$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1557c7ec-2966-3e13-833d-1f6cd5e24a9b.roa File: 1557c7ec-2966-3e13-833d-1f6cd5e24a9b.roa (raw, json) Hash identifier: AXf6j4AjEYsiduFBHhCNG3lBtnwesid3ij47tmBs4D0= Subject key identifier: 5A:79:10:88:FB:14:38:63:87:B4:B7:07:CC:53:8E:92:52:CD:B3:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C874D411AA2156B300400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1557c7ec-2966-3e13-833d-1f6cd5e24a9b.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 4761 IP address blocks: 23.193.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:87:4d:41:1a:a2:15:6b:30:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7d615522-1b90-4647-92de-61048e352cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:40:5e:be:ee:45:fa:0d:33:1b:c3:0e:11:1e: da:e1:3a:ec:3f:b8:d3:19:79:f5:52:b1:da:41:2f: e7:ce:f2:85:77:23:2a:d4:a6:da:a0:05:3f:b7:2c: 74:7f:6c:84:23:75:95:d0:ac:09:36:62:4d:7c:26: 8f:5c:00:bc:5d:7d:aa:e7:01:14:ed:74:f2:63:f0: 99:1f:ff:47:a7:15:3e:03:fa:de:46:1c:6a:34:2a: a9:3c:de:64:cd:a5:4b:4f:bb:c7:68:e4:39:31:b2: 73:37:cb:45:18:17:52:8f:95:72:94:6f:56:42:6e: ee:d4:03:db:cf:2c:2e:39:9b:48:e3:ed:18:bc:06: 1d:ec:8e:f6:d6:00:c5:2c:94:1f:7a:e2:cc:d8:08: 13:3c:7a:df:75:ac:12:44:88:d0:5a:f0:8d:44:b4: a5:88:b8:87:57:5a:83:f6:f0:4a:34:27:e9:42:e6: 7d:17:4d:bc:c5:35:d2:9e:50:08:c2:3b:e9:98:a2: 95:0e:ed:4e:88:22:27:ca:47:e4:01:db:3a:c3:fe: 6c:64:83:80:c6:74:02:01:1e:bc:5c:52:99:e9:bd: 4b:07:f3:1f:1b:76:93:23:c2:64:d5:9b:46:ea:95: 82:60:7c:52:7c:76:58:08:3b:2d:b3:7b:96:78:bc: c6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:79:10:88:FB:14:38:63:87:B4:B7:07:CC:53:8E:92:52:CD:B3:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1557c7ec-2966-3e13-833d-1f6cd5e24a9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a5:4b:7a:0f:9f:60:1a:08:85:2c:cc:73:a4:99:1c:e9:5f: c8:69:7f:28:30:f7:55:96:7b:3d:62:f6:76:b6:5e:9c:ec:99: a6:70:74:20:59:00:9d:ed:87:35:e2:61:51:58:85:6e:92:0f: 05:e1:9e:e7:31:cb:11:9a:b2:02:66:83:35:fa:9b:5a:70:d5: d6:1b:8e:cc:1b:27:3f:39:e6:f2:04:9d:1c:ec:f9:fb:6f:79: 70:e5:a7:6c:70:03:30:27:95:f1:ef:4f:8f:49:03:48:cd:dc: 43:ce:0f:52:ed:a9:5d:1f:d2:39:ed:97:8a:9a:f8:8d:01:a5: 9e:00:b7:74:a0:f1:51:12:32:9d:19:a6:c5:cd:39:a5:ec:20: 2d:f0:67:0c:69:8f:f3:c2:a1:4f:3e:87:ce:0f:d8:bb:1f:8c: e4:83:82:4d:80:54:33:9b:27:0f:74:52:5e:72:61:a2:03:6f: b8:61:b8:0a:e5:55:23:38:09:b1:1d:34:2b:41:05:47:ef:2c: ba:19:dd:65:cc:ef:eb:08:b1:8f:28:43:4d:69:85:4b:de:27: bb:10:4e:80:08:57:ae:05:87:13:ae:6f:f6:da:8a:20:03:73: 90:6a:57:52:0b:61:9b:63:21:f3:dd:c7:b4:d7:a5:eb:14:f6: 02:7e:6b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIdNQRqiFWswBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk N2Q2MTU1MjItMWI5MC00NjQ3LTkyZGUtNjEwNDhlMzUyY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90Bevu5F+g0zG8MOER7a4TrsP7jTGXn1UrHa QS/nzvKFdyMq1KbaoAU/tyx0f2yEI3WV0KwJNmJNfCaPXAC8XX2q5wEU7XTyY/CZ H/9HpxU+A/reRhxqNCqpPN5kzaVLT7vHaOQ5MbJzN8tFGBdSj5VylG9WQm7u1APb zywuOZtI4+0YvAYd7I721gDFLJQfeuLM2AgTPHrfdawSRIjQWvCNRLSliLiHV1qD 9vBKNCfpQuZ9F028xTXSnlAIwjvpmKKVDu1OiCInykfkAds6w/5sZIOAxnQCAR68 XFKZ6b1LB/MfG3aTI8Jk1ZtG6pWCYHxSfHZYCDsts3uWeLzGsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp5EIj7FDhjh7S3B8xTjpJSzbP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU1N2M3ZWMtMjk2Ni0z ZTEzLTgzM2QtMWY2Y2Q1ZTI0YTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8HMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFilS3oPn2AaCIUszHOkmRzpX8hpfygw91WWez1i9na2XpzsmaZwdCBZ AJ3thzXiYVFYhW6SDwXhnucxyxGasgJmgzX6m1pw1dYbjswbJz855vIEnRzs+ftv eXDlp2xwAzAnlfHvT49JA0jN3EPOD1LtqV0f0jntl4qa+I0BpZ4At3Sg8VESMp0Z psXNOaXsIC3wZwxpj/PCoU8+h84P2LsfjOSDgk2AVDObJw90Ul5yYaIDb7hhuArl VSM4CbEdNCtBBUfvLLoZ3WXM7+sIsY8oQ01phUveJ7sQToAIV64FhxOub/baiiAD c5BqV1ILYZtjIfPdx7TXpesU9gJ+a2w= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:19 2025 by rpki-client