$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb850d2-8598-332e-be3b-c1f9632cdccd.roa File: dbb850d2-8598-332e-be3b-c1f9632cdccd.roa (raw, json) Hash identifier: HZ9V2d5UDH4EMoOPw9l1zCxlPbwMaT7QWPYm3goHjZU= Subject key identifier: 01:F7:7E:26:C4:D6:A5:FC:D6:58:1E:A7:F0:19:CA:37:5A:17:7D:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA6332D1CD290230AA680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb850d2-8598-332e-be3b-c1f9632cdccd.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 20940 IP address blocks: 23.218.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a6:33:2d:1c:d2:90:23:0a:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=5e4e1733-5f7e-4236-a09b-ccca1aa7170b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:21:d1:70:e8:90:14:19:07:da:bf:ba:60: 49:69:f9:e4:b1:1a:eb:7d:5f:4e:62:e5:e2:d3:72: a7:97:62:1e:ae:da:91:b1:44:19:aa:4e:89:8b:c1: 2d:55:e0:05:8a:a2:07:bd:5a:5b:b8:c1:1f:6e:a2: c4:16:9c:e4:ba:2e:81:24:48:ef:95:24:7c:d5:7f: c7:85:e3:4b:36:f2:19:28:91:ff:fd:01:e4:be:b9: 53:ac:51:5e:de:4f:2f:d6:69:a0:9d:01:b1:dd:6b: 7d:44:ba:01:14:6e:3e:df:08:96:91:4d:79:92:60: 09:d7:59:d2:e3:de:84:f4:4a:63:6e:ea:87:8c:ab: c0:ef:14:01:65:f2:fe:53:b3:49:04:1b:34:f5:4f: 71:a0:6c:20:e0:fb:45:36:b0:29:99:4e:4c:6a:e9: 3a:73:47:52:85:fd:3f:ec:54:94:cb:fa:c5:e7:96: ed:ec:07:0b:32:0a:9d:4e:ad:eb:ee:b5:68:2d:76: a3:6a:83:74:1b:cf:6f:30:d0:f7:e5:b9:e2:ab:ba: e6:cd:59:20:b9:0c:1d:c3:d5:95:11:1e:00:c3:69: a0:27:ce:4d:46:db:04:82:e0:1e:f5:ab:6f:37:48: 4c:22:ac:f2:08:21:a5:f2:0e:42:a7:29:cd:31:20: dc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F7:7E:26:C4:D6:A5:FC:D6:58:1E:A7:F0:19:CA:37:5A:17:7D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbb850d2-8598-332e-be3b-c1f9632cdccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:69:56:cc:9b:6e:2c:55:89:5f:69:84:6d:ea:ef:43:ce:29: 76:8a:df:1e:1d:d8:5e:09:1a:c0:76:7a:20:a3:e9:8c:37:35: 0a:15:e1:61:5a:e5:3b:24:33:47:22:31:46:22:64:29:ba:63: 4b:ed:b7:a5:e9:18:de:32:a0:23:b0:0c:dc:50:2e:16:78:d3: 6a:85:11:f3:b2:d9:fd:aa:c9:57:4d:1a:3e:20:4b:31:19:cf: 9e:ec:cb:c4:c2:65:14:35:5c:9f:79:8c:29:19:13:dc:a3:ee: 7c:91:e5:ec:78:95:45:f6:d9:9d:0a:66:f3:3c:cf:0f:5c:b3: fd:77:24:07:6f:f5:13:92:4e:5c:6b:d7:92:13:72:14:a4:b6: 60:2a:bf:06:63:63:71:e5:07:dd:07:f9:39:e0:12:3a:c2:2d: 13:a3:49:e1:d6:c0:01:4b:45:ed:de:5e:53:89:c3:88:d3:5c: 36:01:10:27:b7:1b:12:31:2e:3a:01:c7:3c:fa:a8:ad:66:af: 24:3b:4d:1f:2d:62:05:bf:37:00:cb:1f:cf:4f:05:e9:67:61: f7:a8:07:f7:1a:2d:dd:e4:e8:f8:1b:12:1c:db:0c:07:b4:41: b7:fa:e7:7f:16:bf:c4:b8:f8:5a:08:fc:fe:76:41:ac:ec:1b: 8c:e7:30:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KYzLRzSkCMKpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NWU0ZTE3MzMtNWY3ZS00MjM2LWEwOWItY2NjYTFhYTcxNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuQh0XDokBQZB9q/umBJafnksRrrfV9OYuXi 03Knl2IertqRsUQZqk6Ji8EtVeAFiqIHvVpbuMEfbqLEFpzkui6BJEjvlSR81X/H heNLNvIZKJH//QHkvrlTrFFe3k8v1mmgnQGx3Wt9RLoBFG4+3wiWkU15kmAJ11nS 496E9EpjbuqHjKvA7xQBZfL+U7NJBBs09U9xoGwg4PtFNrApmU5Mauk6c0dShf0/ 7FSUy/rF55bt7AcLMgqdTq3r7rVoLXajaoN0G89vMND35bniq7rmzVkguQwdw9WV ER4Aw2mgJ85NRtsEguAe9atvN0hMIqzyCCGl8g5CpynNMSDcWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH3fibE1qX81lgep/AZyjdaF30XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJiODUwZDItODU5OC0z MzJlLWJlM2ItYzFmOTYzMmNkY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9r/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVpVsybbixViV9phG3q70POKXaK3x4d2F4JGsB2eiCj6Yw3NQoV4WFa 5TskM0ciMUYiZCm6Y0vtt6XpGN4yoCOwDNxQLhZ402qFEfOy2f2qyVdNGj4gSzEZ z57sy8TCZRQ1XJ95jCkZE9yj7nyR5ex4lUX22Z0KZvM8zw9cs/13JAdv9ROSTlxr 15ITchSktmAqvwZjY3HlB90H+TngEjrCLROjSeHWwAFLRe3eXlOJw4jTXDYBECe3 GxIxLjoBxzz6qK1mryQ7TR8tYgW/NwDLH89PBelnYfeoB/caLd3k6PgbEhzbDAe0 Qbf6538Wv8S4+FoI/P52QazsG4znMFg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:16 2025 by rpki-client