$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa File: 6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa (raw, json) Hash identifier: xhQv6SUbm1XMeu9g7CksOZjP5pmZtFupEE/EnmzTWvI= Subject key identifier: 97:B2:3C:00:52:B7:DD:99:B4:5E:1C:04:76:AD:3F:89:B7:D9:84:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D40BABBEACEB22D05ADC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.204.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:40:ba:bb:ea:ce:b2:2d:05:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=4902db2b-3012-452c-9734-52a2c901070c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:da:0c:05:0f:3c:33:25:62:5e:09:80:f6:43: d5:f8:2a:dc:ad:01:14:42:f1:f8:f7:13:e8:7f:9c: 30:f5:74:8c:04:10:71:a1:e4:69:ee:68:d8:1f:9c: d3:4c:14:00:4d:0a:02:07:18:55:35:da:5e:b4:c3: e1:e2:71:9b:b6:bc:49:a2:11:ef:34:a4:d9:17:a0: 99:53:96:39:8f:d9:6d:47:8d:86:49:26:9c:a9:f1: 4c:49:8d:20:75:e1:bb:f2:ed:aa:45:b6:2f:b8:80: 06:65:f7:d3:31:06:96:ee:58:64:ac:b7:20:90:67: 44:d2:85:50:de:86:b0:45:cd:f8:cc:c7:35:be:2b: 50:76:c5:50:11:7b:43:89:c5:e6:7e:51:3b:24:c6: f5:b6:e2:e7:92:ff:8b:bb:3f:22:b9:c5:91:48:e4: 00:48:7f:94:60:90:3e:c7:66:77:dc:06:a3:60:77: 65:cf:81:c3:8d:b4:cf:7d:09:ca:e5:ff:a6:c8:6a: 02:66:ea:ed:35:ca:c8:e5:f1:95:0d:8e:4f:81:b8: 30:68:62:de:a7:b0:55:7f:a9:e3:36:95:26:11:78: a6:b6:66:79:52:73:5c:8f:9a:7a:68:3b:23:e3:e0: a3:40:9c:37:19:cd:03:d2:cc:e4:b4:15:c8:ce:1a: a7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B2:3C:00:52:B7:DD:99:B4:5E:1C:04:76:AD:3F:89:B7:D9:84:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:60:8d:70:b0:13:a6:f2:b8:d6:ac:38:c3:a2:38:47:66:29: 4d:d2:be:87:f1:4f:98:67:98:4e:d2:3d:3d:f8:9a:3a:fc:03: 7f:62:aa:f6:2d:c2:a4:eb:e2:d9:bc:f9:02:6f:25:50:c7:9f: a8:aa:5f:cf:01:3f:dc:83:bc:06:c9:8b:39:55:87:07:9b:3d: 21:b3:0a:59:01:a9:07:e4:c9:48:07:80:f3:ad:0b:c7:ca:64: 8f:42:85:19:69:bc:c7:a7:b7:d9:5f:12:8b:f8:1b:55:3e:9d: cb:94:f0:1d:fe:4a:f6:b1:e7:63:1f:5b:46:aa:3f:45:22:66: d6:7b:65:d1:49:ec:12:8e:6e:8c:da:f7:f9:0c:e2:45:cb:33: c6:8e:eb:22:84:10:75:91:bf:a3:74:b9:f5:04:58:e9:b0:f5: 48:8d:5d:43:bd:b0:75:03:05:32:63:cd:51:2e:06:8d:20:07: fa:8f:31:59:81:5f:db:0d:2d:ca:d9:77:82:cb:42:34:2b:f0: 47:ce:f2:2a:3b:cf:23:05:d3:99:da:ae:b8:fe:ed:b7:20:c0: 95:44:b0:37:92:b9:7e:ee:b8:e7:00:e5:ad:57:cd:6c:c3:19: 67:b3:53:b6:56:2a:22:01:47:b3:e7:87:9d:65:73:5e:d4:c6: e2:c4:79:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUC6u+rOsi0FrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NDkwMmRiMmItMzAxMi00NTJjLTk3MzQtNTJhMmM5MDEwNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3doMBQ88MyViXgmA9kPV+CrcrQEUQvH49xPo f5ww9XSMBBBxoeRp7mjYH5zTTBQATQoCBxhVNdpetMPh4nGbtrxJohHvNKTZF6CZ U5Y5j9ltR42GSSacqfFMSY0gdeG78u2qRbYvuIAGZffTMQaW7lhkrLcgkGdE0oVQ 3oawRc34zMc1vitQdsVQEXtDicXmflE7JMb1tuLnkv+Luz8iucWRSOQASH+UYJA+ x2Z33AajYHdlz4HDjbTPfQnK5f+myGoCZurtNcrI5fGVDY5PgbgwaGLep7BVf6nj NpUmEXimtmZ5UnNcj5p6aDsj4+CjQJw3Gc0D0szktBXIzhqnWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeyPABSt92ZtF4cBHatP4m32YTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmNiM2NiMDItM2JiMC0z MjJhLWJkYTQtNDFmYTc3YzQ1NDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdgjXCwE6byuNasOMOiOEdmKU3SvofxT5hnmE7SPT34mjr8A39iqvYt wqTr4tm8+QJvJVDHn6iqX88BP9yDvAbJizlVhwebPSGzClkBqQfkyUgHgPOtC8fK ZI9ChRlpvMent9lfEov4G1U+ncuU8B3+Svax52MfW0aqP0UiZtZ7ZdFJ7BKOboza 9/kM4kXLM8aO6yKEEHWRv6N0ufUEWOmw9UiNXUO9sHUDBTJjzVEuBo0gB/qPMVmB X9sNLcrZd4LLQjQr8EfO8io7zyMF05narrj+7bcgwJVEsDeSuX7uuOcA5a1XzWzD GWezU7ZWKiIBR7Pnh51lc17UxuLEeRw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:28 2025 by rpki-client