$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32734a89-1d28-3b8f-b405-c7e1883c6881.roa File: 32734a89-1d28-3b8f-b405-c7e1883c6881.roa (raw, json) Hash identifier: CBIPOpIEkpOumQGluo6ShWDRBEDstkK0dUMtPXiGWw8= Subject key identifier: B1:62:71:0C:CA:CC:35:C5:33:C5:34:0C:A4:DB:11:87:3C:2C:A6:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C6FAF3CE72E2CAD450500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32734a89-1d28-3b8f-b405-c7e1883c6881.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.194.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6f:af:3c:e7:2e:2c:ad:45:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=bbd9a2ca-47da-40d8-a7f0-65897d4b8b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:05:82:9a:82:b7:18:6e:b9:b8:bb:e1:26: 19:fc:b6:b9:3d:38:81:28:21:bf:82:a7:80:b9:24: 8f:8e:9c:e8:7f:14:f9:95:f8:7a:61:22:8f:0f:74: ac:a8:16:da:08:40:0b:af:0a:f1:d9:0a:28:10:af: c8:ad:f5:d0:1e:3f:42:0c:73:b0:4f:ca:c1:b4:a6: 65:57:63:7c:19:cf:f4:e9:b9:13:23:b0:89:58:ff: cc:81:6f:98:96:46:38:70:eb:6b:1e:47:3e:26:ce: e1:e2:9d:a9:56:6a:af:ae:43:26:73:60:cd:7f:c5: bf:17:24:fa:22:43:b2:13:d5:5c:51:78:85:9a:b9: 9d:99:9f:4b:4d:63:70:79:86:01:5b:c4:57:21:21: 3b:51:25:fd:1d:b3:e7:fb:d0:42:c9:16:54:4e:5d: 8f:b0:43:e6:d4:a1:f2:93:b0:ac:8e:ef:60:2d:74: 84:0b:37:ed:f1:de:7c:6c:22:db:20:24:ec:d1:78: 7b:26:b7:5c:86:ad:73:dc:9b:41:51:b8:4e:93:bf: da:d9:9a:61:2a:47:23:0a:3e:95:58:29:1b:16:2e: 33:15:f9:d1:0c:c5:36:2b:1a:3c:8a:c4:23:33:f7: 91:2d:73:0b:ab:d1:8d:84:6a:92:42:dc:68:42:37: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:62:71:0C:CA:CC:35:C5:33:C5:34:0C:A4:DB:11:87:3C:2C:A6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32734a89-1d28-3b8f-b405-c7e1883c6881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3a:e3:ac:99:a2:a6:45:12:f6:8e:7a:ef:33:74:58:e3:bb: 9d:73:2a:9b:65:8a:c0:03:d1:2c:0e:0b:c4:9e:55:62:3f:a1: 2c:64:4f:28:11:0f:77:27:ed:f5:30:f5:57:38:b6:46:5c:e8: cb:e5:04:a7:79:23:1d:e1:e9:af:0a:36:0d:df:12:29:cc:63: b7:8b:22:1e:97:f6:8f:32:1c:ca:37:56:2d:4a:06:43:f8:28: 53:ef:ad:6e:08:ef:9c:b8:a0:3a:0f:8e:51:ba:09:43:16:59: 8c:a6:49:44:ba:be:cc:7e:8e:51:f3:ae:d6:df:97:9c:be:68: 18:0c:60:da:82:2c:1f:f9:28:2b:7a:8c:6e:63:f7:24:5c:88: a8:19:b6:bd:67:64:4f:98:94:29:7b:06:02:6a:d4:ee:9a:c1: ee:e6:94:bc:89:3f:b5:c7:0f:48:cf:34:af:d5:8a:13:88:42: ea:0e:69:a2:ba:9b:66:bf:1a:93:07:9a:4d:5d:74:1a:54:e3: 96:f0:9b:5a:e9:14:39:9f:be:d0:fc:81:ee:19:7f:42:ee:0d: 21:b5:c0:c7:c3:a5:bb:ee:51:6e:40:72:f6:86:d0:fc:d2:37: 36:77:81:de:f2:5f:df:2a:e1:83:7e:99:cf:2e:31:cf:e7:71: 9b:52:8d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTG+vPOcuLK1FBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YmJkOWEyY2EtNDdkYS00MGQ4LWE3ZjAtNjU4OTdkNGI4YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCAFgpqCtxhuubi74SYZ/La5PTiBKCG/gqeA uSSPjpzofxT5lfh6YSKPD3SsqBbaCEALrwrx2QooEK/IrfXQHj9CDHOwT8rBtKZl V2N8Gc/06bkTI7CJWP/MgW+YlkY4cOtrHkc+Js7h4p2pVmqvrkMmc2DNf8W/FyT6 IkOyE9VcUXiFmrmdmZ9LTWNweYYBW8RXISE7USX9HbPn+9BCyRZUTl2PsEPm1KHy k7Csju9gLXSECzft8d58bCLbICTs0Xh7Jrdchq1z3JtBUbhOk7/a2ZphKkcjCj6V WCkbFi4zFfnRDMU2Kxo8isQjM/eRLXMLq9GNhGqSQtxoQjfvfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFicQzKzDXFM8U0DKTbEYc8LKZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzI3MzRhODktMWQyOC0z YjhmLWI0MDUtYzdlMTg4M2M2ODgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8JoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJM646yZoqZFEvaOeu8zdFjju51zKptlisAD0SwOC8SeVWI/oSxkTygR D3cn7fUw9Vc4tkZc6MvlBKd5Ix3h6a8KNg3fEinMY7eLIh6X9o8yHMo3Vi1KBkP4 KFPvrW4I75y4oDoPjlG6CUMWWYymSUS6vsx+jlHzrtbfl5y+aBgMYNqCLB/5KCt6 jG5j9yRciKgZtr1nZE+YlCl7BgJq1O6awe7mlLyJP7XHD0jPNK/VihOIQuoOaaK6 m2a/GpMHmk1ddBpU45bwm1rpFDmfvtD8ge4Zf0LuDSG1wMfDpbvuUW5AcvaG0PzS NzZ3gd7yX98q4YN+mc8uMc/ncZtSjWg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:40 2025 by rpki-client