$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa File: 5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa (raw, json) Hash identifier: rP+2/ph2Zd/P2iqjGNdjZ1FLnhOsS6v512vhwK7dGe4= Subject key identifier: 30:5C:7A:E7:6F:50:08:01:64:6E:89:40:2A:30:CB:9F:90:E0:86:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C748D82C2F665169AA280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.196.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:74:8d:82:c2:f6:65:16:9a:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c1f13935-c96f-41de-8abf-be3500a9c1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:40:97:08:cd:36:8a:7f:19:5e:8d:b0:53:37: f6:91:6b:43:3d:fc:4b:99:bb:cd:9e:9d:02:59:74: 70:0b:e7:1e:eb:86:c0:63:8d:01:dc:df:3b:8c:7f: be:8d:50:0c:98:85:52:4c:d1:60:00:3d:5e:00:08: 95:a5:86:32:00:ed:bb:68:74:cb:b7:a3:15:5e:2c: 19:32:11:a3:a9:14:eb:5d:9e:67:e2:f1:ad:79:0b: 26:37:1d:05:ef:f7:0e:fc:c2:e8:ca:4d:da:7b:ab: cc:6c:54:90:14:5d:c7:db:6e:30:76:93:97:66:f9: 20:06:e2:47:4a:31:7b:bd:93:22:66:ec:49:f3:df: 7c:72:ba:15:46:68:d0:13:51:4f:96:58:1f:87:30: aa:f1:65:79:60:d6:a4:3d:c2:59:36:ed:37:86:a1: c3:6c:5c:b9:a6:2a:3d:1b:fe:ee:4a:b7:b3:6a:54: b7:1b:91:40:29:3f:01:28:ce:ad:69:c8:3b:75:0b: ac:4e:af:20:10:5a:80:77:e8:db:86:24:2d:50:2c: 08:94:ad:1b:3a:eb:2d:b7:82:64:9d:fe:bd:f5:ae: bc:60:6e:83:25:f6:76:e6:ef:16:04:e8:cf:b7:71: 57:82:69:e2:4f:87:ee:eb:7e:ec:9e:ce:26:15:0a: de:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5C:7A:E7:6F:50:08:01:64:6E:89:40:2A:30:CB:9F:90:E0:86:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d577cb1-9778-34bb-9a29-ebdf0e9c07c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:c6:ac:21:e1:5c:8c:7b:aa:84:a4:3e:cf:a9:71:a7:ae:ef: b0:21:2e:0a:26:b5:65:3f:bb:11:e9:19:cc:a9:93:0a:ea:6a: 0a:d0:20:47:23:1d:41:c0:f5:69:7f:78:36:30:e8:2f:9b:7b: 01:e8:2f:2a:e1:7c:88:c0:5b:32:54:c5:f8:bf:0b:38:2d:4d: 18:56:59:2e:23:95:3e:f8:8a:eb:5b:0f:9e:8f:26:94:97:ac: 36:1e:2e:c2:86:63:83:6d:70:0a:3b:be:8b:1f:7b:63:ab:c4: 1b:98:8e:e0:40:b2:4f:f8:71:c9:3c:a7:02:2f:d8:29:4a:ef: dd:8a:ce:0e:bd:7b:a2:f4:1b:18:78:d3:6f:d6:77:7f:cc:5a: 64:08:6f:f0:91:48:b1:8b:8e:c2:25:31:9f:2b:55:dc:de:35: 58:c8:cd:07:26:5b:79:06:8f:60:5c:b8:e9:fa:7f:89:ae:ff: ee:a7:22:82:88:fa:43:bd:44:a2:e5:9c:a2:6c:f4:17:be:fb: 60:e6:8e:29:11:1a:ba:c3:3b:d7:f4:0b:cb:e1:18:14:1f:8d: 9e:4b:a7:34:e3:b0:33:76:91:ee:6d:44:9f:ae:9c:79:a7:83: 8f:69:b1:99:ec:f3:1f:98:04:3d:91:d0:94:b4:bd:aa:a6:4b: f6:e1:55:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTHSNgsL2ZRaaooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzFmMTM5MzUtYzk2Zi00MWRlLThhYmYtYmUzNTAwYTljMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkCXCM02in8ZXo2wUzf2kWtDPfxLmbvNnp0C WXRwC+ce64bAY40B3N87jH++jVAMmIVSTNFgAD1eAAiVpYYyAO27aHTLt6MVXiwZ MhGjqRTrXZ5n4vGteQsmNx0F7/cO/MLoyk3ae6vMbFSQFF3H224wdpOXZvkgBuJH SjF7vZMiZuxJ8998croVRmjQE1FPllgfhzCq8WV5YNakPcJZNu03hqHDbFy5pio9 G/7uSrezalS3G5FAKT8BKM6tacg7dQusTq8gEFqAd+jbhiQtUCwIlK0bOustt4Jk nf699a68YG6DJfZ25u8WBOjPt3FXgmniT4fu637sns4mFQre2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBceudvUAgBZG6JQCowy5+Q4IYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ1NzdjYjEtOTc3OC0z NGJiLTlhMjktZWJkZjBlOWMwN2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8TYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPGrCHhXIx7qoSkPs+pcaeu77AhLgomtWU/uxHpGcypkwrqagrQIEcj HUHA9Wl/eDYw6C+bewHoLyrhfIjAWzJUxfi/CzgtTRhWWS4jlT74iutbD56PJpSX rDYeLsKGY4NtcAo7vosfe2OrxBuYjuBAsk/4cck8pwIv2ClK792Kzg69e6L0Gxh4 02/Wd3/MWmQIb/CRSLGLjsIlMZ8rVdzeNVjIzQcmW3kGj2BcuOn6f4mu/+6nIoKI +kO9RKLlnKJs9Be++2DmjikRGrrDO9f0C8vhGBQfjZ5LpzTjsDN2ke5tRJ+unHmn g49psZns8x+YBD2R0JS0vaqmS/bhVWo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:20 2025 by rpki-client