$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ac2471-334d-3a21-910d-aec123fb2960.roa File: d6ac2471-334d-3a21-910d-aec123fb2960.roa (raw, json) Hash identifier: gv/49roS3GhaZdHsWYkFeRsWZX/wXGQIxZGFBWxlv08= Subject key identifier: C0:5C:B4:13:7E:CB:57:7D:1F:AA:C7:99:34:F7:27:F3:43:A8:E1:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2E5C5145B95009ED320B6260 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ac2471-334d-3a21-910d-aec123fb2960.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.63.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:51:45:b9:50:09:ed:32:0b:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=98d772a3-46ad-47f3-a122-52bad652c3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:d8:3f:d4:ca:c3:d5:50:cc:f0:2b:49:97: f9:9c:c7:3d:a7:28:c6:3b:dd:01:30:90:87:ac:7e: aa:5b:86:cc:6d:16:6a:14:9d:7d:ad:a6:d7:fe:b5: 23:65:a7:36:ae:f0:89:e8:ab:77:6c:5b:57:30:82: e9:23:d2:ea:24:ff:c7:52:ac:c6:6b:07:75:60:46: 6d:76:43:4b:88:9a:89:94:8d:82:d7:59:c6:61:7e: 87:4a:6e:19:cb:15:fb:08:b3:af:e1:86:3c:67:06: 29:54:ac:f5:30:62:e6:68:e6:ee:88:28:9a:0e:f5: 50:68:e2:ac:7e:08:a5:91:46:32:99:35:c0:a9:88: e3:cb:6d:40:6f:bd:34:19:d7:72:ab:4c:dd:92:74: 81:b3:d2:e9:42:4e:cb:78:67:db:db:39:31:b0:2c: 54:54:4d:08:94:bf:0e:a0:79:4c:2e:54:4e:62:c7: cc:af:f7:25:40:d3:83:e8:fc:e6:91:36:18:cb:73: 3f:6e:c5:92:11:92:3f:e1:47:b2:35:e1:5b:5f:0b: e7:1f:c7:e2:54:e6:8c:52:c1:b9:df:78:ed:eb:19: e2:9b:ab:66:8c:1b:37:01:6b:f9:81:26:8a:45:9b: 89:9a:df:e8:91:3e:ca:48:b8:d6:bf:71:93:e7:15: 1c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5C:B4:13:7E:CB:57:7D:1F:AA:C7:99:34:F7:27:F3:43:A8:E1:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ac2471-334d-3a21-910d-aec123fb2960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2e:9a:69:13:92:c8:e1:4c:6a:1d:b8:ae:f6:6e:95:1b:a7: 0a:be:b9:27:38:db:0d:52:b6:b8:2c:7c:7c:4d:a4:cd:ef:3e: cc:88:4c:53:a1:f4:f3:04:bb:b2:e0:30:3b:04:ec:4f:98:6c: d5:3b:d1:a0:7d:e3:33:4b:ae:1d:41:21:b0:b0:6f:2b:0b:3b: e2:41:b3:f5:c6:fe:68:2d:fd:d8:f4:3d:03:66:c9:0b:47:25: 10:65:b0:ef:85:35:30:d0:72:e9:d9:64:25:b0:db:ac:55:a3: 5f:a8:88:fe:35:f5:54:5c:95:73:28:61:ca:1a:bd:d7:eb:be: df:32:d3:9c:64:45:2b:24:e3:d4:9f:19:f9:89:b7:0b:7d:b1: 34:10:82:cc:6c:fa:f0:be:9c:db:2d:10:fb:a0:29:5c:50:82: b8:08:96:f4:f8:75:8c:71:52:48:28:79:4d:d5:6c:8f:fe:1e: 5b:55:07:e2:38:2a:d5:80:33:3a:10:1f:f6:34:86:2c:99:e4: fd:92:70:f8:de:38:a4:df:fb:32:e3:0c:05:df:5f:e0:ca:6f: 9b:a9:99:b1:dd:b3:cd:57:55:2f:da:ca:97:45:22:d9:c3:57: 0f:8c:31:d8:bb:97:39:59:fb:5c:b6:8e:44:5d:bf:5b:d8:67: be:4c:c2:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFFFuVAJ7TILYmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk OThkNzcyYTMtNDZhZC00N2YzLWExMjItNTJiYWQ2NTJjM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQDYP9TKw9VQzPArSZf5nMc9pyjGO90BMJCH rH6qW4bMbRZqFJ19rabX/rUjZac2rvCJ6Kt3bFtXMILpI9LqJP/HUqzGawd1YEZt dkNLiJqJlI2C11nGYX6HSm4ZyxX7CLOv4YY8ZwYpVKz1MGLmaObuiCiaDvVQaOKs fgilkUYymTXAqYjjy21Ab700Gddyq0zdknSBs9LpQk7LeGfb2zkxsCxUVE0IlL8O oHlMLlROYsfMr/clQNOD6PzmkTYYy3M/bsWSEZI/4UeyNeFbXwvnH8fiVOaMUsG5 33jt6xnim6tmjBs3AWv5gSaKRZuJmt/okT7KSLjWv3GT5xUcGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBctBN+y1d9H6rHmTT3J/NDqOGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDZhYzI0NzEtMzM0ZC0z YTIxLTkxMGQtYWVjMTIzZmIyOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgummkTksjhTGoduK72bpUbpwq+uSc42w1StrgsfHxNpM3vPsyITFOh 9PMEu7LgMDsE7E+YbNU70aB94zNLrh1BIbCwbysLO+JBs/XG/mgt/dj0PQNmyQtH JRBlsO+FNTDQcunZZCWw26xVo1+oiP419VRclXMoYcoavdfrvt8y05xkRSsk49Sf GfmJtwt9sTQQgsxs+vC+nNstEPugKVxQgrgIlvT4dYxxUkgoeU3VbI/+HltVB+I4 KtWAMzoQH/Y0hiyZ5P2ScPjeOKTf+zLjDAXfX+DKb5upmbHds81XVS/aypdFItnD Vw+MMdi7lzlZ+1y2jkRdv1vYZ75MwtM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:59 2025 by rpki-client