$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d14c78df-8c6f-376a-9da5-c2de2416df41.roa File: d14c78df-8c6f-376a-9da5-c2de2416df41.roa (raw, json) Hash identifier: XQhclUoQpkxVmORpATsVdBYPiYl9pgxAbpAyu825cVE= Subject key identifier: 16:03:7D:65:87:3B:F8:A1:65:42:E4:02:FB:55:41:3D:F0:82:B4:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583CA3D4DA0551796B82F780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d14c78df-8c6f-376a-9da5-c2de2416df41.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.207.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a3:d4:da:05:51:79:6b:82:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=7cfd9f03-8bee-40c5-b375-f2cf1c39627a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0e:bc:3b:22:86:43:62:df:30:1d:19:20:49: 5b:eb:c8:88:ec:70:bd:75:c2:1a:fd:c5:0f:a6:bd: a8:0f:7c:6e:b6:a2:0e:84:4a:f9:b6:55:7e:af:c8: 0d:8a:04:bb:aa:4e:fe:07:82:88:d3:96:39:1a:d5: f8:43:57:b8:3f:0b:df:ce:05:f3:e8:6c:59:e3:37: b7:9e:95:a5:7f:13:0e:12:08:3c:f3:f7:03:c6:4e: 57:03:0c:10:9f:3b:5c:9c:c7:00:06:29:3b:63:ba: f9:b1:1e:67:96:cd:50:cb:8a:34:8f:8c:db:76:8f: ca:9b:83:37:f5:04:0a:87:8f:c9:7e:ff:77:cf:48: d2:1a:00:57:3e:b8:13:f7:a3:bf:4f:ac:b8:ff:3d: 7a:16:62:4c:91:b4:2d:39:ae:10:84:7b:4c:a6:59: 7c:06:59:15:34:3e:ba:07:c0:7e:e3:26:31:bb:af: 36:b9:3e:9a:d0:0d:55:e4:c7:94:e6:6c:3e:85:f0: 6d:9b:eb:97:2b:5c:07:51:fa:74:75:d4:e5:19:99: 7e:cf:4c:dd:18:96:49:ba:b8:4f:27:13:c7:53:84: 11:5e:55:a8:97:0b:47:9f:73:27:c1:f9:24:02:4f: d6:f1:f6:ae:aa:37:c9:50:d2:41:1b:ee:4a:db:d5: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:03:7D:65:87:3B:F8:A1:65:42:E4:02:FB:55:41:3D:F0:82:B4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d14c78df-8c6f-376a-9da5-c2de2416df41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.207.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1f:9e:a0:bc:f4:0d:0f:c7:66:14:a0:50:c5:e2:6e:af:87: 39:62:88:7b:32:d2:37:8c:7a:0f:15:56:5e:aa:c2:18:69:5f: ec:58:fb:5f:90:33:76:4d:f7:6c:62:ce:e9:19:87:06:62:8f: 27:0b:d5:36:18:e2:eb:75:3d:65:a8:9f:c7:15:57:99:9c:3a: 70:79:be:1f:bf:ff:bb:f8:79:35:f6:40:ee:21:67:2d:2c:3a: 37:e4:92:32:be:9e:3b:a6:4e:6e:fb:54:c2:1a:e0:5f:7e:ee: b3:a1:ab:4f:6f:73:1b:7b:8f:27:62:d8:d5:ee:ed:db:b7:0c: d7:52:8b:fd:4a:5f:e5:8a:83:6a:f3:70:3b:38:3e:c5:43:2b: 5f:14:83:c2:17:92:e3:f2:8c:82:69:d2:d0:84:fa:10:5e:b2: 6f:c3:13:ec:f3:1c:19:18:f2:fa:63:08:3d:2a:8c:5b:16:bf: 71:18:a1:b3:bf:78:65:23:17:f5:78:7b:ca:a2:b3:8b:c8:cb: 73:52:a0:01:ec:0e:26:7d:ed:13:9e:ac:b4:15:7c:0b:1d:d8: c8:34:71:af:b1:a9:fb:4c:6e:c7:6c:98:34:f2:79:14:72:54: fa:03:e3:c1:f5:9f:79:44:6c:2a:40:88:af:61:d9:cf:48:fa: 91:69:fb:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKPU2gVReWuC94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk N2NmZDlmMDMtOGJlZS00MGM1LWIzNzUtZjJjZjFjMzk2MjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog68OyKGQ2LfMB0ZIElb68iI7HC9dcIa/cUP pr2oD3xutqIOhEr5tlV+r8gNigS7qk7+B4KI05Y5GtX4Q1e4PwvfzgXz6GxZ4ze3 npWlfxMOEgg88/cDxk5XAwwQnztcnMcABik7Y7r5sR5nls1Qy4o0j4zbdo/Km4M3 9QQKh4/Jfv93z0jSGgBXPrgT96O/T6y4/z16FmJMkbQtOa4QhHtMpll8BlkVND66 B8B+4yYxu682uT6a0A1V5MeU5mw+hfBtm+uXK1wHUfp0ddTlGZl+z0zdGJZJurhP JxPHU4QRXlWolwtHn3MnwfkkAk/W8fauqjfJUNJBG+5K29WroQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYDfWWHO/ihZULkAvtVQT3wgrTTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDE0Yzc4ZGYtOGM2Zi0z NzZhLTlkYTUtYzJkZTI0MTZkZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF88wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACofnqC89A0Px2YUoFDF4m6vhzliiHsy0jeMeg8VVl6qwhhpX+xY+1+Q M3ZN92xizukZhwZijycL1TYY4ut1PWWon8cVV5mcOnB5vh+//7v4eTX2QO4hZy0s OjfkkjK+njumTm77VMIa4F9+7rOhq09vcxt7jydi2NXu7du3DNdSi/1KX+WKg2rz cDs4PsVDK18Ug8IXkuPyjIJp0tCE+hBesm/DE+zzHBkY8vpjCD0qjFsWv3EYobO/ eGUjF/V4e8qis4vIy3NSoAHsDiZ97ROerLQVfAsd2Mg0ca+xqftMbsdsmDTyeRRy VPoD48H1n3lEbCpAiK9h2c9I+pFp+2M= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:26 2025 by rpki-client