$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fafaa978-e165-39bc-b279-4da0e12385bf.roa File: fafaa978-e165-39bc-b279-4da0e12385bf.roa (raw, json) Hash identifier: Es1cLnYTL+pjxsWxdxhtn5JcQFngQj8YcWKCS3EXacU= Subject key identifier: 24:50:84:1E:3B:6A:46:0B:B0:C3:8B:05:DA:F2:6A:4C:8A:8E:BF:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20EF83F68F85B8855B330 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fafaa978-e165-39bc-b279-4da0e12385bf.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.203.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0e:f8:3f:68:f8:5b:88:55:b3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=8b75212f-a45f-4c83-9036-74b237c3774d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:3b:28:c6:c4:ca:53:60:e2:c4:45:86:0b: 16:e6:52:39:8d:2b:c8:c8:0c:e2:1e:09:43:2c:a1: 65:ea:2d:62:98:4e:9a:7b:7e:7d:f0:06:62:39:df: e2:5f:ff:d2:39:41:c5:25:d6:ee:53:23:ab:30:13: d3:47:3c:45:32:c3:67:c4:a2:92:87:ea:33:ef:a5: ca:0f:74:94:db:e9:5f:0e:8f:79:95:83:b3:48:fd: 53:3c:64:86:2d:c2:2d:25:be:82:08:4c:86:73:85: d7:3c:6e:71:e5:8f:08:03:0f:ba:ad:25:55:14:68: 17:04:03:9d:20:60:93:69:09:a1:04:72:05:f4:85: a6:c6:3c:5e:a2:0a:06:8c:41:2c:de:6e:1a:02:3d: cf:18:fc:0f:33:59:7c:2f:b1:78:ae:75:14:ed:74: c5:ac:8e:49:a0:32:fa:87:e8:7b:11:5d:c3:3e:7a: c8:ab:80:a0:19:91:25:f2:ba:5e:60:97:50:17:2d: 68:a2:83:8a:93:38:1b:1a:03:37:03:9d:3c:26:91: 9c:b3:7c:1b:a4:dd:7e:26:c8:3d:49:9f:56:5a:de: 7c:6b:90:40:28:1c:0d:df:b0:3d:d9:ba:a5:8b:48: 64:ba:b9:8d:47:ce:27:fe:a2:dd:43:0d:14:12:82: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:50:84:1E:3B:6A:46:0B:B0:C3:8B:05:DA:F2:6A:4C:8A:8E:BF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fafaa978-e165-39bc-b279-4da0e12385bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:16:6f:41:35:ad:7d:85:c8:00:6d:aa:dd:0c:65:45:5c:df: 28:f9:78:98:3d:35:e9:73:17:39:89:8b:9b:15:ad:f3:14:16: 75:0c:e6:81:aa:e1:94:23:04:67:6f:ed:4f:8a:04:0f:d9:21: 5c:cc:42:47:58:8d:a3:04:7f:21:6f:8e:8b:81:0f:ff:60:52: c9:98:be:82:ac:93:bb:ad:d6:7d:c3:1a:1e:ce:bc:c3:1b:48: dc:49:eb:3b:5c:f1:98:f7:e7:09:68:59:eb:c4:12:8b:52:af: c4:73:2a:35:c9:28:2b:45:04:84:4f:ce:f2:70:f7:f7:d8:e2: ea:3d:db:6b:88:5a:b4:6e:a2:fb:0d:20:f2:c2:0e:b6:56:2a: 9c:f9:4f:f0:95:f5:3c:5b:55:b3:3f:82:64:c2:b0:fa:79:7c: 0c:86:1f:e8:3b:12:e2:e5:f5:35:90:82:ed:e7:82:a3:8c:97: ce:65:7e:4a:a9:5d:6c:ad:e4:8b:65:2d:59:51:c7:e8:1b:b2: 14:c9:34:56:29:47:b4:65:e2:96:51:0a:e9:61:2d:78:ad:ec: 05:5c:f1:b7:7e:2b:dc:a8:fc:9d:1d:8a:2e:28:81:4f:4c:fa: 06:86:92:d6:1e:7c:a8:05:4d:c9:10:d3:ad:7a:03:31:d6:70: 25:03:64:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g74P2j4W4hVszAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGI3NTIxMmYtYTQ1Zi00YzgzLTkwMzYtNzRiMjM3YzM3NzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojA7KMbEylNg4sRFhgsW5lI5jSvIyAziHglD LKFl6i1imE6ae3598AZiOd/iX//SOUHFJdbuUyOrMBPTRzxFMsNnxKKSh+oz76XK D3SU2+lfDo95lYOzSP1TPGSGLcItJb6CCEyGc4XXPG5x5Y8IAw+6rSVVFGgXBAOd IGCTaQmhBHIF9IWmxjxeogoGjEEs3m4aAj3PGPwPM1l8L7F4rnUU7XTFrI5JoDL6 h+h7EV3DPnrIq4CgGZEl8rpeYJdQFy1oooOKkzgbGgM3A508JpGcs3wbpN1+Jsg9 SZ9WWt58a5BAKBwN37A92bqli0hkurmNR84n/qLdQw0UEoL+nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRQhB47akYLsMOLBdryakyKjr/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmFmYWE5NzgtZTE2NS0z OWJjLWIyNzktNGRhMGUxMjM4NWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF8uwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoWb0E1rX2FyABtqt0MZUVc3yj5eJg9NelzFzmJi5sVrfMUFnUM5oGq 4ZQjBGdv7U+KBA/ZIVzMQkdYjaMEfyFvjouBD/9gUsmYvoKsk7ut1n3DGh7OvMMb SNxJ6ztc8Zj35wloWevEEotSr8RzKjXJKCtFBIRPzvJw9/fY4uo922uIWrRuovsN IPLCDrZWKpz5T/CV9TxbVbM/gmTCsPp5fAyGH+g7EuLl9TWQgu3ngqOMl85lfkqp XWyt5ItlLVlRx+gbshTJNFYpR7Rl4pZRCulhLXit7AVc8bd+K9yo/J0dii4ogU9M +gaGktYefKgFTckQ0616AzHWcCUDZOA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:27:51 2025 by rpki-client