHT6m ph3sYLnBTB4ODOQkq8URhaZAHkv+qd4MPE7AcZEBVYzCIvM+oEEPlaGeuNoh2Eno gWCzZuBx9I8RLXCuIun6mnqmMh7JTYLJ9M2DxcSZVzD2b7c606Op8N3bQKpSRct+ 3uXinD0a8gVHMt3/WGzgszCal+GpQIc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:51 2025 by rpki-client