$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5a4173-7509-30fc-8c0c-9ed72f0a1109.roa File: 5d5a4173-7509-30fc-8c0c-9ed72f0a1109.roa (raw, json) Hash identifier: 9in4JsgUNvlgVIg4kjeEDKE4/LuD5jpwuuL0T9gFlhU= Subject key identifier: EE:B4:8E:DA:52:E7:15:BA:9A:BE:38:B2:48:89:E4:2C:E4:B8:40:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C946F3A0E1599CFA8C880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5a4173-7509-30fc-8c0c-9ed72f0a1109.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 34164 IP address blocks: 23.205.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:94:6f:3a:0e:15:99:cf:a8:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=b74fed26-ebe6-4090-9865-5bfa4b34c4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:2e:03:a8:04:83:dd:fd:3d:a0:fd:76:9d: ba:a2:70:4f:b8:a1:15:92:c3:4c:92:34:dc:1b:55: 1d:0a:ac:1e:e2:69:b5:63:5c:64:75:4f:d5:e5:21: e6:00:2e:fa:69:7b:c8:1c:24:ae:53:78:72:9d:77: 7b:b1:e1:d5:75:4b:47:69:d7:24:15:1d:d6:a7:2d: ce:4c:ed:6a:40:bb:74:25:12:83:28:4a:14:22:ad: da:bc:74:50:5c:00:41:ba:dc:e2:36:97:be:19:9d: 17:36:8f:ce:30:d9:8a:60:f3:86:f5:7a:ce:70:b7: 99:82:a7:83:7e:b7:6b:8b:28:75:b5:81:88:7f:11: 52:56:81:0d:77:e2:07:ae:96:f6:ec:d8:c3:b7:0f: 0d:83:6a:e5:7c:9d:4f:c6:3f:df:0d:28:43:76:45: bf:18:1e:ef:34:e3:09:00:54:41:0d:1a:d7:37:d5: cc:82:ab:7f:b2:eb:51:a6:cb:62:d1:2a:60:3a:90: 59:28:64:d4:5b:5c:8a:b7:d5:84:69:79:f8:5f:b1: 2d:37:82:3f:ef:6b:f6:cf:e9:32:6a:1c:7f:30:d9: 81:fe:37:d5:76:5b:5c:99:51:1b:d2:dc:c3:70:2d: d5:60:91:1c:45:d9:32:0e:a2:1f:0a:d9:33:7e:ab: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B4:8E:DA:52:E7:15:BA:9A:BE:38:B2:48:89:E4:2C:E4:B8:40:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5a4173-7509-30fc-8c0c-9ed72f0a1109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9a:91:90:c1:bf:a6:88:59:d2:0b:b7:62:99:35:d9:49:48: e0:98:8a:f2:38:b7:5d:57:33:9e:bb:98:be:9f:08:3e:77:c1: 8e:2d:28:54:79:c1:34:02:dc:cb:31:16:66:2f:ba:ca:ba:a5: d7:35:e7:a7:6f:88:a2:9b:b4:28:ec:26:e1:21:e4:dc:ed:e8: ec:1c:fc:3c:32:cb:7c:93:d5:46:54:3d:41:3e:27:c6:b6:7b: 2b:00:98:78:1c:45:09:64:6c:a3:ee:30:f7:09:7e:e6:ac:54: 39:9f:4e:55:5e:38:04:35:10:03:ec:98:34:a3:3f:a5:bd:ae: 6f:f9:1c:e1:0c:19:eb:62:a4:64:71:50:2f:32:ef:6e:24:07: 89:64:32:c5:2a:1e:40:8a:62:29:8f:34:aa:0b:5f:44:c8:20: b5:95:7b:f8:84:96:d9:02:11:4b:d7:1b:0d:b9:70:25:62:1c: df:b4:cc:81:95:e7:ad:15:37:e2:c1:0b:9d:42:f0:35:3b:84: e9:bd:39:d3:26:c6:5f:23:f9:1e:82:ac:97:46:1f:73:fe:21: bc:ca:56:bb:dc:1d:4f:c6:62:e6:e0:94:62:4d:a6:df:a8:a3: fd:0f:d1:d0:b0:95:98:ce:11:fc:fa:6a:8a:d9:44:c7:d8:77: c5:5e:b9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJRvOg4Vmc+oyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Yjc0ZmVkMjYtZWJlNi00MDkwLTk4NjUtNWJmYTRiMzRjNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcEuA6gEg939PaD9dp26onBPuKEVksNMkjTc G1UdCqwe4mm1Y1xkdU/V5SHmAC76aXvIHCSuU3hynXd7seHVdUtHadckFR3Wpy3O TO1qQLt0JRKDKEoUIq3avHRQXABButziNpe+GZ0XNo/OMNmKYPOG9XrOcLeZgqeD frdriyh1tYGIfxFSVoENd+IHrpb27NjDtw8Ng2rlfJ1Pxj/fDShDdkW/GB7vNOMJ AFRBDRrXN9XMgqt/sutRpsti0SpgOpBZKGTUW1yKt9WEaXn4X7EtN4I/72v2z+ky ahx/MNmB/jfVdltcmVEb0tzDcC3VYJEcRdkyDqIfCtkzfqsNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO60jtpS5xW6mr44skiJ5CzkuECbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ1YTQxNzMtNzUwOS0z MGZjLThjMGMtOWVkNzJmMGExMTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF82YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaakZDBv6aIWdILt2KZNdlJSOCYivI4t11XM567mL6fCD53wY4tKFR5 wTQC3MsxFmYvusq6pdc156dviKKbtCjsJuEh5Nzt6Owc/Dwyy3yT1UZUPUE+J8a2 eysAmHgcRQlkbKPuMPcJfuasVDmfTlVeOAQ1EAPsmDSjP6W9rm/5HOEMGetipGRx UC8y724kB4lkMsUqHkCKYimPNKoLX0TIILWVe/iEltkCEUvXGw25cCViHN+0zIGV 560VN+LBC51C8DU7hOm9OdMmxl8j+R6CrJdGH3P+IbzKVrvcHU/GYubglGJNpt+o o/0P0dCwlZjOEfz6aorZRMfYd8VeuVE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:41 2025 by rpki-client