$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/048f5b43-b1ee-3431-aa1e-7eb0999c1cd9.roa File: 048f5b43-b1ee-3431-aa1e-7eb0999c1cd9.roa (raw, json) Hash identifier: 81ETt8qRsw/fgOcPfv7V1wh6XsVvwFC+2/+aPnU3aXA= Subject key identifier: 67:FE:F0:88:E1:89:0A:13:A5:BD:A8:EF:A6:1B:A3:B5:86:9C:DE:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075DC78D25D411FB773580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/048f5b43-b1ee-3431-aa1e-7eb0999c1cd9.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.211.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5d:c7:8d:25:d4:11:fb:77:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=2762f72a-1a4a-4cc9-b443-6bbbad6f4624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:35:9f:3a:95:06:b7:c2:65:89:6e:8b:38: ab:1b:6e:5c:89:21:ef:58:f4:0a:4b:0e:6f:56:31: 0e:fb:68:8a:49:0b:59:ac:05:84:0e:16:d8:35:6f: 4a:a7:2d:82:fa:c3:4a:95:29:94:74:e2:94:0f:e4: 4a:f7:30:6d:13:ee:16:a8:67:06:50:cd:ec:f3:8c: 10:7a:4a:a0:e2:1a:bf:66:45:44:e1:ea:ec:6f:bb: a6:ac:d0:af:6a:6c:ff:1d:17:40:f9:09:06:7f:44: 68:27:c3:98:b8:14:f9:93:f3:65:37:df:3a:a8:73: 0b:c9:0c:0c:c1:94:c7:5f:8d:45:b9:15:0b:f4:73: 77:9e:7b:12:3c:ad:a8:22:ad:1f:d5:c1:33:52:3f: 7f:1a:55:fc:aa:3e:fa:f8:f8:14:41:bd:45:71:09: 98:3a:3f:77:2e:c4:3f:17:b9:85:e3:d2:dd:16:08: 38:3b:6b:49:e6:16:2e:8a:f2:76:5b:0a:99:e7:ea: 27:fd:c3:84:17:9f:1b:67:e0:bd:c8:ab:49:69:40: c4:03:1f:04:7f:fe:3d:15:72:0e:8c:4e:88:b2:76: c4:73:88:5f:1f:a5:c0:02:c7:62:75:01:3d:6d:6d: 25:ff:07:0e:09:1d:2b:27:74:12:72:77:15:f8:a0: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FE:F0:88:E1:89:0A:13:A5:BD:A8:EF:A6:1B:A3:B5:86:9C:DE:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/048f5b43-b1ee-3431-aa1e-7eb0999c1cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9a:7b:b2:5c:d2:6f:83:fa:b8:5d:1d:de:8d:43:f0:38:7e: 8f:f2:d4:d4:2d:01:3e:9b:c0:b2:e4:dc:c6:fe:82:bd:6e:c7: b5:02:29:41:0f:26:ef:a2:46:6d:4e:02:89:f1:52:af:e8:37: 71:ef:7b:2b:fc:5f:44:7b:23:cf:62:d5:1b:f8:24:f2:4b:06: 53:53:47:8d:70:61:86:ba:52:58:63:25:22:cb:24:db:e8:9f: 9e:5a:f3:cc:db:43:10:cf:99:d6:45:60:bc:0b:82:f8:84:68: 6c:bb:3c:55:64:60:16:54:13:8a:09:06:5d:20:d7:6e:40:2c: f6:03:85:2e:cf:4c:fb:29:e7:1c:29:b1:92:b5:7b:4a:22:e6: fa:64:5f:ed:a4:af:dd:53:44:dd:61:70:5d:95:d6:ef:f7:ac: 84:20:29:02:b4:5f:2f:24:e9:b1:91:ed:cf:80:af:2e:b8:54: 9d:db:09:4b:1a:40:ed:7a:dc:ee:49:da:ab:b1:3c:63:d7:68: 4c:2e:98:a3:f8:85:28:21:cd:41:56:a3:71:d4:a7:17:c7:61: b2:99:1b:93:2b:04:8a:c8:50:76:ea:4f:e7:bb:4f:5a:9d:38: e9:19:af:c5:3d:2f:1a:92:38:fa:fc:39:02:c1:24:8d:5c:42: 2f:c5:da:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB13HjSXUEft3NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Mjc2MmY3MmEtMWE0YS00Y2M5LWI0NDMtNmJiYmFkNmY0NjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTY1nzqVBrfCZYluizirG25ciSHvWPQKSw5v VjEO+2iKSQtZrAWEDhbYNW9Kpy2C+sNKlSmUdOKUD+RK9zBtE+4WqGcGUM3s84wQ ekqg4hq/ZkVE4ersb7umrNCvamz/HRdA+QkGf0RoJ8OYuBT5k/NlN986qHMLyQwM wZTHX41FuRUL9HN3nnsSPK2oIq0f1cEzUj9/GlX8qj76+PgUQb1FcQmYOj93LsQ/ F7mF49LdFgg4O2tJ5hYuivJ2WwqZ5+on/cOEF58bZ+C9yKtJaUDEAx8Ef/49FXIO jE6IsnbEc4hfH6XAAsdidQE9bW0l/wcOCR0rJ3QScncV+KCr0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGf+8IjhiQoTpb2o76Ybo7WGnN4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQ4ZjViNDMtYjFlZS0z NDMxLWFhMWUtN2ViMDk5OWMxY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9P4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKae7Jc0m+D+rhdHd6NQ/A4fo/y1NQtAT6bwLLk3Mb+gr1ux7UCKUEP Ju+iRm1OAonxUq/oN3Hveyv8X0R7I89i1Rv4JPJLBlNTR41wYYa6UlhjJSLLJNvo n55a88zbQxDPmdZFYLwLgviEaGy7PFVkYBZUE4oJBl0g125ALPYDhS7PTPsp5xwp sZK1e0oi5vpkX+2kr91TRN1hcF2V1u/3rIQgKQK0Xy8k6bGR7c+Ary64VJ3bCUsa QO163O5J2quxPGPXaEwumKP4hSghzUFWo3HUpxfHYbKZG5MrBIrIUHbqT+e7T1qd OOkZr8U9LxqSOPr8OQLBJI1cQi/F2lk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:45:08 2025 by rpki-client