$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aef1ef00-905e-3d36-a3cf-edb16b4f43d8.roa File: aef1ef00-905e-3d36-a3cf-edb16b4f43d8.roa (raw, json) Hash identifier: FGwqHltsXDey6RJkV48SVRWgKKqyz5k3y0Znp0I7sZ8= Subject key identifier: 0B:D0:61:C8:3B:65:C2:45:72:A8:75:B7:FD:C9:DB:BF:DD:95:94:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD205CF7F176F452C960760 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aef1ef00-905e-3d36-a3cf-edb16b4f43d8.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 7545 IP address blocks: 23.217.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:05:cf:7f:17:6f:45:2c:96:07:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=9ad749c8-988b-4c95-983f-4710f6a3637e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:39:4c:0e:b1:7b:0c:82:a8:dd:a1:ae:21: c3:75:5a:3c:0a:1a:fc:2f:87:d3:5e:41:9e:bb:b9: 8c:07:2a:a4:12:7f:fb:25:48:3d:e4:93:ab:34:9b: cc:0e:d7:1a:bb:af:82:40:98:db:f9:89:0c:26:8c: bc:e2:97:07:24:74:b6:88:01:0c:51:77:23:d9:c1: a1:6e:02:e1:f6:d5:1d:f6:d4:cf:c9:02:68:62:a5: ff:37:c9:4a:69:be:14:ef:e3:89:cf:c4:6e:bd:15: 2d:c2:44:be:65:b9:49:f3:de:8c:70:82:dd:13:f0: 7f:87:87:cb:da:e5:17:10:06:7e:1e:06:e2:15:47: b7:12:ea:91:ba:b8:23:11:67:7a:dd:aa:44:37:da: 72:50:0b:f2:09:2f:52:31:44:55:62:3c:85:7c:17: a4:a4:72:54:36:24:4a:3f:42:c8:67:76:f0:19:24: 9d:a4:f5:4d:0a:10:59:ad:e4:60:91:59:2c:c5:fb: 6b:58:d3:21:94:b6:23:b7:1e:db:0b:d3:7b:cc:1c: 08:eb:61:d8:88:55:51:b4:d0:2a:83:4a:46:a3:b8: 59:92:45:41:81:43:d1:64:25:43:4c:c0:43:75:7e: 13:f2:0e:37:3d:db:b2:06:0c:01:3a:24:10:7d:ea: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D0:61:C8:3B:65:C2:45:72:A8:75:B7:FD:C9:DB:BF:DD:95:94:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aef1ef00-905e-3d36-a3cf-edb16b4f43d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:53:dd:2b:cd:c5:43:a8:ba:76:d1:78:95:e9:6c:b9:e9:e8: 2b:07:9a:dd:82:c2:8a:6f:16:aa:a8:a9:27:76:03:f5:ea:ae: c7:a2:35:60:d4:18:88:c5:69:81:ce:8e:77:87:ac:91:0b:82: bf:77:f2:3c:2f:f0:b3:13:0f:5e:a7:06:27:91:c1:df:86:73: d9:db:fa:04:d1:82:6b:43:2e:7c:66:ff:47:1e:1e:13:2f:4c: 99:56:00:70:aa:80:4b:0e:d4:35:43:c1:1d:26:9a:ae:2e:bf: 45:0a:fb:39:78:58:9f:02:e4:12:4f:e4:1e:d6:a4:e3:32:37: 60:54:3b:31:c2:18:f7:4f:74:a6:26:52:e2:34:d2:d1:eb:45: 08:74:79:d4:6f:7a:6a:ec:0d:e0:c1:8a:24:0a:f9:54:40:65: 34:cd:71:78:27:ec:9e:36:22:82:fd:b6:e2:d1:4f:e7:7c:4e: 6a:ec:33:5d:6d:70:a4:21:27:81:fc:64:64:e1:04:15:2d:e6: e6:22:0f:99:9b:7a:13:d2:46:23:e5:01:e5:73:dc:ee:52:d0: 6c:fe:7d:d8:08:ef:e5:0e:46:e4:a1:05:5b:00:1e:57:19:b3: 75:d6:d2:fd:be:fa:d7:8e:34:9a:83:eb:70:0f:10:65:28:a7: e1:f6:3f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gXPfxdvRSyWB2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OWFkNzQ5YzgtOTg4Yi00Yzk1LTk4M2YtNDcxMGY2YTM2MzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpE5TA6xewyCqN2hriHDdVo8Chr8L4fTXkGe u7mMByqkEn/7JUg95JOrNJvMDtcau6+CQJjb+YkMJoy84pcHJHS2iAEMUXcj2cGh bgLh9tUd9tTPyQJoYqX/N8lKab4U7+OJz8RuvRUtwkS+ZblJ896McILdE/B/h4fL 2uUXEAZ+HgbiFUe3EuqRurgjEWd63apEN9pyUAvyCS9SMURVYjyFfBekpHJUNiRK P0LIZ3bwGSSdpPVNChBZreRgkVksxftrWNMhlLYjtx7bC9N7zBwI62HYiFVRtNAq g0pGo7hZkkVBgUPRZCVDTMBDdX4T8g43PduyBgwBOiQQfeq+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvQYcg7ZcJFcqh1t/3J27/dlZQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVmMWVmMDAtOTA1ZS0z ZDM2LWEzY2YtZWRiMTZiNGY0M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJT3SvNxUOounbReJXpbLnp6CsHmt2CwopvFqqoqSd2A/XqrseiNWDU GIjFaYHOjneHrJELgr938jwv8LMTD16nBieRwd+Gc9nb+gTRgmtDLnxm/0ceHhMv TJlWAHCqgEsO1DVDwR0mmq4uv0UK+zl4WJ8C5BJP5B7WpOMyN2BUOzHCGPdPdKYm UuI00tHrRQh0edRvemrsDeDBiiQK+VRAZTTNcXgn7J42IoL9tuLRT+d8TmrsM11t cKQhJ4H8ZGThBBUt5uYiD5mbehPSRiPlAeVz3O5S0Gz+fdgI7+UORuShBVsAHlcZ s3XW0v2++teONJqD63APEGUop+H2P9c= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:18 2025 by rpki-client