$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74cc8694-de7f-3e31-89ac-f1455f8b7f00.roa File: 74cc8694-de7f-3e31-89ac-f1455f8b7f00.roa (raw, json) Hash identifier: +DhcpBPERZ0q2NWAVCJPa+Fy2uOGIpP/4zW+nyB8oEI= Subject key identifier: 12:E7:A4:81:33:B2:31:5F:36:A2:45:20:2D:FB:9F:3D:A7:6C:FE:50 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0754E706BD5007660C3A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74cc8694-de7f-3e31-89ac-f1455f8b7f00.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.213.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:54:e7:06:bd:50:07:66:0c:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=c54ad4d5-b88b-4889-a13a-faf89dd307d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:93:b1:8d:13:e1:24:af:b9:16:93:40:eb: 2a:a3:55:f8:13:a2:95:10:63:aa:82:a3:81:8a:d1: 81:5d:67:f6:67:3b:c3:a1:c2:16:80:12:c2:aa:2a: b6:01:b5:60:75:f4:38:95:77:fb:5d:59:86:08:e7: f0:f2:b7:d1:68:36:59:73:25:e8:a8:50:3f:7c:45: 01:46:fe:97:42:84:cd:63:da:f4:c5:f0:5e:84:21: 76:2e:20:7b:71:57:0e:2c:ca:d9:80:64:87:59:33: 6f:0c:63:be:30:cf:4c:a9:4c:ae:71:9c:80:18:22: 42:1f:31:81:e3:03:93:db:8b:8a:21:3f:e5:13:42: 9c:b4:ca:5c:79:b0:9b:59:a4:52:57:b6:58:ba:e4: 9f:3a:9e:47:15:49:83:57:4a:be:22:64:30:64:89: be:bf:9d:5b:ae:d0:f8:f3:ed:5b:03:8d:16:0e:3f: 45:1e:10:04:56:86:0a:62:98:d6:44:6a:0d:b2:d8: 23:50:c0:f1:c2:ac:87:2c:20:d5:d8:1d:e8:5b:b0: ec:83:f9:16:c5:96:65:26:62:0c:d1:86:83:72:b0: d4:2a:ca:c0:df:ca:04:6a:db:7d:b6:48:59:c2:1e: 37:67:05:85:64:e1:b2:ec:ee:dd:ed:f2:d1:73:c5: eb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E7:A4:81:33:B2:31:5F:36:A2:45:20:2D:FB:9F:3D:A7:6C:FE:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74cc8694-de7f-3e31-89ac-f1455f8b7f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4b:1d:26:3a:e6:f7:d2:64:b6:22:3c:e5:0a:24:f1:3e:88: 91:66:22:d0:eb:32:89:73:ba:0d:67:09:34:7b:e5:f3:b0:92: 68:00:fa:58:a0:4b:10:67:1c:c0:ef:9b:9a:f8:6c:7f:38:34: b5:cb:a4:0c:6d:ca:33:fa:b1:35:07:28:73:f9:03:60:36:88: 0c:5d:87:34:84:62:e7:52:bd:eb:78:ec:30:11:38:f1:b3:bd: b0:61:cd:67:f6:41:43:82:46:61:4c:e2:68:38:3a:ff:76:41: a7:b5:10:f3:dc:95:f0:69:25:41:6f:bb:e7:97:26:9f:8a:44: 9c:3c:62:c6:a4:92:3c:e2:9d:41:08:07:d7:43:3c:31:d2:bb: 12:27:14:a7:30:49:a4:b4:8c:50:1d:89:52:11:0a:86:20:46: 62:15:9e:9b:dd:98:10:34:e7:bd:61:97:f7:a4:5e:f0:57:d0: 6f:70:7d:7e:7e:61:d7:c3:19:c9:f2:1e:ad:b3:24:6c:11:53: 49:8f:59:0b:22:48:00:29:57:96:71:b6:65:e2:b5:30:07:60: 02:d5:55:72:83:98:d3:b1:97:bb:45:a7:ff:e3:27:dd:3a:37: 81:59:c6:25:10:87:77:8c:18:e8:85:4b:1b:a3:9d:2c:01:50: 61:2d:d9:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1TnBr1QB2YMOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YzU0YWQ0ZDUtYjg4Yi00ODg5LWExM2EtZmFmODlkZDMwN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqaTsY0T4SSvuRaTQOsqo1X4E6KVEGOqgqOB itGBXWf2ZzvDocIWgBLCqiq2AbVgdfQ4lXf7XVmGCOfw8rfRaDZZcyXoqFA/fEUB Rv6XQoTNY9r0xfBehCF2LiB7cVcOLMrZgGSHWTNvDGO+MM9MqUyucZyAGCJCHzGB 4wOT24uKIT/lE0KctMpcebCbWaRSV7ZYuuSfOp5HFUmDV0q+ImQwZIm+v51brtD4 8+1bA40WDj9FHhAEVoYKYpjWRGoNstgjUMDxwqyHLCDV2B3oW7Dsg/kWxZZlJmIM 0YaDcrDUKsrA38oEatt9tkhZwh43ZwWFZOGy7O7d7fLRc8XrEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLnpIEzsjFfNqJFIC37nz2nbP5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzRjYzg2OTQtZGU3Zi0z ZTMxLTg5YWMtZjE0NTVmOGI3ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhLHSY65vfSZLYiPOUKJPE+iJFmItDrMolzug1nCTR75fOwkmgA+lig SxBnHMDvm5r4bH84NLXLpAxtyjP6sTUHKHP5A2A2iAxdhzSEYudSvet47DAROPGz vbBhzWf2QUOCRmFM4mg4Ov92Qae1EPPclfBpJUFvu+eXJp+KRJw8YsakkjzinUEI B9dDPDHSuxInFKcwSaS0jFAdiVIRCoYgRmIVnpvdmBA0571hl/ekXvBX0G9wfX5+ YdfDGcnyHq2zJGwRU0mPWQsiSAApV5ZxtmXitTAHYALVVXKDmNOxl7tFp//jJ906 N4FZxiUQh3eMGOiFSxujnSwBUGEt2XQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:31:37 2025 by rpki-client