$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/096474bd-6110-3ad3-9b19-fdcaaa2ade4b.roa File: 096474bd-6110-3ad3-9b19-fdcaaa2ade4b.roa (raw, json) Hash identifier: ikMJdJkpCZZYEM1hMEC4e/14U8G/6V8T1DbPravLnck= Subject key identifier: 17:6C:C4:2C:26:50:66:C5:94:94:38:96:36:C9:4A:A4:8D:FF:BF:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B59A1CF155AC7EA6900231C60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/096474bd-6110-3ad3-9b19-fdcaaa2ade4b.roa Signing time: Mon 29 Sep 2025 01:00:33 +0000 ROA not before: Mon 29 Sep 2025 01:00:33 +0000 ROA not after: Sun 28 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.208.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:59:a1:cf:15:5a:c7:ea:69:00:23:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:33 2025 GMT Not After : Dec 28 02:00:33 2025 GMT Subject: CN=472c4adf-dd68-4376-8b57-a3d92c1ddee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:84:00:2d:b5:12:aa:1d:51:72:87:45:2e: 25:64:cf:6d:ec:81:a5:33:1c:00:af:c6:ca:67:51: 3d:e8:ef:25:dd:51:fe:3c:e8:b5:c9:a2:e8:da:db: 64:69:8a:5b:98:22:bf:f8:97:cc:09:39:91:02:36: 69:d3:fc:68:ee:96:6a:61:e5:d1:95:0d:60:e5:96: 80:89:75:a4:3c:98:11:7f:f1:89:13:e4:1c:f0:ff: f4:f4:5d:39:1e:e7:99:cf:aa:1a:fd:6f:ac:67:48: 36:37:59:16:45:49:80:13:dc:fd:40:9b:cb:b9:58: 42:3e:ec:3c:f1:24:e9:11:28:9b:b7:17:a8:2d:b6: 70:08:46:c5:b1:42:73:f3:65:54:f7:7f:02:26:77: 5b:3c:73:67:92:46:30:e4:67:15:39:30:da:c2:26: 9b:8f:f3:fa:60:0e:ce:33:a4:88:bf:2c:35:4c:59: 32:b8:6d:55:db:59:da:2c:6d:8a:66:1d:25:61:50: 3b:2b:77:46:23:29:57:07:a0:42:de:6a:c2:ae:51: 1a:95:4d:08:56:4d:8f:70:46:a8:58:06:28:a7:e9: 02:0d:d3:a5:27:c8:83:a6:2a:69:a4:a5:99:55:79: 7c:42:c9:eb:7a:85:93:9b:72:58:fe:72:dd:08:a0: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6C:C4:2C:26:50:66:C5:94:94:38:96:36:C9:4A:A4:8D:FF:BF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/096474bd-6110-3ad3-9b19-fdcaaa2ade4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:48:13:fc:44:e7:31:98:7b:41:74:33:5d:b8:2d:fa:20:a8: 56:7c:d9:f7:e4:48:57:47:71:8f:02:3a:90:88:82:f8:a3:91: d8:53:7f:b2:91:65:7d:48:5f:a7:2c:eb:a7:bf:19:9c:22:43: 10:2c:d0:69:cb:86:03:27:35:49:76:f2:7b:c7:da:1a:b7:a5: 54:c8:94:7a:49:97:e7:ae:c1:a5:e4:fa:18:42:03:48:15:24: 43:1a:f1:8c:14:b7:cb:31:d5:1f:2c:6d:1e:67:3f:0a:37:04: ef:36:d8:ed:e5:76:6f:6d:f7:dd:3d:46:75:48:f7:a9:0e:3c: 26:4b:99:c1:8f:ce:30:52:25:b2:7b:93:eb:3e:41:a5:03:76: 6d:be:61:83:fb:ff:c2:6e:9d:f6:e8:92:93:75:06:b1:54:63: 80:bc:41:f9:9e:c1:11:21:01:eb:85:6b:85:b1:de:e0:d2:01: f3:ce:f6:97:8e:8a:25:ac:87:ff:21:5e:03:1e:bb:9b:f7:f1: 84:ac:18:b2:eb:57:d4:5c:f7:61:6f:88:f9:62:91:c0:a5:e5: e2:16:f6:ab:d2:6f:86:97:e5:b4:5f:50:8d:15:15:3d:36:43: 28:78:43:52:cf:1d:ba:7c:b7:cb:1c:42:37:fe:75:f1:ba:22: e8:af:ee:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtZoc8VWsfqaQAjHGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk NDcyYzRhZGYtZGQ2OC00Mzc2LThiNTctYTNkOTJjMWRkZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus6EAC21EqodUXKHRS4lZM9t7IGlMxwAr8bK Z1E96O8l3VH+POi1yaLo2ttkaYpbmCK/+JfMCTmRAjZp0/xo7pZqYeXRlQ1g5ZaA iXWkPJgRf/GJE+Qc8P/09F05HueZz6oa/W+sZ0g2N1kWRUmAE9z9QJvLuVhCPuw8 8STpESibtxeoLbZwCEbFsUJz82VU938CJndbPHNnkkYw5GcVOTDawiabj/P6YA7O M6SIvyw1TFkyuG1V21naLG2KZh0lYVA7K3dGIylXB6BC3mrCrlEalU0IVk2PcEao WAYop+kCDdOlJ8iDpipppKWZVXl8QsnreoWTm3JY/nLdCKBedQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdsxCwmUGbFlJQ4ljbJSqSN/783MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDk2NDc0YmQtNjExMC0z YWQzLTliMTktZmRjYWFhMmFkZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9BYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRIE/xE5zGYe0F0M124LfogqFZ82ffkSFdHcY8COpCIgvijkdhTf7KR ZX1IX6cs66e/GZwiQxAs0GnLhgMnNUl28nvH2hq3pVTIlHpJl+euwaXk+hhCA0gV JEMa8YwUt8sx1R8sbR5nPwo3BO822O3ldm9t9909RnVI96kOPCZLmcGPzjBSJbJ7 k+s+QaUDdm2+YYP7/8JunfbokpN1BrFUY4C8QfmewREhAeuFa4Wx3uDSAfPO9peO iiWsh/8hXgMeu5v38YSsGLLrV9Rc92FviPlikcCl5eIW9qvSb4aX5bRfUI0VFT02 Qyh4Q1LPHbp8t8scQjf+dfG6Iuiv7lE= -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:32 2025 by rpki-client