$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a9f295-7444-3e50-9bfb-9466afc9efab.roa File: 16a9f295-7444-3e50-9bfb-9466afc9efab.roa (raw, json) Hash identifier: /MJ0tKXDlAqKjl6ZX0e1Jhs1ENK0oH/UQnpciNELjD8= Subject key identifier: D6:1C:3C:B2:78:E5:62:41:83:22:14:99:E2:2C:FE:C3:7B:33:F7:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD206E8DA4A22477A667980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a9f295-7444-3e50-9bfb-9466afc9efab.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.217.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:06:e8:da:4a:22:47:7a:66:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=67325bfd-3ff5-4165-88b8-8e501d7dee1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8f:26:c3:f3:67:9d:a9:b7:9d:49:d6:f0:01: 50:97:e7:33:3f:40:3a:18:90:86:a2:91:cc:1b:f4: 2d:aa:a5:04:79:59:f8:3e:ed:7f:c9:41:55:eb:b5: 32:12:22:3d:73:e2:ea:dc:55:93:89:e1:fe:1a:99: 0b:a9:6c:a2:a4:00:33:f3:b5:96:ad:81:ee:74:5a: 05:18:ee:f4:2c:54:cb:0a:d0:6b:70:ca:1b:e5:1d: a6:c8:ef:6d:9b:98:34:1d:be:e4:39:37:1f:a3:7f: 73:b9:02:d8:9c:f4:6c:8e:08:3e:14:7a:15:66:67: b9:17:9d:0e:07:6b:35:b9:ce:f9:e3:1a:32:53:ca: 41:67:8d:82:d6:8e:8a:3d:39:8e:ef:fa:cb:11:6e: 59:e5:17:7e:78:d0:7e:7c:2d:da:df:12:cd:8e:4e: 32:c8:94:c1:07:b5:6e:5f:1e:dc:32:06:d2:e6:bc: c4:81:c9:12:28:a9:ab:b2:52:72:1e:83:31:e1:95: ff:10:5b:32:90:c5:f1:26:0d:06:81:62:d0:6d:8e: 83:10:e5:28:41:28:9e:b5:ac:29:e1:40:ae:dc:e1: 3c:45:c6:80:af:e0:f7:4f:b7:99:3d:37:80:69:fd: e4:c4:2c:0b:51:26:e8:22:4c:4c:ff:e6:89:77:4f: 92:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1C:3C:B2:78:E5:62:41:83:22:14:99:E2:2C:FE:C3:7B:33:F7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a9f295-7444-3e50-9bfb-9466afc9efab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:09:f1:d4:fb:ad:d9:fc:87:8f:5a:da:92:38:a2:6d:fe:e4: b4:5c:fc:b8:99:55:61:50:45:2f:c4:11:ab:23:57:94:19:3c: d7:11:5a:3c:c7:d9:32:f8:de:5b:c4:f7:cc:f7:9e:d7:b5:4a: 5a:60:26:26:b7:5d:9f:bf:fe:03:17:a3:5b:5e:61:83:66:d9: 8e:45:af:6a:dc:9e:ed:12:74:28:3a:01:ef:3b:55:7a:53:86: 9d:6d:f1:d5:08:98:35:92:ae:18:3e:73:cb:f3:75:83:71:95: f0:9d:5c:6b:e7:af:04:28:46:b2:1b:7f:94:fc:3d:32:79:1a: 1b:c3:fa:5e:b8:bc:b3:0c:d4:05:dd:09:e2:1d:4a:73:45:4a: 56:5b:4d:bb:e5:89:f7:c6:84:18:22:cc:8e:c1:98:44:80:35: 57:d9:4e:44:84:b1:70:d2:25:31:40:e1:db:6e:c6:aa:80:ae: 70:93:69:6b:c7:b1:a5:18:c0:63:6f:7f:0a:4a:1c:96:3a:04: 4e:6f:d0:49:e9:fc:95:a0:fd:8e:fc:96:b2:2b:79:41:1f:3a: 86:41:48:4f:92:02:2d:84:76:51:64:0a:fc:43:d1:3d:f9:10: b5:e7:e0:e8:f4:8a:26:05:99:65:7a:6e:82:c6:08:cd:4c:ba: e5:2e:62:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gbo2koiR3pmeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NjczMjViZmQtM2ZmNS00MTY1LTg4YjgtOGU1MDFkN2RlZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY8mw/Nnnam3nUnW8AFQl+czP0A6GJCGopHM G/QtqqUEeVn4Pu1/yUFV67UyEiI9c+Lq3FWTieH+GpkLqWyipAAz87WWrYHudFoF GO70LFTLCtBrcMob5R2myO9tm5g0Hb7kOTcfo39zuQLYnPRsjgg+FHoVZme5F50O B2s1uc754xoyU8pBZ42C1o6KPTmO7/rLEW5Z5Rd+eNB+fC3a3xLNjk4yyJTBB7Vu Xx7cMgbS5rzEgckSKKmrslJyHoMx4ZX/EFsykMXxJg0GgWLQbY6DEOUoQSietawp 4UCu3OE8RcaAr+D3T7eZPTeAaf3kxCwLUSboIkxM/+aJd0+SMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYcPLJ45WJBgyIUmeIs/sN7M/cTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTZhOWYyOTUtNzQ0NC0z ZTUwLTliZmItOTQ2NmFmYzllZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwJ8dT7rdn8h49a2pI4om3+5LRc/LiZVWFQRS/EEasjV5QZPNcRWjzH 2TL43lvE98z3nte1SlpgJia3XZ+//gMXo1teYYNm2Y5Fr2rcnu0SdCg6Ae87VXpT hp1t8dUImDWSrhg+c8vzdYNxlfCdXGvnrwQoRrIbf5T8PTJ5GhvD+l64vLMM1AXd CeIdSnNFSlZbTbvliffGhBgizI7BmESANVfZTkSEsXDSJTFA4dtuxqqArnCTaWvH saUYwGNvfwpKHJY6BE5v0Enp/JWg/Y78lrIreUEfOoZBSE+SAi2EdlFkCvxD0T35 ELXn4Oj0iiYFmWV6boLGCM1MuuUuYuY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:44:10 2025 by rpki-client