$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998ee652-37fc-301e-a95b-f45a8f5f6d2c.roa File: 998ee652-37fc-301e-a95b-f45a8f5f6d2c.roa (raw, json) Hash identifier: CqOv3bXqXwfklGwiRrL4y4KyO3DFQseRCGSouGcphQQ= Subject key identifier: 91:C3:D1:3F:6C:B1:B7:E1:95:38:00:A4:20:3C:28:A6:51:B3:0F:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B33F1AB4996AFECF455184680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998ee652-37fc-301e-a95b-f45a8f5f6d2c.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.219.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:ab:49:96:af:ec:f4:55:18:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=9d68f525-c473-4608-a8ea-9f95c415aec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f4:c7:40:fd:95:16:8b:0b:66:83:66:d5:f5: b8:a7:02:6c:13:21:74:c0:50:aa:06:a5:4f:27:fd: af:54:1f:a5:6f:0c:d5:7f:d8:c7:1c:33:30:e5:3b: d8:ce:b8:ae:eb:f2:a3:63:7d:31:6e:f4:6d:22:2c: 86:77:56:8e:b1:bb:03:e9:70:bf:2f:ea:d2:b4:44: c2:f9:52:62:81:ae:74:ce:d5:09:50:bd:54:f2:4c: 3c:fa:9e:4a:66:5f:10:11:5c:91:cb:9a:a3:62:e7: d0:9b:9b:39:79:2c:07:10:44:59:d2:79:29:dd:ca: de:48:d8:54:c4:72:f1:df:ba:13:8e:a6:c1:bd:93: 95:05:70:9b:92:bd:f1:ce:9c:cb:b0:02:f3:1f:39: e8:d5:59:4d:d4:09:f0:28:c5:af:64:d7:ee:88:ac: e0:f0:32:4c:26:72:0d:a5:cb:7a:84:f3:6d:bd:76: 6d:48:0a:51:e1:ff:c6:33:a4:97:24:e7:9d:03:0e: 7c:3b:3c:05:af:f9:a2:f0:3a:8a:bc:f5:60:de:cf: 17:d1:b2:31:9d:2b:e8:8f:18:10:8b:7a:64:cf:25: bb:66:11:a3:5f:30:29:30:ff:7e:0d:e6:2d:77:23: dc:b4:47:7a:7a:e6:fa:de:aa:08:2d:b7:9d:22:88: 15:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C3:D1:3F:6C:B1:B7:E1:95:38:00:A4:20:3C:28:A6:51:B3:0F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/998ee652-37fc-301e-a95b-f45a8f5f6d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.219.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:46:dd:08:21:cb:86:78:ee:b3:a6:44:f1:d0:27:81:ee:fb: 3b:3b:a2:b1:47:dd:db:c7:0d:ce:a4:56:79:e7:32:59:28:4c: 65:42:ae:bc:bb:42:1b:94:4f:40:26:29:22:56:44:d4:ba:ed: 88:ae:09:58:9f:03:13:b8:7a:12:6f:91:34:70:ff:b0:43:d6: 3c:ff:aa:5d:7b:22:35:df:dc:2a:a0:05:10:0d:ea:7e:08:6a: 45:05:4b:31:c5:5d:77:9a:44:6c:f2:44:23:f5:d4:74:65:e8: 08:56:f5:d8:15:5e:f4:d4:72:cf:f2:61:bb:1e:bd:5f:82:c8: e7:75:08:90:25:0f:f8:f7:c4:ad:8c:68:0e:14:ef:b8:e5:09: ed:8a:34:ad:25:dd:40:f8:01:f4:2a:e2:4f:56:86:27:e6:75: 0f:56:44:fd:aa:ac:0f:61:8c:a1:54:d7:08:94:21:bd:76:89: 06:31:e9:18:d1:27:31:a2:48:9e:67:e6:fe:32:ca:64:30:1b: 1c:2a:b7:fd:5c:c0:84:85:b4:7f:14:95:a6:81:45:fc:e1:9a: 8a:57:92:a3:d6:3a:52:50:3a:7c:7f:20:68:25:77:a6:f5:59: a9:ba:94:29:6c:d1:dc:ef:6c:23:80:72:38:b6:16:c5:35:a4: 0d:44:72:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8atJlq/s9FUYRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk OWQ2OGY1MjUtYzQ3My00NjA4LWE4ZWEtOWY5NWM0MTVhZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PTHQP2VFosLZoNm1fW4pwJsEyF0wFCqBqVP J/2vVB+lbwzVf9jHHDMw5TvYzriu6/KjY30xbvRtIiyGd1aOsbsD6XC/L+rStETC +VJiga50ztUJUL1U8kw8+p5KZl8QEVyRy5qjYufQm5s5eSwHEERZ0nkp3creSNhU xHLx37oTjqbBvZOVBXCbkr3xzpzLsALzHzno1VlN1AnwKMWvZNfuiKzg8DJMJnIN pct6hPNtvXZtSApR4f/GM6SXJOedAw58OzwFr/mi8DqKvPVg3s8X0bIxnSvojxgQ i3pkzyW7ZhGjXzApMP9+DeYtdyPctEd6eub63qoILbedIogV5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHD0T9ssbfhlTgApCA8KKZRsw9nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTk4ZWU2NTItMzdmYy0z MDFlLWE5NWItZjQ1YThmNWY2ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9uUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdG3Qghy4Z47rOmRPHQJ4Hu+zs7orFH3dvHDc6kVnnnMlkoTGVCrry7 QhuUT0AmKSJWRNS67YiuCVifAxO4ehJvkTRw/7BD1jz/ql17IjXf3CqgBRAN6n4I akUFSzHFXXeaRGzyRCP11HRl6AhW9dgVXvTUcs/yYbsevV+CyOd1CJAlD/j3xK2M aA4U77jlCe2KNK0l3UD4AfQq4k9WhifmdQ9WRP2qrA9hjKFU1wiUIb12iQYx6RjR JzGiSJ5n5v4yymQwGxwqt/1cwISFtH8UlaaBRfzhmopXkqPWOlJQOnx/IGgld6b1 Wam6lCls0dzvbCOAcji2FsU1pA1Ecpc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:29 2025 by rpki-client