$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b254cd0c-599f-3a38-9767-5adef2d88c75.roa File: b254cd0c-599f-3a38-9767-5adef2d88c75.roa (raw, json) Hash identifier: sVZG4eT011L3LFbghmrzcZQ9u3D7JbSbcpNudMy3tsU= Subject key identifier: B5:63:4D:DD:5A:3B:D0:36:5E:B5:F5:21:76:1F:E6:CA:C7:5F:F1:00 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FC2A3C1A37CB6740E800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b254cd0c-599f-3a38-9767-5adef2d88c75.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.216.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fc:2a:3c:1a:37:cb:67:40:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=1d0b2f43-1f29-437e-8216-6a3ba8250370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:32:8f:08:26:05:42:8a:47:a6:77:bb:19: b0:26:9e:f0:9f:96:c6:90:dc:c1:08:5b:71:22:d7: 77:f7:b1:bb:61:73:49:ca:25:82:78:b5:e7:89:84: 7f:0e:95:82:b4:eb:e1:95:9b:9e:8d:e9:dd:8f:69: 8e:5a:22:4c:2b:2c:2c:2e:13:da:fb:7b:22:b1:21: 00:36:be:af:48:eb:bf:dc:5e:9e:b1:f3:ad:01:78: b1:87:6b:b4:6e:88:7f:d5:d9:1a:f0:bf:9d:44:d8: 3f:17:ec:56:96:09:da:b3:e0:61:4b:51:71:8d:22: 54:16:00:1a:bc:9e:58:23:bf:c8:d2:70:5e:2f:58: d2:98:1d:09:ce:8f:cc:76:7b:35:d3:87:ca:b4:7b: f8:da:ce:6f:93:b0:26:58:f0:e0:10:ce:f2:5f:8f: e4:ae:75:95:c3:f5:a4:77:22:6f:e1:3b:d6:67:78: 36:48:85:b4:c0:80:e9:2c:8b:39:26:d3:90:be:c3: c7:a6:df:5b:a0:71:66:0c:e4:83:09:a0:ed:a9:4b: 33:32:14:f3:5b:07:f0:86:43:71:96:6c:c0:6d:2b: 1f:8a:22:d1:7a:75:a2:dc:f2:b8:d6:ed:2a:92:2b: f2:ff:48:16:1e:eb:b1:73:2e:1d:cf:89:95:62:f9: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:63:4D:DD:5A:3B:D0:36:5E:B5:F5:21:76:1F:E6:CA:C7:5F:F1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b254cd0c-599f-3a38-9767-5adef2d88c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:7c:75:0b:19:3a:bd:9e:6a:1c:12:97:ba:3b:bf:60:1c:d1: 57:aa:ae:e5:e8:7c:a0:71:23:84:36:a4:a4:f1:d1:47:76:bf: 60:41:d0:26:57:ee:dc:69:39:c8:5c:8b:94:24:7b:41:40:ff: 72:4e:62:9d:50:0c:cb:ca:b7:cf:cc:01:6c:97:b0:7b:d3:11: 0d:e7:0d:e0:42:79:68:aa:5d:24:98:3d:c2:9e:b8:69:6a:f8: 5a:9e:a4:f9:ee:5e:d1:6c:5e:65:ef:74:8f:42:93:69:42:d7: c3:f7:71:5e:cc:42:83:5b:a3:a6:40:68:db:5d:c7:10:0a:84: 14:db:e6:5d:4d:34:b7:44:a7:8d:f5:17:99:b5:32:05:e0:a7: 8c:6c:2a:32:0d:b3:71:30:67:a2:b5:fa:76:e5:89:53:87:eb: aa:12:e0:08:b7:0f:43:c2:19:d1:f5:65:f8:14:11:c3:6a:32: dc:3a:3f:5a:52:09:a7:09:74:8c:81:e0:8e:24:bd:87:17:4f: 4f:29:89:78:48:40:b9:a8:0a:12:6c:32:8c:d2:55:98:87:bd: 59:d4:9b:ea:20:da:21:fe:01:99:39:8e:22:ea:e2:13:b8:28: 27:e9:b0:d2:3b:ef:65:32:94:2a:77:16:ee:1e:7b:22:3c:f6: 76:9d:43:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fwqPBo3y2dA6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MWQwYjJmNDMtMWYyOS00MzdlLTgyMTYtNmEzYmE4MjUwMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC4yjwgmBUKKR6Z3uxmwJp7wn5bGkNzBCFtx Itd397G7YXNJyiWCeLXniYR/DpWCtOvhlZuejendj2mOWiJMKywsLhPa+3sisSEA Nr6vSOu/3F6esfOtAXixh2u0boh/1dka8L+dRNg/F+xWlgnas+BhS1FxjSJUFgAa vJ5YI7/I0nBeL1jSmB0Jzo/Mdns104fKtHv42s5vk7AmWPDgEM7yX4/krnWVw/Wk dyJv4TvWZ3g2SIW0wIDpLIs5JtOQvsPHpt9boHFmDOSDCaDtqUszMhTzWwfwhkNx lmzAbSsfiiLRenWi3PK41u0qkivy/0gWHuuxcy4dz4mVYvnH3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVjTd1aO9A2XrX1IXYf5srHX/EAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI1NGNkMGMtNTk5Zi0z YTM4LTk3NjctNWFkZWYyZDg4Yzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9hEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF58dQsZOr2eahwSl7o7v2Ac0VeqruXofKBxI4Q2pKTx0Ud2v2BB0CZX 7txpOchci5Qke0FA/3JOYp1QDMvKt8/MAWyXsHvTEQ3nDeBCeWiqXSSYPcKeuGlq +FqepPnuXtFsXmXvdI9Ck2lC18P3cV7MQoNbo6ZAaNtdxxAKhBTb5l1NNLdEp431 F5m1MgXgp4xsKjINs3EwZ6K1+nbliVOH66oS4Ai3D0PCGdH1ZfgUEcNqMtw6P1pS CacJdIyB4I4kvYcXT08piXhIQLmoChJsMozSVZiHvVnUm+og2iH+AZk5jiLq4hO4 KCfpsNI772UylCp3Fu4eeyI89nadQ/g= -----END CERTIFICATE-----Generated at Mon Oct 20 09:51:05 2025 by rpki-client