$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee0637c4-a9c7-3c46-8c63-c2f910de2279.roa File: ee0637c4-a9c7-3c46-8c63-c2f910de2279.roa (raw, json) Hash identifier: vyRK418Nyla3V0Op84kGqlN5PF+S2EQ1hDlMlFcCzt8= Subject key identifier: 86:BE:01:0D:BF:CF:41:FD:B1:1F:F3:B7:3D:7F:89:8B:A3:BB:A0:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1D17FEB473A18EBD44080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee0637c4-a9c7-3c46-8c63-c2f910de2279.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.208.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:d1:7f:eb:47:3a:18:eb:d4:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=55f9bc38-8d96-442e-b894-9735bb83f864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:83:43:a4:0d:54:77:1a:dc:ce:c1:18:e9:72: 3f:25:79:b4:21:58:84:4e:13:74:52:10:dd:25:67: 48:84:18:e2:04:17:e8:60:27:38:86:fa:7e:2f:9c: 9b:de:ab:cd:a2:ab:8d:7b:65:89:37:ab:4e:ff:e8: 98:2d:cb:9a:68:69:69:df:85:20:25:23:f2:43:1e: 63:be:e9:8d:86:56:55:d0:6c:c2:d1:db:28:e6:e5: 7c:cf:cc:21:a5:88:c5:3a:8f:b9:dc:95:15:a9:62: 9c:ac:23:4e:d4:58:a6:93:6b:3e:29:59:0f:b4:4d: 82:93:65:f5:14:34:22:a1:5d:a4:40:c9:c4:8d:45: 51:ca:b0:53:e8:e1:6e:5f:6c:7f:cb:21:6d:d3:4a: 8b:d5:2e:0a:64:2f:6a:97:ee:1e:36:b2:f2:d8:41: 30:23:01:7b:b5:ec:f9:43:58:05:59:06:1f:81:08: c7:9b:7e:ca:91:2f:20:36:a1:94:fb:54:7a:e0:2d: 73:5e:af:40:6a:90:7b:79:3f:52:56:16:4f:ec:49: a2:3e:a1:93:2c:68:e3:62:0b:0b:48:f9:f0:8c:ab: f4:92:4f:21:ab:73:14:72:bc:88:61:9b:49:fd:85: 27:0e:ff:42:13:c9:d9:79:be:56:cd:45:6b:bf:dc: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:BE:01:0D:BF:CF:41:FD:B1:1F:F3:B7:3D:7F:89:8B:A3:BB:A0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee0637c4-a9c7-3c46-8c63-c2f910de2279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0f:79:33:05:5e:73:07:95:f0:92:8f:71:c9:7a:e2:62:75: 5c:6a:c4:38:d4:41:98:88:21:18:1a:16:b6:f7:f3:bd:c0:24: ba:0e:37:72:d8:30:54:bb:fb:98:a8:46:92:d2:59:f0:c4:9b: c9:20:45:03:e3:53:dd:79:a3:2a:6e:e8:07:de:e9:3f:98:20: 85:c0:e4:c4:f2:bc:82:78:f4:bc:0d:50:d4:15:49:23:0f:88: b7:45:4e:7c:22:e6:24:ae:de:f4:5b:2e:91:4c:4e:2a:54:f8: 3f:a8:9c:91:bc:14:8e:8b:0a:c7:0a:b3:4d:ed:02:49:03:63: e4:00:5f:1a:b4:25:6c:d9:b1:6a:f4:fb:26:96:a7:02:04:b3: 75:df:66:d2:1a:e5:c0:1c:07:2a:d5:39:26:9f:55:9d:f9:43: 6a:f9:11:41:a5:fc:62:27:41:cf:3f:ea:ad:14:a8:53:55:94: 32:cd:f6:a3:6e:82:b2:cf:6b:12:5b:4a:bb:91:75:5d:b9:cc: 42:a6:d3:43:41:85:2f:bb:7d:a8:b7:ae:d6:e3:c8:97:5b:28: 07:7c:a1:ba:b5:20:05:88:86:d2:2a:0f:f1:bd:10:d3:d4:86: e5:09:e3:17:51:ad:c8:3d:2e:b5:ea:76:2d:c9:6b:ff:34:3e: ae:6c:cf:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZodF/60c6GOvUQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NTVmOWJjMzgtOGQ5Ni00NDJlLWI4OTQtOTczNWJiODNmODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5INDpA1UdxrczsEY6XI/JXm0IViEThN0UhDd JWdIhBjiBBfoYCc4hvp+L5yb3qvNoquNe2WJN6tO/+iYLcuaaGlp34UgJSPyQx5j vumNhlZV0GzC0dso5uV8z8whpYjFOo+53JUVqWKcrCNO1Fimk2s+KVkPtE2Ck2X1 FDQioV2kQMnEjUVRyrBT6OFuX2x/yyFt00qL1S4KZC9ql+4eNrLy2EEwIwF7tez5 Q1gFWQYfgQjHm37KkS8gNqGU+1R64C1zXq9AapB7eT9SVhZP7EmiPqGTLGjjYgsL SPnwjKv0kk8hq3MUcryIYZtJ/YUnDv9CE8nZeb5WzUVrv9wfqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa+AQ2/z0H9sR/ztz1/iYuju6ARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWUwNjM3YzQtYTljNy0z YzQ2LThjNjMtYzJmOTEwZGUyMjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9AgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkPeTMFXnMHlfCSj3HJeuJidVxqxDjUQZiIIRgaFrb3873AJLoON3LY MFS7+5ioRpLSWfDEm8kgRQPjU915oypu6Afe6T+YIIXA5MTyvIJ49LwNUNQVSSMP iLdFTnwi5iSu3vRbLpFMTipU+D+onJG8FI6LCscKs03tAkkDY+QAXxq0JWzZsWr0 +yaWpwIEs3XfZtIa5cAcByrVOSafVZ35Q2r5EUGl/GInQc8/6q0UqFNVlDLN9qNu grLPaxJbSruRdV25zEKm00NBhS+7fai3rtbjyJdbKAd8obq1IAWIhtIqD/G9ENPU huUJ4xdRrcg9LrXqdi3Ja/80Pq5sz+E= -----END CERTIFICATE-----Generated at Mon Oct 20 07:19:54 2025 by rpki-client