$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa File: b5523cd5-104d-3011-b66d-ba564b4e42aa.roa (raw, json) Hash identifier: U1kNR94Sf4aDb1aYVnjrR7NEYcsCXot8+99wCeYj/Vs= Subject key identifier: 94:17:5F:A9:52:B4:23:27:D7:66:43:49:04:AC:96:27:39:C5:2C:9E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD205BEB7194AAA10582D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.217.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:05:be:b7:19:4a:aa:10:58:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=00ea576e-1104-4c40-94ad-704488193b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:b3:2d:02:97:94:0b:42:2c:c3:b9:8e:0c: 07:d6:9c:f8:67:d5:bc:fe:c4:1f:88:39:bb:06:bc: 99:30:34:fc:ab:b5:c0:8c:5d:5a:60:52:de:2c:8f: 90:fb:9d:1e:c1:3b:89:b8:c2:17:7d:11:d5:c4:2b: b2:36:66:c0:8f:77:18:50:c0:c9:63:04:3b:ac:f0: c1:a9:f3:f9:1d:50:21:96:8c:0a:c5:45:50:6c:f0: ea:1d:fb:fb:b8:40:3b:89:e3:7c:5b:b3:2c:26:42: 3c:3a:21:5c:7a:09:5c:73:78:72:b7:0d:6a:db:29: 54:a7:ba:9d:87:d5:5e:12:e6:e0:d5:89:91:c2:90: 45:ff:7b:bc:0d:e4:3b:2d:b4:1c:06:f6:d2:69:04: cb:24:02:81:9b:e5:53:47:2a:e7:93:0d:5b:4b:98: f0:c9:59:41:90:51:ba:2e:e1:57:23:00:22:a8:e0: b4:90:e7:d1:56:2a:f5:5c:73:16:9b:e9:f6:8c:cf: 3f:9b:5a:61:7c:34:a6:7c:56:13:5a:10:4b:5e:65: 78:49:af:ed:51:99:6c:17:5d:a5:e3:43:dd:5d:de: f2:14:51:7a:54:5a:77:4c:87:e4:d0:41:d6:ee:10: 96:a2:7d:71:de:f4:88:f9:aa:a6:b3:05:2b:54:4e: ec:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:17:5F:A9:52:B4:23:27:D7:66:43:49:04:AC:96:27:39:C5:2C:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b5523cd5-104d-3011-b66d-ba564b4e42aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:68:1d:60:24:0f:cd:c0:2a:0e:b8:ef:03:52:28:47:02:d9: 3a:01:f4:09:b4:7b:a3:94:0a:9b:28:37:e7:59:18:9b:de:0e: ec:c2:33:e1:88:c4:e2:7d:b3:d6:50:69:6c:7d:ef:0b:a3:78: 08:27:65:a0:46:20:d1:0e:06:e1:cb:69:83:8a:21:8b:a4:6f: 82:db:46:8e:c1:23:c8:16:c3:55:8a:a3:6c:cf:4c:79:d7:2d: 2c:68:22:cf:7b:c3:42:72:18:9c:46:37:b5:5b:a8:a8:6b:9f: d4:56:d1:bf:3e:9d:96:92:3f:8e:0c:54:d1:47:ac:72:1b:f4: 52:b5:5f:0e:10:bf:5f:92:dc:2d:b2:7a:1e:f5:a4:33:3b:2c: 47:44:cf:d6:c7:9a:2e:9a:f8:fb:12:40:fc:0f:4d:c4:39:26: 62:cd:69:7e:86:f1:57:dd:02:03:a5:79:dd:82:90:ff:a8:66: f9:83:e0:d8:f0:9d:da:ff:1b:e0:fb:5f:28:67:0c:2b:75:05: 78:3e:86:68:80:90:49:62:1e:7e:a4:ce:b8:63:91:75:3a:bc: b6:ab:82:be:b1:55:c1:cc:67:06:85:07:ca:7b:59:ec:0c:6f: 33:2d:47:4b:51:1e:3b:0b:8c:25:87:89:18:d8:4e:ef:b9:13: 8a:dc:c0:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gW+txlKqhBYLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MDBlYTU3NmUtMTEwNC00YzQwLTk0YWQtNzA0NDg4MTkzYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bizLQKXlAtCLMO5jgwH1pz4Z9W8/sQfiDm7 BryZMDT8q7XAjF1aYFLeLI+Q+50ewTuJuMIXfRHVxCuyNmbAj3cYUMDJYwQ7rPDB qfP5HVAhlowKxUVQbPDqHfv7uEA7ieN8W7MsJkI8OiFceglcc3hytw1q2ylUp7qd h9VeEubg1YmRwpBF/3u8DeQ7LbQcBvbSaQTLJAKBm+VTRyrnkw1bS5jwyVlBkFG6 LuFXIwAiqOC0kOfRVir1XHMWm+n2jM8/m1phfDSmfFYTWhBLXmV4Sa/tUZlsF12l 40PdXd7yFFF6VFp3TIfk0EHW7hCWon1x3vSI+aqmswUrVE7s4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQXX6lStCMn12ZDSQSslic5xSyeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjU1MjNjZDUtMTA0ZC0z MDExLWI2NmQtYmE1NjRiNGU0MmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9llMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxoHWAkD83AKg647wNSKEcC2ToB9Am0e6OUCpsoN+dZGJveDuzCM+GI xOJ9s9ZQaWx97wujeAgnZaBGINEOBuHLaYOKIYukb4LbRo7BI8gWw1WKo2zPTHnX LSxoIs97w0JyGJxGN7VbqKhrn9RW0b8+nZaSP44MVNFHrHIb9FK1Xw4Qv1+S3C2y eh71pDM7LEdEz9bHmi6a+PsSQPwPTcQ5JmLNaX6G8VfdAgOled2CkP+oZvmD4Njw ndr/G+D7XyhnDCt1BXg+hmiAkEliHn6kzrhjkXU6vLargr6xVcHMZwaFB8p7WewM bzMtR0tRHjsLjCWHiRjYTu+5E4rcwKE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:41:59 2025 by rpki-client