$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96d1cce-dffd-3615-a962-35028de7fa84.roa File: c96d1cce-dffd-3615-a962-35028de7fa84.roa (raw, json) Hash identifier: MyQfhgD5nPZo0VvoFC2T9lKn7r4b/HColhOO0s71v9g= Subject key identifier: DA:F8:FC:2B:A6:63:1C:C2:F0:17:AD:B5:38:CF:4F:D3:2E:7C:2F:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715D08B07A37DD6A66CBBB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96d1cce-dffd-3615-a962-35028de7fa84.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16625 IP address blocks: 23.213.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:08:b0:7a:37:dd:6a:66:cb:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=be4d36e8-57a0-4bd8-b214-cc00529a6329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6d:3d:3b:0d:31:f0:e5:9c:04:ae:4b:8e:03: bf:99:84:48:2d:4d:e9:cc:72:c9:99:78:6f:96:bb: b1:65:f6:c4:6e:18:c7:de:1a:cf:1c:6d:d4:93:8c: ab:db:38:9a:56:c9:39:eb:7f:6d:a1:68:ca:e7:63: c5:55:de:fd:bc:1c:67:f5:e1:87:94:2f:04:8a:12: 46:e5:75:67:91:70:dc:45:eb:c5:10:0b:5e:bf:77: bf:ba:af:e2:9f:0b:bb:c0:31:0b:ae:1d:0d:2d:9c: 9a:44:8a:07:b3:6e:0b:97:59:d1:35:e7:c1:db:9d: 48:1a:e6:23:71:4b:98:6c:4d:2f:d1:34:86:bf:b2: 6b:2b:71:24:55:88:85:3b:fa:d1:45:c7:26:ec:67: 9c:2b:cc:ef:b7:07:97:ab:d0:fc:49:ac:a9:2f:3a: 92:6a:8b:bd:96:58:5f:21:5f:64:95:0d:50:02:c6: 33:db:00:c2:ac:db:b6:5b:ba:78:70:3b:a6:97:aa: 48:9f:65:6a:d8:56:15:6d:57:ba:7b:d7:16:01:ff: 04:ea:d4:2a:d2:df:c9:1a:61:20:d7:ae:0b:01:17: cc:96:9c:82:7e:73:52:ae:4d:11:32:bb:16:43:8d: 0f:e7:4f:9a:d8:1e:4a:af:65:c9:69:84:9b:02:1d: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:FC:2B:A6:63:1C:C2:F0:17:AD:B5:38:CF:4F:D3:2E:7C:2F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96d1cce-dffd-3615-a962-35028de7fa84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f3:c5:7f:08:de:0f:4b:fc:5e:88:00:6c:ee:eb:93:1b:b8: e3:11:77:de:60:c3:64:fe:bf:51:30:52:98:3f:4c:a5:8a:55: dc:8d:3c:d8:e6:b3:e6:79:f9:ec:91:32:05:ca:7e:63:54:d0: 8a:ed:ea:dd:a1:1a:79:1d:4c:9d:75:ea:bf:e4:bf:4e:04:5f: 49:90:1a:83:04:c3:92:a6:09:1d:f2:61:81:31:37:c4:d3:f0: bf:54:3e:fd:a5:22:8a:24:e9:4d:f4:d0:22:21:ac:70:32:c2: 5e:0c:2f:aa:0a:0f:85:54:ec:2e:50:84:10:06:6a:1e:84:53: 89:30:fa:d9:26:12:94:6d:c4:c9:ab:15:63:11:11:11:6c:2c: cb:61:db:5b:54:ed:51:cd:55:7a:51:e6:6c:b0:ae:98:bf:fc: a7:d1:fd:ad:6e:9e:64:a2:1d:ec:d8:83:ed:cf:7e:e5:e0:2d: 1d:3d:0f:4d:4b:07:07:9b:cf:92:89:a1:e6:0d:39:7a:cf:5a: 15:78:13:fd:8e:5e:b2:83:a4:ba:75:fc:fb:ce:80:33:66:17: 3c:e2:b9:4f:19:0c:2a:3c:c4:95:2e:d6:b3:36:de:51:40:36: 94:e4:2e:c2:9e:8c:25:0a:0f:ce:6d:2b:5e:e6:ae:fc:4c:6d: 31:d2:eb:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQiwejfdambLuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YmU0ZDM2ZTgtNTdhMC00YmQ4LWIyMTQtY2MwMDUyOWE2MzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG09Ow0x8OWcBK5LjgO/mYRILU3pzHLJmXhv lruxZfbEbhjH3hrPHG3Uk4yr2ziaVsk5639toWjK52PFVd79vBxn9eGHlC8EihJG 5XVnkXDcRevFEAtev3e/uq/inwu7wDELrh0NLZyaRIoHs24Ll1nRNefB251IGuYj cUuYbE0v0TSGv7JrK3EkVYiFO/rRRccm7GecK8zvtweXq9D8SaypLzqSaou9llhf IV9klQ1QAsYz2wDCrNu2W7p4cDuml6pIn2Vq2FYVbVe6e9cWAf8E6tQq0t/JGmEg 164LARfMlpyCfnNSrk0RMrsWQ40P50+a2B5Kr2XJaYSbAh34uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNr4/CumYxzC8BettTjPT9MufC9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk2ZDFjY2UtZGZmZC0z NjE1LWE5NjItMzUwMjhkZTdmYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHzxX8I3g9L/F6IAGzu65MbuOMRd95gw2T+v1EwUpg/TKWKVdyNPNjm s+Z5+eyRMgXKfmNU0Irt6t2hGnkdTJ116r/kv04EX0mQGoMEw5KmCR3yYYExN8TT 8L9UPv2lIook6U300CIhrHAywl4ML6oKD4VU7C5QhBAGah6EU4kw+tkmEpRtxMmr FWMRERFsLMth21tU7VHNVXpR5mywrpi//KfR/a1unmSiHezYg+3PfuXgLR09D01L Bwebz5KJoeYNOXrPWhV4E/2OXrKDpLp1/PvOgDNmFzziuU8ZDCo8xJUu1rM23lFA NpTkLsKejCUKD85tK17mrvxMbTHS6+0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:24 2025 by rpki-client