$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99812270-1d30-36ab-89cb-6d1ec60e2735.roa File: 99812270-1d30-36ab-89cb-6d1ec60e2735.roa (raw, json) Hash identifier: VRRHB/U6ISlqa/nwdJahXwAy6nbw32tpdfAsYLqBYRQ= Subject key identifier: 28:1F:78:4A:F0:57:63:E4:EA:65:D4:DA:85:04:C1:A4:BB:0B:11:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075C9E732A841C5E4C1380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99812270-1d30-36ab-89cb-6d1ec60e2735.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.211.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5c:9e:73:2a:84:1c:5e:4c:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=92c31a47-b5e3-47b2-a313-04eaddadbace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1d:5a:b1:18:0f:a7:da:78:98:a8:32:a5:9e: c3:34:9f:e2:0f:71:b9:38:f2:0d:91:35:42:24:fe: aa:22:7a:51:5c:39:d9:3b:d7:d0:07:3b:b9:be:65: 85:d2:92:f5:e6:5a:52:80:7c:04:c5:b8:87:5d:4c: 3e:a0:6c:af:29:dd:6b:12:b4:e8:d3:d2:e8:ec:98: a9:48:ca:15:d0:c5:51:7b:c5:5c:f6:83:ac:3f:1e: eb:90:1e:68:e0:17:b6:5b:f3:e6:02:6c:89:a0:a4: 5f:70:c8:96:f7:79:be:0a:b9:ca:63:ac:3a:88:94: 4b:9a:17:a6:a0:91:c3:15:e1:c9:6a:ce:ce:85:dc: 71:77:cb:f4:38:94:4c:d0:aa:58:c5:4a:bd:09:07: 4c:54:42:fd:0c:d2:2e:76:c2:35:75:47:77:2b:e5: 06:fd:9a:d7:64:77:91:be:bc:69:46:74:1d:21:94: b5:fe:9e:a4:5c:ab:e1:66:47:82:cd:82:a6:fc:16: d3:8b:34:2b:91:25:57:37:a1:f8:7a:ef:95:3b:d6: 19:f2:40:2b:ec:65:ff:a0:f6:2a:ff:9c:ce:72:b1: 61:10:03:25:5e:2a:1e:ac:16:ff:50:62:86:e3:96: 79:d6:54:5e:d8:15:8e:be:bd:a1:c5:34:33:e3:c8: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1F:78:4A:F0:57:63:E4:EA:65:D4:DA:85:04:C1:A4:BB:0B:11:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/99812270-1d30-36ab-89cb-6d1ec60e2735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d2:4c:dc:f0:a0:d7:3e:f0:aa:5d:89:b9:7a:b9:f7:65:05: d0:fa:d9:11:d8:e7:7a:45:92:d7:fb:a0:4d:96:20:89:a5:a7: b9:8f:05:6f:fb:15:e7:ca:6a:71:25:2e:97:e4:50:3d:5a:9a: 5e:bb:ee:79:cd:f7:5a:20:76:02:b1:1a:ee:5a:0f:fb:18:ec: 5d:36:2c:7f:8d:eb:3e:d0:8a:8a:ca:74:18:ec:2b:19:33:7a: ab:6a:8d:b0:72:98:ce:b5:ff:ab:17:3e:c1:1d:11:2e:33:1e: c6:78:d8:f0:68:bd:4a:ab:30:38:32:f7:4c:f1:18:8f:55:56: 48:b5:0a:0d:42:16:f6:0d:c4:b7:02:54:e9:df:cb:5e:a1:98: a4:d7:ba:3f:16:d3:b6:ed:41:ee:e6:b5:f3:77:a7:2a:ea:64: dc:8f:d5:95:88:b8:92:bd:f9:73:a9:dd:e9:1b:95:d7:8c:87: 6b:de:9a:f0:b9:6a:5b:84:99:5e:d5:7d:6c:ea:bd:f5:00:da: 00:2d:1d:c2:fc:7e:99:d2:85:ff:6b:37:8c:c6:2f:53:66:4f: bc:b9:c9:ac:c1:a5:4c:86:b0:54:2a:b8:ef:a2:eb:fe:e1:55: 53:34:b2:da:ac:c0:ee:3d:3a:e0:5b:dc:52:00:40:81:15:1c: 02:0b:e6:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1yecyqEHF5ME4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OTJjMzFhNDctYjVlMy00N2IyLWEzMTMtMDRlYWRkYWRiYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB1asRgPp9p4mKgypZ7DNJ/iD3G5OPINkTVC JP6qInpRXDnZO9fQBzu5vmWF0pL15lpSgHwExbiHXUw+oGyvKd1rErTo09Lo7Jip SMoV0MVRe8Vc9oOsPx7rkB5o4Be2W/PmAmyJoKRfcMiW93m+CrnKY6w6iJRLmhem oJHDFeHJas7Ohdxxd8v0OJRM0KpYxUq9CQdMVEL9DNIudsI1dUd3K+UG/ZrXZHeR vrxpRnQdIZS1/p6kXKvhZkeCzYKm/BbTizQrkSVXN6H4eu+VO9YZ8kAr7GX/oPYq /5zOcrFhEAMlXioerBb/UGKG45Z51lRe2BWOvr2hxTQz48hNawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgfeErwV2Pk6mXU2oUEwaS7CxHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk4MTIyNzAtMWQzMC0z NmFiLTg5Y2ItNmQxZWM2MGUyNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9N9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3STNzwoNc+8Kpdibl6ufdlBdD62RHY53pFktf7oE2WIImlp7mPBW/7 FefKanElLpfkUD1aml677nnN91ogdgKxGu5aD/sY7F02LH+N6z7QiorKdBjsKxkz eqtqjbBymM61/6sXPsEdES4zHsZ42PBovUqrMDgy90zxGI9VVki1Cg1CFvYNxLcC VOnfy16hmKTXuj8W07btQe7mtfN3pyrqZNyP1ZWIuJK9+XOp3ekbldeMh2vemvC5 aluEmV7VfWzqvfUA2gAtHcL8fpnShf9rN4zGL1NmT7y5yazBpUyGsFQquO+i6/7h VVM0stqswO49OuBb3FIAQIEVHAIL5vU= -----END CERTIFICATE-----Generated at Mon Oct 20 10:41:12 2025 by rpki-client