$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d11f95-5e35-3f04-ad9d-4dfe754d5af9.roa File: 20d11f95-5e35-3f04-ad9d-4dfe754d5af9.roa (raw, json) Hash identifier: F+9rulNCJcBTQf0TKgQRJpv14Od7u+CDmal5WJFpGkA= Subject key identifier: 9A:2B:72:00:BA:93:11:07:4E:78:DF:04:1B:D9:1F:AA:3A:2E:F4:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20E5C247B4CAEF8463400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d11f95-5e35-3f04-ad9d-4dfe754d5af9.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.203.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:0e:5c:24:7b:4c:ae:f8:46:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=53c02553-74e9-4c86-af1c-c31f2309e560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:99:63:03:64:56:c9:6f:a3:d6:b5:38:f5: 8d:9f:ed:4f:f7:4a:a9:84:f7:12:db:95:06:27:56: 31:16:3d:f0:39:44:ca:f0:ed:c0:7f:a3:c4:11:e7: 1a:b4:51:42:12:4c:6b:03:fc:bd:a0:9c:45:83:86: 3a:06:53:fb:77:4c:b8:ad:ce:19:d1:aa:d3:18:00: e0:5a:e6:d8:98:35:bf:4d:ee:dd:e3:1d:8d:a8:f5: 5c:69:17:53:46:92:f9:01:49:c6:17:99:9b:e5:ab: 19:98:9d:34:2d:29:a8:fd:4a:6e:46:e6:1b:b0:be: d8:50:dc:ae:19:99:a8:1b:ae:2c:f3:d4:3e:4b:de: 83:7c:c5:16:a7:c5:86:94:44:5e:84:94:89:cc:8a: be:2c:04:82:e1:31:ea:3e:2c:fd:17:65:29:7a:c7: ef:e7:b8:7d:9d:56:05:84:98:62:5c:d6:82:d5:6f: 4f:5b:22:eb:e1:7a:92:4a:47:16:49:f8:d8:a1:94: 7b:5a:04:78:82:50:55:4c:86:cc:58:79:94:f3:d4: 70:09:33:0c:e0:25:11:48:a4:86:51:1a:3f:68:a7: a0:c1:6f:22:31:7b:3e:12:3d:80:82:b6:ab:da:ed: c7:2d:c1:33:d3:d3:64:4c:37:1b:0e:47:c5:b8:3e: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2B:72:00:BA:93:11:07:4E:78:DF:04:1B:D9:1F:AA:3A:2E:F4:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20d11f95-5e35-3f04-ad9d-4dfe754d5af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:bd:57:cd:61:40:74:01:92:3c:f1:6a:cc:9a:3c:cb:c3:89: 53:05:37:19:12:59:2f:07:ba:b5:91:b1:a1:c1:fb:08:6f:be: 20:f7:17:3a:af:57:da:22:f8:8b:0c:02:b3:16:00:21:53:25: 58:89:89:90:c6:6d:31:69:6a:a5:14:b4:15:3b:cf:6a:0e:f8: 91:ef:1a:b6:7b:7b:61:d4:00:af:38:b9:00:a5:d5:e0:14:70: be:03:7c:40:08:59:41:67:91:f9:b3:db:29:0d:23:ca:74:83: 6c:b7:20:6f:d9:50:c1:8d:81:7a:6f:12:9a:73:c8:6a:ca:5e: 89:63:d6:cf:ff:c5:54:e2:f2:1c:d4:77:97:d8:c5:02:ed:8c: 55:00:2a:c2:d1:c2:ed:73:b8:34:16:16:50:57:09:e3:27:47: 7c:a2:43:07:d1:9c:98:f6:8e:83:e3:44:ba:a6:6d:d7:99:a4: 50:65:4e:a3:ae:2a:46:ad:36:98:65:1a:7c:55:cb:81:26:2a: 42:7a:bb:e1:20:6f:a1:51:8d:79:e9:8f:39:61:3b:e6:d6:48: 58:bc:6c:51:ed:8f:ec:fa:95:24:1d:2e:12:11:e7:8b:a3:ad: 8a:18:45:6d:e6:15:23:97:fa:bd:60:db:6c:54:6c:a3:4d:4f: 5f:ab:7b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4g5cJHtMrvhGNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NTNjMDI1NTMtNzRlOS00Yzg2LWFmMWMtYzMxZjIzMDllNTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcyZYwNkVslvo9a1OPWNn+1P90qphPcS25UG J1YxFj3wOUTK8O3Af6PEEecatFFCEkxrA/y9oJxFg4Y6BlP7d0y4rc4Z0arTGADg WubYmDW/Te7d4x2NqPVcaRdTRpL5AUnGF5mb5asZmJ00LSmo/UpuRuYbsL7YUNyu GZmoG64s89Q+S96DfMUWp8WGlERehJSJzIq+LASC4THqPiz9F2Upesfv57h9nVYF hJhiXNaC1W9PWyLr4XqSSkcWSfjYoZR7WgR4glBVTIbMWHmU89RwCTMM4CURSKSG URo/aKegwW8iMXs+Ej2Agrar2u3HLcEz09NkTDcbDkfFuD4XWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJorcgC6kxEHTnjfBBvZH6o6LvTWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBkMTFmOTUtNWUzNS0z ZjA0LWFkOWQtNGRmZTc1NGQ1YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8uGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC9V81hQHQBkjzxasyaPMvDiVMFNxkSWS8HurWRsaHB+whvviD3Fzqv V9oi+IsMArMWACFTJViJiZDGbTFpaqUUtBU7z2oO+JHvGrZ7e2HUAK84uQCl1eAU cL4DfEAIWUFnkfmz2ykNI8p0g2y3IG/ZUMGNgXpvEppzyGrKXolj1s//xVTi8hzU d5fYxQLtjFUAKsLRwu1zuDQWFlBXCeMnR3yiQwfRnJj2joPjRLqmbdeZpFBlTqOu KkatNphlGnxVy4EmKkJ6u+Egb6FRjXnpjzlhO+bWSFi8bFHtj+z6lSQdLhIR54uj rYoYRW3mFSOX+r1g22xUbKNNT1+re5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:53 2025 by rpki-client