$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa File: 5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa (raw, json) Hash identifier: bvCyDiNrI3egaeYfqAgmztzR4So1anLMWU9lBAcnKB0= Subject key identifier: F1:65:D5:04:38:29:EC:8A:E3:CB:7E:40:DD:74:5F:23:6C:5A:FD:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B006A1498DDD0C7889B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 9498 IP address blocks: 23.208.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b0:06:a1:49:8d:dd:0c:78:89:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=83deadb4-dba9-4177-995f-b155f5cab14c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:18:03:de:ae:a1:49:2d:d7:be:aa:c6:72: af:ab:3d:db:d7:62:0f:47:65:f3:79:e1:a2:68:60: 62:0e:58:8c:96:9f:e9:8e:fa:5e:56:d3:68:cf:d7: f8:df:52:2f:95:52:a4:b5:75:af:aa:08:a4:63:6f: 37:10:22:60:bc:7b:37:1d:68:aa:97:47:25:c1:2a: 66:e4:8f:80:d7:d5:b9:c5:c3:02:fb:7a:f3:8b:16: c1:af:e8:e1:46:05:12:d0:41:5f:37:11:a4:d9:14: 6b:81:8e:f3:cd:fa:55:65:a7:67:6f:c9:34:25:bb: 10:0a:78:2a:de:68:dc:a2:2f:89:66:41:fe:99:e7: 49:a0:83:09:06:80:c2:a1:b8:c3:4f:35:95:8c:56: 66:71:69:50:e9:6a:29:bb:2d:a7:7e:f5:a1:c0:d7: da:0b:b7:ce:61:e8:1a:c0:14:ff:3a:02:8b:21:d8: d4:72:d8:e3:dd:a3:5c:95:43:5e:54:e7:34:ae:81: 15:80:09:73:29:63:c1:21:95:ae:09:86:d8:e3:13: a2:8e:7c:22:e0:56:34:f3:0a:1e:8e:ec:9f:b3:04: 58:64:de:7a:ac:65:18:34:8e:15:13:d9:87:69:51: 8d:a7:e4:04:9d:42:53:20:13:70:e0:3f:6c:b3:02: b0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:D5:04:38:29:EC:8A:E3:CB:7E:40:DD:74:5F:23:6C:5A:FD:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ebf97d4-5d39-3eda-9bff-45e12e512c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b2:49:a5:e0:f2:e3:00:58:1d:6a:42:e0:6c:17:0a:68:20: ea:09:aa:5f:8f:38:ca:74:c7:23:1e:24:fd:4f:60:ad:ef:ae: 3f:ab:a2:4c:c1:07:ff:94:20:5d:9f:36:7c:ab:2a:09:8b:43: cc:02:5f:eb:8f:df:f0:1e:d3:69:4f:7b:b2:83:46:10:ac:d6: e6:5b:45:0d:08:bf:51:6c:a7:04:11:94:8b:44:3a:95:a9:7a: 1d:28:22:a0:8f:02:17:92:a1:0a:8f:35:1a:80:05:f7:11:7a: 9e:25:21:d7:6d:39:27:af:9b:f7:29:a5:3a:30:66:bc:23:9a: c6:ed:52:c4:6d:6c:36:7a:f4:bb:e2:db:f6:33:b8:2d:5b:ee: 39:ed:b6:0f:47:34:87:19:ed:78:1f:27:87:ba:63:f5:d6:1f: 61:a4:77:b7:e0:4f:43:0e:b2:bc:45:69:91:9d:be:68:06:c3: 5d:fc:60:09:c9:71:fc:06:08:b7:e1:2a:5c:62:da:df:da:52: bb:d1:c1:bc:41:78:4f:a6:f2:b0:ab:c4:6c:52:bd:d6:85:e1: a4:a8:fb:0a:44:f8:61:f3:1c:ae:53:ba:3a:81:b7:3b:af:5e: 33:a8:e8:9c:37:e8:c1:36:1e:92:b3:a2:78:8c:80:55:44:84: 72:34:0d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbAGoUmN3Qx4ibAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ODNkZWFkYjQtZGJhOS00MTc3LTk5NWYtYjE1NWY1Y2FiMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4YYA96uoUkt176qxnKvqz3b12IPR2XzeeGi aGBiDliMlp/pjvpeVtNoz9f431IvlVKktXWvqgikY283ECJgvHs3HWiql0clwSpm 5I+A19W5xcMC+3rzixbBr+jhRgUS0EFfNxGk2RRrgY7zzfpVZadnb8k0JbsQCngq 3mjcoi+JZkH+medJoIMJBoDCobjDTzWVjFZmcWlQ6Wopuy2nfvWhwNfaC7fOYega wBT/OgKLIdjUctjj3aNclUNeVOc0roEVgAlzKWPBIZWuCYbY4xOijnwi4FY08woe juyfswRYZN56rGUYNI4VE9mHaVGNp+QEnUJTIBNw4D9sswKwJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFl1QQ4KeyK48t+QN10XyNsWv0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWViZjk3ZDQtNWQzOS0z ZWRhLTliZmYtNDVlMTJlNTEyYzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWySaXg8uMAWB1qQuBsFwpoIOoJql+POMp0xyMeJP1PYK3vrj+rokzB B/+UIF2fNnyrKgmLQ8wCX+uP3/Ae02lPe7KDRhCs1uZbRQ0Iv1FspwQRlItEOpWp eh0oIqCPAheSoQqPNRqABfcRep4lIddtOSevm/cppTowZrwjmsbtUsRtbDZ69Lvi 2/YzuC1b7jnttg9HNIcZ7XgfJ4e6Y/XWH2Gkd7fgT0MOsrxFaZGdvmgGw138YAnJ cfwGCLfhKlxi2t/aUrvRwbxBeE+m8rCrxGxSvdaF4aSo+wpE+GHzHK5TujqBtzuv XjOo6Jw36ME2HpKzoniMgFVEhHI0DRE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:22:50 2025 by rpki-client