$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c84562c3-6e77-39af-8b1f-87e8967f0a1a.roa File: c84562c3-6e77-39af-8b1f-87e8967f0a1a.roa (raw, json) Hash identifier: GvfpPHSfR36i5EqA+7mVWK6n+SNLpJQwJt1DknKpInU= Subject key identifier: EB:30:6F:4A:89:2D:D7:8C:95:7F:59:C9:9A:C0:87:9D:A8:40:D4:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1CFF6546B437D58AFEB90 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c84562c3-6e77-39af-8b1f-87e8967f0a1a.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.208.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:cf:f6:54:6b:43:7d:58:af:eb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=ca19c523-8256-4f31-bd8b-0872d0bfcf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:78:3d:e3:88:ba:01:df:4d:19:a3:c0:a3:3e: 88:3c:6a:25:2a:c0:b2:22:b1:2f:ae:be:a8:e9:a5: 8f:b8:98:4b:9d:36:09:e7:0d:89:d2:9c:6b:fe:bd: 18:62:52:e6:97:9e:41:06:e1:22:09:51:35:22:b2: c5:34:2a:b8:14:5e:13:fb:ff:9f:da:92:45:bc:80: 3d:c0:b2:6a:bf:a6:c3:f5:13:53:75:cc:05:79:4f: b3:ed:fd:a6:85:e7:ed:1f:61:8a:00:f0:fa:99:39: 03:75:91:b7:0a:b3:27:3a:f7:aa:cb:84:bc:1c:6a: 1c:66:00:2b:c0:4f:69:3e:06:06:87:04:24:98:99: eb:08:1c:d6:8d:8f:6b:cf:11:4e:04:4f:13:53:5a: a2:4c:c4:c9:c2:1e:9d:3c:db:33:f9:f7:d1:35:f1: 35:cf:90:f5:b6:4b:05:85:d8:59:24:f5:4a:bc:21: ee:df:c3:4b:31:31:a3:c3:23:d6:79:0a:9c:6f:10: 8c:74:7d:11:e2:53:87:e3:f6:8b:a5:26:dd:9c:0e: be:4e:3d:91:e2:13:75:4a:c7:db:1a:c9:6f:c3:6d: 64:aa:d7:70:25:9c:63:f4:05:1a:49:3e:88:e5:e6: 55:99:2a:f5:fd:1e:51:fb:2e:ba:2a:82:19:21:b7: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:30:6F:4A:89:2D:D7:8C:95:7F:59:C9:9A:C0:87:9D:A8:40:D4:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c84562c3-6e77-39af-8b1f-87e8967f0a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:79:64:e8:30:19:de:6f:45:99:c0:04:ea:c6:68:e7:fe:78: d3:a9:88:ab:46:1b:9a:65:17:c7:86:e3:19:3e:ef:c8:1a:ef: 34:45:26:12:8d:b7:94:a6:2c:40:fc:c5:13:95:ea:c6:d3:71: cc:e1:57:9f:7a:17:bd:ae:48:e1:d8:ab:4f:54:44:14:de:a3: 31:83:94:29:ff:b7:3f:3a:c1:2f:d4:15:a7:cd:29:85:9f:d9: 94:39:10:57:17:6c:01:05:4a:12:56:f8:13:57:e0:82:f7:c9: 18:c5:e5:2d:b2:05:9b:3d:64:31:1d:cb:02:e9:09:36:8b:58: 22:05:f6:97:f9:c2:e3:22:90:62:36:cc:d9:c7:7a:09:2e:b4: 92:f6:a0:1c:50:bf:92:38:84:8b:5a:20:44:b5:20:f2:46:ac: 4a:09:7b:45:7e:e2:cd:a8:77:1a:bb:06:40:00:25:2f:bf:d8: 17:2d:00:de:30:ff:24:b5:4b:45:76:03:2e:d8:b4:3b:41:7c: 04:b8:2e:51:7f:fb:c2:83:4c:b0:0c:5f:41:aa:84:1a:1a:14: 53:6a:01:b7:b8:b6:e9:23:72:a1:8e:80:da:0c:0d:70:d0:a1: 25:8e:11:95:85:2a:7b:c7:70:fe:c7:7b:7e:e5:41:17:65:43: 1c:ce:44:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoc/2VGtDfViv65AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk Y2ExOWM1MjMtODI1Ni00ZjMxLWJkOGItMDg3MmQwYmZjZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ng944i6Ad9NGaPAoz6IPGolKsCyIrEvrr6o 6aWPuJhLnTYJ5w2J0pxr/r0YYlLml55BBuEiCVE1IrLFNCq4FF4T+/+f2pJFvIA9 wLJqv6bD9RNTdcwFeU+z7f2mheftH2GKAPD6mTkDdZG3CrMnOveqy4S8HGocZgAr wE9pPgYGhwQkmJnrCBzWjY9rzxFOBE8TU1qiTMTJwh6dPNsz+ffRNfE1z5D1tksF hdhZJPVKvCHu38NLMTGjwyPWeQqcbxCMdH0R4lOH4/aLpSbdnA6+Tj2R4hN1Ssfb Gslvw21kqtdwJZxj9AUaST6I5eZVmSr1/R5R+y66KoIZIbcE7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOswb0qJLdeMlX9ZyZrAh52oQNRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg0NTYyYzMtNmU3Ny0z OWFmLThiMWYtODdlODk2N2YwYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN5ZOgwGd5vRZnABOrGaOf+eNOpiKtGG5plF8eG4xk+78ga7zRFJhKN t5SmLED8xROV6sbTcczhV596F72uSOHYq09URBTeozGDlCn/tz86wS/UFafNKYWf 2ZQ5EFcXbAEFShJW+BNX4IL3yRjF5S2yBZs9ZDEdywLpCTaLWCIF9pf5wuMikGI2 zNnHegkutJL2oBxQv5I4hItaIES1IPJGrEoJe0V+4s2odxq7BkAAJS+/2BctAN4w /yS1S0V2Ay7YtDtBfAS4LlF/+8KDTLAMX0GqhBoaFFNqAbe4tukjcqGOgNoMDXDQ oSWOEZWFKnvHcP7He37lQRdlQxzORF8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:37:40 2025 by rpki-client