$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a83e000a-7256-37e5-967a-01ebd0f751e0.roa File: a83e000a-7256-37e5-967a-01ebd0f751e0.roa (raw, json) Hash identifier: uOXFtIc+IvdcEirHHTPF5Us/pKR2OycO1Bb/S1pQO/c= Subject key identifier: 8F:EB:C1:EF:AB:D1:BF:AD:C1:48:BF:B5:DC:64:7E:CE:BC:D1:07:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FB1A1FF87E2BC231FC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a83e000a-7256-37e5-967a-01ebd0f751e0.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 35994 IP address blocks: 23.215.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fb:1a:1f:f8:7e:2b:c2:31:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=eb386aaf-db68-4483-9ff2-b8408a42dff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:99:eb:ab:cb:86:0a:ce:b6:da:66:e1:98: 54:f4:8c:99:37:dc:90:04:20:31:28:1a:98:8d:81: 7d:d6:6d:d0:8b:e1:3e:87:bf:e1:e2:23:6a:92:39: 74:a4:24:9b:6b:67:76:37:c6:35:6e:f3:d4:1d:e8: 48:97:e7:91:6a:7c:6b:73:bf:fb:03:86:04:b9:99: df:52:3f:5d:e6:15:48:15:44:c5:58:ce:cc:6c:0e: 9d:8d:e4:8e:5a:b2:f6:81:9e:aa:09:b8:8a:42:a7: 3e:2d:6c:f1:fd:63:a6:5e:d8:d6:f6:fc:57:b6:8c: 36:55:a4:ee:ff:8f:20:c8:fa:47:22:af:c7:65:5f: a0:30:a9:f2:62:59:97:ac:fc:bd:f2:d5:d1:d4:29: 3c:4c:8d:d5:75:2b:e0:2f:d9:2d:8c:2b:29:f8:34: 65:d0:80:63:74:cc:75:a3:da:07:83:5a:d0:80:08: 78:2f:6a:08:2e:d5:8d:c2:66:af:4f:f5:08:df:58: d0:f4:ab:76:79:3a:5e:1e:e1:7c:fe:03:f2:c2:a5: 99:4e:1b:46:02:c6:b9:b0:41:b5:95:da:a3:d6:47: 01:63:f8:df:f6:07:0a:f5:09:62:31:7d:44:c7:d6: 26:4e:2c:17:82:01:eb:b0:9d:9f:1c:d4:c4:80:4d: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EB:C1:EF:AB:D1:BF:AD:C1:48:BF:B5:DC:64:7E:CE:BC:D1:07:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a83e000a-7256-37e5-967a-01ebd0f751e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.215.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:21:d9:3b:8e:4b:8e:9a:ec:56:cf:d1:f1:81:fa:44:c7:80: 40:4c:9d:89:17:3a:c3:09:79:e8:f2:42:7b:56:96:e1:ec:5a: 9b:45:b0:f9:c1:99:eb:d9:5c:7e:ed:39:69:89:48:39:d0:9f: ec:f7:b2:43:bd:62:4f:ad:71:24:fc:33:9f:55:64:5d:f2:09: 66:c8:38:2b:22:66:a6:b7:76:52:62:cd:2f:2b:63:1a:6b:be: f5:0d:cf:da:b8:d0:5b:3e:a9:6c:da:e1:f5:7c:dc:fc:69:c3: b6:24:c8:6f:78:56:7c:ef:60:09:90:3b:a7:dd:29:b2:1e:b9: 17:46:32:e4:bd:36:85:02:04:26:f9:b3:fb:e4:15:8b:1f:c2: 2b:c2:b8:e6:10:09:06:e5:6e:2b:ef:d0:6d:a1:99:06:48:30: b9:d5:b0:33:4e:84:77:d9:cd:7f:f8:a8:18:6b:bc:53:ba:9a: ef:08:c2:ac:c2:07:29:54:a9:fd:ac:45:e6:65:29:6e:50:6e: b6:fb:cc:0f:41:3b:86:5d:ba:b4:69:cd:18:ae:d1:92:48:54: d0:8f:be:f2:ad:df:f6:54:16:31:ac:0b:c8:c6:c4:cb:0b:71: e1:44:15:2e:f7:d0:09:29:4d:02:08:96:7d:bb:0b:7f:74:6e: c1:9e:e4:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fsaH/h+K8Ix/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWIzODZhYWYtZGI2OC00NDgzLTlmZjItYjg0MDhhNDJkZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgiZ66vLhgrOttpm4ZhU9IyZN9yQBCAxKBqY jYF91m3Qi+E+h7/h4iNqkjl0pCSba2d2N8Y1bvPUHehIl+eRanxrc7/7A4YEuZnf Uj9d5hVIFUTFWM7MbA6djeSOWrL2gZ6qCbiKQqc+LWzx/WOmXtjW9vxXtow2VaTu /48gyPpHIq/HZV+gMKnyYlmXrPy98tXR1Ck8TI3VdSvgL9ktjCsp+DRl0IBjdMx1 o9oHg1rQgAh4L2oILtWNwmavT/UI31jQ9Kt2eTpeHuF8/gPywqWZThtGAsa5sEG1 ldqj1kcBY/jf9gcK9QliMX1Ex9YmTiwXggHrsJ2fHNTEgE0aHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/rwe+r0b+twUi/tdxkfs680QcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTgzZTAwMGEtNzI1Ni0z N2U1LTk2N2EtMDFlYmQwZjc1MWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ezMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgh2TuOS46a7FbP0fGB+kTHgEBMnYkXOsMJeejyQntWluHsWptFsPnB mevZXH7tOWmJSDnQn+z3skO9Yk+tcST8M59VZF3yCWbIOCsiZqa3dlJizS8rYxpr vvUNz9q40Fs+qWza4fV83Pxpw7YkyG94VnzvYAmQO6fdKbIeuRdGMuS9NoUCBCb5 s/vkFYsfwivCuOYQCQblbivv0G2hmQZIMLnVsDNOhHfZzX/4qBhrvFO6mu8IwqzC BylUqf2sReZlKW5Qbrb7zA9BO4ZdurRpzRiu0ZJIVNCPvvKt3/ZUFjGsC8jGxMsL ceFEFS730AkpTQIIln27C390bsGe5Ps= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:13 2025 by rpki-client