$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3db665bb-74ed-32ec-9cd6-db04d2b5aade.roa File: 3db665bb-74ed-32ec-9cd6-db04d2b5aade.roa (raw, json) Hash identifier: nRBnXNf3mfHTJUsZrKSaL3N2GgoyqOjc+lWo44Fjrpg= Subject key identifier: 28:DA:A8:69:75:49:56:E1:72:5A:A6:FD:60:F3:C6:4A:B8:EB:18:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B074E3F3555629A879C8940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3db665bb-74ed-32ec-9cd6-db04d2b5aade.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.210.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4e:3f:35:55:62:9a:87:9c:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=a7cd43b6-bf54-4bd7-9ab8-42da42f800a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:69:b5:2f:04:bc:a3:5d:06:71:82:ed:f4: 3d:7a:c3:79:b7:24:d4:cd:71:37:fe:5e:26:11:7e: aa:f5:08:b9:34:c4:a6:07:a0:2c:94:6a:1b:4a:ff: ef:4b:d7:5e:ac:30:ba:65:83:24:8d:7f:ef:f4:57: e2:1e:8b:f3:7b:4d:f8:77:ff:01:10:2c:17:da:ca: 62:de:39:48:02:20:fb:e0:6c:27:ae:8c:6a:02:74: ac:38:df:dd:47:84:40:ec:ce:75:19:d5:0f:e2:cd: 3c:01:2e:19:e5:19:fd:b0:b1:02:21:dc:39:ce:29: e8:85:d7:3c:f5:bf:08:1d:bd:d2:6a:0a:b0:3e:93: a6:39:18:8d:6b:f1:19:5f:6c:1e:b2:c7:73:21:a9: 4e:ab:50:12:8c:7e:ba:7d:7d:fc:11:7d:d5:a7:c5: b8:97:4f:fc:70:52:21:04:09:78:7a:58:b0:d8:39: 7e:cc:ae:92:cc:a1:32:03:04:b3:04:f6:4f:17:38: 76:8a:fd:32:ae:17:f8:13:a5:09:84:9d:98:ea:9d: 1c:c8:26:a5:0f:27:e0:1b:e3:3d:d4:a9:07:5b:e1: 52:81:1f:fe:1c:4a:16:b7:db:55:c5:a8:09:cd:fc: d9:b5:d0:e3:aa:fa:f4:e8:f2:85:fa:28:60:ba:4f: 4f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DA:A8:69:75:49:56:E1:72:5A:A6:FD:60:F3:C6:4A:B8:EB:18:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3db665bb-74ed-32ec-9cd6-db04d2b5aade.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.210.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:06:5d:8f:34:ce:64:3e:36:b1:d1:6d:5a:3b:bf:c1:d5:45: 04:7a:d9:24:9e:e7:45:fa:bf:85:d0:84:93:7b:21:77:9b:85: a3:30:38:15:10:47:56:8c:7b:79:e4:2b:dd:6e:10:30:b3:0c: 33:f2:7c:ad:90:a1:41:ba:e9:2f:55:19:5d:a2:35:d0:92:c8: 80:1a:fa:72:fe:3e:0f:0f:2c:b5:b1:ef:3b:57:27:63:26:a5: 38:a8:bf:ca:85:1e:40:9a:ec:6d:d1:19:3d:19:a2:a1:f4:93: 5a:4b:71:44:b5:55:a1:1c:fa:58:42:ae:25:1e:9d:c9:ef:82: 97:f3:43:88:76:69:93:65:dd:c2:06:5d:3b:08:9e:58:45:27: 34:06:d5:d2:81:de:ef:cc:37:4c:f2:fe:14:df:96:ac:db:95: 16:c8:15:6c:bf:34:a5:10:75:33:d7:18:29:d8:09:22:d3:e5: 12:3d:c5:24:94:75:0c:bc:6a:0a:4a:c6:ce:44:9a:a4:5e:50: 4c:c1:05:91:eb:b9:83:bb:1d:2e:d4:2f:81:bf:cf:79:6a:26: e2:2e:13:46:9b:54:8f:1d:cd:71:f8:b9:bf:1c:70:73:b1:aa: 3e:09:e1:97:e9:f8:84:b4:23:72:0e:2d:56:1d:af:44:f9:18: 1e:36:e2:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB04/NVVimoeciUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YTdjZDQzYjYtYmY1NC00YmQ3LTlhYjgtNDJkYTQyZjgwMGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp45ptS8EvKNdBnGC7fQ9esN5tyTUzXE3/l4m EX6q9Qi5NMSmB6AslGobSv/vS9derDC6ZYMkjX/v9FfiHovze034d/8BECwX2spi 3jlIAiD74GwnroxqAnSsON/dR4RA7M51GdUP4s08AS4Z5Rn9sLECIdw5zinohdc8 9b8IHb3SagqwPpOmORiNa/EZX2wessdzIalOq1ASjH66fX38EX3Vp8W4l0/8cFIh BAl4eliw2Dl+zK6SzKEyAwSzBPZPFzh2iv0yrhf4E6UJhJ2Y6p0cyCalDyfgG+M9 1KkHW+FSgR/+HEoWt9tVxagJzfzZtdDjqvr06PKF+ihguk9PLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjaqGl1SVbhclqm/WDzxkq46xgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RiNjY1YmItNzRlZC0z MmVjLTljZDYtZGIwNGQyYjVhYWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9IIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQGXY80zmQ+NrHRbVo7v8HVRQR62SSe50X6v4XQhJN7IXebhaMwOBUQ R1aMe3nkK91uEDCzDDPyfK2QoUG66S9VGV2iNdCSyIAa+nL+Pg8PLLWx7ztXJ2Mm pTiov8qFHkCa7G3RGT0ZoqH0k1pLcUS1VaEc+lhCriUencnvgpfzQ4h2aZNl3cIG XTsInlhFJzQG1dKB3u/MN0zy/hTflqzblRbIFWy/NKUQdTPXGCnYCSLT5RI9xSSU dQy8agpKxs5EmqReUEzBBZHruYO7HS7UL4G/z3lqJuIuE0abVI8dzXH4ub8ccHOx qj4J4Zfp+IS0I3IOLVYdr0T5GB424oY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:58:52 2025 by rpki-client