$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fa65b8f-9dfb-3875-b695-d6657e72f11a.roa File: 3fa65b8f-9dfb-3875-b695-d6657e72f11a.roa (raw, json) Hash identifier: GVNRbSRITavApXA5+X3K7yscUgw9MphM4Oeyhk5iD/g= Subject key identifier: 9B:D7:F7:07:E9:FC:5A:E1:24:F3:E3:B9:F3:00:F0:B0:F0:61:77:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD2051A771EC8C63C9B1200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fa65b8f-9dfb-3875-b695-d6657e72f11a.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.216.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:05:1a:77:1e:c8:c6:3c:9b:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=c4f19d1b-09e3-4b39-9409-ca731737d3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:cd:59:0d:d2:36:2a:07:8b:84:1b:81:77: c8:cf:15:04:0d:8c:fd:81:4a:8f:bd:c0:1f:48:a7: f7:0f:8c:8a:8c:5e:49:39:de:92:f7:e8:ba:29:c4: 10:1a:1d:79:10:24:dd:c6:c1:cf:f3:2b:9e:2d:95: 7a:a6:17:d5:e2:c1:03:05:88:75:0c:9a:a6:e4:42: 35:80:6f:fb:a4:cd:33:27:55:a9:aa:09:e7:a8:a9: 02:46:0d:21:f5:2b:70:53:99:c6:eb:db:b8:f6:ed: 5a:ed:4e:ae:61:3b:ca:93:e1:0c:2a:40:11:7b:6e: b3:e1:59:81:aa:cc:37:8e:91:5a:f7:16:01:74:14: 7e:1b:04:b6:0b:c9:32:ef:58:95:90:8f:7e:6f:69: db:2d:29:58:c6:52:b8:7b:4e:2e:05:f5:a5:09:ee: e9:26:85:8c:0b:e4:f5:1a:e9:f7:4f:64:1c:86:db: c3:99:42:b0:99:d0:3e:ff:6d:af:b6:d0:87:c9:e4: 9e:0a:bb:e1:53:36:64:b4:40:a8:c9:42:e8:c3:8a: 98:cc:c9:b3:b1:1a:c7:77:81:d9:bb:9d:0d:b3:e4: 93:7d:34:38:bb:74:67:d3:b8:1c:6c:7a:91:81:cd: 1c:27:7c:37:3a:88:3e:ac:e8:ac:37:89:c9:2c:63: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D7:F7:07:E9:FC:5A:E1:24:F3:E3:B9:F3:00:F0:B0:F0:61:77:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fa65b8f-9dfb-3875-b695-d6657e72f11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:2d:c1:24:74:e9:5f:8f:06:0e:f1:1c:68:f1:9b:09:58:d8: 10:fe:7d:fc:c0:b4:b4:f7:70:b9:37:5d:33:78:35:3f:7e:36: 9e:9a:bf:47:8d:e2:88:8c:09:61:01:6d:61:37:e3:a7:67:76: 5e:25:df:bb:d9:4c:c8:16:62:9e:6a:c1:a8:07:a2:35:32:b2: 15:e2:f0:a0:c1:cb:fe:43:18:b8:61:71:f1:30:aa:78:5b:e2: f1:4b:1b:75:84:2c:2a:13:a6:b3:82:14:20:e6:75:20:0e:f4: 70:a7:fb:d7:f5:bc:28:28:e8:9d:5c:9f:25:34:38:c3:f7:6b: 5b:e9:f7:fb:17:0a:41:8d:fb:da:61:3c:c4:c4:03:d1:f6:0f: 1c:cb:f7:e4:1e:64:f4:35:8e:5f:6e:a8:ad:c2:ab:05:f6:6b: cc:c3:5c:4c:f8:00:8e:4c:03:a8:14:2e:12:ab:29:33:4f:6d: bc:7a:4a:9e:a5:f7:6f:13:a2:ab:4a:32:80:9c:fc:75:58:6b: 16:90:cf:8b:ee:b7:b0:6f:13:12:70:35:37:c5:4d:00:5b:3c: 3a:89:67:1b:16:10:b6:fc:e4:e5:97:75:70:0b:3f:33:76:f7: a1:80:f3:fa:94:77:3f:c0:34:c6:43:33:d9:96:21:a3:0c:ac: 15:64:ee:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gUadx7IxjybEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk YzRmMTlkMWItMDllMy00YjM5LTk0MDktY2E3MzE3MzdkM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/HNWQ3SNioHi4QbgXfIzxUEDYz9gUqPvcAf SKf3D4yKjF5JOd6S9+i6KcQQGh15ECTdxsHP8yueLZV6phfV4sEDBYh1DJqm5EI1 gG/7pM0zJ1WpqgnnqKkCRg0h9StwU5nG69u49u1a7U6uYTvKk+EMKkARe26z4VmB qsw3jpFa9xYBdBR+GwS2C8ky71iVkI9+b2nbLSlYxlK4e04uBfWlCe7pJoWMC+T1 Gun3T2QchtvDmUKwmdA+/22vttCHyeSeCrvhUzZktECoyULow4qYzMmzsRrHd4HZ u50Ns+STfTQ4u3Rn07gcbHqRgc0cJ3w3Oog+rOisN4nJLGPrNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvX9wfp/FrhJPPjufMA8LDwYXekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZhNjViOGYtOWRmYi0z ODc1LWI2OTUtZDY2NTdlNzJmMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9jAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMtwSR06V+PBg7xHGjxmwlY2BD+ffzAtLT3cLk3XTN4NT9+Np6av0eN 4oiMCWEBbWE346dndl4l37vZTMgWYp5qwagHojUyshXi8KDBy/5DGLhhcfEwqnhb 4vFLG3WELCoTprOCFCDmdSAO9HCn+9f1vCgo6J1cnyU0OMP3a1vp9/sXCkGN+9ph PMTEA9H2DxzL9+QeZPQ1jl9uqK3CqwX2a8zDXEz4AI5MA6gULhKrKTNPbbx6Sp6l 928ToqtKMoCc/HVYaxaQz4vut7BvExJwNTfFTQBbPDqJZxsWELb85OWXdXALPzN2 96GA8/qUdz/ANMZDM9mWIaMMrBVk7mU= -----END CERTIFICATE-----Generated at Tue Nov 4 20:58:07 2025 by rpki-client