$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc784d9f-54df-39c2-a92f-0b4583f0c54c.roa File: dc784d9f-54df-39c2-a92f-0b4583f0c54c.roa (raw, json) Hash identifier: p54FWRl1oCK9QOIUXSJHrkQF9PG3n1kOftv9PUCInnk= Subject key identifier: AC:17:55:4D:0D:24:2F:19:82:D4:EA:2E:83:D5:E0:F9:F4:C6:9B:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075F1D92F9976769785C88 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc784d9f-54df-39c2-a92f-0b4583f0c54c.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.212.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5f:1d:92:f9:97:67:69:78:5c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=872cddf0-0cf9-4aeb-889d-3f7923588095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:30:9a:27:60:cc:04:00:af:3d:bd:4c:59: 6c:1a:a5:5f:7e:ac:65:4e:83:64:a0:6b:5a:85:63: 94:2c:b0:63:fa:57:b6:7d:d1:22:c9:44:dd:77:6f: 73:e1:f3:0d:de:a9:ee:7a:8b:c2:67:97:e2:11:7e: e2:d2:6f:c2:71:c0:57:b4:18:a9:85:5d:ed:86:2f: bd:a3:e5:f0:81:3d:2b:fb:8f:41:bc:c5:ab:a0:da: 26:1e:04:7b:23:eb:49:c0:8f:4d:7d:d7:92:29:d9: ad:fc:6c:b3:da:31:0c:8f:f2:a0:5a:a3:22:d7:20: d5:80:c1:97:09:fc:e5:e6:da:35:eb:d2:60:d5:3b: c0:3f:e8:ef:fd:40:1b:99:fc:18:97:3a:39:ba:5b: a8:4c:a0:ee:77:2c:5e:a5:4f:b0:51:69:0d:6f:16: 46:bc:90:58:97:4e:01:49:d9:4c:c3:0c:c7:ea:ee: d8:a2:7a:e4:0a:d2:8c:b9:9a:63:5e:06:5f:2a:5e: 15:7c:dc:da:9e:a8:f7:e3:df:65:47:dd:1b:53:38: 96:3f:aa:83:2c:07:3e:9f:1a:53:a4:f1:21:a5:2f: b9:7c:0f:3c:ee:a7:5d:2b:b3:43:46:62:e3:c4:d4: 05:fb:5d:34:06:61:c5:cc:63:3a:5d:67:d0:b6:a7: 09:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:55:4D:0D:24:2F:19:82:D4:EA:2E:83:D5:E0:F9:F4:C6:9B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc784d9f-54df-39c2-a92f-0b4583f0c54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:16:ba:70:24:c2:06:6e:d9:43:53:73:f9:cc:0b:27:84:08: b7:11:6d:7c:b4:16:f5:0f:55:79:42:98:6b:cb:8e:f5:9f:15: b2:12:12:c0:2c:86:9f:0b:0e:ea:52:1d:0c:6b:ef:bd:9f:fc: 8e:fa:00:d5:0a:b8:9b:8a:b8:de:5b:5b:3e:69:f7:d9:50:09: 9e:5f:8b:58:18:fa:42:10:80:44:4a:76:6a:f0:14:6f:81:55: 43:77:f5:c6:da:61:31:5e:f0:32:36:e8:20:01:d4:aa:9b:b8: ca:40:90:00:57:03:25:c0:31:72:d0:50:c9:ee:53:f3:2b:ee: a7:3f:27:4b:a7:4f:86:27:10:b8:63:e1:4b:43:43:f1:e6:3e: 83:e2:f7:5e:6c:d9:92:e9:92:6d:96:cd:92:a3:26:8a:58:5f: 12:7a:eb:3d:10:c9:5c:e9:9d:4a:bb:3a:a9:e9:f2:b8:0a:67: ce:31:85:b1:ca:17:b9:9e:a3:26:96:67:4e:6e:bb:97:eb:ad: ba:53:72:e2:d7:d8:b0:c1:b1:8c:37:51:6f:a3:4b:be:a8:c7: aa:c0:63:11:c1:d9:98:26:37:f9:6b:b8:80:e5:81:a4:72:9a: bc:b5:1d:79:d5:ce:45:2f:19:47:48:31:9a:a1:1b:82:f1:6b: 0b:a8:b1:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB18dkvmXZ2l4XIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ODcyY2RkZjAtMGNmOS00YWViLTg4OWQtM2Y3OTIzNTg4MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHAwmidgzAQArz29TFlsGqVffqxlToNkoGta hWOULLBj+le2fdEiyUTdd29z4fMN3qnueovCZ5fiEX7i0m/CccBXtBiphV3thi+9 o+XwgT0r+49BvMWroNomHgR7I+tJwI9NfdeSKdmt/Gyz2jEMj/KgWqMi1yDVgMGX Cfzl5to169Jg1TvAP+jv/UAbmfwYlzo5uluoTKDudyxepU+wUWkNbxZGvJBYl04B SdlMwwzH6u7YonrkCtKMuZpjXgZfKl4VfNzanqj3499lR90bUziWP6qDLAc+nxpT pPEhpS+5fA887qddK7NDRmLjxNQF+100BmHFzGM6XWfQtqcJkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwXVU0NJC8ZgtTqLoPV4Pn0xptsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGM3ODRkOWYtNTRkZi0z OWMyLWE5MmYtMGI0NTgzZjBjNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9TgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMWunAkwgZu2UNTc/nMCyeECLcRbXy0FvUPVXlCmGvLjvWfFbISEsAs hp8LDupSHQxr772f/I76ANUKuJuKuN5bWz5p99lQCZ5fi1gY+kIQgERKdmrwFG+B VUN39cbaYTFe8DI26CAB1KqbuMpAkABXAyXAMXLQUMnuU/Mr7qc/J0unT4YnELhj 4UtDQ/HmPoPi915s2ZLpkm2WzZKjJopYXxJ66z0QyVzpnUq7Oqnp8rgKZ84xhbHK F7meoyaWZ05uu5frrbpTcuLX2LDBsYw3UW+jS76ox6rAYxHB2ZgmN/lruIDlgaRy mry1HXnVzkUvGUdIMZqhG4LxawuosQM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:27:28 2025 by rpki-client