$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2e1158-6288-35a2-854d-8f8d6f81ca89.roa File: 5f2e1158-6288-35a2-854d-8f8d6f81ca89.roa (raw, json) Hash identifier: im90wZ6jbxfImtUsYfGNm6u6bQmVf27Q9r/szyzMT+A= Subject key identifier: 0A:32:16:84:44:F2:B5:73:D9:49:DD:2D:DC:66:F2:76:58:B7:E6:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715D0947B1CB82485AE60FB0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2e1158-6288-35a2-854d-8f8d6f81ca89.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 23.32.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:09:47:b1:cb:82:48:5a:e6:0f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=220384e1-9f63-45d6-8495-6f95624ff73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:95:6e:3f:7f:20:a5:01:a7:cb:01:3b:a7: 7d:49:e9:1c:05:d3:ea:54:fd:46:1c:04:d9:5d:30: bd:bf:65:b6:71:b8:26:31:72:8f:02:7e:25:ed:ba: 07:c1:28:fc:bd:5a:de:f7:90:f9:91:23:3a:34:50: 81:e3:04:bf:1b:e3:aa:2e:37:0a:a6:34:76:81:5e: 4b:9e:ae:0c:81:a8:06:22:0b:ee:5f:7e:04:bf:ef: 2d:36:80:cb:86:7e:70:18:14:74:d4:10:98:bf:32: a5:ee:42:1f:47:9a:60:df:cd:6f:ad:0e:26:d1:d4: c2:41:40:91:1c:f8:ee:e1:b1:42:cf:1b:bf:38:d8: d7:a5:4f:17:41:45:66:c7:a3:21:20:38:6d:93:ad: 30:ad:32:72:2f:c2:e5:9a:f1:b1:a5:6a:51:5e:66: 43:f3:8f:f6:66:47:92:65:72:50:be:7e:59:3e:c8: 56:59:b0:00:e1:d7:2b:a9:bb:d5:16:93:a2:66:dd: 5b:2d:27:d7:93:93:51:6d:3d:48:cc:97:8b:4a:58: c8:39:89:f3:07:22:cc:37:8a:ca:2f:8b:74:ca:4d: aa:eb:4d:f1:d2:0b:fc:62:5e:8b:58:12:b3:62:71: e0:d9:5c:c7:0d:ee:28:b3:ef:07:f9:09:70:15:48: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:32:16:84:44:F2:B5:73:D9:49:DD:2D:DC:66:F2:76:58:B7:E6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2e1158-6288-35a2-854d-8f8d6f81ca89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6b:41:d9:01:cb:49:0b:76:0c:9b:8e:31:80:83:01:36:21: ff:50:a9:8d:e6:cc:41:26:2f:40:5c:40:79:ed:ab:4c:fa:7a: 10:a1:81:ce:8f:ee:21:6c:15:b4:b7:08:66:96:d2:c2:c5:e1: bd:e9:a2:b5:af:57:d4:d8:d2:ac:5d:9f:98:ed:26:ba:8d:68: a9:a3:6e:30:80:bc:8a:7f:97:09:39:cb:bb:9f:8e:16:e6:3b: 7a:40:06:b4:d3:1c:7f:dc:1a:21:67:15:e9:6c:16:5d:51:66: 6b:bd:46:ed:e4:7d:43:b1:47:7e:24:c8:5a:93:f0:26:fc:20: de:72:5c:e9:ec:94:59:09:ba:b9:c5:b8:89:8f:82:7c:86:4b: db:62:41:94:b1:5e:cb:4c:91:06:0f:30:d2:15:55:60:1b:c0: 81:c8:61:23:b6:9f:e0:d5:a3:da:9b:8a:b5:aa:47:bf:12:79: 57:ad:5f:b1:02:43:41:8d:dc:45:c1:0c:4d:fd:59:11:db:c6: 3e:ec:09:62:f5:1a:ca:4c:97:a6:6a:b9:1d:78:cb:4a:f7:f3: 3d:39:3c:0e:60:cb:1d:a2:c9:a2:f1:cc:e2:19:0e:33:ec:3d: 94:b1:ae:3e:bb:49:7d:ff:65:5f:0d:0f:26:c1:66:ca:65:13: 6b:ff:b5:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQlHscuCSFrmD7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MjIwMzg0ZTEtOWY2My00NWQ2LTg0OTUtNmY5NTYyNGZmNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYOVbj9/IKUBp8sBO6d9SekcBdPqVP1GHATZ XTC9v2W2cbgmMXKPAn4l7boHwSj8vVre95D5kSM6NFCB4wS/G+OqLjcKpjR2gV5L nq4MgagGIgvuX34Ev+8tNoDLhn5wGBR01BCYvzKl7kIfR5pg381vrQ4m0dTCQUCR HPju4bFCzxu/ONjXpU8XQUVmx6MhIDhtk60wrTJyL8LlmvGxpWpRXmZD84/2ZkeS ZXJQvn5ZPshWWbAA4dcrqbvVFpOiZt1bLSfXk5NRbT1IzJeLSljIOYnzByLMN4rK L4t0yk2q603x0gv8Yl6LWBKzYnHg2VzHDe4os+8H+QlwFUj5lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoyFoRE8rVz2UndLdxm8nZYt+ZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYyZTExNTgtNjI4OC0z NWEyLTg1NGQtOGY4ZDZmODFjYTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyBcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVrQdkBy0kLdgybjjGAgwE2If9QqY3mzEEmL0BcQHntq0z6ehChgc6P 7iFsFbS3CGaW0sLF4b3porWvV9TY0qxdn5jtJrqNaKmjbjCAvIp/lwk5y7ufjhbm O3pABrTTHH/cGiFnFelsFl1RZmu9Ru3kfUOxR34kyFqT8Cb8IN5yXOnslFkJurnF uImPgnyGS9tiQZSxXstMkQYPMNIVVWAbwIHIYSO2n+DVo9qbirWqR78SeVetX7EC Q0GN3EXBDE39WRHbxj7sCWL1GspMl6ZquR14y0r38z05PA5gyx2iyaLxzOIZDjPs PZSxrj67SX3/ZV8NDybBZsplE2v/tT4= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:13 2025 by rpki-client