$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b8df6b-ed9f-3cef-8804-b04f299c6a4d.roa File: e6b8df6b-ed9f-3cef-8804-b04f299c6a4d.roa (raw, json) Hash identifier: yXlfVUa3zuqgiDn9yjYy/UrievgDwnHG0YJ8v7J4ouY= Subject key identifier: 93:2E:AC:9C:2C:4E:9C:DE:BF:1D:F3:11:70:8F:78:41:03:6D:DE:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD20695639DC99E1A6B3280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b8df6b-ed9f-3cef-8804-b04f299c6a4d.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.217.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:06:95:63:9d:c9:9e:1a:6b:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=cd884a7e-3c90-45fa-a681-7ff541bb9f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:32:eb:9e:4d:d2:17:e2:44:b9:01:27:40: e6:cb:b0:b5:a9:69:7c:3c:68:ab:74:f6:e2:3b:4f: a4:6b:c4:fd:f7:b9:b3:3e:67:71:d6:d0:6f:41:52: 77:bc:9c:f8:5a:88:66:f1:62:0a:e3:92:67:aa:e4: 32:a6:2c:d9:fc:89:cf:e6:63:6c:84:5b:8f:4f:f8: ff:f1:d8:a6:ea:7c:20:ac:de:5c:a2:6e:72:72:88: 48:43:95:8f:25:12:3b:1c:14:0b:cb:bc:ef:ca:9e: 3e:10:dd:bd:96:06:7e:a3:00:25:b0:33:6d:05:26: 00:53:6f:4a:b9:c3:d2:5e:c1:10:14:f9:4f:24:2e: da:5a:d7:0f:00:3c:8f:de:a5:80:ab:75:8f:e2:9d: 4d:13:57:4f:a4:ed:cf:24:f9:b9:98:ce:e3:23:d5: f8:cd:e1:95:58:15:58:1a:18:2b:43:d4:6b:81:69: 7a:01:d4:4d:8c:4a:e4:56:c8:b7:a3:46:4e:49:ca: ba:20:d6:ba:53:37:25:25:b0:5c:0f:73:42:0f:cd: 47:ae:27:cf:c6:7e:b0:9e:da:45:d7:45:e8:61:62: 16:1f:6b:40:8d:9e:bc:ea:00:f1:c5:4d:02:bb:6d: 1d:55:ab:5e:0e:e0:20:00:54:e7:0c:34:2b:b3:f6: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2E:AC:9C:2C:4E:9C:DE:BF:1D:F3:11:70:8F:78:41:03:6D:DE:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6b8df6b-ed9f-3cef-8804-b04f299c6a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b8:c4:97:ae:98:00:d6:81:d4:0d:13:65:a6:5b:a6:44:24: 54:a9:14:20:e6:c9:f2:bb:4d:83:c0:b0:94:d3:5a:9a:2a:f6: 39:46:3e:6e:16:68:22:40:08:fe:92:0b:6a:81:fc:58:68:8f: 81:be:c3:04:23:f1:cf:7d:d4:8d:65:50:40:7d:d8:84:f7:5f: e8:9d:9f:69:c3:d2:11:e4:7b:52:30:80:99:41:57:3d:b7:4f: f8:ae:67:af:49:0b:3c:f0:dd:b6:b6:55:9a:5d:ef:4e:ae:97: fa:c1:69:d6:67:73:ae:a0:ac:8b:3c:06:2a:56:fb:b0:c9:3d: f9:88:8a:0c:27:2d:90:aa:a2:a6:f3:28:14:5b:63:b6:1c:71: a7:d4:81:88:c6:70:a2:65:17:0f:ae:04:73:ff:08:1d:60:db: e4:e0:95:a2:81:9b:3e:12:d4:55:07:88:d8:31:4a:42:95:9f: 0a:19:d1:99:b8:22:62:1b:8a:62:1d:f4:55:6a:57:d8:1e:e8: 6b:0a:1b:0c:7d:91:d2:83:0b:0e:fd:46:7c:e9:da:35:a5:5e: ca:63:ce:e1:8d:3e:63:60:a0:71:d3:e8:c9:31:fa:f8:ac:dd: 88:4c:99:1a:73:97:dc:04:87:4d:a6:5f:e8:a7:bc:12:dc:b4: d3:b3:3e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gaVY53JnhprMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2Q4ODRhN2UtM2M5MC00NWZhLWE2ODEtN2ZmNTQxYmI5Zjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg00y655N0hfiRLkBJ0Dmy7C1qWl8PGirdPbi O0+ka8T997mzPmdx1tBvQVJ3vJz4Wohm8WIK45JnquQypizZ/InP5mNshFuPT/j/ 8dim6nwgrN5com5ycohIQ5WPJRI7HBQLy7zvyp4+EN29lgZ+owAlsDNtBSYAU29K ucPSXsEQFPlPJC7aWtcPADyP3qWAq3WP4p1NE1dPpO3PJPm5mM7jI9X4zeGVWBVY GhgrQ9RrgWl6AdRNjErkVsi3o0ZOScq6INa6UzclJbBcD3NCD81HrifPxn6wntpF 10XoYWIWH2tAjZ686gDxxU0Cu20dVateDuAgAFTnDDQrs/ZYWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMurJwsTpzevx3zEXCPeEEDbd4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTZiOGRmNmItZWQ5Zi0z Y2VmLTg4MDQtYjA0ZjI5OWM2YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi4xJeumADWgdQNE2WmW6ZEJFSpFCDmyfK7TYPAsJTTWpoq9jlGPm4W aCJACP6SC2qB/Fhoj4G+wwQj8c991I1lUEB92IT3X+idn2nD0hHke1IwgJlBVz23 T/iuZ69JCzzw3ba2VZpd706ul/rBadZnc66grIs8BipW+7DJPfmIigwnLZCqoqbz KBRbY7YccafUgYjGcKJlFw+uBHP/CB1g2+TglaKBmz4S1FUHiNgxSkKVnwoZ0Zm4 ImIbimId9FVqV9ge6GsKGwx9kdKDCw79Rnzp2jWlXspjzuGNPmNgoHHT6Mkx+vis 3YhMmRpzl9wEh02mX+invBLctNOzPpg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:59:40 2025 by rpki-client