$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd7ce61-b3dd-3f2a-b2b7-13ace25dd1b9.roa File: afd7ce61-b3dd-3f2a-b2b7-13ace25dd1b9.roa (raw, json) Hash identifier: vSK/BS0aZkl4VD5oBqZkON8kP94btxgsQMdtcKuJnHU= Subject key identifier: D8:0C:20:46:1C:34:70:C2:72:08:EB:0F:69:60:2E:9E:FD:A1:A6:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD203B41E50246ACD547F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd7ce61-b3dd-3f2a-b2b7-13ace25dd1b9.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.216.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:03:b4:1e:50:24:6a:cd:54:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=120f8d44-56eb-428f-a117-ed7a37018e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:32:fd:9d:d7:71:4e:47:92:5b:23:79:37: b2:bc:de:32:1e:06:e6:86:1c:b8:35:59:4e:c3:cc: a1:7b:06:e7:72:cc:89:f4:49:82:a5:17:1c:f7:51: fd:10:ad:72:95:51:a1:d0:07:53:69:c5:b4:26:61: 8d:ab:cc:79:57:c5:66:e5:0c:b6:f0:ac:37:61:18: b7:e7:78:2f:36:41:f9:a2:fc:1d:7b:db:18:ef:fb: c1:ad:a9:02:31:1e:6d:96:b7:36:23:59:08:0b:c6: c0:70:39:5e:e2:ba:59:60:56:e7:d8:a3:63:75:78: 4c:f1:91:82:18:7e:2b:63:8a:2d:17:e4:4d:30:4b: 1c:fd:4b:50:68:b1:2c:65:88:8f:77:b9:f6:bd:d8: a4:08:66:ae:41:f1:74:60:cf:00:e9:ef:89:da:43: db:df:9d:44:40:8c:60:49:66:fa:b9:5d:a6:c9:45: e3:07:15:4d:3a:26:e6:04:89:5b:bd:9e:9e:e0:e3: 6d:a9:24:52:9f:6a:70:aa:11:31:60:1d:2c:ca:84: 00:05:cc:3d:cb:e3:e7:84:59:31:02:a9:3e:9d:8a: 57:61:c1:75:09:14:ac:f1:57:7a:85:bb:32:11:a1: 55:fa:97:8a:4c:8f:85:eb:99:cf:2a:07:e2:2a:d2: 25:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0C:20:46:1C:34:70:C2:72:08:EB:0F:69:60:2E:9E:FD:A1:A6:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afd7ce61-b3dd-3f2a-b2b7-13ace25dd1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:01:6c:fb:df:2d:72:64:60:e9:11:99:d2:df:6f:cb:cd:4f: fa:53:e2:7c:8c:9a:d3:e9:ab:7b:d8:c1:ff:39:19:73:ef:3a: 15:50:05:e5:87:23:16:b2:46:8a:90:02:f5:b0:05:33:db:61: 91:10:ce:53:60:f2:0f:e9:97:f9:71:e7:cb:52:4f:16:1d:35: 96:9b:ee:bd:9a:14:74:f7:1a:7a:9c:b8:6b:e1:29:b4:51:bd: df:da:2b:91:42:cd:8b:a9:52:3e:3b:46:12:a3:e2:00:26:98: e4:f2:67:c4:4a:fc:9f:1a:63:8c:a5:dd:ce:74:33:05:da:ee: 18:2b:c8:8d:44:fb:4b:d4:79:15:d7:a2:22:b6:c3:5e:62:ad: 72:40:91:17:86:c9:18:e5:81:07:88:77:92:67:0d:97:40:10: 1b:b1:84:ac:d0:30:49:30:06:a2:e9:d0:b8:50:5b:fd:d9:5a: 0a:f9:b6:5f:c0:31:22:bb:11:ed:c9:3b:ed:95:4d:f7:a5:60: 56:e0:c7:25:0c:49:27:7a:37:9c:1c:95:22:9f:ec:a9:3c:e2: 3c:c5:fa:27:09:fd:0b:ce:1f:1f:33:10:73:ba:78:89:0e:16: e3:65:9e:38:c0:40:cf:20:d0:84:30:74:5c:8f:00:fa:e1:d4: 51:5f:0b:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gO0HlAkas1UfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MTIwZjhkNDQtNTZlYi00MjhmLWExMTctZWQ3YTM3MDE4ZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFky/Z3XcU5HklsjeTeyvN4yHgbmhhy4NVlO w8yhewbncsyJ9EmCpRcc91H9EK1ylVGh0AdTacW0JmGNq8x5V8Vm5Qy28Kw3YRi3 53gvNkH5ovwde9sY7/vBrakCMR5tlrc2I1kIC8bAcDle4rpZYFbn2KNjdXhM8ZGC GH4rY4otF+RNMEsc/UtQaLEsZYiPd7n2vdikCGauQfF0YM8A6e+J2kPb351EQIxg SWb6uV2myUXjBxVNOibmBIlbvZ6e4ONtqSRSn2pwqhExYB0syoQABcw9y+PnhFkx Aqk+nYpXYcF1CRSs8Vd6hbsyEaFV+peKTI+F65nPKgfiKtIlbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgMIEYcNHDCcgjrD2lgLp79oaYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWZkN2NlNjEtYjNkZC0z ZjJhLWIyYjctMTNhY2UyNWRkMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9gJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0BbPvfLXJkYOkRmdLfb8vNT/pT4nyMmtPpq3vYwf85GXPvOhVQBeWH IxayRoqQAvWwBTPbYZEQzlNg8g/pl/lx58tSTxYdNZab7r2aFHT3GnqcuGvhKbRR vd/aK5FCzYupUj47RhKj4gAmmOTyZ8RK/J8aY4yl3c50MwXa7hgryI1E+0vUeRXX oiK2w15irXJAkReGyRjlgQeId5JnDZdAEBuxhKzQMEkwBqLp0LhQW/3ZWgr5tl/A MSK7Ee3JO+2VTfelYFbgxyUMSSd6N5wclSKf7Kk84jzF+icJ/QvOHx8zEHO6eIkO FuNlnjjAQM8g0IQwdFyPAPrh1FFfCxY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:54 2025 by rpki-client