$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b1e2880-b744-3b1a-9d15-b27815c92830.roa File: 5b1e2880-b744-3b1a-9d15-b27815c92830.roa (raw, json) Hash identifier: qumI5ta/y8wGf+GiOQyK22QlkXOLi3NTJVtnTYDnUgM= Subject key identifier: 44:CD:C5:FB:B5:0B:88:79:EF:AC:49:47:53:0B:2A:64:F9:19:4E:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9DA66E43049A7D06C100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b1e2880-b744-3b1a-9d15-b27815c92830.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.204.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9d:a6:6e:43:04:9a:7d:06:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=376b8b73-77cd-482c-a97d-2d1a0e765643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:a7:c6:43:8f:58:ac:1f:01:b1:45:c2:d0: 16:dd:83:40:f1:83:b5:c0:c4:8c:67:49:9e:38:94: ee:56:53:be:3e:ba:9e:89:dc:53:c0:52:ef:df:61: c3:0d:bb:22:4e:3d:3f:d8:00:9c:78:d1:14:0a:32: 8b:24:f6:62:7b:59:d5:89:03:0b:81:42:6e:e8:20: 28:fd:35:f4:68:50:50:bf:b3:35:3a:71:7b:17:5c: 66:d7:0e:7b:10:f1:ce:5f:38:89:f1:16:02:03:1d: c3:a1:bf:4e:eb:1e:63:bc:73:55:89:3c:07:42:49: 14:2a:c7:85:1d:7b:07:5e:bc:3a:fe:91:34:a7:5d: 43:4c:5c:d8:f0:52:d7:4c:da:3b:97:eb:b5:e0:5c: 74:e2:b8:00:ce:cf:3c:7f:32:8a:30:13:6c:d0:f6: d4:68:56:9e:06:c3:e1:15:0d:ae:16:d5:98:e0:cf: 6a:34:4f:e5:4e:c3:52:3e:4f:48:13:95:2b:1a:bf: ae:3f:37:62:de:5d:98:8e:dc:3f:d7:66:0d:f5:7d: 3a:02:d0:c9:a5:b8:25:a2:85:a3:5d:64:c3:30:97: 6c:aa:51:57:f5:98:16:d5:42:9c:78:72:21:04:39: 5d:c7:6b:ed:43:ae:8a:3a:f1:ee:eb:d6:08:9c:6f: 38:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CD:C5:FB:B5:0B:88:79:EF:AC:49:47:53:0B:2A:64:F9:19:4E:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b1e2880-b744-3b1a-9d15-b27815c92830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2d:69:aa:54:c4:9e:a3:52:08:61:e9:0f:ae:96:cd:ea:e1: d7:35:33:43:54:08:1b:85:d0:83:54:91:96:4f:42:07:24:7d: 7f:8d:e2:af:60:a3:d8:32:aa:0f:90:55:f2:67:db:51:f7:3b: 96:cf:82:29:9f:3a:95:d0:59:25:7c:4d:15:27:87:fe:e4:1b: bd:80:93:d9:6d:b6:84:68:e4:27:5d:b9:0e:cd:35:27:66:0f: 08:f9:f9:9f:02:28:f5:62:ef:dc:24:fb:18:e8:73:a3:d3:b0: ad:44:35:b3:5c:df:37:f0:8e:03:d0:8e:1f:47:ca:01:e2:9a: aa:76:a7:9e:ca:57:aa:2e:87:57:60:07:4b:9f:92:14:bf:9e: 68:7a:89:09:b6:2b:0f:77:07:0d:af:09:b9:53:ef:fa:69:f6: 0b:91:15:6f:be:b4:f0:2f:58:8b:d3:0c:7b:4e:78:4d:8f:af: fe:cf:56:2c:12:38:c0:84:84:44:0e:7c:49:ee:cc:98:fd:29: 28:6f:73:cc:a4:c6:9e:88:67:44:f6:4a:e2:7e:70:41:6b:80: fe:40:6e:e3:b7:19:f7:92:56:3a:3c:07:db:7b:ad:f2:5a:b6: 86:9d:3a:ba:f2:43:9c:d9:fe:83:7e:ee:5f:ea:bf:47:7d:57: 84:91:31:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJ2mbkMEmn0GwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Mzc2YjhiNzMtNzdjZC00ODJjLWE5N2QtMmQxYTBlNzY1NjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6KnxkOPWKwfAbFFwtAW3YNA8YO1wMSMZ0me OJTuVlO+PrqeidxTwFLv32HDDbsiTj0/2ACceNEUCjKLJPZie1nViQMLgUJu6CAo /TX0aFBQv7M1OnF7F1xm1w57EPHOXziJ8RYCAx3Dob9O6x5jvHNViTwHQkkUKseF HXsHXrw6/pE0p11DTFzY8FLXTNo7l+u14Fx04rgAzs88fzKKMBNs0PbUaFaeBsPh FQ2uFtWY4M9qNE/lTsNSPk9IE5UrGr+uPzdi3l2Yjtw/12YN9X06AtDJpbglooWj XWTDMJdsqlFX9ZgW1UKceHIhBDldx2vtQ66KOvHu69YInG84FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETNxfu1C4h576xJR1MLKmT5GU6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWIxZTI4ODAtYjc0NC0z YjFhLTlkMTUtYjI3ODE1YzkyODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAActaapUxJ6jUghh6Q+uls3q4dc1M0NUCBuF0INUkZZPQgckfX+N4q9g o9gyqg+QVfJn21H3O5bPgimfOpXQWSV8TRUnh/7kG72Ak9lttoRo5CdduQ7NNSdm Dwj5+Z8CKPVi79wk+xjoc6PTsK1ENbNc3zfwjgPQjh9HygHimqp2p57KV6ouh1dg B0ufkhS/nmh6iQm2Kw93Bw2vCblT7/pp9guRFW++tPAvWIvTDHtOeE2Pr/7PViwS OMCEhEQOfEnuzJj9KShvc8ykxp6IZ0T2SuJ+cEFrgP5AbuO3GfeSVjo8B9t7rfJa toadOrryQ5zZ/oN+7l/qv0d9V4SRMeU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:13 2025 by rpki-client