$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bc94954-9277-3806-abad-a2f1067225ee.roa File: 1bc94954-9277-3806-abad-a2f1067225ee.roa (raw, json) Hash identifier: IViG5h7zOohACeD2Ydo+dn5t3aGRqABrYHnpQwocFvs= Subject key identifier: 50:CB:9D:08:68:FD:A6:A8:6B:01:BD:CE:50:83:50:1C:DC:AD:18:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C92838DE65EF6E9991100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bc94954-9277-3806-abad-a2f1067225ee.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.204.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:92:83:8d:e6:5e:f6:e9:99:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=2eeb4d63-7528-4612-bf94-39045c7ab3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:d9:26:40:75:c3:fe:14:db:6e:de:d8:4f: fc:3d:12:f1:f3:7e:4a:fd:08:a7:97:94:af:df:fe: a7:66:21:56:15:8d:1c:f9:00:16:1c:2a:e2:bc:17: 3a:e6:7b:b5:09:27:cd:fc:48:d9:78:51:d6:fd:0b: 2e:e3:8a:b7:0c:a2:fb:26:f8:b0:7d:78:09:5b:ff: 18:d1:53:cf:42:8e:8b:a9:13:10:a5:7e:96:da:77: dd:9b:7e:9c:a2:ea:15:2f:5c:d5:15:7a:6f:5e:37: 2c:64:19:53:9c:5e:79:88:0d:31:a9:ab:d1:0e:ed: cb:7f:9e:64:99:f4:f8:d3:72:d7:b6:1d:eb:09:46: d4:74:2a:2d:3c:c8:c7:97:d5:b8:b1:52:59:c0:3f: 5a:6d:e9:9f:a2:03:df:54:56:c7:d0:38:4a:9e:77: 12:ac:26:f5:ed:21:7f:0f:09:ba:00:68:91:bf:d7: df:10:3f:21:2c:d1:78:b4:e8:11:ed:f1:66:83:95: 74:05:df:35:fd:7e:a3:67:c5:1f:24:93:86:47:03: 19:f6:95:00:0a:37:2d:bc:dd:02:9a:f8:b8:ff:15: 13:82:7b:be:68:53:3c:07:94:f8:d9:00:d8:8f:42: 2d:e8:2b:4f:af:8f:cb:e8:4c:de:78:1a:f2:7d:a0: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CB:9D:08:68:FD:A6:A8:6B:01:BD:CE:50:83:50:1C:DC:AD:18:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1bc94954-9277-3806-abad-a2f1067225ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:74:03:0b:48:b2:06:37:6b:a3:55:1d:68:eb:0f:85:f3:8f: 9a:3e:fa:f0:c2:78:bc:35:11:68:73:28:63:36:06:41:98:75: 70:a4:2c:28:57:83:a5:26:a7:75:af:80:21:11:12:db:b9:cc: c3:83:67:21:70:92:3e:5c:a5:17:e2:d3:19:36:4d:01:15:27: 17:6f:ec:dd:d2:74:ee:3b:8d:8d:ed:53:d0:6b:d9:5c:0b:27: 76:2b:f4:cd:b7:ab:50:b4:4e:48:16:43:82:50:ba:6b:c9:54: 9a:09:d2:99:51:6d:12:0e:0f:5f:31:5d:ca:cd:36:3a:02:07: 49:de:6d:d6:53:c1:60:6e:d8:f8:53:0c:ca:22:17:44:7a:ac: 5b:e4:ad:5f:82:d9:a1:9e:a7:70:34:3e:2b:ed:17:a0:8b:a1: 87:fe:7d:15:ad:f6:89:84:9f:fa:88:0f:1a:62:54:73:f6:6c: 29:10:23:5c:00:96:07:87:47:e7:79:46:82:1b:84:9d:a3:99: 55:f7:62:b2:e4:72:61:9c:4d:f8:63:9e:29:fb:b5:dc:5a:f7: 49:90:9d:35:ba:28:bf:04:0a:84:30:ec:57:eb:b6:df:7e:13: fa:3b:7c:1a:61:9c:6a:30:fe:14:6d:09:83:e0:a1:8f:03:2c: 9a:7b:85:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJKDjeZe9umZEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MmVlYjRkNjMtNzUyOC00NjEyLWJmOTQtMzkwNDVjN2FiM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/vZJkB1w/4U227e2E/8PRLx835K/Qinl5Sv 3/6nZiFWFY0c+QAWHCrivBc65nu1CSfN/EjZeFHW/Qsu44q3DKL7JviwfXgJW/8Y 0VPPQo6LqRMQpX6W2nfdm36couoVL1zVFXpvXjcsZBlTnF55iA0xqavRDu3Lf55k mfT403LXth3rCUbUdCotPMjHl9W4sVJZwD9abemfogPfVFbH0DhKnncSrCb17SF/ Dwm6AGiRv9ffED8hLNF4tOgR7fFmg5V0Bd81/X6jZ8UfJJOGRwMZ9pUACjctvN0C mvi4/xUTgnu+aFM8B5T42QDYj0It6CtPr4/L6EzeeBryfaCigwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDLnQho/aaoawG9zlCDUBzcrRh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWJjOTQ5NTQtOTI3Ny0z ODA2LWFiYWQtYTJmMTA2NzIyNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF0AwtIsgY3a6NVHWjrD4Xzj5o++vDCeLw1EWhzKGM2BkGYdXCkLChX g6Ump3WvgCEREtu5zMODZyFwkj5cpRfi0xk2TQEVJxdv7N3SdO47jY3tU9Br2VwL J3Yr9M23q1C0TkgWQ4JQumvJVJoJ0plRbRIOD18xXcrNNjoCB0nebdZTwWBu2PhT DMoiF0R6rFvkrV+C2aGep3A0PivtF6CLoYf+fRWt9omEn/qIDxpiVHP2bCkQI1wA lgeHR+d5RoIbhJ2jmVX3YrLkcmGcTfhjnin7tdxa90mQnTW6KL8ECoQw7Ffrtt9+ E/o7fBphnGow/hRtCYPgoY8DLJp7hbQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:09 2025 by rpki-client