$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94aba5d1-fdc6-3a0e-95ef-46158ed9b804.roa File: 94aba5d1-fdc6-3a0e-95ef-46158ed9b804.roa (raw, json) Hash identifier: OInS55JOg0l4ZF1SNKbD1YzOcqKt1uVPKdjZyQCvAEY= Subject key identifier: 86:56:15:67:6C:17:D9:BE:98:3D:A1:7E:F1:9D:E3:F8:34:17:D8:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075589AF69B3393282A500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94aba5d1-fdc6-3a0e-95ef-46158ed9b804.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.213.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:55:89:af:69:b3:39:32:82:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=baa3a8eb-e452-4ad5-87a1-67c7555b45ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:77:a6:3c:06:72:f2:24:40:28:36:ab:eb:92: 7f:c7:95:da:d5:34:15:30:ad:71:48:e2:9a:a0:d1: 9a:da:4a:99:90:aa:41:b7:a9:9b:b6:cf:fb:bf:71: 6a:51:30:1b:82:57:ed:ae:64:22:7b:1a:fc:f5:0b: 46:43:fd:f3:ec:59:6d:58:62:a1:80:4c:eb:b4:9a: 86:d8:40:b3:79:7a:cd:84:49:ea:42:2b:d6:d5:40: 93:d6:79:96:d5:cb:61:78:70:11:1e:4f:47:21:e3: f6:cd:43:1b:6f:cd:54:80:dc:2b:9e:1b:92:50:c9: 3a:28:79:ab:ca:bc:86:dd:69:d2:c5:22:57:9c:e0: 01:eb:53:e1:f7:95:1d:1d:33:1a:05:96:62:54:65: 31:2d:f8:ce:38:a7:f1:48:03:8a:96:37:22:f9:72: 16:48:87:31:f3:40:9b:cf:af:f9:75:2d:be:01:26: a0:4f:6d:9f:47:a1:98:8f:6a:85:40:4f:14:6c:5d: ba:46:c1:7d:59:76:38:e4:b9:f7:60:b2:ce:77:ab: f6:99:52:68:56:d4:5b:dc:d9:47:6d:c3:9a:bf:29: bc:f4:07:6d:39:3b:ea:12:ea:3c:b8:a9:75:9c:2a: 0b:f3:48:76:f0:73:64:d0:59:25:f6:6f:a2:6d:5a: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:15:67:6C:17:D9:BE:98:3D:A1:7E:F1:9D:E3:F8:34:17:D8:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94aba5d1-fdc6-3a0e-95ef-46158ed9b804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:71:c9:73:51:98:f0:c2:c7:75:bd:c0:fa:db:be:c5:bf:91: 4b:0d:9f:18:0d:ff:c4:c8:65:5b:94:ff:b4:8d:d5:70:d0:95: 73:87:11:7e:d7:bc:73:04:4d:27:a2:ce:52:4f:cc:14:64:ad: d1:81:59:72:20:86:e1:6d:0d:b3:e4:ae:9c:fd:ee:75:10:ea: e1:5f:5d:d2:e1:2b:84:48:c9:7f:42:d0:4f:fc:5c:1b:57:ca: e8:17:46:e6:62:31:a7:8a:db:b6:50:98:ef:cf:e6:d5:d3:db: 29:2b:67:99:ba:86:29:2c:21:a5:76:56:a8:03:d6:7b:4e:db: bb:2b:f4:ff:97:0d:f5:b6:9b:da:93:db:0c:d6:78:2a:b6:a5: 32:16:43:c6:39:b0:1f:7d:fa:1c:c1:be:d0:23:21:1c:76:49: 11:f3:33:2c:bf:4a:f2:5d:15:62:98:bd:cb:cd:3f:76:d5:76: ec:c4:c5:03:62:9c:00:60:52:a4:c8:12:64:43:d0:9b:70:02: 5c:4e:35:48:1a:7b:cd:c0:91:29:51:12:e9:c6:29:94:a4:d4: b2:bd:94:bb:04:76:f1:27:34:de:e9:f8:bc:41:31:3c:b1:1f: d8:96:54:5e:b1:07:12:2a:ba:90:98:8f:2e:5a:c3:17:75:21: 06:4a:de:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1WJr2mzOTKCpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YmFhM2E4ZWItZTQ1Mi00YWQ1LTg3YTEtNjdjNzU1NWI0NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3emPAZy8iRAKDar65J/x5Xa1TQVMK1xSOKa oNGa2kqZkKpBt6mbts/7v3FqUTAbglftrmQiexr89QtGQ/3z7FltWGKhgEzrtJqG 2ECzeXrNhEnqQivW1UCT1nmW1ctheHARHk9HIeP2zUMbb81UgNwrnhuSUMk6KHmr yryG3WnSxSJXnOAB61Ph95UdHTMaBZZiVGUxLfjOOKfxSAOKljci+XIWSIcx80Cb z6/5dS2+ASagT22fR6GYj2qFQE8UbF26RsF9WXY45Ln3YLLOd6v2mVJoVtRb3NlH bcOavym89AdtOTvqEuo8uKl1nCoL80h28HNk0Fkl9m+ibVro7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZWFWdsF9m+mD2hfvGd4/g0F9g5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTRhYmE1ZDEtZmRjNi0z YTBlLTk1ZWYtNDYxNThlZDliODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9UkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpxyXNRmPDCx3W9wPrbvsW/kUsNnxgN/8TIZVuU/7SN1XDQlXOHEX7X vHMETSeizlJPzBRkrdGBWXIghuFtDbPkrpz97nUQ6uFfXdLhK4RIyX9C0E/8XBtX yugXRuZiMaeK27ZQmO/P5tXT2ykrZ5m6hiksIaV2VqgD1ntO27sr9P+XDfW2m9qT 2wzWeCq2pTIWQ8Y5sB99+hzBvtAjIRx2SRHzMyy/SvJdFWKYvcvNP3bVduzExQNi nABgUqTIEmRD0JtwAlxONUgae83AkSlREunGKZSk1LK9lLsEdvEnNN7p+LxBMTyx H9iWVF6xBxIqupCYjy5awxd1IQZK3gE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:02 2025 by rpki-client