$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7043ddd-5097-3670-a79d-ee2362ff6cb7.roa File: b7043ddd-5097-3670-a79d-ee2362ff6cb7.roa (raw, json) Hash identifier: 6UeW7PnXcG67u7MQxTHgiIW65IujmsEHUNMcyzpBSvQ= Subject key identifier: 96:3D:56:0B:A4:15:67:68:83:06:97:E7:9B:1A:D4:D1:93:F2:23:5B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075509B657A332D8DB2D4F Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7043ddd-5097-3670-a79d-ee2362ff6cb7.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.213.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:55:09:b6:57:a3:32:d8:db:2d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=a257e0e0-916c-437b-9dcc-0f76c373d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8e:c1:f0:8c:1e:7a:10:34:27:7f:0e:a2:b7: c6:4c:02:db:91:37:26:b7:7d:b6:2c:4b:71:cf:f5: 0c:27:fd:06:3d:15:ba:78:83:b5:1f:3a:e6:b3:7a: 7e:81:26:fc:21:37:fa:9b:70:46:9f:d5:c6:2b:97: ca:78:23:b9:6f:25:3f:d3:27:39:06:c8:57:28:12: 33:36:e8:45:e5:23:33:52:bc:ac:28:17:65:77:8a: 7b:c8:3e:e2:a7:d7:77:21:fd:5a:f6:19:71:69:3b: 28:9d:3c:43:83:7f:4b:6f:b3:1f:f0:fc:fb:dd:d7: c7:de:64:79:ed:32:11:04:8b:b1:ee:43:fb:85:0c: 29:d1:d8:93:4a:23:d1:23:e6:95:0b:9e:4a:bb:6c: df:a2:19:f3:a4:29:ba:b9:01:4e:78:72:47:07:34: e1:e6:ac:60:d0:79:40:d0:4f:ea:23:43:eb:bf:52: d2:72:86:df:75:c3:df:4b:71:03:ee:d2:38:2f:da: 69:a5:f9:d7:94:26:c9:36:e0:67:f1:8c:76:21:e2: 01:1e:86:f9:da:d6:3f:00:d2:c9:91:fd:8f:8c:cb: 4d:5e:7c:75:03:94:c3:4e:d8:83:8a:98:c8:68:49: d5:2a:ad:a6:bd:d5:28:ec:39:6e:35:86:fe:b8:e9: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:56:0B:A4:15:67:68:83:06:97:E7:9B:1A:D4:D1:93:F2:23:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b7043ddd-5097-3670-a79d-ee2362ff6cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a1:aa:df:91:40:0f:27:8a:d7:6d:c8:6d:91:c5:30:1c:c4: 09:a4:c7:c5:44:28:7e:9a:4b:d4:b8:b7:97:15:a0:30:7c:45: ec:7f:da:4b:6b:b6:ea:1b:50:9d:52:fd:92:c1:d9:fe:3c:13: 78:48:a0:9b:d1:f0:e1:1b:8b:de:ba:b1:ba:83:8a:46:32:9b: 62:d9:8d:06:c1:40:4f:88:e8:02:18:62:98:42:e4:b4:77:6e: d5:09:c9:d3:b3:ec:23:a5:c7:b4:16:9e:e4:76:2a:da:09:8d: b6:1f:bd:b2:5d:03:9d:07:4a:72:58:45:1a:ce:01:14:96:79: 37:97:5d:16:6c:44:45:10:41:35:2f:dc:f9:aa:7a:a4:cb:80: 3e:08:bd:80:c1:44:13:f3:b7:02:0b:f0:cb:84:41:df:3b:e2: 00:36:78:c3:59:f9:f3:ef:b7:50:21:09:19:94:ce:98:b1:46: 7e:b7:40:57:f8:c7:35:0d:a9:4e:6f:4f:06:dd:95:c7:3e:fc: 3c:28:e3:92:31:1d:e0:3c:7a:4b:ac:d8:0c:82:f5:3a:34:2d: bd:c6:65:1f:ff:52:45:d7:38:1d:67:26:64:d1:71:ee:6e:a6: d9:70:6b:1f:a0:b8:58:c3:30:ac:47:c4:23:a3:c8:21:95:30: 99:98:b5:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1UJtlejMtjbLU8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YTI1N2UwZTAtOTE2Yy00MzdiLTlkY2MtMGY3NmMzNzNkNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo7B8IweehA0J38OorfGTALbkTcmt322LEtx z/UMJ/0GPRW6eIO1Hzrms3p+gSb8ITf6m3BGn9XGK5fKeCO5byU/0yc5BshXKBIz NuhF5SMzUrysKBdld4p7yD7ip9d3If1a9hlxaTsonTxDg39Lb7Mf8Pz73dfH3mR5 7TIRBIux7kP7hQwp0diTSiPRI+aVC55Ku2zfohnzpCm6uQFOeHJHBzTh5qxg0HlA 0E/qI0Prv1LScobfdcPfS3ED7tI4L9pppfnXlCbJNuBn8Yx2IeIBHob52tY/ANLJ kf2PjMtNXnx1A5TDTtiDipjIaEnVKq2mvdUo7DluNYb+uOm4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY9VgukFWdogwaX55sa1NGT8iNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjcwNDNkZGQtNTA5Ny0z NjcwLWE3OWQtZWUyMzYyZmY2Y2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6hqt+RQA8nitdtyG2RxTAcxAmkx8VEKH6aS9S4t5cVoDB8Rex/2ktr tuobUJ1S/ZLB2f48E3hIoJvR8OEbi966sbqDikYym2LZjQbBQE+I6AIYYphC5LR3 btUJydOz7COlx7QWnuR2KtoJjbYfvbJdA50HSnJYRRrOARSWeTeXXRZsREUQQTUv 3PmqeqTLgD4IvYDBRBPztwIL8MuEQd874gA2eMNZ+fPvt1AhCRmUzpixRn63QFf4 xzUNqU5vTwbdlcc+/Dwo45IxHeA8ekus2AyC9To0Lb3GZR//UkXXOB1nJmTRce5u ptlwax+guFjDMKxHxCOjyCGVMJmYtSY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:15 2025 by rpki-client