$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9936a110-ab7a-3c6d-8db2-f3a7c97579b2.roa File: 9936a110-ab7a-3c6d-8db2-f3a7c97579b2.roa (raw, json) Hash identifier: CnIw9v3FDCU2cfcn/S89GL1OWfW1Q+J9Q4F/oYxJDA4= Subject key identifier: EF:30:04:4E:45:42:25:59:06:02:DE:5A:1E:5C:79:F8:66:DA:4B:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3557060DCB42FCFDD23DEB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9936a110-ab7a-3c6d-8db2-f3a7c97579b2.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.207.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:57:06:0d:cb:42:fc:fd:d2:3d:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=a9ea9065-095b-4aa0-9cd1-203f357e2533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:cb:ad:28:37:ad:c7:e1:81:94:c3:1c:ac:16: f2:82:f0:da:e5:2d:b8:2a:f5:38:2e:ba:51:76:19: 01:0b:59:45:a0:0c:7a:fe:f1:f8:b4:9f:4d:a9:eb: 39:c1:f6:38:a8:b0:1b:30:05:88:a7:c2:0c:3d:ab: 96:11:59:11:17:71:ce:29:25:31:85:7b:a5:62:e7: a9:01:5d:8a:7d:0f:cf:1a:fa:1e:66:27:32:94:1f: 91:06:12:c7:6a:c5:58:41:d5:9f:80:00:25:f8:75: 72:16:2f:57:34:a5:84:50:5f:e4:2b:28:78:0b:9a: d1:40:56:66:96:03:9b:7d:22:21:41:2a:47:65:1c: 4e:ce:3e:02:33:95:09:15:3c:d0:8e:0a:1f:0f:86: 22:6a:21:8d:ed:9d:3e:55:0f:8c:78:f4:e4:78:28: e8:c2:c7:fc:a7:cf:5c:4a:0b:38:d6:2b:87:4c:85: b0:9a:87:92:58:6e:5e:da:00:07:86:f1:d2:eb:13: b9:f9:7a:f0:e5:23:2a:09:f8:19:96:ca:51:ee:81: f4:e9:0a:03:d2:9b:93:16:4c:81:19:d7:91:38:22: 0d:00:aa:81:87:f8:70:bf:c6:35:51:35:1c:c1:bb: f9:5e:10:04:88:64:aa:81:3a:c3:8b:37:5e:52:ad: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:30:04:4E:45:42:25:59:06:02:DE:5A:1E:5C:79:F8:66:DA:4B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9936a110-ab7a-3c6d-8db2-f3a7c97579b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:96:d9:ff:c4:33:03:f3:f4:0e:6b:3b:f5:31:66:25:d7:5a: ef:1a:10:10:4d:af:10:3f:f8:17:90:c0:9b:87:e2:dd:1f:83: bf:89:86:9b:8e:46:c0:c9:87:7d:60:c9:5f:64:53:fa:d6:41: 58:89:f0:1c:56:46:e7:86:21:23:f2:55:9a:f8:66:fe:0a:b2: 87:09:ab:02:0f:a5:46:f1:5e:69:c1:85:c2:ee:97:d7:5a:ae: 7a:50:15:31:74:a2:fd:00:c6:0b:38:cd:01:a7:0b:a7:da:b2: fb:17:10:c7:6d:62:c3:3f:99:2e:a3:a9:a2:0b:f3:cd:b3:30: 2f:86:99:bc:42:c6:46:53:d0:9e:c0:56:4d:35:90:8d:85:cb: 7e:30:44:e3:b2:8b:43:5c:cd:3d:a8:8a:28:5b:5d:71:45:da: 5c:05:52:bc:9b:b2:46:b4:af:3b:b2:85:89:3e:1a:35:b8:9a: d8:95:5a:54:ab:43:3c:75:08:5e:7c:8c:a6:50:d5:8f:4a:df: 28:4c:03:99:48:a1:56:e7:1f:41:24:2c:13:8b:51:86:e7:f7: 64:d1:ff:40:38:a6:74:54:6f:ba:ab:e7:b3:4f:31:1f:87:85: 7a:0d:20:77:a0:e6:21:90:70:36:71:8d:86:d2:6a:98:9a:ac: 38:5b:9f:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VwYNy0L8/dI964AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YTllYTkwNjUtMDk1Yi00YWEwLTljZDEtMjAzZjM1N2UyNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MutKDetx+GBlMMcrBbygvDa5S24KvU4LrpR dhkBC1lFoAx6/vH4tJ9Nqes5wfY4qLAbMAWIp8IMPauWEVkRF3HOKSUxhXulYuep AV2KfQ/PGvoeZicylB+RBhLHasVYQdWfgAAl+HVyFi9XNKWEUF/kKyh4C5rRQFZm lgObfSIhQSpHZRxOzj4CM5UJFTzQjgofD4YiaiGN7Z0+VQ+MePTkeCjowsf8p89c Sgs41iuHTIWwmoeSWG5e2gAHhvHS6xO5+Xrw5SMqCfgZlspR7oH06QoD0puTFkyB GdeROCINAKqBh/hwv8Y1UTUcwbv5XhAEiGSqgTrDizdeUq230QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8wBE5FQiVZBgLeWh5cefhm2kv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTkzNmExMTAtYWI3YS0z YzZkLThkYjItZjNhN2M5NzU3OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8+jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6W2f/EMwPz9A5rO/UxZiXXWu8aEBBNrxA/+BeQwJuH4t0fg7+JhpuO RsDJh31gyV9kU/rWQViJ8BxWRueGISPyVZr4Zv4KsocJqwIPpUbxXmnBhcLul9da rnpQFTF0ov0Axgs4zQGnC6fasvsXEMdtYsM/mS6jqaIL882zMC+GmbxCxkZT0J7A Vk01kI2Fy34wROOyi0NczT2oiihbXXFF2lwFUrybska0rzuyhYk+GjW4mtiVWlSr Qzx1CF58jKZQ1Y9K3yhMA5lIoVbnH0EkLBOLUYbn92TR/0A4pnRUb7qr57NPMR+H hXoNIHeg5iGQcDZxjYbSapiarDhbn5E= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:21 2025 by rpki-client