$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e98f558-c835-3c54-8ae1-bcac60d0473b.roa File: 2e98f558-c835-3c54-8ae1-bcac60d0473b.roa (raw, json) Hash identifier: yBf2oR4OAngOw7LEVW9ftQ7Ry9/tH4ExZLDiU8nigFQ= Subject key identifier: 35:73:AC:21:30:CE:4F:F6:84:BF:41:D7:E2:68:00:19:C8:A3:46:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8AF7170D027175B26720 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e98f558-c835-3c54-8ae1-bcac60d0473b.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.196.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:8a:f7:17:0d:02:71:75:b2:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=adfc3b2f-1ad2-4b37-85e5-1907e4561616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:69:d9:e3:da:95:f6:97:c4:b0:16:6d:d2: b1:a3:53:85:5a:75:52:dd:bc:7d:2f:52:0b:d2:1c: 4d:2b:17:f1:da:ae:a2:19:ad:b9:37:1d:fd:5c:f3: 59:33:fa:fe:69:01:36:17:8d:49:15:f5:c1:cf:a2: 7f:43:8a:a9:dc:4f:79:42:3e:57:3f:f7:4c:cf:32: ac:a8:75:7e:65:2c:c4:21:0d:4b:d1:5d:fb:a3:0e: cc:98:5e:c3:cf:c6:80:18:9e:c7:df:88:79:bf:a7: 86:a5:4b:c9:10:57:18:b3:b2:77:b4:13:fc:60:fa: dd:32:60:8f:d2:c5:03:ca:26:28:c2:29:ae:ac:35: 21:b5:08:5c:ac:3a:87:9d:7a:44:81:2d:5a:ff:d6: 32:48:e2:09:c3:c6:61:66:f4:fc:8d:f7:66:49:06: 50:70:45:41:0e:98:e6:27:9a:06:12:3c:10:66:59: 36:7d:88:ce:11:52:b9:b7:0b:44:62:a2:16:28:af: dc:26:6f:d0:d4:f7:db:7f:91:58:77:d7:bd:45:b9: 75:64:a5:28:15:09:f0:7c:c4:44:92:1a:94:43:00: 76:dd:a5:9b:38:f0:88:3d:65:7e:e3:95:3e:c7:42: cd:b3:22:f3:cb:b8:7c:71:7c:42:2b:e6:5d:8a:ab: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:73:AC:21:30:CE:4F:F6:84:BF:41:D7:E2:68:00:19:C8:A3:46:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e98f558-c835-3c54-8ae1-bcac60d0473b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:47:0d:41:00:bb:71:3b:96:a0:b1:c1:d9:85:b6:86:ee:aa: e0:82:27:5c:31:2f:7f:d8:b2:c1:3b:6b:20:f9:a3:39:8b:92: cb:8c:4f:e1:1a:65:8a:17:8b:19:f0:e8:80:b8:b4:44:84:b6: 65:cc:06:5e:e6:a3:eb:c0:b9:15:7d:64:97:57:b2:9a:94:2d: 5c:29:97:2e:bb:a6:46:2c:28:b7:fc:25:fc:e9:5a:9d:7e:d6: 35:07:2b:8a:bc:39:b8:47:f4:68:6f:94:a2:5f:66:90:9d:b7: 05:2a:a8:a0:aa:a8:a4:ef:87:70:3a:d0:b8:34:27:91:db:b2: 65:f8:f9:df:0f:76:c5:38:0f:b3:b4:b1:b5:0c:2c:a4:08:e3: 89:b7:31:37:04:8b:1a:f4:df:00:8e:dc:35:17:e2:25:d3:bf: ce:47:c4:15:f9:f5:4a:71:24:d8:4e:7a:8e:0c:94:3d:8d:36: 20:d3:17:5c:f9:94:ae:02:bd:31:3f:de:b4:ef:94:45:72:5c: 89:dd:b2:fd:bd:8e:ca:3a:45:9e:30:be:cb:3d:e0:93:cb:3c: 23:99:b5:27:ee:09:3a:18:96:6c:71:80:cc:69:a0:5d:7d:94: 51:0e:3b:fc:8d:91:e0:83:07:7d:2f:17:9d:a7:83:49:cb:74: 76:60:92:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIr3Fw0CcXWyZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YWRmYzNiMmYtMWFkMi00YjM3LTg1ZTUtMTkwN2U0NTYxNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTBp2ePalfaXxLAWbdKxo1OFWnVS3bx9L1IL 0hxNKxfx2q6iGa25Nx39XPNZM/r+aQE2F41JFfXBz6J/Q4qp3E95Qj5XP/dMzzKs qHV+ZSzEIQ1L0V37ow7MmF7Dz8aAGJ7H34h5v6eGpUvJEFcYs7J3tBP8YPrdMmCP 0sUDyiYowimurDUhtQhcrDqHnXpEgS1a/9YySOIJw8ZhZvT8jfdmSQZQcEVBDpjm J5oGEjwQZlk2fYjOEVK5twtEYqIWKK/cJm/Q1Pfbf5FYd9e9Rbl1ZKUoFQnwfMRE khqUQwB23aWbOPCIPWV+45U+x0LNsyLzy7h8cXxCK+ZdiqsRfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVzrCEwzk/2hL9B1+JoABnIo0bbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmU5OGY1NTgtYzgzNS0z YzU0LThhZTEtYmNhYzYwZDA0NzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRHDUEAu3E7lqCxwdmFtobuquCCJ1wxL3/YssE7ayD5ozmLksuMT+Ea ZYoXixnw6IC4tESEtmXMBl7mo+vAuRV9ZJdXspqULVwply67pkYsKLf8JfzpWp1+ 1jUHK4q8ObhH9GhvlKJfZpCdtwUqqKCqqKTvh3A60Lg0J5HbsmX4+d8PdsU4D7O0 sbUMLKQI44m3MTcEixr03wCO3DUX4iXTv85HxBX59UpxJNhOeo4MlD2NNiDTF1z5 lK4CvTE/3rTvlEVyXIndsv29jso6RZ4wvss94JPLPCOZtSfuCToYlmxxgMxpoF19 lFEOO/yNkeCDB30vF52ng0nLdHZgkoY= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:08 2025 by rpki-client