$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0eb425-0322-38cc-804c-181daa43a1c7.roa File: ca0eb425-0322-38cc-804c-181daa43a1c7.roa (raw, json) Hash identifier: omiCvbkmyhiLe/6Qlf76xrJ42dj9QwmoluKocVRcPwg= Subject key identifier: F2:EC:08:E6:65:EE:62:2F:73:75:2A:7B:75:EA:5D:A5:0C:EE:A1:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0750A4E65DF29D1B053980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0eb425-0322-38cc-804c-181daa43a1c7.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.211.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:50:a4:e6:5d:f2:9d:1b:05:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e2c2d42e-ed2d-4901-aead-7826458f8f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:a9:ff:d6:43:7e:39:8f:0d:df:e6:6a:ee: 3b:74:b4:05:36:0f:2f:0f:ce:da:1b:af:db:37:ae: a7:66:d6:a2:51:2f:96:7c:f2:e2:a7:69:75:b5:1d: 5e:1e:22:32:11:79:a8:30:10:90:12:1f:62:34:44: 0b:03:a1:ec:f0:98:d2:45:31:d2:d0:9a:15:bf:3e: fe:56:bf:cc:99:5f:84:09:2d:ee:2a:7a:cc:2a:9c: 92:0d:c9:13:d2:f9:52:4a:b6:04:9a:c0:1d:90:4d: 31:81:b5:c3:35:f6:10:ad:f1:07:ef:17:84:03:72: 96:7b:7d:2e:5a:83:f2:0d:9f:a8:0f:0c:26:a0:86: 80:b8:2c:bf:86:53:93:60:2e:ac:26:a1:c1:42:63: b9:f9:f8:8f:78:24:96:55:44:9e:f2:0c:63:9e:5b: 4f:d2:ad:21:1c:2d:ce:52:5f:2d:22:e6:4c:a7:1e: a0:9f:19:73:04:fc:fc:6f:c1:63:2d:94:4e:2e:d1: ca:33:7a:84:17:fc:30:06:5b:fe:91:af:e8:19:ef: 48:38:13:d7:8e:95:78:9f:84:ef:3b:10:07:05:0a: d3:df:44:c3:d6:4f:6c:5d:8a:88:fe:2f:b9:a3:9c: 0f:b7:c9:93:ac:9c:3e:cf:1b:9e:31:69:b1:07:02: 6f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EC:08:E6:65:EE:62:2F:73:75:2A:7B:75:EA:5D:A5:0C:EE:A1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ca0eb425-0322-38cc-804c-181daa43a1c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:9d:c6:6a:f4:62:49:78:90:52:bf:77:81:9f:5f:96:85:08: a1:02:85:e7:f8:31:75:32:06:6c:34:02:8a:e0:b5:d5:2e:5e: 8a:a9:99:ba:74:93:e8:1c:37:d2:39:36:ea:b4:3c:66:41:ba: 60:21:44:c0:56:fa:a3:9c:bd:ea:ae:65:5c:ba:b1:e0:42:bd: 46:4b:ba:63:12:df:ac:61:98:5f:dc:dc:dc:ab:4f:49:93:69: ae:52:da:88:1b:e8:57:a7:43:5e:b4:82:8c:f7:53:0a:18:40: 09:87:13:bb:04:6e:4e:66:b0:6e:e5:2e:f0:ea:d2:58:ca:78: 29:8f:20:71:8b:5b:16:51:73:ba:02:4f:22:75:75:7e:a2:53: 02:68:ee:7d:0c:b5:fb:75:8d:22:93:e3:e0:b7:20:70:fa:80: 97:3d:47:d7:5b:34:d0:1f:a1:25:12:78:82:f5:f9:e0:5f:4f: 9c:31:24:8b:b8:a7:ef:03:31:9d:3e:a1:c2:6e:1d:50:09:ff: 60:df:e8:24:49:a9:44:79:fc:5a:1f:e9:59:28:a3:36:d5:07: 37:db:4e:fa:8b:5d:0b:d5:9a:81:e6:46:09:57:0e:fa:ff:b8: 40:48:ad:aa:2e:41:74:e8:7e:9f:8b:f9:3c:8b:08:cf:e6:46: da:f5:cc:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1Ck5l3ynRsFOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTJjMmQ0MmUtZWQyZC00OTAxLWFlYWQtNzgyNjQ1OGY4ZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2Op/9ZDfjmPDd/mau47dLQFNg8vD87aG6/b N66nZtaiUS+WfPLip2l1tR1eHiIyEXmoMBCQEh9iNEQLA6Hs8JjSRTHS0JoVvz7+ Vr/MmV+ECS3uKnrMKpySDckT0vlSSrYEmsAdkE0xgbXDNfYQrfEH7xeEA3KWe30u WoPyDZ+oDwwmoIaAuCy/hlOTYC6sJqHBQmO5+fiPeCSWVUSe8gxjnltP0q0hHC3O Ul8tIuZMpx6gnxlzBPz8b8FjLZROLtHKM3qEF/wwBlv+ka/oGe9IOBPXjpV4n4Tv OxAHBQrT30TD1k9sXYqI/i+5o5wPt8mTrJw+zxueMWmxBwJvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLsCOZl7mIvc3Uqe3XqXaUM7qGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2EwZWI0MjUtMDMyMi0z OGNjLTgwNGMtMTgxZGFhNDNhMWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9MEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+dxmr0Ykl4kFK/d4GfX5aFCKEChef4MXUyBmw0AorgtdUuXoqpmbp0 k+gcN9I5Nuq0PGZBumAhRMBW+qOcvequZVy6seBCvUZLumMS36xhmF/c3NyrT0mT aa5S2ogb6FenQ160goz3UwoYQAmHE7sEbk5msG7lLvDq0ljKeCmPIHGLWxZRc7oC TyJ1dX6iUwJo7n0Mtft1jSKT4+C3IHD6gJc9R9dbNNAfoSUSeIL1+eBfT5wxJIu4 p+8DMZ0+ocJuHVAJ/2Df6CRJqUR5/Fof6VkoozbVBzfbTvqLXQvVmoHmRglXDvr/ uEBIraouQXTofp+L+TyLCM/mRtr1zHk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:19:25 2025 by rpki-client