$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d2864ea-cc11-3cb8-8758-9df3964b9244.roa File: 1d2864ea-cc11-3cb8-8758-9df3964b9244.roa (raw, json) Hash identifier: 0cGyRzSsaxG0Rx2HclfV5g9ZfmN3zOwxa/GwJrI7n4U= Subject key identifier: CA:49:C6:FF:3B:6B:6B:4C:8E:E5:EF:A8:E5:FC:2C:76:33:B6:B7:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07609657942F2C5D24DCE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d2864ea-cc11-3cb8-8758-9df3964b9244.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.213.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:60:96:57:94:2f:2c:5d:24:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=ce911822-333d-48c6-afa8-ca4057ddd439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:a2:b9:f8:55:c5:bd:25:e3:71:53:ef:09: e7:33:b6:7e:78:ee:fe:63:5f:3b:4a:77:9d:93:f3: d3:9b:bf:b2:4e:b2:e4:16:9c:01:3d:32:e0:86:b6: 24:ff:e9:3b:5b:47:50:4e:9a:60:18:7e:10:34:dd: f8:87:3f:ca:30:cd:0d:72:86:ef:1c:46:bf:41:95: 3d:48:b3:e5:d8:dc:7d:e4:cd:b4:60:5a:2c:53:58: 9c:43:c4:e5:b8:9d:96:66:cc:39:32:17:98:c9:ac: 1c:79:f3:ad:4e:08:c4:8c:9a:81:7c:7b:bf:ab:5b: 29:0d:e5:e7:ef:0b:48:6c:6a:f8:1c:9a:b9:a8:26: a2:74:83:ee:f1:0d:1b:6e:4d:64:36:9c:0c:09:a9: cc:8b:16:55:b8:af:58:17:91:21:00:49:9c:f7:3d: f0:69:a0:63:47:25:d1:de:f5:55:ee:f5:2e:de:9d: f6:07:ee:5d:5b:83:e5:a5:81:06:65:7f:b6:ba:14: 79:bf:c7:61:e6:5f:ba:85:b6:a4:f4:f6:2b:e0:31: 89:1a:81:25:b4:1c:e9:6c:eb:1a:bc:24:15:35:0b: 8f:21:97:d3:40:ac:4f:17:8a:42:12:6d:31:49:b7: 5c:bf:9d:1e:72:4f:de:0d:e7:27:50:1e:40:6b:aa: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:49:C6:FF:3B:6B:6B:4C:8E:E5:EF:A8:E5:FC:2C:76:33:B6:B7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d2864ea-cc11-3cb8-8758-9df3964b9244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:83:db:e2:be:8b:28:d8:2c:f1:5b:7f:29:31:a0:8e:f3:79: 17:d8:6c:fb:0a:43:8b:f7:a1:57:8c:15:f7:1e:77:98:97:8c: d9:6e:6c:9d:b7:a4:3e:40:f6:5a:ea:36:f3:b9:76:70:29:3e: 23:5f:5a:13:90:09:56:4b:51:a6:c7:58:97:37:fd:a8:37:b2: 7e:be:f6:5e:91:f5:07:41:c8:17:0f:a3:87:d5:14:40:7e:0d: c3:4f:b5:a8:d3:48:97:1a:19:8e:b5:db:48:34:4d:0a:f9:54: 68:c2:db:f5:c5:2a:7d:93:87:63:ae:13:ba:9d:8d:5b:ad:1a: a8:37:4c:9b:1c:35:92:06:58:63:45:23:5c:16:d4:95:f6:82: e6:fb:90:ad:fa:e7:38:76:2f:e3:cc:af:6a:a6:14:b8:e2:06: 23:12:08:48:e0:5d:fb:93:94:1b:37:d2:4f:db:43:35:03:4a: 42:61:36:87:e3:3f:16:58:0b:f1:88:56:51:9b:ab:13:0b:ef: 8c:d3:ca:2a:7c:92:14:f3:c7:8e:ed:85:20:6e:09:90:36:99: 63:0c:3a:78:85:f5:58:56:bc:d9:40:cd:89:5c:5c:2f:82:37: d8:e8:ab:b7:1c:20:1f:48:91:17:c5:c8:62:55:e6:f0:ae:a1: 7c:8c:77:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2CWV5QvLF0k3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Y2U5MTE4MjItMzMzZC00OGM2LWFmYTgtY2E0MDU3ZGRkNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjuiufhVxb0l43FT7wnnM7Z+eO7+Y187Sned k/PTm7+yTrLkFpwBPTLghrYk/+k7W0dQTppgGH4QNN34hz/KMM0NcobvHEa/QZU9 SLPl2Nx95M20YFosU1icQ8TluJ2WZsw5MheYyawcefOtTgjEjJqBfHu/q1spDeXn 7wtIbGr4HJq5qCaidIPu8Q0bbk1kNpwMCanMixZVuK9YF5EhAEmc9z3waaBjRyXR 3vVV7vUu3p32B+5dW4PlpYEGZX+2uhR5v8dh5l+6hbak9PYr4DGJGoEltBzpbOsa vCQVNQuPIZfTQKxPF4pCEm0xSbdcv50eck/eDecnUB5Aa6pkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpJxv87a2tMjuXvqOX8LHYztreCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQyODY0ZWEtY2MxMS0z Y2I4LTg3NTgtOWRmMzk2NGI5MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9WHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOD2+K+iyjYLPFbfykxoI7zeRfYbPsKQ4v3oVeMFfced5iXjNlubJ23 pD5A9lrqNvO5dnApPiNfWhOQCVZLUabHWJc3/ag3sn6+9l6R9QdByBcPo4fVFEB+ DcNPtajTSJcaGY6120g0TQr5VGjC2/XFKn2Th2OuE7qdjVutGqg3TJscNZIGWGNF I1wW1JX2gub7kK365zh2L+PMr2qmFLjiBiMSCEjgXfuTlBs30k/bQzUDSkJhNofj PxZYC/GIVlGbqxML74zTyip8khTzx47thSBuCZA2mWMMOniF9VhWvNlAzYlcXC+C N9joq7ccIB9IkRfFyGJV5vCuoXyMd84= -----END CERTIFICATE-----Generated at Tue Nov 4 22:27:26 2025 by rpki-client