$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa File: bebba86e-a1c2-3eb5-b277-eabe13095c64.roa (raw, json) Hash identifier: q4VPQ7hekAsqxiKKfuGJSxAjQlBMMDaEfFNvcaJvHBY= Subject key identifier: 22:0A:D7:F8:56:C7:9B:D3:A6:7B:47:35:2F:DE:FC:95:C8:62:78:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FDDC7B27F8442B700780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.217.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fd:dc:7b:27:f8:44:2b:70:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=048366f8-6d77-45ed-94cc-cdc41a88bf0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:97:89:fa:2f:f6:6e:b3:1a:e6:79:81:e8:cb: 27:4f:2b:0c:71:9b:69:29:56:06:be:ee:bf:56:4e: 7a:fa:32:6c:f2:24:5a:84:44:4e:8b:e8:15:79:42: 5e:f4:77:be:ab:c7:cc:a7:36:a2:71:70:38:bd:49: 51:41:d3:2a:53:d4:5d:a2:53:b2:ca:4e:c5:11:b2: 4a:25:bb:1d:3c:55:77:07:d4:08:63:42:11:d5:d9: 0b:da:6c:b9:cd:32:8a:a2:7c:b3:de:cb:1e:19:96: c9:4a:9d:7d:f2:e9:4e:f7:fc:6c:70:c8:07:72:47: de:3a:29:56:c1:c1:fd:55:6d:49:9b:ba:1c:a3:79: 34:da:4d:7c:da:42:af:65:08:dd:94:99:c7:ab:4b: 9f:21:c6:4d:30:7e:1a:83:92:cd:60:97:2d:3d:0a: da:38:24:65:8a:05:3e:8f:bc:ab:31:db:bd:d2:c5: 14:0c:1c:c8:ee:de:89:ba:55:82:9e:70:83:b2:b9: 2d:8c:50:19:f8:59:1b:47:c0:b6:e9:8a:bf:cc:00: a4:b9:bb:80:40:1b:d4:b3:87:c8:91:5a:7b:70:07: e6:ce:61:a4:54:9e:9f:e1:59:68:b2:1b:20:01:7e: c1:8b:f2:97:7a:c9:9b:11:a9:44:34:83:d8:94:a5: 02:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:D7:F8:56:C7:9B:D3:A6:7B:47:35:2F:DE:FC:95:C8:62:78:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e9:43:1a:29:34:42:b0:d5:48:cc:1b:fc:e7:f9:8b:e3:88: 74:32:6d:c3:c3:6f:19:8b:e3:a2:ad:10:cd:2d:f5:18:80:1b: 1d:39:7e:91:2d:e1:99:33:a5:e5:60:a1:f9:9c:08:e3:8d:7d: 40:6f:f2:0c:5e:5d:6c:8b:9d:da:e9:51:57:94:c4:db:6d:ad: 39:ee:25:a2:4b:06:e8:ea:ff:14:df:80:bf:0d:00:7b:33:27: d5:8f:3f:10:17:59:e7:3b:18:18:f2:9a:7a:14:0c:88:c5:67: 68:17:36:f4:bf:5b:63:b5:8e:a7:fb:32:a0:e9:c9:30:e3:69: c5:9a:8f:ac:50:7c:86:93:2d:e0:92:84:8b:61:4d:a2:b9:c6: c0:02:53:6a:ff:ed:09:ef:91:8d:fa:0d:20:c0:5c:4d:01:26: 56:41:cb:18:b1:5c:28:7c:a1:c8:c5:5a:3c:db:bf:6b:17:20: 29:bc:ca:41:5a:a3:f4:7d:9d:87:fe:2a:17:75:7e:62:2d:35: e5:94:4d:56:9b:f0:bb:db:8a:23:62:5d:fa:a0:f1:df:fb:15: 3c:2c:44:85:0f:e1:f8:47:2c:72:b7:44:db:99:ce:fc:f1:ff: 8a:c4:10:a1:d6:1d:c6:84:50:2c:3c:4b:d9:45:15:cd:42:43: 35:23:49:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0f3ceyf4RCtwB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk MDQ4MzY2ZjgtNmQ3Ny00NWVkLTk0Y2MtY2RjNDFhODhiZjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3peJ+i/2brMa5nmB6MsnTysMcZtpKVYGvu6/ Vk56+jJs8iRahEROi+gVeUJe9He+q8fMpzaicXA4vUlRQdMqU9RdolOyyk7FEbJK JbsdPFV3B9QIY0IR1dkL2my5zTKKonyz3sseGZbJSp198ulO9/xscMgHckfeOilW wcH9VW1Jm7oco3k02k182kKvZQjdlJnHq0ufIcZNMH4ag5LNYJctPQraOCRligU+ j7yrMdu90sUUDBzI7t6JulWCnnCDsrktjFAZ+FkbR8C26Yq/zACkubuAQBvUs4fI kVp7cAfmzmGkVJ6f4VloshsgAX7Bi/KXesmbEalENIPYlKUCRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIK1/hWx5vTpntHNS/e/JXIYnifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmViYmE4NmUtYTFjMi0z ZWI1LWIyNzctZWFiZTEzMDk1YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9k1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/pQxopNEKw1UjMG/zn+YvjiHQybcPDbxmL46KtEM0t9RiAGx05fpEt 4ZkzpeVgofmcCOONfUBv8gxeXWyLndrpUVeUxNttrTnuJaJLBujq/xTfgL8NAHsz J9WPPxAXWec7GBjymnoUDIjFZ2gXNvS/W2O1jqf7MqDpyTDjacWaj6xQfIaTLeCS hIthTaK5xsACU2r/7QnvkY36DSDAXE0BJlZByxixXCh8ocjFWjzbv2sXICm8ykFa o/R9nYf+Khd1fmItNeWUTVab8LvbiiNiXfqg8d/7FTwsRIUP4fhHLHK3RNuZzvzx /4rEEKHWHcaEUCw8S9lFFc1CQzUjSXM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:20 2025 by rpki-client