$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256b423-1306-3786-9a55-46b4dcbcddf4.roa File: e256b423-1306-3786-9a55-46b4dcbcddf4.roa (raw, json) Hash identifier: CnrkMy+4WsiAzvxnaYljO6+D/n8kyRlZhlP2PgwiMBs= Subject key identifier: F0:3A:F6:1C:20:3C:AC:99:45:13:2E:BF:E2:C8:5F:68:98:D2:B5:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B0761893A79559F629F3880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256b423-1306-3786-9a55-46b4dcbcddf4.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.213.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:61:89:3a:79:55:9f:62:9f:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=abfb5af9-b2ae-4541-9aae-a94190321f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:12:7e:00:cb:90:d7:07:46:bc:50:7c:54:ba: ac:ab:0f:ff:94:e7:67:1a:57:7e:5f:8e:fb:70:6b: 31:9c:da:d8:fc:08:4f:11:be:69:71:3d:81:63:7b: 88:93:ed:14:c5:64:62:49:86:06:40:fb:d5:a7:bd: 0e:b2:20:b7:9b:44:4c:aa:b6:c0:34:6c:c6:4a:bf: dc:9f:ae:6c:ae:2f:88:05:ea:de:c7:89:ea:27:1d: d2:da:30:ba:20:38:6c:6c:a7:5e:ea:8b:cc:1e:ce: e7:1e:69:40:56:af:e1:57:f9:1c:95:a8:6c:74:a0: e2:83:f4:20:b8:a7:9a:53:00:d0:44:fe:3d:ff:d9: 57:61:28:39:e4:33:5b:33:f4:d9:93:0e:a2:59:73: c5:9f:ec:a4:d0:20:92:2c:17:77:19:ff:90:b1:2d: 9b:24:21:f6:3b:7d:05:30:3f:d5:eb:eb:6e:54:5b: 1d:e6:d2:52:0f:88:22:11:21:b0:88:d6:cf:1b:01: 5c:7f:cf:8c:6b:69:1a:41:a2:51:a7:ef:37:72:6e: 91:16:48:a9:65:b6:8a:8a:df:15:ef:67:e3:68:ea: 19:08:29:c0:ac:f9:7d:65:31:3d:9e:ef:e9:7a:41: 05:31:f0:93:7d:b7:64:2f:a2:3b:bd:97:52:c4:86: ee:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3A:F6:1C:20:3C:AC:99:45:13:2E:BF:E2:C8:5F:68:98:D2:B5:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e256b423-1306-3786-9a55-46b4dcbcddf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:69:f1:fb:96:e3:1b:1f:c4:b3:08:e3:6b:ff:13:91:14:bd: a9:60:4d:00:cb:da:8c:10:fa:68:6e:98:fb:61:e7:c1:a5:95: a5:f5:17:62:19:c4:50:6d:9c:b5:c3:02:6a:95:31:b7:ae:aa: 52:50:54:0f:59:92:75:60:e3:c2:b8:a5:2a:90:64:36:51:7c: 09:e2:52:87:83:f0:ff:81:6a:26:92:91:86:f7:23:5a:97:66: 44:87:0e:ee:7e:5c:e3:fe:7d:95:f5:ff:7c:6c:f1:a4:8a:57: 67:0c:e1:07:f6:34:4b:cb:8b:17:74:e2:6c:1c:3c:d7:a9:e5: 84:21:59:66:1f:77:c5:33:b6:b0:9f:49:d2:ef:40:e4:96:d3: 1c:d0:e8:2e:41:93:8f:17:24:01:5f:0b:59:59:cd:3b:ef:b1: 89:69:c8:4b:d6:c4:5a:6a:1b:58:f0:2a:c2:05:22:4f:cf:70: 66:8b:02:26:c1:77:7c:53:ad:b0:58:79:67:37:76:9b:a5:66: 9f:ed:68:27:60:93:41:f4:f6:04:56:20:10:a9:b1:8f:0b:85: 65:3d:0b:df:3e:b7:99:fa:0f:e9:af:b3:85:ef:45:6e:24:93: 4d:94:09:7f:a8:cd:c6:62:3e:59:4e:49:33:04:e7:4b:73:44: 19:f4:f5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2GJOnlVn2KfOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YWJmYjVhZjktYjJhZS00NTQxLTlhYWUtYTk0MTkwMzIxZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xJ+AMuQ1wdGvFB8VLqsqw//lOdnGld+X477 cGsxnNrY/AhPEb5pcT2BY3uIk+0UxWRiSYYGQPvVp70OsiC3m0RMqrbANGzGSr/c n65sri+IBerex4nqJx3S2jC6IDhsbKde6ovMHs7nHmlAVq/hV/kclahsdKDig/Qg uKeaUwDQRP49/9lXYSg55DNbM/TZkw6iWXPFn+yk0CCSLBd3Gf+QsS2bJCH2O30F MD/V6+tuVFsd5tJSD4giESGwiNbPGwFcf8+Ma2kaQaJRp+83cm6RFkipZbaKit8V 72fjaOoZCCnArPl9ZTE9nu/pekEFMfCTfbdkL6I7vZdSxIbu6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA69hwgPKyZRRMuv+LIX2iY0rVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTI1NmI0MjMtMTMwNi0z Nzg2LTlhNTUtNDZiNGRjYmNkZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9XYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlp8fuW4xsfxLMI42v/E5EUvalgTQDL2owQ+mhumPth58GllaX1F2IZ xFBtnLXDAmqVMbeuqlJQVA9ZknVg48K4pSqQZDZRfAniUoeD8P+BaiaSkYb3I1qX ZkSHDu5+XOP+fZX1/3xs8aSKV2cM4Qf2NEvLixd04mwcPNep5YQhWWYfd8UztrCf SdLvQOSW0xzQ6C5Bk48XJAFfC1lZzTvvsYlpyEvWxFpqG1jwKsIFIk/PcGaLAibB d3xTrbBYeWc3dpulZp/taCdgk0H09gRWIBCpsY8LhWU9C98+t5n6D+mvs4XvRW4k k02UCX+ozcZiPllOSTME50tzRBn09fk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:08:43 2025 by rpki-client