$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43705f3b-3007-377c-bf87-e200deff88c4.roa File: 43705f3b-3007-377c-bf87-e200deff88c4.roa (raw, json) Hash identifier: zpnXqMGEes3Q44riBB25jDSUAKDAkXMOyzjSpwwu1j0= Subject key identifier: E6:BC:3A:2F:02:AC:20:2F:78:96:1F:93:EA:CC:F7:BA:F7:F3:92:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE4059168E778E22D0AEBC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43705f3b-3007-377c-bf87-e200deff88c4.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.212.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:59:16:8e:77:8e:22:d0:ae:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=55f84f50-10f5-4376-af2f-3b1b68d5c554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:1a:56:21:63:d5:c7:5c:37:aa:89:2b:b7: 06:19:58:83:97:62:8b:25:1d:f2:da:17:0b:e8:7f: e1:3c:fb:6e:c4:34:8b:8d:40:7d:c5:c9:66:88:f7: 9b:14:a6:7b:c5:e7:c2:82:96:a0:dc:48:9a:7d:3a: a6:24:04:13:25:4e:09:7e:fc:70:38:06:74:43:15: 65:ce:f4:54:26:f0:e8:d3:9f:9b:65:4d:95:84:bf: 6e:a1:88:9a:9a:28:18:87:aa:00:68:dd:52:fb:85: 91:0a:74:ee:dc:90:d0:f1:32:ed:2b:6e:ae:5c:b3: ab:97:6b:32:65:9c:1f:83:8d:3b:a2:06:05:4e:13: 33:71:fa:71:e1:c7:9a:c7:fa:f1:99:45:22:51:36: 8a:29:ea:9c:5d:fe:4a:97:cf:5a:20:24:c3:08:18: 47:40:af:e2:ef:64:2a:f6:de:a4:0e:38:7e:23:9b: d1:03:1a:c0:13:94:87:3c:09:11:ee:79:31:04:73: a0:07:2b:08:1f:ef:ad:d4:66:1a:33:40:12:f8:c5: 32:f8:26:09:c7:23:a1:8c:54:31:ff:cc:41:ee:2d: 48:9b:4f:1c:cf:4a:e0:61:0e:12:8a:83:ce:e5:9c: 00:19:67:81:6a:b4:c4:8f:5b:f2:05:c5:34:e0:19: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:BC:3A:2F:02:AC:20:2F:78:96:1F:93:EA:CC:F7:BA:F7:F3:92:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43705f3b-3007-377c-bf87-e200deff88c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d2:8e:bd:cf:87:19:0f:ce:10:bc:aa:4e:1f:db:bd:df:ea: fb:6a:7d:37:dd:67:ae:c6:74:55:94:de:2d:f8:fa:e7:a1:78: a3:1b:40:06:ef:54:b0:d6:99:9d:39:bc:2d:da:55:f3:a4:db: a9:d3:e1:bc:b4:72:e0:dc:ba:6c:06:d8:6c:c2:06:54:03:9f: ae:9a:4c:2a:a4:03:0d:84:a0:e6:8f:a1:74:91:c2:0d:03:06: fe:a3:03:35:30:67:2b:38:24:12:a8:b0:04:6b:37:c8:3e:d4: 05:90:7b:0b:c5:e2:58:8b:90:34:a1:ea:f4:55:b3:75:28:d4: 8d:e0:06:0f:10:5a:20:e7:f0:e9:9e:65:01:97:5d:bd:79:21: 46:16:5d:70:6b:77:0d:ff:80:7d:9f:d7:31:e2:c3:f7:a6:56: 5f:00:bc:fd:a0:94:9d:50:20:1a:43:ae:89:25:c0:f7:9c:9a: c3:12:c1:f6:92:48:47:37:64:b7:da:1f:49:70:68:3c:4a:1b: c6:f4:15:8b:c5:5d:f0:e4:1c:fc:05:ff:1b:a0:f1:e3:a7:36: 48:0b:59:64:d2:fc:80:fd:e5:3c:da:d0:ad:61:58:4a:87:7d: c1:2a:10:bd:d0:35:f9:f8:27:ce:34:69:e6:e4:7d:01:04:0a: 4a:c2:7a:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFkWjneOItCuvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTVmODRmNTAtMTBmNS00Mzc2LWFmMmYtM2IxYjY4ZDVjNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeIaViFj1cdcN6qJK7cGGViDl2KLJR3y2hcL 6H/hPPtuxDSLjUB9xclmiPebFKZ7xefCgpag3EiafTqmJAQTJU4JfvxwOAZ0QxVl zvRUJvDo05+bZU2VhL9uoYiamigYh6oAaN1S+4WRCnTu3JDQ8TLtK26uXLOrl2sy ZZwfg407ogYFThMzcfpx4ceax/rxmUUiUTaKKeqcXf5Kl89aICTDCBhHQK/i72Qq 9t6kDjh+I5vRAxrAE5SHPAkR7nkxBHOgBysIH++t1GYaM0AS+MUy+CYJxyOhjFQx /8xB7i1Im08cz0rgYQ4SioPO5ZwAGWeBarTEj1vyBcU04BmyBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa8Oi8CrCAveJYfk+rM97r385JEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDM3MDVmM2ItMzAwNy0z NzdjLWJmODctZTIwMGRlZmY4OGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9QAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALSjr3PhxkPzhC8qk4f273f6vtqfTfdZ67GdFWU3i34+ueheKMbQAbv VLDWmZ05vC3aVfOk26nT4by0cuDcumwG2GzCBlQDn66aTCqkAw2EoOaPoXSRwg0D Bv6jAzUwZys4JBKosARrN8g+1AWQewvF4liLkDSh6vRVs3Uo1I3gBg8QWiDn8Ome ZQGXXb15IUYWXXBrdw3/gH2f1zHiw/emVl8AvP2glJ1QIBpDroklwPecmsMSwfaS SEc3ZLfaH0lwaDxKG8b0FYvFXfDkHPwF/xug8eOnNkgLWWTS/ID95Tza0K1hWEqH fcEqEL3QNfn4J840aebkfQEECkrCeqw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:30:35 2025 by rpki-client