$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaa2de8-7a9f-3e48-a8bd-336184151f97.roa File: dbaa2de8-7a9f-3e48-a8bd-336184151f97.roa (raw, json) Hash identifier: gI4vQxhQ42M/IY7UqJczuBUClxZydcs/D7kfUCV0nxo= Subject key identifier: 0B:1F:80:B1:53:0B:AC:2A:46:C9:67:A2:00:46:AC:91:4B:53:F3:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B62022819480B11357522F940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaa2de8-7a9f-3e48-a8bd-336184151f97.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 20940 IP address blocks: 23.217.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:28:19:48:0b:11:35:75:22:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b529f219-b20c-41aa-92e5-dc75885b0794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:89:95:f7:ad:e9:83:e4:46:49:0c:ed:bc: e6:c0:32:d7:61:29:a4:ed:d1:1c:d4:b1:1a:64:bd: 09:bf:26:f4:4d:7a:32:12:ee:5b:8e:d1:b2:47:80: 72:7c:53:ef:d3:a0:ac:4e:ce:cf:67:56:dd:38:49: 67:b6:fb:13:8c:0d:ce:98:76:18:db:72:d7:45:d3: 06:91:da:8d:3b:83:4e:08:ee:85:68:82:2a:3b:98: 71:c1:a5:e4:06:36:69:5d:e0:d0:fe:4c:e4:ba:dd: 77:be:b6:9d:38:bf:f0:0c:87:f8:d4:29:cf:57:f4: 66:69:06:1c:95:97:b2:72:0d:dd:7b:a9:d1:34:7d: 4d:83:b3:4d:b4:8a:8f:9c:af:2e:e2:40:d5:c6:4c: 3d:25:23:75:f5:53:62:81:84:65:27:84:9b:aa:f0: 99:e1:c9:6f:81:87:7b:8c:3c:0c:16:8d:a3:53:09: a7:a3:9d:81:60:4d:56:27:f6:71:4e:e7:84:09:77: 3d:58:d0:46:d8:e8:31:9f:07:c1:15:f8:52:44:ee: 09:92:cf:b6:68:7c:7e:87:e5:be:75:82:9a:34:75: cb:1e:b8:9e:a1:58:a1:12:3d:4d:94:14:4d:4e:95: 1d:e6:6f:ef:de:2f:96:0e:af:9a:25:98:5e:da:11: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:80:B1:53:0B:AC:2A:46:C9:67:A2:00:46:AC:91:4B:53:F3:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaa2de8-7a9f-3e48-a8bd-336184151f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9c:2e:06:44:94:73:18:e0:57:fd:b6:2c:50:91:31:28:13: 53:0d:e9:28:42:cd:73:bc:9e:92:06:c0:fa:f1:05:4e:a2:4d: 55:9a:4f:51:27:2d:cf:f2:3d:30:f0:f1:48:91:b9:14:ac:ad: 6e:34:f5:f4:c9:a0:79:b8:5c:d5:95:20:ce:8c:d1:a6:68:a2: 9b:ce:11:67:b5:25:a4:f1:81:33:8a:c0:33:d8:fc:4e:d1:1e: 63:6d:5a:82:c5:70:25:e5:93:b6:d6:76:93:23:e9:72:63:42: 2e:6d:ba:25:a1:31:00:42:f1:e5:b4:b7:79:8f:e2:4f:f2:3f: bf:09:67:aa:ec:21:21:ff:f9:9c:81:3f:15:1f:e9:6c:ab:85: 11:3d:30:ee:73:a7:fb:15:01:3f:2b:d3:0b:63:b5:1f:d8:f3: 6e:d8:c3:2b:bc:47:8f:69:ea:a8:06:ed:4e:15:53:f2:86:7d: 76:a0:96:40:ff:b6:da:b4:11:de:3e:21:df:b4:78:54:b0:bf: fa:0a:ed:f6:79:a8:7f:bb:14:b5:f9:7a:67:e2:74:3f:9a:50: 3e:3c:56:0e:9a:69:12:f7:fb:e1:52:e1:cf:0b:d0:f4:a9:d1: e2:4e:c1:c1:f4:34:3c:06:c4:5a:aa:3d:0e:79:52:fb:a9:d3: ae:17:1f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAigZSAsRNXUi+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjUyOWYyMTktYjIwYy00MWFhLTkyZTUtZGM3NTg4NWIwNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTWJlfet6YPkRkkM7bzmwDLXYSmk7dEc1LEa ZL0Jvyb0TXoyEu5bjtGyR4ByfFPv06CsTs7PZ1bdOElntvsTjA3OmHYY23LXRdMG kdqNO4NOCO6FaIIqO5hxwaXkBjZpXeDQ/kzkut13vradOL/wDIf41CnPV/RmaQYc lZeycg3de6nRNH1Ng7NNtIqPnK8u4kDVxkw9JSN19VNigYRlJ4SbqvCZ4clvgYd7 jDwMFo2jUwmno52BYE1WJ/ZxTueECXc9WNBG2OgxnwfBFfhSRO4Jks+2aHx+h+W+ dYKaNHXLHrieoVihEj1NlBRNTpUd5m/v3i+WDq+aJZhe2hHlRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsfgLFTC6wqRslnogBGrJFLU/MXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJhYTJkZTgtN2E5Zi0z ZTQ4LWE4YmQtMzM2MTg0MTUxZjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9kKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqcLgZElHMY4Ff9tixQkTEoE1MN6ShCzXO8npIGwPrxBU6iTVWaT1En Lc/yPTDw8UiRuRSsrW409fTJoHm4XNWVIM6M0aZoopvOEWe1JaTxgTOKwDPY/E7R HmNtWoLFcCXlk7bWdpMj6XJjQi5tuiWhMQBC8eW0t3mP4k/yP78JZ6rsISH/+ZyB PxUf6WyrhRE9MO5zp/sVAT8r0wtjtR/Y827Ywyu8R49p6qgG7U4VU/KGfXaglkD/ ttq0Ed4+Id+0eFSwv/oK7fZ5qH+7FLX5emfidD+aUD48Vg6aaRL3++FS4c8L0PSp 0eJOwcH0NDwGxFqqPQ55Uvup064XH5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:07 2025 by rpki-client