$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90587308-1419-3d36-9c10-d3cd8a2a3f1d.roa File: 90587308-1419-3d36-9c10-d3cd8a2a3f1d.roa (raw, json) Hash identifier: ll0oB9db6O+iPEQ6Slgw5UL1PJhlD5Zd8xkFoOfda4U= Subject key identifier: 96:FB:5F:13:F4:71:97:D7:B0:4E:E7:BD:E6:29:2E:08:0A:DC:77:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FDC8F5EF5C37B68CB180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90587308-1419-3d36-9c10-d3cd8a2a3f1d.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.217.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fd:c8:f5:ef:5c:37:b6:8c:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=30668de8-b76c-4103-8c71-f1a35db13d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:08:09:5e:c8:2b:3d:80:58:b5:0f:42:48:11: 63:4b:42:ff:0b:52:ec:33:1f:4d:94:9a:7c:70:5c: 3a:13:22:3b:91:4b:b9:72:16:01:66:1a:e9:ce:15: b0:68:f4:77:82:7a:a0:e0:e2:9d:33:2a:8b:7c:6e: 70:1e:55:17:24:6c:77:ea:ee:5b:0d:a6:95:77:ba: c6:4f:13:d5:02:f6:8a:94:67:87:1d:81:88:cf:9a: 71:bb:82:92:f9:58:e8:df:30:12:2e:83:9a:1f:19: 0b:d9:02:ac:a1:e2:74:f2:9a:5d:3c:b2:74:d8:7d: 38:60:39:27:83:c6:c8:05:c0:f7:30:6b:90:e2:89: a4:53:40:4f:de:8a:3f:65:0b:f4:62:81:0f:2c:28: cc:42:70:fd:80:59:a6:0f:3c:86:c2:c3:95:85:89: 23:82:36:64:b4:d4:f5:47:d2:20:a3:34:f1:bc:06: 2f:7a:2f:69:8d:fc:14:9f:9a:50:67:cc:c0:53:bc: 33:83:cd:3f:35:1c:07:ef:a2:8d:a0:4a:2c:75:44: 7d:c5:fe:bd:2c:85:fd:df:36:48:d4:6f:9f:7a:b7: 00:ae:cc:d6:4f:cd:e7:69:e0:ae:83:26:5e:60:75: 42:49:28:b0:d0:e4:4e:ee:12:88:e5:d5:10:34:6b: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:5F:13:F4:71:97:D7:B0:4E:E7:BD:E6:29:2E:08:0A:DC:77:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90587308-1419-3d36-9c10-d3cd8a2a3f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:56:40:df:45:ed:47:b3:ca:7d:25:5c:0e:ba:a0:4e:1f:67: 0c:8a:95:07:2f:f3:21:0e:8a:a6:32:53:49:31:06:5f:ba:11: 81:6b:d2:c4:77:28:42:76:a7:6a:10:cf:c7:e5:f8:ec:0c:53: c9:8e:0c:fb:28:14:f6:1e:37:60:83:8a:31:18:d3:40:33:f5: 5b:6f:a1:47:d1:d1:d6:a1:3d:34:ef:46:ff:79:cb:d2:f3:62: ce:10:30:fc:bf:16:1d:a1:45:0e:56:4d:78:1b:87:e8:fa:22: 57:3f:47:b9:db:01:3e:3b:7d:d7:5f:88:9c:58:80:55:18:93: 72:d8:0d:91:2a:3e:c5:ad:8e:cc:35:36:ba:ca:9e:c6:a7:a8: 36:7a:c4:14:9c:92:1a:83:aa:3f:9d:e8:28:ae:aa:04:17:45: dd:33:c6:5b:7a:9b:ed:c1:38:0e:47:16:e7:8a:78:27:c5:36: 0e:1f:9c:8e:6c:9c:fb:e5:de:97:ca:6e:dc:86:12:4d:6f:27: a0:57:35:e4:ee:30:2f:00:4e:15:37:22:d2:f2:67:6f:33:5b: b5:91:aa:2c:34:f9:e9:7f:c3:c6:30:74:22:6d:b6:a4:79:e0: a0:e1:bd:29:8e:77:55:03:07:e3:ba:b5:30:b0:4b:32:33:3e: bf:e7:d7:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0f3I9e9cN7aMsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MzA2NjhkZTgtYjc2Yy00MTAzLThjNzEtZjFhMzVkYjEzZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwggJXsgrPYBYtQ9CSBFjS0L/C1LsMx9NlJp8 cFw6EyI7kUu5chYBZhrpzhWwaPR3gnqg4OKdMyqLfG5wHlUXJGx36u5bDaaVd7rG TxPVAvaKlGeHHYGIz5pxu4KS+Vjo3zASLoOaHxkL2QKsoeJ08ppdPLJ02H04YDkn g8bIBcD3MGuQ4omkU0BP3oo/ZQv0YoEPLCjMQnD9gFmmDzyGwsOVhYkjgjZktNT1 R9IgozTxvAYvei9pjfwUn5pQZ8zAU7wzg80/NRwH76KNoEosdUR9xf69LIX93zZI 1G+fercArszWT83naeCugyZeYHVCSSiw0ORO7hKI5dUQNGtTVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb7XxP0cZfXsE7nveYpLggK3HebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA1ODczMDgtMTQxOS0z ZDM2LTljMTAtZDNjZDhhMmEzZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9kwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBWQN9F7Uezyn0lXA66oE4fZwyKlQcv8yEOiqYyU0kxBl+6EYFr0sR3 KEJ2p2oQz8fl+OwMU8mODPsoFPYeN2CDijEY00Az9VtvoUfR0dahPTTvRv95y9Lz Ys4QMPy/Fh2hRQ5WTXgbh+j6Ilc/R7nbAT47fddfiJxYgFUYk3LYDZEqPsWtjsw1 NrrKnsanqDZ6xBSckhqDqj+d6CiuqgQXRd0zxlt6m+3BOA5HFueKeCfFNg4fnI5s nPvl3pfKbtyGEk1vJ6BXNeTuMC8AThU3ItLyZ28zW7WRqiw0+el/w8YwdCJttqR5 4KDhvSmOd1UDB+O6tTCwSzIzPr/n180= -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:48 2025 by rpki-client