$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa File: f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa (raw, json) Hash identifier: s86fO5dCOPeJvMGbwTdaleDGsH8Yk6zieTQi1PKdpb8= Subject key identifier: 53:21:03:D0:EA:63:DB:7C:BA:6B:DB:C0:74:EA:B1:BB:13:6F:F4:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FC9FBEDC8F53C8685C6300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 16625 IP address blocks: 23.218.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9f:be:dc:8f:53:c8:68:5c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=3c6ad132-c1d5-46ea-8bb4-6b9b902b0a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:1c:95:41:21:5a:dc:75:d5:e6:9b:b2:a0: 9e:f1:09:29:60:b2:c8:cd:63:ba:30:49:bc:4d:bf: 2b:21:74:23:1b:69:a5:73:28:f8:9b:b9:82:e6:9a: 10:54:bd:70:2e:75:d5:82:da:31:d5:a9:cf:0f:31: fa:b9:0a:7f:d1:bf:44:aa:fd:6c:51:32:0d:ab:8b: a8:42:2b:ba:73:5c:43:4f:52:f5:b6:c7:5c:7b:28: 10:dc:68:6b:84:39:67:bf:28:a5:72:e0:38:be:7b: 71:dc:51:5e:e4:2f:2e:ac:34:52:0f:6d:33:d8:69: c5:f3:c5:a5:15:22:5b:18:26:cf:61:b7:f4:11:8c: 5c:3a:b8:c3:cd:75:ec:d0:49:be:d1:30:97:38:9a: 68:a7:81:88:70:13:f7:2f:c8:cb:92:c6:64:7e:ff: 9a:16:1a:3b:29:00:f0:9b:4a:e5:71:57:b7:14:a9: 34:ba:81:6e:5f:05:57:b9:8d:da:3e:4f:74:80:a9: d1:61:d2:da:ef:f7:39:7d:2e:f3:e6:a9:48:96:d4: 71:cc:ed:f4:6a:cc:9f:d6:f4:e5:e6:c3:5c:91:16: 7f:56:5d:20:62:7a:c3:55:e4:cb:ed:e3:57:cc:1c: 6a:2a:03:64:ef:92:54:c8:0e:39:7b:0b:71:f6:95: 16:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:21:03:D0:EA:63:DB:7C:BA:6B:DB:C0:74:EA:B1:BB:13:6F:F4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8c49ef6-0c22-35fb-bd04-c61098ff797c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.218.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:1f:41:db:e5:72:97:73:d6:7c:4f:35:95:e5:7f:1b:8a:af: a4:c2:f8:a6:3c:c5:13:5b:28:1d:49:d9:30:9b:0d:b4:99:39: fd:78:7c:f4:54:20:67:96:d4:9e:17:ba:a0:55:74:9a:ec:ce: 68:6a:5b:b9:3e:c5:3a:05:bf:17:ea:d0:6a:c4:50:43:3e:d8: 1a:6c:38:76:76:24:8e:01:a8:d3:0e:23:0c:a8:fa:eb:fb:ad: 2e:8a:0c:ea:8b:70:8f:d4:f5:2c:0f:04:4c:b9:30:b5:7a:f5: be:c1:a4:6e:44:2c:dc:d7:d0:b9:5a:0f:12:d1:f8:19:42:c4: f0:1e:cf:9d:2a:b1:e4:0c:18:5c:72:3f:6b:67:5c:56:fd:b7: 9a:ba:24:83:46:d7:20:ac:ef:46:db:b2:b9:58:81:17:8d:71: 6f:7e:6c:23:c3:98:e2:35:0b:77:b0:f6:e4:96:de:cc:ce:ab: 24:99:b9:fa:8b:86:fa:ac:cd:ba:90:50:6c:4a:57:e1:ff:90: e6:8f:df:76:69:fd:3b:eb:dd:16:fe:73:30:f5:7e:93:1b:df: 29:2a:fe:0f:26:b9:f3:15:01:8e:01:20:c6:89:32:a0:42:86: 4c:90:86:2d:82:e1:e0:f4:81:d9:e7:81:3d:5c:79:c6:93:20: 33:0b:2b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/J++3I9TyGhcYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk M2M2YWQxMzItYzFkNS00NmVhLThiYjQtNmI5YjkwMmIwYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtowclUEhWtx11eabsqCe8QkpYLLIzWO6MEm8 Tb8rIXQjG2mlcyj4m7mC5poQVL1wLnXVgtox1anPDzH6uQp/0b9Eqv1sUTINq4uo Qiu6c1xDT1L1tsdceygQ3GhrhDlnvyilcuA4vntx3FFe5C8urDRSD20z2GnF88Wl FSJbGCbPYbf0EYxcOrjDzXXs0Em+0TCXOJpop4GIcBP3L8jLksZkfv+aFho7KQDw m0rlcVe3FKk0uoFuXwVXuY3aPk90gKnRYdLa7/c5fS7z5qlIltRxzO30asyf1vTl 5sNckRZ/Vl0gYnrDVeTL7eNXzBxqKgNk75JUyA45ewtx9pUWqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMhA9DqY9t8umvbwHTqsbsTb/SzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjhjNDllZjYtMGMyMi0z NWZiLWJkMDQtYzYxMDk4ZmY3OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMfQdvlcpdz1nxPNZXlfxuKr6TC+KY8xRNbKB1J2TCbDbSZOf14fPRU IGeW1J4XuqBVdJrszmhqW7k+xToFvxfq0GrEUEM+2BpsOHZ2JI4BqNMOIwyo+uv7 rS6KDOqLcI/U9SwPBEy5MLV69b7BpG5ELNzX0LlaDxLR+BlCxPAez50qseQMGFxy P2tnXFb9t5q6JING1yCs70bbsrlYgReNcW9+bCPDmOI1C3ew9uSW3szOqySZufqL hvqszbqQUGxKV+H/kOaP33Zp/Tvr3Rb+czD1fpMb3ykq/g8mufMVAY4BIMaJMqBC hkyQhi2C4eD0gdnngT1cecaTIDMLKyE= -----END CERTIFICATE-----Generated at Tue Nov 4 20:55:20 2025 by rpki-client