$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ced4bca-1c9a-3e60-8f84-38ec2f3f0c3e.roa File: 8ced4bca-1c9a-3e60-8f84-38ec2f3f0c3e.roa (raw, json) Hash identifier: ZNT1X1znOp7uUQ3ibJ9YarK9ATEET08AtEbniXojK54= Subject key identifier: D4:A7:AB:7A:2C:B2:A3:53:24:5E:C3:62:4A:50:42:FD:2E:20:25:D2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FCF01E3557D316DC5580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ced4bca-1c9a-3e60-8f84-38ec2f3f0c3e.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.216.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fc:f0:1e:35:57:d3:16:dc:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=cb669d40-e76f-4403-928e-3727aad4ed2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:15:d8:5b:74:bd:25:aa:8a:b9:57:09:2b:b3: 82:90:ca:85:b3:03:b4:69:6c:d1:1a:70:87:01:a3: 33:8c:fa:5a:08:80:b5:23:f0:bb:96:84:20:ec:09: ea:87:75:b2:d2:3f:64:5c:ab:c5:22:55:a4:33:ab: 86:5c:b0:47:1c:a7:3b:b6:af:f3:db:54:b9:4c:8f: 62:6e:30:a0:57:2f:43:b9:18:d1:48:04:d6:f7:20: 09:62:9e:34:ea:23:43:26:82:d1:96:e1:1f:7c:d9: e3:24:01:61:f4:aa:91:47:10:1d:39:17:17:b0:f3: bf:34:bf:f3:77:01:9f:d9:d8:44:05:7d:89:dd:44: 21:03:4b:6e:10:dc:c6:6f:d1:3b:56:fa:b4:77:eb: 2e:dd:b4:d3:1f:7c:95:bc:05:d0:f1:5d:9f:87:5e: df:83:3f:c5:f8:57:98:65:7f:ce:c6:99:3b:17:93: 1a:84:c9:8b:6b:b3:94:7f:40:b0:f2:a1:35:7f:02: c8:f4:7c:1d:bb:18:e6:83:27:06:25:08:2f:68:b5: bc:3d:eb:e0:66:0b:5e:79:6d:e0:5a:03:ea:3c:6a: f8:73:1d:ab:a0:3b:c2:10:10:95:58:c7:60:bc:ee: 6e:9d:e7:c5:3d:10:38:8f:be:88:18:c8:dd:44:6a: a5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:AB:7A:2C:B2:A3:53:24:5E:C3:62:4A:50:42:FD:2E:20:25:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ced4bca-1c9a-3e60-8f84-38ec2f3f0c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.216.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:fb:ae:24:c8:34:88:17:d6:41:83:ba:6b:e7:2f:7c:91:28: dc:92:4f:30:70:c1:2d:17:06:27:b1:65:ec:de:46:db:7a:71: 4d:6c:ed:12:89:02:d7:73:a3:84:1f:22:c3:c4:79:bf:30:94: 5a:25:24:55:3b:d9:42:59:11:7c:d4:e4:af:1e:d1:4e:6e:6e: 2d:b4:b6:06:cc:a0:aa:74:87:ad:d7:37:3b:d6:4d:5c:d0:9e: 2f:bc:4f:59:1f:0f:03:5c:a3:bc:6b:e0:00:32:31:be:47:e9: cf:cf:c6:50:ae:0a:b4:34:a1:bd:70:bf:90:7b:a5:34:f2:7d: 8b:79:84:cd:14:1a:c1:ef:94:1a:02:28:f8:83:8c:48:49:c2: a4:91:24:c0:7a:88:ca:df:9a:b7:53:cc:cb:21:d7:61:74:24: a4:c2:da:3e:11:72:52:1d:c2:e4:1f:4d:d8:04:e3:2b:ff:84: fe:fd:ee:dc:95:47:57:98:4c:d3:14:18:b8:38:4d:fe:9d:0c: b5:bd:bd:a4:79:84:2c:0f:76:fc:eb:f3:d7:99:35:da:5a:bd: ae:08:56:af:f1:70:c7:7e:e1:a7:02:ae:ef:5d:fe:b0:5c:f4: 0b:5c:a6:b5:ed:d6:c4:ff:1c:bf:71:3b:3c:8a:c4:bf:da:5c: 3e:c5:1f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0fzwHjVX0xbcVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2I2NjlkNDAtZTc2Zi00NDAzLTkyOGUtMzcyN2FhZDRlZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixXYW3S9JaqKuVcJK7OCkMqFswO0aWzRGnCH AaMzjPpaCIC1I/C7loQg7Anqh3Wy0j9kXKvFIlWkM6uGXLBHHKc7tq/z21S5TI9i bjCgVy9DuRjRSATW9yAJYp406iNDJoLRluEffNnjJAFh9KqRRxAdORcXsPO/NL/z dwGf2dhEBX2J3UQhA0tuENzGb9E7Vvq0d+su3bTTH3yVvAXQ8V2fh17fgz/F+FeY ZX/Oxpk7F5MahMmLa7OUf0Cw8qE1fwLI9HwduxjmgycGJQgvaLW8PevgZgteeW3g WgPqPGr4cx2roDvCEBCVWMdgvO5unefFPRA4j76IGMjdRGqlgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSnq3ossqNTJF7DYkpQQv0uICXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGNlZDRiY2EtMWM5YS0z ZTYwLThmODQtMzhlYzJmM2YwYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF9igMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj7riTINIgX1kGDumvnL3yRKNySTzBwwS0XBiexZezeRtt6cU1s7RKJ Atdzo4QfIsPEeb8wlFolJFU72UJZEXzU5K8e0U5ubi20tgbMoKp0h63XNzvWTVzQ ni+8T1kfDwNco7xr4AAyMb5H6c/PxlCuCrQ0ob1wv5B7pTTyfYt5hM0UGsHvlBoC KPiDjEhJwqSRJMB6iMrfmrdTzMsh12F0JKTC2j4RclIdwuQfTdgE4yv/hP797tyV R1eYTNMUGLg4Tf6dDLW9vaR5hCwPdvzr89eZNdpava4IVq/xcMd+4acCru9d/rBc 9AtcprXt1sT/HL9xOzyKxL/aXD7FH3I= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:04 2025 by rpki-client