$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd78b70-89c3-3a19-b89a-6f6e6a920db9.roa File: 9fd78b70-89c3-3a19-b89a-6f6e6a920db9.roa (raw, json) Hash identifier: sxW1jFs5c+yMU2PI3dgCet4IRPR5q5MoipG8iWUIa+I= Subject key identifier: F7:A3:E3:8D:9A:B3:4D:25:9A:89:62:56:7C:B5:69:69:FD:76:65:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FD14FEA6874948E7B580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd78b70-89c3-3a19-b89a-6f6e6a920db9.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.216.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fd:14:fe:a6:87:49:48:e7:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=0d18ad12-16a4-4abb-b906-fbc72a9fab2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:ff:ae:f6:4e:b9:dc:bd:41:95:c1:d6:89: c9:c3:5e:1e:21:f8:43:c4:6d:2b:d3:c6:d3:ce:60: 71:ad:9b:ee:83:1c:24:1f:bf:72:6c:e7:13:89:c4: dd:d2:ff:bf:2b:67:90:a0:c6:d3:34:34:21:b6:6d: 3e:c5:1b:3d:8d:6d:83:6e:da:02:b4:7e:02:c0:68: 42:e4:1f:aa:28:0e:e7:b0:5d:14:ce:21:e1:61:a2: f7:1d:5d:31:69:df:85:19:c6:06:7f:8b:1e:b9:55: b5:9a:a6:f4:f1:48:e5:9d:3a:63:c1:51:ef:cf:a5: 24:cc:45:25:f7:2e:ad:81:65:12:b5:0a:9a:08:e1: c3:8b:42:0a:41:da:b8:51:11:aa:69:a1:23:c8:c4: 26:88:ef:e0:b0:58:c2:54:fc:a2:03:70:7f:d7:cf: 8c:12:94:90:50:bc:f6:66:36:71:6f:a6:1b:7b:8a: a8:9d:f1:83:d5:04:3d:50:2c:90:0b:06:64:ff:41: a9:3f:4c:34:fc:2e:ec:03:27:7c:97:69:95:e2:e8: 54:da:10:03:f3:b5:3d:79:6e:b8:97:ea:df:08:85: 24:f2:03:8d:db:3a:0f:ce:13:5c:68:ab:dc:1f:79: 42:3a:c5:74:58:9a:30:b0:0f:4a:a6:cb:25:62:9b: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A3:E3:8D:9A:B3:4D:25:9A:89:62:56:7C:B5:69:69:FD:76:65:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd78b70-89c3-3a19-b89a-6f6e6a920db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:aa:ae:bf:83:86:ef:96:c1:96:88:aa:99:ad:74:e8:ca:d3: 99:e9:9d:c7:c7:a5:ba:6d:ce:c9:17:cf:31:63:33:5f:22:b3: 7e:42:d9:bd:08:04:9b:05:57:63:43:25:4d:a6:db:99:d3:40: 3c:7e:b4:77:aa:e9:45:e3:89:bf:7a:13:b2:d0:5e:2e:1b:5a: 29:10:3f:e5:d0:d4:10:95:b1:08:dd:5b:ad:03:8e:dd:9c:60: aa:e8:14:f7:ea:3e:2c:ec:48:a7:84:03:d1:d7:1a:8f:84:c8: b5:d3:58:9e:bf:9b:24:3a:48:d8:22:6a:32:cc:02:e3:3f:d7: 30:fa:60:88:a8:ad:0d:e0:13:cf:6d:f6:e5:5b:a1:a5:c0:25: 8a:73:cd:9e:e2:2a:fc:1e:49:f4:e6:df:85:fb:7f:d3:75:48: ac:57:dc:2a:4d:2f:86:a2:a9:af:ea:03:db:85:66:df:bb:4d: 24:c5:0c:c3:ca:01:16:d1:07:b1:20:80:1e:4f:9c:5e:0e:11: 4f:83:02:4a:f8:7c:a6:a8:2d:85:68:5d:24:08:c5:39:48:32: e9:ee:ef:0f:80:b7:86:87:ce:a4:73:b4:85:b2:0b:3e:17:86: ce:77:e8:56:38:a1:62:a5:03:28:e3:b4:80:c6:29:fa:8d:9c: e4:8b:4a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0f0U/qaHSUjntYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MGQxOGFkMTItMTZhNC00YWJiLWI5MDYtZmJjNzJhOWZhYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A3/rvZOudy9QZXB1onJw14eIfhDxG0r08bT zmBxrZvugxwkH79ybOcTicTd0v+/K2eQoMbTNDQhtm0+xRs9jW2DbtoCtH4CwGhC 5B+qKA7nsF0UziHhYaL3HV0xad+FGcYGf4seuVW1mqb08UjlnTpjwVHvz6UkzEUl 9y6tgWUStQqaCOHDi0IKQdq4URGqaaEjyMQmiO/gsFjCVPyiA3B/18+MEpSQULz2 ZjZxb6Ybe4qonfGD1QQ9UCyQCwZk/0GpP0w0/C7sAyd8l2mV4uhU2hAD87U9eW64 l+rfCIUk8gON2zoPzhNcaKvcH3lCOsV0WJowsA9KpsslYpubcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPej442as00lmoliVny1aWn9dmWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZkNzhiNzAtODljMy0z YTE5LWI4OWEtNmY2ZTZhOTIwZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9jMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuqrr+Dhu+WwZaIqpmtdOjK05npncfHpbptzskXzzFjM18is35C2b0I BJsFV2NDJU2m25nTQDx+tHeq6UXjib96E7LQXi4bWikQP+XQ1BCVsQjdW60Djt2c YKroFPfqPizsSKeEA9HXGo+EyLXTWJ6/myQ6SNgiajLMAuM/1zD6YIiorQ3gE89t 9uVboaXAJYpzzZ7iKvweSfTm34X7f9N1SKxX3CpNL4aiqa/qA9uFZt+7TSTFDMPK ARbRB7EggB5PnF4OEU+DAkr4fKaoLYVoXSQIxTlIMunu7w+At4aHzqRztIWyCz4X hs536FY4oWKlAyjjtIDGKfqNnOSLSls= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:52 2025 by rpki-client