$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee5daaa5-123b-3c55-ad66-27810dbba43d.roa File: ee5daaa5-123b-3c55-ad66-27810dbba43d.roa (raw, json) Hash identifier: oWl13SeVPCdvji4SFg8h/NggeTsaGQIefLtFxIvZw7I= Subject key identifier: 87:A5:B8:CA:D9:4D:50:49:29:04:C7:A4:A5:6C:99:FE:26:ED:C7:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715D0B13F9E4BBA6FCA65580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee5daaa5-123b-3c55-ad66-27810dbba43d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 23.53.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:0b:13:f9:e4:bb:a6:fc:a6:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=9bbfb3f9-1e60-4237-ad2c-98b538f5b5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:c8:45:9c:ab:4a:c6:f4:af:64:51:a3:ff: 8e:72:74:6b:1b:06:74:16:14:04:0a:df:b4:89:0a: 03:a9:79:52:03:cd:6c:38:c7:b0:07:b5:ba:42:d2: 63:41:6e:61:72:de:70:90:40:00:1d:b8:e4:6c:39: 40:ef:7e:d9:fc:90:b4:c3:1b:0b:c4:6f:9f:6c:25: 8b:29:e5:44:17:29:bc:6b:9d:46:32:3f:7f:89:1b: 0f:1f:28:5a:f3:58:c3:71:b9:06:98:59:cc:94:4f: 90:b9:2a:96:0f:fc:8c:ab:8c:f3:ef:5c:93:f9:34: 63:2b:73:02:59:cc:ce:a9:2b:c9:92:4d:6d:58:87: 78:f2:cf:d3:d8:4e:3a:4f:b8:d3:56:8d:53:4b:fc: 3d:61:d0:22:ad:f0:f9:1b:b5:07:c1:7d:06:d3:19: c6:f8:00:41:d6:76:d5:ac:03:55:b2:4d:13:47:57: 43:2a:6b:35:12:86:08:e4:a0:ed:32:ac:85:08:ec: 1d:d2:8a:c6:ea:e0:fd:e0:37:df:8e:c0:b9:cc:01: 04:e8:ac:5b:ee:e8:e3:2a:70:3b:e8:52:f3:59:61: 2a:49:85:d5:fa:76:bb:4d:a3:f9:e2:57:6c:0b:6f: ea:3d:9e:cf:62:0d:29:b6:44:27:fa:e0:8e:f4:4d: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A5:B8:CA:D9:4D:50:49:29:04:C7:A4:A5:6C:99:FE:26:ED:C7:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ee5daaa5-123b-3c55-ad66-27810dbba43d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2a:c1:a1:90:83:77:05:68:37:be:18:88:ba:8b:21:ae:7e: 9b:d1:7a:62:00:e3:5f:0e:ab:5d:d9:60:d9:f3:b6:43:b9:0a: da:61:ee:ac:48:ad:6b:9b:d9:10:74:a0:b9:bb:c6:57:0a:6c: 27:a2:52:8d:42:6c:e4:89:aa:09:ec:a1:d2:b5:87:25:43:04: 84:d6:39:c0:82:ed:e1:b6:52:33:de:e9:fe:88:59:34:07:50: fc:be:56:08:54:66:c8:1b:60:4d:1c:80:61:d6:3f:a2:dd:23: e5:e1:74:dd:16:82:a6:67:d0:b1:fe:a4:eb:b2:e7:cb:5e:ec: 3b:82:14:76:7c:7b:53:1f:4c:03:7c:4f:60:61:e4:6a:e5:e7: 30:a8:a7:18:1f:d3:b0:fc:14:f7:bb:54:c0:ee:9f:5d:00:f4: 2a:87:b7:86:3f:5c:fc:94:da:15:40:cd:24:b2:25:e1:9b:e1: a1:62:d8:bd:fc:a5:e9:60:f4:50:42:7d:f5:9a:59:7f:e1:0e: 77:58:23:2a:37:5c:69:21:0c:03:08:fd:f1:41:a0:3b:03:4f: 26:79:72:98:78:b1:b8:fb:7b:52:55:4c:06:0c:d9:26:ea:89: e9:16:b9:ad:6c:ec:52:13:18:64:3d:b6:4f:2f:ac:37:3b:3c: cf:b1:21:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQsT+eS7pvymVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OWJiZmIzZjktMWU2MC00MjM3LWFkMmMtOThiNTM4ZjViNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHLIRZyrSsb0r2RRo/+OcnRrGwZ0FhQECt+0 iQoDqXlSA81sOMewB7W6QtJjQW5hct5wkEAAHbjkbDlA737Z/JC0wxsLxG+fbCWL KeVEFym8a51GMj9/iRsPHyha81jDcbkGmFnMlE+QuSqWD/yMq4zz71yT+TRjK3MC WczOqSvJkk1tWId48s/T2E46T7jTVo1TS/w9YdAirfD5G7UHwX0G0xnG+ABB1nbV rANVsk0TR1dDKms1EoYI5KDtMqyFCOwd0orG6uD94DffjsC5zAEE6Kxb7ujjKnA7 6FLzWWEqSYXV+na7TaP54ldsC2/qPZ7PYg0ptkQn+uCO9E0+IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeluMrZTVBJKQTHpKVsmf4m7cdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWU1ZGFhYTUtMTIzYi0z YzU1LWFkNjYtMjc4MTBkYmJhNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUqwaGQg3cFaDe+GIi6iyGufpvRemIA418Oq13ZYNnztkO5Ctph7qxI rWub2RB0oLm7xlcKbCeiUo1CbOSJqgnsodK1hyVDBITWOcCC7eG2UjPe6f6IWTQH UPy+VghUZsgbYE0cgGHWP6LdI+XhdN0WgqZn0LH+pOuy58te7DuCFHZ8e1MfTAN8 T2Bh5Grl5zCopxgf07D8FPe7VMDun10A9CqHt4Y/XPyU2hVAzSSyJeGb4aFi2L38 pelg9FBCffWaWX/hDndYIyo3XGkhDAMI/fFBoDsDTyZ5cph4sbj7e1JVTAYM2Sbq iekWua1s7FITGGQ9tk8vrDc7PM+xIV0= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:47 2025 by rpki-client