$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa File: dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa (raw, json) Hash identifier: JtTSL5OVGCx+FovCX10T4wQTvtGAQPeHdWwCh3UvfRU= Subject key identifier: 87:E5:0B:B0:53:66:78:05:BE:EF:AF:BC:68:C9:29:E5:70:9A:B0:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4E2630CB8B7F26DCB050 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 7713 IP address blocks: 23.212.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4e:26:30:cb:8b:7f:26:dc:b0:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=0e126c1d-5330-4f65-8fb7-881e92c6dbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:02:67:e8:b2:5d:79:4a:e6:1a:ac:33:3b:3e: db:33:78:63:51:2a:db:0d:80:aa:9e:94:36:56:00: fb:48:d0:7d:6e:b2:af:16:f7:81:72:05:0f:db:8f: d8:e6:9c:23:58:f6:89:93:a3:b1:7f:bf:69:ef:12: 70:e0:40:d1:84:ac:ef:e1:80:2d:1a:f0:a3:a3:9a: 24:41:71:c3:45:be:64:af:30:c7:17:3d:93:de:45: 8d:78:11:12:17:78:2f:1f:2d:20:73:25:97:6d:24: 31:56:05:ad:23:af:be:10:ea:6c:f6:7a:28:e7:be: e6:05:72:4e:ef:af:e3:9d:35:38:0a:0c:7d:83:88: 8b:09:b9:36:13:87:d8:e7:b5:ab:63:6b:8b:1b:ff: f3:fa:96:63:94:b5:90:24:ee:32:de:cc:62:c9:8f: 90:9c:cc:f5:48:5a:a4:5e:61:03:16:e8:38:c5:21: a1:e6:c3:f7:84:0f:be:19:5d:05:68:9e:a5:d9:25: 36:36:be:9a:87:65:18:38:f5:27:cf:b4:aa:7a:28: 1f:eb:f6:bc:86:31:37:76:dd:d0:90:92:00:d8:a8: 1c:b7:7d:9d:fd:1f:43:63:10:52:b1:79:6f:b5:72: b7:38:ad:b8:b5:62:ef:a3:1a:97:96:73:f8:23:d0: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E5:0B:B0:53:66:78:05:BE:EF:AF:BC:68:C9:29:E5:70:9A:B0:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfccd99d-a07e-3ddb-a246-c66d44812fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b6:71:4b:33:0a:da:d4:45:a1:1e:ee:39:cd:d1:c1:8b:c5: f7:29:a0:a9:31:30:8e:1f:32:b8:37:7b:07:19:36:0b:a1:c1: 84:89:b1:22:60:96:00:00:d2:2c:d0:a9:cf:fe:da:cf:9a:fe: 5b:6d:b6:99:e3:8d:5a:25:aa:70:c2:b8:35:5d:e2:8c:b5:67: 78:17:6c:d6:8f:ee:dc:73:35:80:1f:2e:30:3a:19:91:b2:d6: 9d:e1:a5:99:c8:d3:2b:7b:d6:b6:f2:c7:e3:a8:a2:dc:91:35: b9:38:7e:49:8a:fe:0f:48:d6:24:03:a4:06:99:2a:a3:ad:8d: 70:85:23:8f:07:02:52:9e:12:f1:a8:1e:55:ad:73:13:0a:5e: 6b:cd:b0:88:23:77:85:5d:00:77:cc:d0:71:af:d5:2b:e2:02: 79:8f:19:65:df:75:81:44:be:df:78:88:55:cf:8e:dc:05:36: 1b:54:6d:12:c7:e9:db:1a:f2:bc:1f:3e:7d:a7:3a:c9:73:7c: 04:fc:02:d1:2d:b5:e1:47:83:b2:79:25:82:d8:76:0f:2a:2d: 08:e9:de:d5:15:0a:59:1f:3b:7d:e2:18:90:de:9c:e4:a1:63: 64:39:db:c7:b0:bc:56:6b:63:29:e9:8e:ad:f2:8c:25:f0:2d: 82:82:e7:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjE4mMMuLfybcsFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MGUxMjZjMWQtNTMzMC00ZjY1LThmYjctODgxZTkyYzZkYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQJn6LJdeUrmGqwzOz7bM3hjUSrbDYCqnpQ2 VgD7SNB9brKvFveBcgUP24/Y5pwjWPaJk6Oxf79p7xJw4EDRhKzv4YAtGvCjo5ok QXHDRb5krzDHFz2T3kWNeBESF3gvHy0gcyWXbSQxVgWtI6++EOps9noo577mBXJO 76/jnTU4Cgx9g4iLCbk2E4fY57WrY2uLG//z+pZjlLWQJO4y3sxiyY+QnMz1SFqk XmEDFug4xSGh5sP3hA++GV0FaJ6l2SU2Nr6ah2UYOPUnz7Sqeigf6/a8hjE3dt3Q kJIA2Kgct32d/R9DYxBSsXlvtXK3OK24tWLvoxqXlnP4I9D0SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIflC7BTZngFvu+vvGjJKeVwmrCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZjY2Q5OWQtYTA3ZS0z ZGRiLWEyNDYtYzY2ZDQ0ODEyZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF9RwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu2cUszCtrURaEe7jnN0cGLxfcpoKkxMI4fMrg3ewcZNguhwYSJsSJg lgAA0izQqc/+2s+a/ltttpnjjVolqnDCuDVd4oy1Z3gXbNaP7txzNYAfLjA6GZGy 1p3hpZnI0yt71rbyx+OootyRNbk4fkmK/g9I1iQDpAaZKqOtjXCFI48HAlKeEvGo HlWtcxMKXmvNsIgjd4VdAHfM0HGv1SviAnmPGWXfdYFEvt94iFXPjtwFNhtUbRLH 6dsa8rwfPn2nOslzfAT8AtEtteFHg7J5JYLYdg8qLQjp3tUVClkfO33iGJDenOSh Y2Q528ewvFZrYynpjq3yjCXwLYKC528= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:59 2025 by rpki-client