$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee261c21-7707-39b0-a2d6-e5b897bffb5b.roa File: ee261c21-7707-39b0-a2d6-e5b897bffb5b.roa (raw, json) Hash identifier: oTWqGe1ms+AkDjMG1XCWOS68OYUpTR6GuozpNJHp8q8= Subject key identifier: 24:04:CA:66:16:0C:24:38:BE:CE:AD:1C:37:7F:EC:5F:4F:22:04:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4CF506287867712E2000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee261c21-7707-39b0-a2d6-e5b897bffb5b.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.209.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4c:f5:06:28:78:67:71:2e:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=580afaf7-97be-4926-8c62-e3d157c2f3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8d:15:a9:f2:02:ab:52:be:90:75:4f:a0:20: 1e:83:df:0d:8a:3e:10:ad:d1:8a:27:73:56:93:55: 12:29:98:a5:52:5d:4f:b4:f9:24:7a:81:01:25:eb: 01:25:bd:0d:6b:c0:89:c6:d2:01:46:9c:40:ca:3f: bf:4c:04:0f:a9:c6:f3:c2:60:2f:4e:2a:82:15:90: 4f:15:09:35:a3:14:cc:97:29:ed:81:60:e1:8e:f1: 29:61:8c:b3:03:9a:29:17:6d:d7:b0:0e:33:07:34: 9a:aa:dc:5c:f3:c3:16:97:fe:d3:4a:a9:41:a5:85: ae:fe:3d:59:0d:e5:e7:3c:37:49:53:32:a4:a6:cd: 74:f3:c5:48:eb:a8:e2:c1:3d:5e:c5:eb:8f:05:eb: 49:aa:6a:82:ea:1c:e4:da:6f:82:aa:c0:73:af:23: 62:c3:75:98:15:9a:61:77:5c:10:b5:c2:a1:8a:55: 1d:a9:8c:94:96:20:86:04:90:0f:ae:7f:8f:75:ab: c0:96:66:6f:d3:1a:48:cc:af:8f:f3:1e:f1:df:ac: 07:af:10:36:16:ce:69:7c:a7:6b:a2:0c:84:58:1d: 20:c5:9d:ba:2e:10:30:b1:af:86:4f:3e:e9:0e:c1: 2c:16:3e:b1:64:2f:da:9d:d4:0c:77:a9:1b:4a:67: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:04:CA:66:16:0C:24:38:BE:CE:AD:1C:37:7F:EC:5F:4F:22:04:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee261c21-7707-39b0-a2d6-e5b897bffb5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:81:1b:15:85:ff:cb:76:dc:78:5e:f1:84:3a:16:74:59:77: fd:71:ed:0f:af:7b:27:07:df:1e:63:f4:96:19:b6:cc:ba:fd: eb:19:a0:a7:8f:44:76:41:8f:25:00:11:b7:d8:37:d1:26:54: 8c:b9:7b:8d:5d:51:ea:fd:3c:5d:e1:16:92:b8:ab:91:be:b8: da:ba:ee:ac:47:85:19:d0:73:d3:f2:64:ee:04:8f:b8:70:9b: 3e:22:29:d3:d5:61:7f:db:74:fc:53:f9:64:e4:ce:86:77:2f: 68:8b:d5:24:0c:4a:49:23:dc:ef:4c:3a:7c:f3:fe:17:3d:08: 4a:b4:cb:45:0f:08:ad:08:a5:37:6d:27:07:59:d6:7d:4e:be: 9d:e5:9e:0c:20:18:a9:4b:72:d0:d1:fa:df:af:a9:6f:32:e4: a6:c9:4b:c4:12:bb:89:f6:b7:18:ba:d9:88:23:d0:5b:e0:0f: 4f:70:8e:79:68:3c:b9:71:d2:50:aa:47:e9:c0:3c:ee:0c:27: 07:c0:15:4b:93:28:82:f1:d6:25:3c:ab:9f:a9:15:e2:a8:f9: ea:05:fd:40:ba:50:f2:3b:13:45:af:da:b3:98:e2:10:b6:44: 5f:9c:07:43:6a:42:67:95:74:a2:46:51:3a:f1:bb:91:65:f4: 63:b6:6f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEz1Bih4Z3EuIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NTgwYWZhZjctOTdiZS00OTI2LThjNjItZTNkMTU3YzJmM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq40VqfICq1K+kHVPoCAeg98Nij4QrdGKJ3NW k1USKZilUl1PtPkkeoEBJesBJb0Na8CJxtIBRpxAyj+/TAQPqcbzwmAvTiqCFZBP FQk1oxTMlyntgWDhjvEpYYyzA5opF23XsA4zBzSaqtxc88MWl/7TSqlBpYWu/j1Z DeXnPDdJUzKkps1088VI66jiwT1exeuPBetJqmqC6hzk2m+CqsBzryNiw3WYFZph d1wQtcKhilUdqYyUliCGBJAPrn+PdavAlmZv0xpIzK+P8x7x36wHrxA2Fs5pfKdr ogyEWB0gxZ26LhAwsa+GTz7pDsEsFj6xZC/andQMd6kbSmcVWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQEymYWDCQ4vs6tHDd/7F9PIgTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWUyNjFjMjEtNzcwNy0z OWIwLWEyZDYtZTViODk3YmZmYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF9FGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiBGxWF/8t23Hhe8YQ6FnRZd/1x7Q+veycH3x5j9JYZtsy6/esZoKeP RHZBjyUAEbfYN9EmVIy5e41dUer9PF3hFpK4q5G+uNq67qxHhRnQc9PyZO4Ej7hw mz4iKdPVYX/bdPxT+WTkzoZ3L2iL1SQMSkkj3O9MOnzz/hc9CEq0y0UPCK0IpTdt JwdZ1n1Ovp3lngwgGKlLctDR+t+vqW8y5KbJS8QSu4n2txi62Ygj0FvgD09wjnlo PLlx0lCqR+nAPO4MJwfAFUuTKILx1iU8q5+pFeKo+eoF/UC6UPI7E0Wv2rOY4hC2 RF+cB0NqQmeVdKJGUTrxu5Fl9GO2b5A= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:58 2025 by rpki-client