$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa File: 1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa (raw, json) Hash identifier: UgAd/Kl0aYPa7zj69WHY4ha6lw8v8LbFlIXI5F+llnQ= Subject key identifier: BE:22:51:2D:A1:C2:8C:14:DA:05:78:55:CC:86:A3:79:5E:57:FB:73 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C970038B6F11581CF8720 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.206.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:97:00:38:b6:f1:15:81:cf:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=0c46e3c7-89d6-472a-a5c1-3b34162f7948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e5:56:d5:0b:c6:22:b0:ec:2c:4e:81:33:5b: 85:e4:d0:5f:a9:f6:75:d6:02:30:09:8c:6a:61:cd: bb:f2:e8:bf:7b:3d:f7:8c:7d:4d:23:ad:d1:0b:86: 77:14:04:f2:a5:b9:15:72:a9:9a:6f:c3:2c:d9:fc: c3:e7:a1:a4:9a:96:51:07:b2:2d:06:84:05:af:5d: 8c:41:40:ca:6c:92:72:82:19:bd:c4:36:3a:dd:43: 5e:26:65:56:de:a7:6e:bf:67:bc:b2:13:b2:4a:4c: aa:3e:37:d6:2e:da:da:53:f4:bb:c6:25:eb:2e:f5: 32:aa:74:00:da:6d:1d:91:ca:71:29:05:78:c1:92: 6c:00:8d:1e:04:04:1f:0c:de:f7:f3:57:0e:36:b4: 8d:a6:87:10:a5:14:46:14:26:ab:74:f5:87:5b:f4: 07:76:9f:1c:84:27:1e:ee:ff:82:2b:02:8b:88:75: 06:4b:7d:87:68:64:71:ea:fd:fb:6b:fb:cc:cc:53: c6:a8:03:74:88:10:76:43:f8:f2:59:ff:be:43:a3: f0:69:5a:4c:77:67:e2:27:cb:c8:38:46:e8:4a:fd: b9:18:21:5b:56:30:1c:94:17:95:f2:98:81:e9:19: 95:0d:82:ba:70:03:63:ff:c8:d8:3b:67:93:20:5d: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:22:51:2D:A1:C2:8C:14:DA:05:78:55:CC:86:A3:79:5E:57:FB:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a6b5a7d-2972-3c38-b449-1cf4dad5f87b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:18:5e:21:f2:5e:99:98:22:09:1e:8f:d1:eb:9e:70:66:86: 13:43:53:e8:44:d3:6a:21:3f:f7:4c:ba:70:22:bf:ac:95:d0: fe:9e:bc:34:7b:6d:c0:16:ce:f6:cf:b8:f5:32:62:bd:2e:cf: aa:ef:21:3d:a0:e9:6c:de:f6:d3:44:fb:b5:77:cb:83:69:da: e7:8e:49:dc:88:06:aa:21:01:0a:d0:6f:5c:cf:14:fc:8f:21: f0:2b:0a:b6:e7:40:13:6e:05:33:9c:93:3a:e4:de:db:c3:8e: de:f5:fb:11:2c:bb:0b:e2:76:ea:40:7c:da:41:23:91:bb:e8: de:ad:79:52:d2:f9:2b:15:34:a6:e9:f3:10:c3:b2:e6:94:74: 12:e4:e9:3a:d6:42:cc:5d:7c:b5:57:62:3e:d1:22:4a:76:93: f0:25:88:c5:4c:b7:2d:dd:4a:27:d0:cd:0b:4d:e9:75:f9:2e: f8:d2:a0:70:c6:b7:2e:56:c0:87:e6:92:0e:cb:ad:1b:a1:59: 42:33:34:ab:ac:eb:c9:fa:21:89:62:08:8a:2a:63:ee:39:d3: 32:1f:1a:27:09:a6:6c:15:69:6b:ea:7a:94:72:00:63:0c:c8: 0e:2c:79:82:de:cb:cd:df:53:3e:93:90:93:d0:7e:83:ef:a7: 79:1d:0b:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJcAOLbxFYHPhyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MGM0NmUzYzctODlkNi00NzJhLWE1YzEtM2IzNDE2MmY3OTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+VW1QvGIrDsLE6BM1uF5NBfqfZ11gIwCYxq Yc278ui/ez33jH1NI63RC4Z3FATypbkVcqmab8Ms2fzD56GkmpZRB7ItBoQFr12M QUDKbJJyghm9xDY63UNeJmVW3qduv2e8shOySkyqPjfWLtraU/S7xiXrLvUyqnQA 2m0dkcpxKQV4wZJsAI0eBAQfDN7381cONrSNpocQpRRGFCardPWHW/QHdp8chCce 7v+CKwKLiHUGS32HaGRx6v37a/vMzFPGqAN0iBB2Q/jyWf++Q6PwaVpMd2fiJ8vI OEboSv25GCFbVjAclBeV8piB6RmVDYK6cANj/8jYO2eTIF0/NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4iUS2hwowU2gV4VcyGo3leV/tzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWE2YjVhN2QtMjk3Mi0z YzM4LWI0NDktMWNmNGRhZDVmODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8YXiHyXpmYIgkej9HrnnBmhhNDU+hE02ohP/dMunAiv6yV0P6evDR7 bcAWzvbPuPUyYr0uz6rvIT2g6Wze9tNE+7V3y4Np2ueOSdyIBqohAQrQb1zPFPyP IfArCrbnQBNuBTOckzrk3tvDjt71+xEsuwvidupAfNpBI5G76N6teVLS+SsVNKbp 8xDDsuaUdBLk6TrWQsxdfLVXYj7RIkp2k/AliMVMty3dSifQzQtN6XX5LvjSoHDG ty5WwIfmkg7LrRuhWUIzNKus68n6IYliCIoqY+450zIfGicJpmwVaWvqepRyAGMM yA4seYLey83fUz6TkJPQfoPvp3kdC6Y= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:08 2025 by rpki-client