$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa File: 8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa (raw, json) Hash identifier: hTkblgbDnKmxkLVcNSId9r5+r4qnzrNBUJdoHkSElaE= Subject key identifier: 2E:69:F9:32:92:54:31:1E:38:96:EA:4F:B7:66:08:B2:A8:83:AE:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075BE96B7A66D429071B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.211.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5b:e9:6b:7a:66:d4:29:07:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e3690712-7cc0-42e3-be30-310310919618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:8e:03:aa:ff:60:8c:f7:78:6e:70:d1:8e: 7e:c4:80:e0:95:c1:ea:67:77:75:23:c4:25:c5:bd: 94:b3:d5:f7:a8:1b:44:5f:55:e2:eb:91:0b:55:9a: 5b:35:ad:e2:c9:8a:db:33:48:b5:25:f3:c8:49:8b: d1:56:62:49:01:d3:ae:59:0e:97:c9:28:95:5d:10: 3c:b9:2c:6a:00:ff:85:9b:1e:b1:ed:39:48:ec:59: 5f:c5:67:91:1f:60:95:e9:50:60:a8:08:b6:8a:70: 70:db:a6:ca:48:6c:3f:3e:e5:f4:62:b9:f4:0d:cf: 4c:b7:24:d4:cd:b0:86:c2:77:d9:99:bc:32:74:21: 76:5a:c8:22:68:3a:2d:66:c1:79:c3:72:dc:b5:c2: bd:60:9c:fd:ac:3e:04:77:01:ec:30:5a:23:06:f9: 26:a6:ef:f1:6a:2c:fd:3a:be:98:44:29:05:42:dc: fd:35:de:c4:cd:69:5d:bc:c2:ec:a7:45:3e:37:03: 91:47:f6:af:82:94:15:7c:3b:7e:9f:ca:a1:ff:25: 53:f6:8a:22:df:12:21:45:5a:82:cb:3d:93:ba:31: 96:e8:35:33:03:24:a5:22:19:f9:a0:3f:47:22:4c: 8b:d4:b8:9b:bc:5e:01:81:6d:b3:57:cf:c6:0d:81: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:69:F9:32:92:54:31:1E:38:96:EA:4F:B7:66:08:B2:A8:83:AE:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e72e9f4-2555-3994-a0b1-81c2f743e87f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:31:65:87:36:6b:a5:12:6b:0c:5a:8f:e5:74:0e:af:b1:e7: 70:56:49:5a:26:91:33:97:25:40:67:e7:4a:75:5a:74:f1:c3: b3:48:c1:d9:ef:bd:a5:96:b7:4b:d1:b0:ab:97:2e:bf:cb:bd: cf:e7:c9:a5:fa:dc:3f:ca:b9:7d:22:88:57:c5:36:ed:15:df: 32:36:15:93:58:af:bf:33:21:c2:41:ae:05:c6:4d:72:9a:3d: 57:7b:b2:c9:b3:d1:f9:e7:0f:4e:c5:44:3c:23:5b:e2:c6:bf: 4c:46:5b:44:2e:ba:ba:5e:2a:fa:09:bc:55:44:97:34:db:7b: 4a:78:9c:93:7a:74:60:fa:c2:d9:52:86:19:71:3a:f9:b6:a5: 40:3b:78:29:60:8a:cd:46:da:80:db:4e:95:1e:5d:df:54:58: 8c:ee:58:d2:c4:c1:dc:97:54:78:c1:84:53:a2:38:55:97:92: 86:12:8d:c6:bc:34:c7:13:6c:c7:69:bf:87:39:6b:30:95:20: a7:0b:a7:e1:5c:50:79:32:fc:ba:17:d3:6a:60:fe:a7:af:6a: 13:36:df:ba:70:58:b6:27:c1:2d:cb:4b:de:a6:47:c8:63:f8: e9:49:1d:ad:f7:6b:fb:35:89:43:5a:cd:3c:49:93:a7:e6:8f: 1a:0a:2d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1vpa3pm1CkHG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTM2OTA3MTItN2NjMC00MmUzLWJlMzAtMzEwMzEwOTE5NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI6OA6r/YIz3eG5w0Y5+xIDglcHqZ3d1I8Ql xb2Us9X3qBtEX1Xi65ELVZpbNa3iyYrbM0i1JfPISYvRVmJJAdOuWQ6XySiVXRA8 uSxqAP+Fmx6x7TlI7FlfxWeRH2CV6VBgqAi2inBw26bKSGw/PuX0Yrn0Dc9MtyTU zbCGwnfZmbwydCF2WsgiaDotZsF5w3LctcK9YJz9rD4EdwHsMFojBvkmpu/xaiz9 Or6YRCkFQtz9Nd7EzWldvMLsp0U+NwORR/avgpQVfDt+n8qh/yVT9ooi3xIhRVqC yz2TujGW6DUzAySlIhn5oD9HIkyL1LibvF4BgW2zV8/GDYGuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5p+TKSVDEeOJbqT7dmCLKog67PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU3MmU5ZjQtMjU1NS0z OTk0LWEwYjEtODFjMmY3NDNlODdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9NsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAxZYc2a6USawxaj+V0Dq+x53BWSVomkTOXJUBn50p1WnTxw7NIwdnv vaWWt0vRsKuXLr/Lvc/nyaX63D/KuX0iiFfFNu0V3zI2FZNYr78zIcJBrgXGTXKa PVd7ssmz0fnnD07FRDwjW+LGv0xGW0QuurpeKvoJvFVElzTbe0p4nJN6dGD6wtlS hhlxOvm2pUA7eClgis1G2oDbTpUeXd9UWIzuWNLEwdyXVHjBhFOiOFWXkoYSjca8 NMcTbMdpv4c5azCVIKcLp+FcUHky/LoX02pg/qevahM237pwWLYnwS3LS96mR8hj +OlJHa33a/s1iUNazTxJk6fmjxoKLc4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:43 2025 by rpki-client