$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa File: 1f3780eb-6382-3c23-9938-070bd9af81c7.roa (raw, json) Hash identifier: tFA7GLLiESOkHEX6sTcfggKURm/hF+c4z6mrTcV6vTU= Subject key identifier: 51:0A:9D:CC:ED:64:8A:CC:FD:B2:78:4E:CB:A2:84:42:77:A2:9A:AA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8705B92FA902E14DFE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.193.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:87:05:b9:2f:a9:02:e1:4d:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=f0c41d0b-0e6c-4b96-b543-ad46bcf55b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e2:a9:6a:c3:1b:f3:3f:2a:fe:df:0f:32:96: cf:f4:cb:54:8a:a0:93:16:22:7b:e9:11:ca:ea:2e: 98:70:89:08:1b:e5:59:f4:eb:5c:0e:d0:d3:18:00: 09:01:82:0e:7c:05:28:33:04:e9:0c:07:d8:2a:16: df:93:fb:64:53:8a:7f:52:cd:ac:3a:94:de:a4:a4: a7:a6:74:16:43:f4:72:0c:0d:fb:d5:0c:83:96:f2: da:b9:c8:6d:69:33:44:9e:d7:78:af:92:db:96:97: 8a:08:78:b3:1f:bd:b7:0a:f8:fa:9e:78:36:85:42: b6:55:c7:7b:e3:91:dc:4d:82:1a:4d:41:f2:01:55: 2a:ce:62:08:c5:c7:a8:3b:da:ab:7c:70:d6:81:4f: cd:ce:4c:39:80:b4:df:b5:32:f7:b9:dc:17:64:73: c0:46:7e:a4:f5:df:59:85:ae:5f:be:32:f1:86:f1: 07:ed:5a:1b:ab:35:5f:cc:72:45:8f:77:c9:77:cc: 4f:62:0d:60:41:ef:38:49:dc:e8:25:a5:1a:7d:99: a2:12:6c:00:56:01:fc:6b:96:df:0b:c2:cd:5d:a0: 46:d4:68:d8:11:7f:ce:5b:3f:45:2e:bb:b7:82:5d: 20:48:18:e0:40:9e:bc:18:2d:00:ab:81:e1:29:e9: ab:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:9D:CC:ED:64:8A:CC:FD:B2:78:4E:CB:A2:84:42:77:A2:9A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:67:c7:a0:80:a1:7d:13:23:3d:fd:63:90:5c:34:a2:e6:04: c1:fd:d4:aa:fb:e3:1e:1e:24:68:5d:4b:fb:82:24:3c:cc:42: 38:6b:18:97:e5:fb:be:46:c1:2a:9d:2f:9c:87:d4:5b:ae:c6: be:d9:e5:52:13:e4:91:2c:39:9a:b0:91:7d:ed:89:8b:98:9f: 1a:16:39:8c:74:b2:20:0e:fb:01:83:78:c9:7d:33:09:12:cc: 18:f6:ed:27:97:57:05:df:37:97:93:a4:ac:8c:0f:b6:df:b6: 5c:b4:f8:7c:15:16:22:67:c5:1e:9b:29:22:35:dd:57:07:84: 1b:9f:6a:fb:df:9d:26:29:33:f1:3d:c0:21:8d:ab:cf:43:3d: 81:a3:6b:c3:66:47:0f:d8:c2:25:2c:71:34:f8:99:d6:6f:4b: d9:c5:13:f2:7f:5c:2a:9b:3c:cd:1d:f2:a2:44:76:72:50:e1: ae:cc:da:29:ad:9d:67:59:ef:d9:79:61:e0:72:a9:35:00:52: f9:db:6b:57:0e:9d:40:58:2a:3b:c0:ce:57:9b:c7:45:17:59: 85:55:00:e0:d8:55:c5:c1:33:5a:d4:4b:8b:e1:03:bb:88:48: 88:ec:d8:19:8a:3f:5e:15:c0:f9:b1:d1:45:c0:ec:83:ef:95: c4:a3:b2:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIcFuS+pAuFN/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjBjNDFkMGItMGU2Yy00Yjk2LWI1NDMtYWQ0NmJjZjU1YjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+KpasMb8z8q/t8PMpbP9MtUiqCTFiJ76RHK 6i6YcIkIG+VZ9OtcDtDTGAAJAYIOfAUoMwTpDAfYKhbfk/tkU4p/Us2sOpTepKSn pnQWQ/RyDA371QyDlvLauchtaTNEntd4r5LblpeKCHizH723Cvj6nng2hUK2Vcd7 45HcTYIaTUHyAVUqzmIIxceoO9qrfHDWgU/Nzkw5gLTftTL3udwXZHPARn6k9d9Z ha5fvjLxhvEH7VobqzVfzHJFj3fJd8xPYg1gQe84SdzoJaUafZmiEmwAVgH8a5bf C8LNXaBG1GjYEX/OWz9FLru3gl0gSBjgQJ68GC0Aq4HhKemrcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEKncztZIrM/bJ4TsuihEJ3opqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWYzNzgwZWItNjM4Mi0z YzIzLTk5MzgtMDcwYmQ5YWY4MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8HEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJnx6CAoX0TIz39Y5BcNKLmBMH91Kr74x4eJGhdS/uCJDzMQjhrGJfl +75GwSqdL5yH1Fuuxr7Z5VIT5JEsOZqwkX3tiYuYnxoWOYx0siAO+wGDeMl9MwkS zBj27SeXVwXfN5eTpKyMD7bftly0+HwVFiJnxR6bKSI13VcHhBufavvfnSYpM/E9 wCGNq89DPYGja8NmRw/YwiUscTT4mdZvS9nFE/J/XCqbPM0d8qJEdnJQ4a7M2imt nWdZ79l5YeByqTUAUvnba1cOnUBYKjvAzlebx0UXWYVVAODYVcXBM1rUS4vhA7uI SIjs2BmKP14VwPmx0UXA7IPvlcSjshQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:08 2025 by rpki-client