$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50e538c8-3c95-3e5c-aa79-856eca914679.roa File: 50e538c8-3c95-3e5c-aa79-856eca914679.roa (raw, json) Hash identifier: wrP4yu/Go1BhLOFqTJLBCaCdJ1BD6qb+smByOBr1y38= Subject key identifier: 24:1E:C0:6E:79:B9:A7:DE:95:8E:68:B7:68:2D:13:9A:20:FB:55:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B07542DA837FA42BCCC5000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50e538c8-3c95-3e5c-aa79-856eca914679.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.212.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:54:2d:a8:37:fa:42:bc:cc:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=42ec39c6-76b8-4297-8f6b-37e6b03d6b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:16:34:82:46:ea:ae:20:4b:a2:80:9d:f1:95: 89:e8:e0:6b:57:23:76:14:0f:1c:f9:d0:18:66:81: ca:64:6d:31:8e:02:53:02:a8:12:0c:2c:54:b7:8f: 83:35:17:ec:1d:95:8e:85:f7:e1:61:56:27:57:66: 39:80:4b:f4:30:68:85:f6:0d:ca:c4:89:7d:a7:b3: 45:ae:80:b7:d9:f0:2b:9a:5b:bd:4f:44:52:ab:03: 9b:4a:01:86:c0:f0:18:fc:e0:45:3a:65:7f:42:a6: c2:fa:18:72:39:bf:bc:95:5b:f4:92:d2:e8:30:69: b0:83:4d:ea:5c:df:c0:35:68:59:ec:e9:ee:e9:87: 75:47:d2:3e:1e:e9:76:59:ee:65:55:a8:23:43:94: 7e:23:05:e3:eb:cc:ce:a9:36:da:bc:54:bc:8b:04: c1:1f:67:46:7a:6c:d9:fa:e9:24:56:31:49:e0:ac: 60:3f:e8:ae:28:a5:97:97:be:79:32:b8:34:ba:13: 4b:60:c5:1b:00:2a:f4:e0:31:86:1a:82:9c:74:76: 9b:63:f6:ff:a3:31:c0:a3:26:c4:cd:0a:fc:48:ef: 09:9e:f6:0d:03:57:93:05:d2:b4:4b:02:6c:e0:0d: 59:09:26:1c:c6:79:2f:2a:6a:5c:00:e3:5b:ab:09: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1E:C0:6E:79:B9:A7:DE:95:8E:68:B7:68:2D:13:9A:20:FB:55:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50e538c8-3c95-3e5c-aa79-856eca914679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.212.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b1:71:13:82:de:7c:93:6c:e4:94:a8:0a:8f:87:93:1c:6f: a0:3a:c4:d7:2e:32:62:fe:56:5a:a4:37:37:4f:c5:07:7d:68: 72:68:d4:4a:69:72:f8:08:54:ba:9e:26:f6:be:0e:7c:7e:4a: 4b:f9:cb:e9:cc:5b:4b:61:8d:eb:b0:10:cb:25:e0:c4:52:59: b6:bb:01:2c:42:8f:5d:67:05:f1:54:91:86:52:00:4f:e0:73: 58:54:71:97:d4:68:a1:20:88:cd:a3:92:e3:9c:dd:fb:7b:6c: 5f:a3:2e:f4:9d:7b:ee:27:20:1e:32:65:7f:cc:a4:a4:87:e1: ad:71:dc:68:57:a1:d8:86:3a:49:5c:3d:3b:cc:a8:e5:ba:d3: d8:38:21:9f:46:3a:0d:fb:7f:89:0f:92:33:b5:98:7a:8d:90: 13:a8:6a:68:c0:a2:74:15:6a:66:8a:97:2c:65:c8:85:57:aa: 5a:85:57:39:06:55:8d:b2:b9:3a:92:6e:bb:a1:17:b1:a5:2f: 00:52:66:12:b9:fe:5e:63:0f:dd:a5:1a:d1:f1:ed:36:88:57: 9e:11:0b:95:d1:6d:f6:03:e0:29:1f:cd:4c:c7:be:83:bc:62: 33:dd:1b:60:15:ef:20:70:bf:da:c6:5a:f8:53:30:40:42:2e: ab:e8:47:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1QtqDf6QrzMUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NDJlYzM5YzYtNzZiOC00Mjk3LThmNmItMzdlNmIwM2Q2YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xY0gkbqriBLooCd8ZWJ6OBrVyN2FA8c+dAY ZoHKZG0xjgJTAqgSDCxUt4+DNRfsHZWOhffhYVYnV2Y5gEv0MGiF9g3KxIl9p7NF roC32fArmlu9T0RSqwObSgGGwPAY/OBFOmV/QqbC+hhyOb+8lVv0ktLoMGmwg03q XN/ANWhZ7Onu6Yd1R9I+Hul2We5lVagjQ5R+IwXj68zOqTbavFS8iwTBH2dGemzZ +ukkVjFJ4KxgP+iuKKWXl755Mrg0uhNLYMUbACr04DGGGoKcdHabY/b/ozHAoybE zQr8SO8JnvYNA1eTBdK0SwJs4A1ZCSYcxnkvKmpcAONbqwkV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQewG55uafelY5ot2gtE5og+1VWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTBlNTM4YzgtM2M5NS0z ZTVjLWFhNzktODU2ZWNhOTE0Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9TwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+xcROC3nyTbOSUqAqPh5Mcb6A6xNcuMmL+VlqkNzdPxQd9aHJo1Epp cvgIVLqeJva+Dnx+Skv5y+nMW0thjeuwEMsl4MRSWba7ASxCj11nBfFUkYZSAE/g c1hUcZfUaKEgiM2jkuOc3ft7bF+jLvSde+4nIB4yZX/MpKSH4a1x3GhXodiGOklc PTvMqOW609g4IZ9GOg37f4kPkjO1mHqNkBOoamjAonQVamaKlyxlyIVXqlqFVzkG VY2yuTqSbruhF7GlLwBSZhK5/l5jD92lGtHx7TaIV54RC5XRbfYD4CkfzUzHvoO8 YjPdG2AV7yBwv9rGWvhTMEBCLqvoR5I= -----END CERTIFICATE-----Generated at Wed Nov 5 02:21:28 2025 by rpki-client