$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4e1e04-a32d-3905-be5e-188d7a9afc3b.roa File: bf4e1e04-a32d-3905-be5e-188d7a9afc3b.roa (raw, json) Hash identifier: yBZCH9OHcSZQDvJFIp3C/sRokc5YefUzOHUy0IHV/ew= Subject key identifier: 09:76:60:F9:22:67:5C:71:F2:6B:0F:18:27:A3:3D:2D:C5:70:1E:B1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B6BC76977226215262987A440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4e1e04-a32d-3905-be5e-188d7a9afc3b.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.223.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:69:77:22:62:15:26:29:87:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=091a39fa-d764-4deb-8650-697499957d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:10:d7:4a:17:46:56:20:3e:60:c5:77:3a: df:83:68:b2:a3:30:2e:65:a6:6f:99:f5:27:1b:0e: d7:57:33:82:72:31:a2:78:94:d5:20:00:8b:3e:0d: ad:b8:b6:18:4b:16:88:31:55:aa:2b:0d:18:f5:28: e9:75:ce:26:02:96:f8:e7:d2:b3:9d:de:54:24:da: 2f:a0:ec:b3:af:6f:71:8e:ed:ed:97:58:e9:1b:f9: 05:02:48:2f:b7:64:f2:07:04:dd:81:e4:a9:52:3d: 75:8b:9d:8e:79:81:2a:95:dd:20:14:cf:a8:81:75: 48:1c:45:d2:95:86:c0:e7:62:e1:30:04:45:dd:5f: 0d:f8:c3:37:be:92:1c:93:65:d2:9a:90:9f:19:46: 56:6e:f7:35:c3:fc:97:ac:f8:7f:db:ff:0d:b4:ba: c7:6f:27:d7:bd:2f:ef:d2:82:73:8f:73:f3:14:82: 62:2c:fc:b8:43:ab:2e:9c:21:5b:2f:cf:61:88:63: 6b:ee:25:ef:b1:da:97:fc:74:ba:79:80:aa:44:b7: 1b:7f:23:4b:d5:45:9a:85:b3:19:b6:d8:52:dc:8e: c3:84:72:d6:a8:d0:38:54:d7:c6:58:2e:c6:37:72: c8:23:e5:9c:b6:10:63:8d:f6:87:e7:ca:29:b5:5c: af:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:76:60:F9:22:67:5C:71:F2:6B:0F:18:27:A3:3D:2D:C5:70:1E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf4e1e04-a32d-3905-be5e-188d7a9afc3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.223.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:86:d9:d4:d1:ae:0c:c0:35:5f:81:cd:bf:a6:e2:ab:70:b7: 0f:8e:44:86:20:00:f7:91:24:9a:53:60:86:88:bc:05:fa:db: 00:d3:34:49:81:8b:b8:fa:7e:cf:06:88:a4:12:b0:07:07:22: eb:be:04:64:34:61:3a:5a:16:21:3c:5a:b5:8c:48:cd:29:78: cb:58:83:33:56:e9:87:ee:7c:05:d6:a7:d8:a4:f2:62:29:a7: f9:b0:be:ba:c9:c1:22:64:53:44:fe:75:fe:cc:8c:77:72:73: f9:a2:e9:06:79:b1:0d:05:5e:ea:80:e5:49:35:13:1f:f6:6d: fc:83:8e:08:76:13:dd:4f:f8:82:88:f2:f8:5e:a2:4a:a6:a5: d5:a5:3a:53:9a:b2:cf:6f:59:f4:e7:a4:cc:47:d2:a4:f2:c1: 67:a6:51:c1:ce:bd:2a:9c:fb:e0:40:ca:47:8a:d3:02:b3:4a: 81:08:0e:ad:f6:a4:be:e2:c0:17:cd:13:be:e2:21:09:8d:37: fb:09:14:3e:b4:62:8a:d3:e8:82:65:e4:df:cc:23:7f:42:40: d9:8e:37:9b:e1:99:b0:33:bb:10:c8:c7:72:12:a4:6e:93:66: 7f:1c:ac:cd:1c:e1:25:61:38:55:4d:16:21:4d:89:5f:b5:8d: 9d:a6:1e:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx2l3ImIVJimHpEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk MDkxYTM5ZmEtZDc2NC00ZGViLTg2NTAtNjk3NDk5OTU3ZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheEQ10oXRlYgPmDFdzrfg2iyozAuZaZvmfUn Gw7XVzOCcjGieJTVIACLPg2tuLYYSxaIMVWqKw0Y9Sjpdc4mApb459Kznd5UJNov oOyzr29xju3tl1jpG/kFAkgvt2TyBwTdgeSpUj11i52OeYEqld0gFM+ogXVIHEXS lYbA52LhMARF3V8N+MM3vpIck2XSmpCfGUZWbvc1w/yXrPh/2/8NtLrHbyfXvS/v 0oJzj3PzFIJiLPy4Q6sunCFbL89hiGNr7iXvsdqX/HS6eYCqRLcbfyNL1UWahbMZ tthS3I7DhHLWqNA4VNfGWC7GN3LII+WcthBjjfaH58optVyvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl2YPkiZ1xx8msPGCejPS3FcB6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmY0ZTFlMDQtYTMyZC0z OTA1LWJlNWUtMTg4ZDdhOWFmYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWG2dTRrgzANV+Bzb+m4qtwtw+ORIYgAPeRJJpTYIaIvAX62wDTNEmB i7j6fs8GiKQSsAcHIuu+BGQ0YTpaFiE8WrWMSM0peMtYgzNW6YfufAXWp9ik8mIp p/mwvrrJwSJkU0T+df7MjHdyc/mi6QZ5sQ0FXuqA5Uk1Ex/2bfyDjgh2E91P+IKI 8vheokqmpdWlOlOass9vWfTnpMxH0qTywWemUcHOvSqc++BAykeK0wKzSoEIDq32 pL7iwBfNE77iIQmNN/sJFD60YorT6IJl5N/MI39CQNmON5vhmbAzuxDIx3ISpG6T Zn8crM0c4SVhOFVNFiFNiV+1jZ2mHoA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:32:50 2025 by rpki-client