$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4676fc7-6dfd-3829-9243-306b0d5dca70.roa File: f4676fc7-6dfd-3829-9243-306b0d5dca70.roa (raw, json) Hash identifier: tajvzUP6sE8adCkA1SBIT98dhs4jAPTRgknNEsmgSBs= Subject key identifier: A7:7A:C7:B3:78:CA:56:F4:B7:06:18:FC:8E:9E:B9:4A:CE:BE:87:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5DD1FE31949DBB07084BFC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4676fc7-6dfd-3829-9243-306b0d5dca70.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.217.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:fe:31:94:9d:bb:07:08:4b:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=9961d4a7-10d8-4447-a3ba-55de79c7627c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:f2:1c:41:90:f1:2c:9e:d3:b0:65:1e:3e: 11:69:7d:92:c1:78:b7:2b:14:93:59:b8:25:88:39: da:15:eb:f4:1a:61:96:98:80:79:4d:4f:8c:33:cb: a7:be:40:09:09:23:09:ef:8c:06:1e:ee:7b:d0:30: 83:d2:91:f5:72:61:00:d0:b8:5c:05:85:cc:ae:b5: 73:67:dc:b9:ba:73:29:73:d5:cc:70:45:93:ce:8a: 49:c0:ad:1b:ef:4f:44:53:54:fc:d1:38:3c:3e:fe: ec:88:8a:ac:0e:8d:6d:e6:83:52:f3:e0:cb:7e:f6: 78:6c:21:9f:21:c4:2b:52:59:4b:a8:e8:b4:45:f2: 78:0b:bd:40:67:1d:f4:8d:af:94:a9:93:32:a3:b9: e8:cc:b9:e2:e9:96:b1:a0:66:42:c8:37:2c:5a:b5: da:05:45:96:70:b3:01:91:b7:a6:fd:36:d5:c2:a7: 7d:5a:76:65:04:1d:79:57:eb:08:7d:42:dc:23:da: 70:c8:fd:2d:a7:40:3e:3e:d9:2d:5a:0f:4c:2e:5e: a1:71:22:2f:cd:8e:92:02:51:97:88:65:37:b7:39: e2:9d:4a:a6:aa:15:f7:9b:e7:ce:7c:da:84:db:79: a1:42:bc:6e:a2:8d:be:85:08:c7:47:f4:69:25:44: d0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7A:C7:B3:78:CA:56:F4:B7:06:18:FC:8E:9E:B9:4A:CE:BE:87:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4676fc7-6dfd-3829-9243-306b0d5dca70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ea:9d:4a:15:5f:61:72:e3:13:41:74:a3:57:3c:48:5c:0d: f5:48:a1:1f:db:d3:3a:fb:cc:58:5f:c6:49:55:79:e6:13:aa: 0b:c5:50:c9:b4:3c:bc:50:31:fd:85:19:1f:4b:f3:f3:9a:7f: 1b:d3:37:3a:62:87:9b:5a:29:e5:0f:64:fe:f8:f2:e6:b2:24: 32:6f:ab:fe:f9:95:9d:2d:b5:ff:9f:78:fb:6b:5a:23:2c:7d: b7:12:b6:b3:43:4b:87:e1:5d:d1:9a:d8:8b:4a:98:14:ea:ab: 62:98:c4:8c:08:f5:f5:ac:57:f8:01:90:17:1e:95:1c:21:f8: 23:58:ff:5d:74:6d:63:06:c3:0b:9d:7a:da:9f:a7:4f:39:4d: 21:db:15:3f:98:36:2f:73:7c:20:71:0d:78:f9:22:d8:d2:76: c5:de:49:09:60:f9:c6:20:96:78:16:64:a0:be:55:6f:70:2d: 5b:9a:61:41:29:7a:67:15:04:f4:7c:d9:51:8a:74:64:fd:60: 45:40:78:e5:c7:c1:46:8f:39:5f:91:ce:3e:fc:b0:33:65:df: e1:34:70:8d:69:41:01:74:51:47:ce:9c:c5:7c:a4:16:2f:c5: 7a:f8:34:41:1b:d8:74:f4:81:99:1b:8b:47:64:27:0d:9b:08: 8b:56:f3:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0f4xlJ27BwhL/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OTk2MWQ0YTctMTBkOC00NDQ3LWEzYmEtNTVkZTc5Yzc2MjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jLyHEGQ8Sye07BlHj4RaX2SwXi3KxSTWbgl iDnaFev0GmGWmIB5TU+MM8unvkAJCSMJ74wGHu570DCD0pH1cmEA0LhcBYXMrrVz Z9y5unMpc9XMcEWTzopJwK0b709EU1T80Tg8Pv7siIqsDo1t5oNS8+DLfvZ4bCGf IcQrUllLqOi0RfJ4C71AZx30ja+UqZMyo7nozLni6ZaxoGZCyDcsWrXaBUWWcLMB kbem/TbVwqd9WnZlBB15V+sIfULcI9pwyP0tp0A+PtktWg9MLl6hcSIvzY6SAlGX iGU3tzninUqmqhX3m+fOfNqE23mhQrxuoo2+hQjHR/RpJUTQlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKd6x7N4ylb0twYY/I6euUrOvodNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjQ2NzZmYzctNmRmZC0z ODI5LTkyNDMtMzA2YjBkNWRjYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9lqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzqnUoVX2Fy4xNBdKNXPEhcDfVIoR/b0zr7zFhfxklVeeYTqgvFUMm0 PLxQMf2FGR9L8/OafxvTNzpih5taKeUPZP748uayJDJvq/75lZ0ttf+fePtrWiMs fbcStrNDS4fhXdGa2ItKmBTqq2KYxIwI9fWsV/gBkBcelRwh+CNY/110bWMGwwud etqfp085TSHbFT+YNi9zfCBxDXj5ItjSdsXeSQlg+cYglngWZKC+VW9wLVuaYUEp emcVBPR82VGKdGT9YEVAeOXHwUaPOV+Rzj78sDNl3+E0cI1pQQF0UUfOnMV8pBYv xXr4NEEb2HT0gZkbi0dkJw2bCItW8xk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:43 2025 by rpki-client