$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e2dbea-f6e4-3104-bd71-653838567afe.roa File: 93e2dbea-f6e4-3104-bd71-653838567afe.roa (raw, json) Hash identifier: nxpjm5Ehz/uTv5RYsWyqzQfSgP/vv4lnkUei7lgqVMo= Subject key identifier: 09:E3:26:50:3B:8D:F0:D2:AC:9E:E0:82:95:4E:34:66:89:CD:42:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B074DE42BE172E9848EE780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e2dbea-f6e4-3104-bd71-653838567afe.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 55836 IP address blocks: 23.209.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4d:e4:2b:e1:72:e9:84:8e:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=24be9f54-ee74-4b4f-a135-3b5c51010182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:8b:76:30:bb:85:82:d9:6d:9a:ea:c1:08: d5:1b:3e:5f:30:80:48:14:ad:da:ec:b1:51:d0:bf: 30:93:63:13:f6:30:71:c1:d2:3e:83:ef:3d:a0:e4: 2d:c0:13:74:b9:3b:4c:5f:1e:6c:37:c1:d7:e0:56: 8f:86:41:8e:06:5f:68:95:1d:5e:d5:c8:61:b3:9f: a5:1c:9c:6e:9e:e0:d6:a7:98:4f:74:99:ca:38:9f: b6:bb:6c:c9:b5:dc:0a:bc:ce:0c:c1:61:9c:9c:0f: eb:25:fb:d0:c9:00:17:45:f3:8f:2a:13:06:28:16: ea:d6:15:14:4a:fe:fd:99:7c:f8:89:a9:5f:cc:e6: dc:8d:db:74:93:31:fe:09:6a:d3:ae:00:34:0f:45: 55:3a:ec:fb:bc:86:96:3e:3d:00:b5:94:2f:e7:e7: 8e:03:76:cf:e4:7e:6f:07:1d:7f:a6:aa:0c:dc:5c: 1b:dc:7a:a4:55:3d:a9:7e:f9:6a:85:ec:cf:b4:a3: d8:20:8b:f0:10:bd:fc:81:78:f0:c7:f1:fc:b7:7f: 84:13:63:64:ec:2d:b4:ae:d0:fc:80:6c:4a:63:81: 4e:c0:bb:ea:f1:65:55:e0:57:1b:74:f9:e0:38:bc: 99:5f:26:ab:35:aa:f8:71:5b:4d:91:4d:ef:ea:c3: c5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E3:26:50:3B:8D:F0:D2:AC:9E:E0:82:95:4E:34:66:89:CD:42:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e2dbea-f6e4-3104-bd71-653838567afe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:62:44:db:3e:3a:78:07:9f:46:a0:f3:cc:92:63:6d:1b:57: 57:49:77:71:a2:22:e2:37:3d:1e:0c:4a:70:c5:c3:fb:ce:a3: 2d:42:47:85:5d:fb:07:79:a5:07:80:e2:3b:66:fb:86:1f:c1: 15:08:48:3d:d0:7f:0b:b4:63:8c:e0:3a:0a:09:a5:ab:03:0b: c5:90:0b:1c:4d:33:d9:05:46:96:bc:c9:44:17:f0:e4:e0:bd: e7:6a:48:3d:a9:fe:a7:e1:e4:51:84:1e:f9:20:b3:27:ed:b2: 84:62:bc:6c:a0:03:2b:a3:05:58:b5:c9:9a:33:f8:e9:f2:85: c1:73:56:44:84:a4:31:ac:c4:8d:23:30:13:22:41:af:e1:1e: 8a:1d:f8:35:57:e3:1e:55:f7:5d:6a:40:0e:6c:8f:67:80:4d: 55:9a:06:6c:75:a2:bf:8e:ec:e8:61:6b:e6:ce:38:4c:b1:43: ab:f8:7d:bb:ac:f3:75:6f:59:87:28:8e:a5:57:20:ba:ac:69: e1:87:d1:fd:17:0b:c0:09:33:68:2e:c8:df:8d:90:29:78:06: d7:e4:cb:1b:2b:cd:e7:b1:bd:59:64:15:2b:ea:63:dc:86:10: cd:2d:60:22:a5:e8:fa:35:50:1d:06:71:d4:05:23:93:9b:c5: d8:6c:ae:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB03kK+Fy6YSO54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MjRiZTlmNTQtZWU3NC00YjRmLWExMzUtM2I1YzUxMDEwMTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxqLdjC7hYLZbZrqwQjVGz5fMIBIFK3a7LFR 0L8wk2MT9jBxwdI+g+89oOQtwBN0uTtMXx5sN8HX4FaPhkGOBl9olR1e1chhs5+l HJxunuDWp5hPdJnKOJ+2u2zJtdwKvM4MwWGcnA/rJfvQyQAXRfOPKhMGKBbq1hUU Sv79mXz4ialfzObcjdt0kzH+CWrTrgA0D0VVOuz7vIaWPj0AtZQv5+eOA3bP5H5v Bx1/pqoM3Fwb3HqkVT2pfvlqhezPtKPYIIvwEL38gXjwx/H8t3+EE2Nk7C20rtD8 gGxKY4FOwLvq8WVV4FcbdPngOLyZXyarNar4cVtNkU3v6sPFUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnjJlA7jfDSrJ7ggpVONGaJzUKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTNlMmRiZWEtZjZlNC0z MTA0LWJkNzEtNjUzODM4NTY3YWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9HgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtiRNs+OngHn0ag88ySY20bV1dJd3GiIuI3PR4MSnDFw/vOoy1CR4Vd +wd5pQeA4jtm+4YfwRUISD3Qfwu0Y4zgOgoJpasDC8WQCxxNM9kFRpa8yUQX8OTg vedqSD2p/qfh5FGEHvkgsyftsoRivGygAyujBVi1yZoz+OnyhcFzVkSEpDGsxI0j MBMiQa/hHood+DVX4x5V911qQA5sj2eATVWaBmx1or+O7Ohha+bOOEyxQ6v4fbus 83VvWYcojqVXILqsaeGH0f0XC8AJM2guyN+NkCl4BtfkyxsrzeexvVlkFSvqY9yG EM0tYCKl6Po1UB0GcdQFI5Obxdhsrq0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:26 2025 by rpki-client