$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c096e1d2-b6bc-304e-8840-44df79ef8cfc.roa File: c096e1d2-b6bc-304e-8840-44df79ef8cfc.roa (raw, json) Hash identifier: xth5OXSQG0DZ4mAT2cpVKUp06Y44gNRwsjNdG5xY+AA= Subject key identifier: 56:76:C3:14:55:67:D8:6D:61:59:FE:4D:9E:45:53:94:3F:A9:50:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD205B00BFD3EA6681CC3F8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c096e1d2-b6bc-304e-8840-44df79ef8cfc.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.217.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:05:b0:0b:fd:3e:a6:68:1c:c3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=88a9bd8a-22b8-45b3-8b15-2761d6f1ceac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:b8:ba:c9:67:73:c1:f7:af:a7:9b:66:fa: 5f:42:fd:9c:4a:ad:a0:68:a4:56:b1:24:57:20:63: b5:ad:94:35:47:e9:21:67:00:db:4f:bd:f6:4f:e0: 4d:fb:b1:34:72:ad:2b:1c:4d:07:35:13:bd:e9:1d: b5:ea:ea:4a:a1:91:98:42:23:72:3f:14:d2:6e:81: 1d:26:50:00:ba:7d:ed:26:4d:2b:8c:a2:8d:a5:85: 26:52:1f:30:d7:a0:b8:58:e2:6b:34:5e:f8:25:ae: 6e:7e:8e:95:6b:d5:99:db:08:ee:04:3c:b9:94:42: 12:7c:fc:ed:f2:5b:b3:9c:8b:4e:4d:2b:d5:79:73: 42:08:d6:7e:11:86:21:a1:b4:b6:42:de:43:3c:6b: 53:12:26:ca:68:16:bd:cb:56:ed:b6:db:e1:70:ba: 14:3d:bc:e5:32:fe:8d:09:64:83:68:6f:ef:94:bd: ad:e8:d5:4e:a7:bb:06:68:82:81:ba:91:87:2d:9b: 38:67:e6:ce:bc:07:a9:ba:97:bf:dc:c8:86:d5:af: 8f:0f:77:cd:7a:cb:e6:96:8b:65:d2:b6:3f:3f:49: 75:f0:cc:dd:9d:9f:fd:ab:35:1b:7a:60:03:1f:a0: 72:0c:32:39:73:c9:38:29:79:a8:c1:cb:68:f1:c7: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:76:C3:14:55:67:D8:6D:61:59:FE:4D:9E:45:53:94:3F:A9:50:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c096e1d2-b6bc-304e-8840-44df79ef8cfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:45:90:f5:d8:1d:6d:2e:b3:71:66:51:62:67:ac:a8:6c:7c: ca:fd:74:d0:f7:f9:7f:37:5a:c7:cb:d4:62:91:63:ea:06:14: 3d:f5:45:8b:4d:01:43:ef:83:df:c5:df:1e:bc:3c:4a:1e:27: 7c:77:c6:10:cb:aa:db:75:32:f1:99:2d:f3:f4:da:06:8a:a2: 99:b6:d0:e6:35:25:bd:90:ac:8d:6a:c7:4a:3f:cd:f0:5f:05: 55:af:c6:c2:e0:d3:aa:e0:1b:0a:9f:b5:73:38:4b:e9:7b:ac: b8:e0:be:fa:50:44:db:b4:1e:4a:96:af:5f:76:71:d2:3d:6f: 9e:8c:8d:4b:e1:45:96:e5:84:de:63:24:7a:0a:62:9f:60:41: 8f:72:e6:f4:ab:57:50:78:1f:5d:4e:07:5d:4f:88:3c:b2:a6: 26:50:bb:da:d8:c4:83:eb:ed:26:1b:8a:5f:bb:8f:21:81:4a: 71:78:b4:31:e1:ac:ed:8a:99:b6:db:63:10:6b:fa:25:8c:89: 98:4c:0f:b4:a1:6c:c7:59:66:e9:f6:18:53:99:38:e8:88:bc: 13:20:5e:da:29:34:eb:04:75:38:78:b1:6c:60:9c:91:8f:2c: 08:bc:81:21:b8:4a:cd:4f:a9:8f:52:0e:02:e6:37:e1:74:0b: 1f:6f:7b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gWwC/0+pmgcw/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ODhhOWJkOGEtMjJiOC00NWIzLThiMTUtMjc2MWQ2ZjFjZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTK4uslnc8H3r6ebZvpfQv2cSq2gaKRWsSRX IGO1rZQ1R+khZwDbT732T+BN+7E0cq0rHE0HNRO96R216upKoZGYQiNyPxTSboEd JlAAun3tJk0rjKKNpYUmUh8w16C4WOJrNF74Ja5ufo6Va9WZ2wjuBDy5lEISfPzt 8luznItOTSvVeXNCCNZ+EYYhobS2Qt5DPGtTEibKaBa9y1btttvhcLoUPbzlMv6N CWSDaG/vlL2t6NVOp7sGaIKBupGHLZs4Z+bOvAepupe/3MiG1a+PD3fNesvmlotl 0rY/P0l18MzdnZ/9qzUbemADH6ByDDI5c8k4KXmowcto8cfFBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ2wxRVZ9htYVn+TZ5FU5Q/qVBlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzA5NmUxZDItYjZiYy0z MDRlLTg4NDAtNDRkZjc5ZWY4Y2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApFkPXYHW0us3FmUWJnrKhsfMr9dND3+X83WsfL1GKRY+oGFD31RYtN AUPvg9/F3x68PEoeJ3x3xhDLqtt1MvGZLfP02gaKopm20OY1Jb2QrI1qx0o/zfBf BVWvxsLg06rgGwqftXM4S+l7rLjgvvpQRNu0HkqWr192cdI9b56MjUvhRZblhN5j JHoKYp9gQY9y5vSrV1B4H11OB11PiDyypiZQu9rYxIPr7SYbil+7jyGBSnF4tDHh rO2KmbbbYxBr+iWMiZhMD7ShbMdZZun2GFOZOOiIvBMgXtopNOsEdTh4sWxgnJGP LAi8gSG4Ss1PqY9SDgLmN+F0Cx9vey0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:51 2025 by rpki-client