$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95496f5-ca71-31a9-8f2e-1e542919b3aa.roa File: d95496f5-ca71-31a9-8f2e-1e542919b3aa.roa (raw, json) Hash identifier: qYFwQiB++Ei/41o+dIWLpvC4a+adXBRBLJ3UlaDveNI= Subject key identifier: 27:9B:50:72:8A:28:1B:59:72:3D:EA:19:2E:05:A2:7F:32:3E:6E:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075BB07EB26B8AA5FD7380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95496f5-ca71-31a9-8f2e-1e542919b3aa.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.211.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:5b:b0:7e:b2:6b:8a:a5:fd:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=eaf8ce3d-2870-4783-ad26-75638ae56ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:15:72:eb:65:e5:dc:80:6e:d3:0f:a1:23:3e: 5f:1d:2e:8a:27:b1:54:db:05:b8:33:af:c7:e6:2d: da:22:22:9a:f5:93:7c:93:d1:62:29:72:d8:81:46: 56:eb:6a:9a:00:fe:be:6a:97:e8:b5:7f:ee:46:0d: 40:94:77:15:04:25:80:0c:5a:86:c6:a9:ea:19:0c: cd:83:22:9d:ed:06:0e:de:75:8b:80:09:bb:d2:c0: d5:03:bf:2b:87:7b:c5:4a:1f:df:ba:dc:df:07:55: b0:23:03:cb:37:10:ef:14:5f:7f:63:7f:b3:0e:a0: 1c:b5:99:3b:04:d0:3a:bd:32:b7:05:a0:e1:17:7f: 3d:01:ef:0b:36:c9:39:e3:4f:9f:ca:02:49:f8:bd: 31:f0:e4:68:eb:79:ba:08:45:e4:3e:c6:51:2f:58: 33:7a:62:ca:3b:05:dd:55:3a:a2:9c:6d:2c:d2:36: 74:12:51:f5:2b:70:d4:54:37:92:a1:5f:de:1c:09: 71:cc:fb:02:bc:b4:d6:dc:6e:9b:9d:df:41:24:af: 09:f9:10:3f:91:a3:e9:79:ab:b3:b3:4a:15:38:80: 83:da:a2:e9:b4:6e:94:2d:11:1e:cb:b4:cd:02:81: 7f:09:c2:3c:c0:dc:32:5d:74:3b:7e:ed:9a:dc:98: 49:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9B:50:72:8A:28:1B:59:72:3D:EA:19:2E:05:A2:7F:32:3E:6E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d95496f5-ca71-31a9-8f2e-1e542919b3aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.211.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f8:02:27:4f:67:f9:28:d8:00:b7:5d:56:79:8d:95:bc:ec: 87:07:54:6b:cf:06:75:2b:37:7f:bd:b1:d7:a3:00:79:b1:f6: a5:74:80:34:96:90:64:d0:8d:26:63:af:b9:61:2c:a2:19:b8: 17:88:a7:d7:6d:cc:ed:4e:7a:19:23:b6:14:60:4f:56:f2:d0: c4:12:b8:50:eb:9f:ac:b1:1e:9a:87:b4:5b:58:e3:10:67:65: f0:f7:ad:11:16:ae:68:16:a7:73:94:e0:80:53:5e:6e:95:cd: d2:16:d1:a5:1d:6c:98:25:09:ee:2e:cd:aa:5b:4b:2b:bb:57: 20:77:84:52:82:7a:2c:44:1e:7f:28:ac:5e:77:8c:62:ca:f0: 8b:f2:e1:15:d7:b8:5b:41:8c:7d:63:79:55:b6:f9:19:39:ff: 48:b3:41:cc:0c:a0:fc:59:e5:56:c3:50:cb:91:94:08:12:ba: 20:32:fb:dd:7e:d2:c5:28:eb:ac:cb:41:a4:9a:93:25:9f:f8: 07:73:0f:74:ad:2c:00:e6:1e:8b:bf:eb:64:12:41:9f:5d:e4: 2b:74:80:fa:3d:c1:d9:df:82:9a:d5:c7:af:ac:1e:c2:c8:74: 96:74:40:a1:66:d8:eb:35:bc:66:43:51:03:a6:24:8c:ce:b1: eb:c9:fa:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1uwfrJriqX9c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZWFmOGNlM2QtMjg3MC00NzgzLWFkMjYtNzU2MzhhZTU2ZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohVy62Xl3IBu0w+hIz5fHS6KJ7FU2wW4M6/H 5i3aIiKa9ZN8k9FiKXLYgUZW62qaAP6+apfotX/uRg1AlHcVBCWADFqGxqnqGQzN gyKd7QYO3nWLgAm70sDVA78rh3vFSh/futzfB1WwIwPLNxDvFF9/Y3+zDqActZk7 BNA6vTK3BaDhF389Ae8LNsk540+fygJJ+L0x8ORo63m6CEXkPsZRL1gzemLKOwXd VTqinG0s0jZ0ElH1K3DUVDeSoV/eHAlxzPsCvLTW3G6bnd9BJK8J+RA/kaPpeauz s0oVOICD2qLptG6ULREey7TNAoF/CcI8wNwyXXQ7fu2a3JhJZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCebUHKKKBtZcj3qGS4Fon8yPm5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk1NDk2ZjUtY2E3MS0z MWE5LThmMmUtMWU1NDI5MTliM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9NkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf4AidPZ/ko2AC3XVZ5jZW87IcHVGvPBnUrN3+9sdejAHmx9qV0gDSW kGTQjSZjr7lhLKIZuBeIp9dtzO1OehkjthRgT1by0MQSuFDrn6yxHpqHtFtY4xBn ZfD3rREWrmgWp3OU4IBTXm6VzdIW0aUdbJglCe4uzapbSyu7VyB3hFKCeixEHn8o rF53jGLK8Ivy4RXXuFtBjH1jeVW2+Rk5/0izQcwMoPxZ5VbDUMuRlAgSuiAy+91+ 0sUo66zLQaSakyWf+AdzD3StLADmHou/62QSQZ9d5Ct0gPo9wdnfgprVx6+sHsLI dJZ0QKFm2Os1vGZDUQOmJIzOsevJ+sk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:51 2025 by rpki-client