$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8b9a67e-3481-3ad9-b3b3-ec14f079d8de.roa File: b8b9a67e-3481-3ad9-b3b3-ec14f079d8de.roa (raw, json) Hash identifier: GxP9aSNrOGPsDxs6ZgVFCiT0U2fHDedBbHgswHWh76g= Subject key identifier: C0:67:07:DE:0D:27:34:06:BB:34:AE:33:A3:14:9A:B6:04:0C:FC:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075234F8F28C4976F42F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8b9a67e-3481-3ad9-b3b3-ec14f079d8de.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 55836 IP address blocks: 23.212.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:52:34:f8:f2:8c:49:76:f4:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=eb6dfe10-70c0-49ca-95f5-d935af7ad699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:9f:94:92:e2:04:35:4e:cf:5a:15:07:62: 86:29:fc:55:7c:77:fa:47:bb:73:f0:54:ff:5c:91: ad:ea:cf:6f:f3:67:91:88:c2:a2:80:ab:fe:5f:94: ad:a7:b5:54:09:b8:6f:22:a3:3d:99:cb:fa:c8:96: 9e:bc:26:b5:cd:75:1c:84:1f:d1:a8:bd:ba:9f:d4: 24:35:eb:f1:4d:21:3e:6f:73:cb:83:3b:3f:a8:09: 6b:cf:58:5c:68:d1:c0:fd:13:d2:ec:b6:1f:74:2b: e3:4e:c4:85:7c:9d:d3:7b:81:b6:d2:15:8f:ba:93: fc:8c:fb:ad:63:99:af:6e:97:cb:80:e1:62:7b:9b: 5c:88:84:b8:1c:ef:77:a2:30:2e:46:82:68:8a:90: ed:e8:da:b3:ee:7c:df:1f:6d:7f:df:c2:f8:17:ac: 10:aa:e0:15:4d:6f:ee:a3:fb:a0:de:1f:9d:57:39: bb:25:bd:99:71:3e:f4:d8:61:7f:8a:a5:67:a5:2e: bf:28:4d:ec:27:43:1d:7d:44:b3:85:18:c9:f9:6d: 88:8b:3f:14:2c:91:26:6a:66:48:34:12:16:f4:41: b3:15:2a:45:a2:56:78:a9:9f:c6:0a:25:05:f4:ce: fd:e5:4f:27:cf:8e:30:5d:66:55:7f:9d:1f:d1:63: 26:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:67:07:DE:0D:27:34:06:BB:34:AE:33:A3:14:9A:B6:04:0C:FC:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8b9a67e-3481-3ad9-b3b3-ec14f079d8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:7b:7c:55:3d:a6:ca:2c:fd:e4:1d:c1:cd:fe:13:d0:d2:b2: ff:da:75:fc:d1:b9:11:82:90:d4:a8:da:9f:f1:81:0f:dc:d9: 77:1e:10:8a:20:e1:69:45:fe:ae:fa:7a:12:69:20:36:ff:e7: b8:0e:fc:31:fe:1f:72:ca:a7:78:4b:fc:ee:51:cc:97:a1:95: 74:b4:88:d0:0a:7c:24:39:49:e3:52:94:ae:03:ba:d1:e3:20: 95:02:52:ec:92:32:a6:11:aa:c3:72:05:66:a7:b3:27:40:b4: 92:01:75:75:51:2d:88:93:fb:a2:bc:35:42:aa:a9:b1:65:dc: d3:10:56:71:31:6e:03:26:a3:c8:98:f8:bb:81:17:eb:be:5f: 7b:35:93:b5:77:ae:cc:97:21:f0:1b:fc:2c:b9:a1:b6:b2:dd: c1:2e:59:38:8b:aa:c2:62:7a:49:cb:0f:a1:7c:41:6c:47:99: e0:eb:91:b0:96:b4:f4:22:6b:3e:18:80:90:2b:fb:9a:64:fc: e7:8a:cc:af:7b:ce:77:c3:4b:3f:79:ba:70:bf:1f:22:fc:b8: 30:33:95:c7:a7:79:26:9d:ae:18:90:48:c0:0b:20:26:47:93: 48:f7:d8:b2:80:93:6e:a1:35:53:06:2b:18:63:4b:c1:7b:5d: 0a:ba:07:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1I0+PKMSXb0LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZWI2ZGZlMTAtNzBjMC00OWNhLTk1ZjUtZDkzNWFmN2FkNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0SflJLiBDVOz1oVB2KGKfxVfHf6R7tz8FT/ XJGt6s9v82eRiMKigKv+X5Stp7VUCbhvIqM9mcv6yJaevCa1zXUchB/RqL26n9Qk NevxTSE+b3PLgzs/qAlrz1hcaNHA/RPS7LYfdCvjTsSFfJ3Te4G20hWPupP8jPut Y5mvbpfLgOFie5tciIS4HO93ojAuRoJoipDt6Nqz7nzfH21/38L4F6wQquAVTW/u o/ug3h+dVzm7Jb2ZcT702GF/iqVnpS6/KE3sJ0MdfUSzhRjJ+W2Iiz8ULJEmamZI NBIW9EGzFSpFolZ4qZ/GCiUF9M795U8nz44wXWZVf50f0WMmHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBnB94NJzQGuzSuM6MUmrYEDPw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjhiOWE2N2UtMzQ4MS0z YWQ5LWIzYjMtZWMxNGYwNzlkOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9Q3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHl7fFU9psos/eQdwc3+E9DSsv/adfzRuRGCkNSo2p/xgQ/c2XceEIog 4WlF/q76ehJpIDb/57gO/DH+H3LKp3hL/O5RzJehlXS0iNAKfCQ5SeNSlK4DutHj IJUCUuySMqYRqsNyBWansydAtJIBdXVRLYiT+6K8NUKqqbFl3NMQVnExbgMmo8iY +LuBF+u+X3s1k7V3rsyXIfAb/Cy5obay3cEuWTiLqsJieknLD6F8QWxHmeDrkbCW tPQiaz4YgJAr+5pk/OeKzK97znfDSz95unC/HyL8uDAzlceneSadrhiQSMALICZH k0j32LKAk26hNVMGKxhjS8F7XQq6BzE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:36:16 2025 by rpki-client