$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb509440-cfb6-30de-97e4-4ab9a640e8bb.roa File: eb509440-cfb6-30de-97e4-4ab9a640e8bb.roa (raw, json) Hash identifier: cTAMC+4/bTJz55bt6KxlEYbP9DAn/WcM9f3E4kV6Rwg= Subject key identifier: D3:46:39:E8:D7:6A:88:92:B8:C6:9E:9A:5B:D3:D0:49:02:67:C4:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C4A19B137A53274055810 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb509440-cfb6-30de-97e4-4ab9a640e8bb.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.217.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:4a:19:b1:37:a5:32:74:05:58:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=3e27ec45-b3b8-4286-992d-b83a82fe5ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:62:28:79:5a:64:dc:f7:5e:ff:4c:8a:0d:21: 87:da:7d:a4:d6:51:71:c7:56:01:5d:3d:ad:8c:3e: ec:b7:78:dc:10:7d:b3:bd:ec:5d:44:a2:80:97:52: 62:69:ed:32:d0:62:bc:2c:3f:83:a8:e5:5d:f9:d5: 91:36:75:c7:02:e0:4c:54:a9:71:d2:cf:50:69:d2: c1:80:33:ef:b6:6c:a1:db:4d:3a:3d:94:1e:bf:3b: 63:0b:a6:2a:2f:13:6b:d6:65:b4:d2:e0:f2:62:1c: 6c:c5:19:5f:cf:35:fc:84:d5:57:f8:9a:b8:0e:98: c9:64:92:5c:71:84:6b:06:04:b8:1b:ae:ff:75:d5: 44:43:a6:c5:4a:80:00:3b:e9:12:70:2b:39:6e:d4: fe:00:e6:57:1d:55:4e:65:af:8e:9a:3c:13:59:a7: 45:62:e3:29:f2:7a:87:64:a8:38:7e:ca:31:c6:2f: 87:ef:bd:7b:cb:a0:93:e7:a6:ba:11:6c:4c:4c:c0: 88:af:d8:39:cc:d1:a9:2c:e7:76:62:8c:77:44:c7: 89:5c:70:6d:84:fc:29:81:43:f1:ff:4f:b5:03:b7: b8:cf:94:4d:bc:24:35:3d:68:bb:ec:a1:f5:81:e4: aa:08:4d:e1:be:40:c8:5a:cf:8a:2c:82:b5:df:9f: d2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:46:39:E8:D7:6A:88:92:B8:C6:9E:9A:5B:D3:D0:49:02:67:C4:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eb509440-cfb6-30de-97e4-4ab9a640e8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.217.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3d:d2:36:82:24:18:0c:a0:a3:a4:a7:fd:76:b5:26:93:96: d7:ba:cf:35:24:54:26:52:5d:a6:dd:4f:bf:fe:4b:09:09:96: 8e:46:c1:6e:35:56:f6:cb:90:aa:06:42:12:40:0e:6e:88:f8: 09:f1:ab:63:fd:31:08:b1:e1:3b:c3:e7:c6:89:f9:48:37:e7: eb:9c:34:56:a7:85:08:63:7d:51:f6:94:8a:92:ea:6e:75:46: f8:60:5a:72:81:40:3c:ff:7a:79:f0:c2:26:c6:c9:94:f7:cf: 57:e1:e0:3f:0b:82:40:c5:6a:e6:e8:2a:c1:20:26:d9:85:5e: 8d:4b:6d:5b:36:a1:42:2a:6a:4e:74:8b:01:6d:17:24:cc:07: 7c:de:9f:73:ab:ae:72:1e:df:ac:8e:9b:ef:9d:d4:28:c9:07: e3:c8:95:cc:86:de:e9:f7:74:e2:12:c8:ea:3e:95:7a:04:1f: c1:07:be:3f:e9:db:69:a3:82:1f:13:e8:15:68:9a:bd:db:0a: ac:7f:1e:6b:c4:7d:bd:7d:30:b1:43:93:16:ea:3c:ac:d6:bc: e5:dd:4f:9a:82:98:40:9b:e4:e5:6f:71:f6:53:0a:79:f7:93: b2:e1:56:b8:0f:bb:9b:07:79:b9:f0:45:77:2f:6e:29:94:90: 02:a8:19:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjEoZsTelMnQFWBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk M2UyN2VjNDUtYjNiOC00Mjg2LTk5MmQtYjgzYTgyZmU1ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGIoeVpk3Pde/0yKDSGH2n2k1lFxx1YBXT2t jD7st3jcEH2zvexdRKKAl1Jiae0y0GK8LD+DqOVd+dWRNnXHAuBMVKlx0s9QadLB gDPvtmyh2006PZQevztjC6YqLxNr1mW00uDyYhxsxRlfzzX8hNVX+Jq4DpjJZJJc cYRrBgS4G67/ddVEQ6bFSoAAO+kScCs5btT+AOZXHVVOZa+OmjwTWadFYuMp8nqH ZKg4fsoxxi+H7717y6CT56a6EWxMTMCIr9g5zNGpLOd2Yox3RMeJXHBthPwpgUPx /0+1A7e4z5RNvCQ1PWi77KH1geSqCE3hvkDIWs+KLIK135/SEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNGOejXaoiSuMaemlvT0EkCZ8R+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWI1MDk0NDAtY2ZiNi0z MGRlLTk3ZTQtNGFiOWE2NDBlOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9nMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC890jaCJBgMoKOkp/12tSaTlte6zzUkVCZSXabdT7/+SwkJlo5GwW41 VvbLkKoGQhJADm6I+Anxq2P9MQix4TvD58aJ+Ug35+ucNFanhQhjfVH2lIqS6m51 RvhgWnKBQDz/ennwwibGyZT3z1fh4D8LgkDFauboKsEgJtmFXo1LbVs2oUIqak50 iwFtFyTMB3zen3OrrnIe36yOm++d1CjJB+PIlcyG3un3dOISyOo+lXoEH8EHvj/p 22mjgh8T6BVomr3bCqx/HmvEfb19MLFDkxbqPKzWvOXdT5qCmECb5OVvcfZTCnn3 k7LhVrgPu5sHebnwRXcvbimUkAKoGVQ= -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:30 2025 by rpki-client