$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79450c51-c52e-3283-b50c-a42f6f111b82.roa File: 79450c51-c52e-3283-b50c-a42f6f111b82.roa (raw, json) Hash identifier: 4UmpUuhhsu2MbeFUw97JLI5u0MEL7fHJxZ7tOj4BdGI= Subject key identifier: C5:43:E1:59:CA:DF:E6:27:CE:8D:59:DA:17:BE:02:E1:DE:7E:42:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA7CCE6A12C90451FC7705CC6 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79450c51-c52e-3283-b50c-a42f6f111b82.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.214.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:e6:a1:2c:90:45:1f:c7:70:5c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=9b4deacb-f94b-47da-9cb7-bff1746dd4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2b:4b:52:2c:d5:42:07:51:63:2e:24:4a:68: 27:a3:b4:48:d3:a3:60:f9:9e:67:ee:b6:07:2b:62: 2c:13:7a:bb:86:3c:ad:79:b5:d7:51:7b:1a:11:71: 34:03:c4:c1:00:9e:0f:a0:06:e5:54:53:f1:6b:6c: 3c:15:65:34:ff:bf:de:0d:e6:8f:0c:33:99:b0:eb: df:4a:93:d4:9f:d1:71:a4:46:5b:91:49:1f:0c:5f: da:f3:a9:9a:a0:69:7c:cc:e8:11:50:49:db:4a:6b: 4f:2d:c1:69:70:d5:ed:1e:76:24:30:14:82:78:93: f6:c9:e8:39:27:0d:ac:ab:20:47:0a:45:8f:9a:39: d2:9d:a4:0b:36:73:c6:1e:de:0a:f1:dc:e8:cc:3b: 5b:35:1a:35:b1:87:26:ff:8c:3b:aa:72:43:41:b0: bf:35:37:3d:ac:61:9d:0a:76:f6:4e:2a:12:78:20: 2b:25:0b:b1:9a:61:1a:98:c3:4e:8e:7f:b1:5c:67: 8a:df:07:1e:fb:2d:ea:31:5b:1f:76:83:b3:e5:42: 8a:87:71:2d:33:1f:30:96:5f:de:2c:51:1c:d9:36: 68:b7:19:85:d3:5f:d5:5e:c9:b4:28:42:a9:e4:5e: 5c:2c:4d:7a:42:b6:d5:47:6e:0c:b5:8e:bb:4f:41: 0d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:43:E1:59:CA:DF:E6:27:CE:8D:59:DA:17:BE:02:E1:DE:7E:42:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79450c51-c52e-3283-b50c-a42f6f111b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.214.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:27:5c:87:fd:eb:d6:89:61:af:f4:34:dc:67:45:9f:a1:78: 2c:44:73:74:27:c2:db:fe:2d:3c:97:2d:9f:98:fc:d5:34:2a: c6:6d:f1:19:dd:8d:2f:2e:d1:15:ed:67:36:8b:a3:34:3c:69: e4:9c:88:36:23:ac:08:0a:11:52:91:41:f4:c3:d0:a7:91:39: 90:b2:81:14:16:1c:8e:40:a6:c6:ca:69:43:cc:b9:51:3e:e1: 62:ee:ed:ad:22:0a:35:eb:7e:d8:5b:2a:be:e6:3b:1a:1e:ea: 11:5a:75:7c:d4:38:b5:4b:71:6b:c6:cf:d6:dd:86:e9:96:36: de:04:e2:62:e0:44:53:48:56:74:ec:7e:05:3d:75:f4:c2:c1: 93:6f:49:77:4d:84:fe:38:b9:b8:2e:7c:87:3e:04:42:88:e2: f9:90:40:fa:d9:20:f4:ab:e6:65:5c:15:e2:92:b1:87:da:40: 9c:e8:a5:3f:37:5a:e6:02:4c:70:dc:79:69:62:f6:08:9a:b9: 5c:76:9b:4e:14:dc:a8:80:89:06:ca:2b:50:e2:ba:16:a8:1a: a0:21:a2:cb:4e:a0:4a:79:48:58:e1:33:90:22:cb:99:1d:ab: 42:78:77:85:a1:a7:3c:a9:7a:de:ac:9a:c4:c2:af:01:64:56: ca:be:61:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOahLJBFH8dwXMYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk OWI0ZGVhY2ItZjk0Yi00N2RhLTljYjctYmZmMTc0NmRkNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoStLUizVQgdRYy4kSmgno7RI06Ng+Z5n7rYH K2IsE3q7hjytebXXUXsaEXE0A8TBAJ4PoAblVFPxa2w8FWU0/7/eDeaPDDOZsOvf SpPUn9FxpEZbkUkfDF/a86maoGl8zOgRUEnbSmtPLcFpcNXtHnYkMBSCeJP2yeg5 Jw2sqyBHCkWPmjnSnaQLNnPGHt4K8dzozDtbNRo1sYcm/4w7qnJDQbC/NTc9rGGd Cnb2TioSeCArJQuxmmEamMNOjn+xXGeK3wce+y3qMVsfdoOz5UKKh3EtMx8wll/e LFEc2TZotxmF01/VXsm0KEKp5F5cLE16QrbVR24MtY67T0ENpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVD4VnK3+Ynzo1Z2he+AuHefkJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzk0NTBjNTEtYzUyZS0z MjgzLWI1MGMtYTQyZjZmMTExYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9ZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAnXIf969aJYa/0NNxnRZ+heCxEc3Qnwtv+LTyXLZ+Y/NU0KsZt8Rnd jS8u0RXtZzaLozQ8aeSciDYjrAgKEVKRQfTD0KeROZCygRQWHI5ApsbKaUPMuVE+ 4WLu7a0iCjXrfthbKr7mOxoe6hFadXzUOLVLcWvGz9bdhumWNt4E4mLgRFNIVnTs fgU9dfTCwZNvSXdNhP44ubgufIc+BEKI4vmQQPrZIPSr5mVcFeKSsYfaQJzopT83 WuYCTHDceWli9giauVx2m04U3KiAiQbKK1DiuhaoGqAhostOoEp5SFjhM5Aiy5kd q0J4d4Whpzypet6smsTCrwFkVsq+YRQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:11 2025 by rpki-client