$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9caf0331-3eab-3628-b298-597d125aa189.roa File: 9caf0331-3eab-3628-b298-597d125aa189.roa (raw, json) Hash identifier: qBa+i5ng/4CsJF0WjhmSGLQP1dDkV69yiFqKQ+4VDoY= Subject key identifier: 16:1A:0A:71:60:53:4C:BF:69:CF:39:C5:7F:A3:0A:08:30:30:2B:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4ED29E57CC8D32554E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9caf0331-3eab-3628-b298-597d125aa189.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.213.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4e:d2:9e:57:cc:8d:32:55:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=0bcae4bc-59e8-435a-b9a3-a503dcfa5220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:33:b6:52:11:74:23:25:c6:fe:3c:86:d5: 79:5b:71:62:39:71:74:e4:b4:73:36:f9:6b:93:09: a4:d7:73:c7:6d:87:58:b4:bb:5a:d0:3c:85:43:32: 86:3c:c8:94:dc:db:ce:ac:15:12:97:44:40:bb:56: d1:d9:43:f3:6a:5a:b0:7e:46:84:0c:eb:a6:80:5a: d0:e6:1c:08:a9:87:b2:2d:ac:d9:9b:ad:48:ef:55: 7a:00:f2:e3:3d:a4:df:72:23:ae:cd:ad:69:76:89: 2b:41:1e:bc:df:4e:73:ce:6d:33:c6:85:6f:69:af: 67:f0:dc:0d:94:af:12:57:6f:4e:58:80:ed:5e:f4: a2:f9:e4:df:8a:bf:47:d7:78:de:ed:58:75:9e:f4: a0:a5:7e:74:3c:7e:fe:8a:75:d9:42:8c:f9:66:11: ff:f5:b0:f8:8f:67:2a:8c:0b:23:90:e1:52:8e:18: db:99:d8:bb:89:55:68:d8:cf:c6:9a:fe:2d:73:b5: a8:64:67:ee:06:79:71:e2:87:5b:3b:8e:68:5c:ac: 02:e3:2b:72:7e:aa:a0:ba:82:bf:be:dd:fb:cd:a6: a7:ac:68:10:b4:53:5d:af:9e:9c:71:fc:82:5a:d2: fb:66:68:f4:79:3d:3c:89:41:e4:89:ba:1a:0c:2c: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1A:0A:71:60:53:4C:BF:69:CF:39:C5:7F:A3:0A:08:30:30:2B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9caf0331-3eab-3628-b298-597d125aa189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:33:47:25:9f:83:67:b2:b6:88:0a:3c:e2:47:cf:6a:83:98: fc:c0:27:b5:1f:7a:f9:2c:47:63:a0:4c:3b:1d:64:99:85:c3: 93:d8:a6:5b:21:8c:75:29:13:cb:a1:6b:0e:6a:d3:86:88:d9: 86:0e:65:60:11:aa:64:82:7f:e5:40:75:9a:fc:8e:84:00:4a: 79:b3:86:85:2d:10:82:e5:8c:d1:d3:d9:61:02:e7:60:57:c1: 6d:d5:71:ea:cd:98:6b:b9:b1:a7:fc:5f:92:57:77:4d:82:9c: ab:9b:cf:5a:9a:35:18:79:0e:e9:64:54:5d:75:68:92:42:de: ff:8b:d0:06:f5:94:10:8f:83:95:e6:c6:66:19:26:37:1b:07: d8:fb:c5:17:c1:b1:8c:26:bc:25:0d:a7:9e:78:42:dc:d2:5b: e5:a3:1b:3c:10:a9:24:b7:3b:49:34:45:60:d2:d0:00:00:06: ae:df:fe:80:ff:eb:21:bf:f1:6e:35:29:2e:10:1c:24:a7:8d: 09:7a:72:bc:5f:3f:e0:84:19:68:7b:34:70:82:07:12:ff:c9: 3f:c0:18:10:08:ba:b8:45:cd:44:e6:0c:8e:ee:0d:29:2e:5c: d3:db:36:32:59:41:72:d5:e3:a5:bb:17:73:5b:ff:f5:34:91: d9:7d:1e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjE7SnlfMjTJVTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MGJjYWU0YmMtNTllOC00MzVhLWI5YTMtYTUwM2RjZmE1MjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt0ztlIRdCMlxv48htV5W3FiOXF05LRzNvlr kwmk13PHbYdYtLta0DyFQzKGPMiU3NvOrBUSl0RAu1bR2UPzalqwfkaEDOumgFrQ 5hwIqYeyLazZm61I71V6APLjPaTfciOuza1pdokrQR68305zzm0zxoVvaa9n8NwN lK8SV29OWIDtXvSi+eTfir9H13je7Vh1nvSgpX50PH7+inXZQoz5ZhH/9bD4j2cq jAsjkOFSjhjbmdi7iVVo2M/Gmv4tc7WoZGfuBnlx4odbO45oXKwC4ytyfqqguoK/ vt37zaanrGgQtFNdr56ccfyCWtL7Zmj0eT08iUHkiboaDCydjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYaCnFgU0y/ac85xX+jCggwMCuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWNhZjAzMzEtM2VhYi0z NjI4LWIyOTgtNTk3ZDEyNWFhMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAzRyWfg2eytogKPOJHz2qDmPzAJ7UfevksR2OgTDsdZJmFw5PYplsh jHUpE8uhaw5q04aI2YYOZWARqmSCf+VAdZr8joQASnmzhoUtEILljNHT2WEC52BX wW3VcerNmGu5saf8X5JXd02CnKubz1qaNRh5DulkVF11aJJC3v+L0Ab1lBCPg5Xm xmYZJjcbB9j7xRfBsYwmvCUNp554QtzSW+WjGzwQqSS3O0k0RWDS0AAABq7f/oD/ 6yG/8W41KS4QHCSnjQl6crxfP+CEGWh7NHCCBxL/yT/AGBAIurhFzUTmDI7uDSku XNPbNjJZQXLV46W7F3Nb//U0kdl9HpA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:47 2025 by rpki-client