$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d9993a8-12ff-3c15-8db2-6ba691b1059b.roa File: 2d9993a8-12ff-3c15-8db2-6ba691b1059b.roa (raw, json) Hash identifier: zwkDXc8ccoo7sLTda079PdD54CGmohN9ALDIEt8/V6Y= Subject key identifier: FE:08:B3:15:93:FF:8C:F9:4B:01:DF:21:CC:70:18:92:FF:9D:79:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9ED0109C3F9DC1EA3380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d9993a8-12ff-3c15-8db2-6ba691b1059b.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.205.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9e:d0:10:9c:3f:9d:c1:ea:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=2194bcfd-94a3-45b1-9838-652302248f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:01:69:fb:ff:40:99:16:91:2c:37:1b:fa:29: 81:de:c6:5a:d4:23:04:31:71:04:94:63:b0:60:ff: 8e:f0:5b:90:88:c1:79:d4:46:03:95:95:da:b9:3b: cd:cb:4d:f0:71:ea:35:9e:32:ae:9e:c8:10:8a:1e: 8e:ea:8a:a1:a6:4d:b8:ec:3b:7f:3e:34:41:68:d3: 83:2c:1f:b5:67:a7:c0:4f:a9:dd:91:57:c8:22:6a: 72:f0:fe:b8:52:54:17:2f:43:12:66:e5:00:b6:c6: 5a:2d:6a:cb:07:61:fe:c6:cd:15:ba:51:2d:bd:25: dc:f7:c0:a7:1b:3d:d0:81:9c:d1:4e:7b:65:75:37: b8:57:2c:a2:bd:a6:3c:31:ef:86:49:3e:63:64:eb: 15:aa:ce:08:b2:d9:9e:c9:1f:aa:31:56:73:32:ee: 9f:27:d5:ec:f3:f6:6f:68:17:c5:2a:77:80:35:e2: 77:6a:0a:3a:4c:b7:47:25:5e:16:7f:71:36:3e:ad: e3:20:5e:54:38:12:78:9d:02:da:8b:f4:ff:9d:ef: a6:46:f6:3c:42:71:a2:98:70:dd:09:0e:e8:47:82: e9:60:53:8a:60:a8:82:21:48:b6:9c:d3:7e:97:42: e7:64:f6:33:2f:a6:18:f0:37:6c:16:a1:87:71:d4: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:08:B3:15:93:FF:8C:F9:4B:01:DF:21:CC:70:18:92:FF:9D:79:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d9993a8-12ff-3c15-8db2-6ba691b1059b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c1:2e:e2:34:9b:3d:ca:14:7a:23:dd:3d:f8:93:e6:f5:ad: d9:ce:25:87:56:8b:03:79:ff:ab:f6:3f:92:9f:1e:b9:18:ac: b3:b2:ea:4e:78:73:13:33:5f:c4:9a:49:81:ce:c8:34:b7:09: 04:a4:5a:5b:7a:ea:8b:33:90:ad:05:9e:24:64:9e:55:d4:65: bd:86:a9:7a:4e:6f:5c:16:cc:c7:cb:00:c4:9d:52:8d:1c:ef: 87:8b:dc:99:90:0b:85:87:21:ab:e1:3c:78:6b:f1:02:19:90: b7:e0:24:67:bb:ab:9a:cc:88:2f:02:de:bc:a5:e6:83:74:fc: 39:31:b8:08:37:87:99:14:b4:73:a8:78:96:35:b2:77:70:ce: 87:0a:ba:fc:42:2f:54:34:b2:b3:90:dd:88:11:40:9a:02:ea: 5c:cc:38:3b:86:cc:e3:ff:2d:e9:07:8e:69:10:ef:2c:97:38: 13:ba:9a:25:2d:f9:db:3b:03:92:af:61:a7:14:dc:9e:92:12: bd:2c:58:6e:7a:79:ea:22:7f:c8:d9:61:d9:66:ab:80:82:03: be:1f:65:da:6d:02:9b:92:71:6a:9d:3b:f9:d2:0f:93:eb:5f: 63:d8:79:64:f2:52:f1:9d:cf:ed:b6:01:7f:43:7f:49:73:ea: 0c:d9:5a:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJ7QEJw/ncHqM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MjE5NGJjZmQtOTRhMy00NWIxLTk4MzgtNjUyMzAyMjQ4ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigFp+/9AmRaRLDcb+imB3sZa1CMEMXEElGOw YP+O8FuQiMF51EYDlZXauTvNy03wceo1njKunsgQih6O6oqhpk247Dt/PjRBaNOD LB+1Z6fAT6ndkVfIImpy8P64UlQXL0MSZuUAtsZaLWrLB2H+xs0VulEtvSXc98Cn Gz3QgZzRTntldTe4VyyivaY8Me+GST5jZOsVqs4IstmeyR+qMVZzMu6fJ9Xs8/Zv aBfFKneANeJ3ago6TLdHJV4Wf3E2Pq3jIF5UOBJ4nQLai/T/ne+mRvY8QnGimHDd CQ7oR4LpYFOKYKiCIUi2nNN+l0LnZPYzL6YY8DdsFqGHcdR5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4IsxWT/4z5SwHfIcxwGJL/nXnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmQ5OTkzYTgtMTJmZi0z YzE1LThkYjItNmJhNjkxYjEwNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF80sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/BLuI0mz3KFHoj3T34k+b1rdnOJYdWiwN5/6v2P5KfHrkYrLOy6k54 cxMzX8SaSYHOyDS3CQSkWlt66oszkK0FniRknlXUZb2GqXpOb1wWzMfLAMSdUo0c 74eL3JmQC4WHIavhPHhr8QIZkLfgJGe7q5rMiC8C3ryl5oN0/DkxuAg3h5kUtHOo eJY1sndwzocKuvxCL1Q0srOQ3YgRQJoC6lzMODuGzOP/LekHjmkQ7yyXOBO6miUt +ds7A5KvYacU3J6SEr0sWG56eeoif8jZYdlmq4CCA74fZdptApuScWqdO/nSD5Pr X2PYeWTyUvGdz+22AX9Df0lz6gzZWn8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:07:56 2025 by rpki-client