$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa File: f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa (raw, json) Hash identifier: Wfss0x/1UJGnJV8JVor29EEe2hEGf4zh0slMEc/BH3w= Subject key identifier: 27:70:1C:4A:37:16:6A:1A:21:DB:64:34:46:66:B7:62:CC:C3:4D:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0753F6E05929FBBD12A6C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.212.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:53:f6:e0:59:29:fb:bd:12:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=903fa840-8acd-40c9-b0b4-058690daea11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:15:c4:f6:32:2a:f5:39:65:df:3b:c8:bf:93: 27:e2:17:98:57:dc:79:75:12:5f:7c:dd:b6:92:26: 3e:27:7b:6f:66:b7:2c:de:b6:26:a2:05:3a:70:e8: 13:ac:93:a1:85:38:85:08:24:48:f4:4f:d9:23:fd: 73:9a:8c:09:51:60:d3:44:df:25:4d:d2:87:79:ce: e6:66:af:0a:57:4d:3e:f8:60:8c:a3:bb:38:2e:e3: 70:f9:45:a5:2a:93:39:f1:33:82:d2:ba:0e:6f:26: ea:3f:8f:5f:63:7e:48:5b:4a:3f:c9:cc:6f:e3:02: 08:b7:bb:3e:e0:47:86:03:08:2f:bb:38:07:54:a9: ae:b9:9d:ba:c8:03:8b:4f:70:ff:ca:8b:37:e6:e6: 57:77:37:ae:ff:14:fc:83:e9:16:de:a9:df:97:21: bf:4f:f1:ea:02:1b:2b:cc:38:c7:1e:d0:e4:85:be: 7a:bc:24:d8:e8:77:52:16:8f:0f:e4:50:c8:f1:51: a8:dc:46:94:b2:89:af:0e:e5:1b:22:00:5e:0d:6b: 68:02:ea:2c:b7:f8:6c:2c:0e:b5:8f:44:d2:55:27: 84:9b:79:11:63:7f:60:b5:bd:3f:a1:68:3c:d2:ef: 35:ff:2b:c2:b5:0b:cc:09:6f:bc:21:32:1b:09:e7: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:70:1C:4A:37:16:6A:1A:21:DB:64:34:46:66:B7:62:CC:C3:4D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8df2023-da6c-3e61-bfd1-5b33c4b4f410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3d:af:20:bf:46:9d:c6:eb:f3:83:fb:20:6f:c8:eb:92:44: 94:75:7c:d4:ca:b3:0e:b9:c6:66:a5:9f:ca:ff:1f:af:c2:0d: dd:c2:99:31:c6:6e:bf:99:a9:ec:46:24:8d:9c:40:c5:c3:d3: bc:28:74:a8:99:ef:e7:f6:ae:8f:54:7b:a1:11:55:08:f8:26: 7e:34:c3:42:50:de:b7:a8:2b:94:26:37:d6:55:87:61:11:bc: 68:93:af:a5:bd:b2:ac:d0:2d:69:9e:da:82:03:7a:24:34:3b: 73:d8:c4:c4:f6:c3:b4:00:80:06:8d:0e:58:95:d8:c1:f0:94: eb:19:c3:50:30:53:d6:eb:7b:32:43:bb:f0:c8:4b:a4:e6:81: 4c:7c:f2:d5:7b:99:53:41:5c:33:05:5c:a5:e0:b5:1e:8f:b1: a7:ef:b3:ef:7b:fa:2e:48:a1:99:3b:3e:9d:aa:ba:0b:3d:55: 26:d0:6e:56:34:89:67:80:35:18:bf:5c:c2:4b:35:a0:af:cd: 78:63:0d:0b:83:18:a5:6a:61:a4:dd:56:82:58:e9:1e:06:0a: fb:67:ea:27:d3:33:34:a9:82:15:af:ac:6f:c6:c1:a8:bb:e0: 0b:0e:83:28:6c:7e:a5:fc:b9:8f:16:f2:4a:62:fb:60:72:56: 82:e9:12:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1P24Fkp+70SpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OTAzZmE4NDAtOGFjZC00MGM5LWIwYjQtMDU4NjkwZGFlYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRXE9jIq9Tll3zvIv5Mn4heYV9x5dRJffN22 kiY+J3tvZrcs3rYmogU6cOgTrJOhhTiFCCRI9E/ZI/1zmowJUWDTRN8lTdKHec7m Zq8KV00++GCMo7s4LuNw+UWlKpM58TOC0roObybqP49fY35IW0o/ycxv4wIIt7s+ 4EeGAwgvuzgHVKmuuZ26yAOLT3D/yos35uZXdzeu/xT8g+kW3qnflyG/T/HqAhsr zDjHHtDkhb56vCTY6HdSFo8P5FDI8VGo3EaUsomvDuUbIgBeDWtoAuost/hsLA61 j0TSVSeEm3kRY39gtb0/oWg80u81/yvCtQvMCW+8ITIbCeeZFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdwHEo3FmoaIdtkNEZmt2LMw01TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhkZjIwMjMtZGE2Yy0z ZTYxLWJmZDEtNWIzM2M0YjRmNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9S8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA9ryC/Rp3G6/OD+yBvyOuSRJR1fNTKsw65xmaln8r/H6/CDd3CmTHG br+ZqexGJI2cQMXD07wodKiZ7+f2ro9Ue6ERVQj4Jn40w0JQ3reoK5QmN9ZVh2ER vGiTr6W9sqzQLWme2oIDeiQ0O3PYxMT2w7QAgAaNDliV2MHwlOsZw1AwU9brezJD u/DIS6TmgUx88tV7mVNBXDMFXKXgtR6Psafvs+97+i5IoZk7Pp2qugs9VSbQblY0 iWeANRi/XMJLNaCvzXhjDQuDGKVqYaTdVoJY6R4GCvtn6ifTMzSpghWvrG/Gwai7 4AsOgyhsfqX8uY8W8kpi+2ByVoLpEms= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:31 2025 by rpki-client