$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65c90301-c9fc-36c6-9dad-54a8834e28df.roa File: 65c90301-c9fc-36c6-9dad-54a8834e28df.roa (raw, json) Hash identifier: 2hpBgGkBZXcGKhphLZyxSKlknqEkWSnVUzzveeMPtM0= Subject key identifier: DE:94:0D:36:33:9F:CD:6D:E5:76:16:81:60:C4:F5:A4:39:8C:47:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8A05E3DCF5458FDFD000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65c90301-c9fc-36c6-9dad-54a8834e28df.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.195.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:8a:05:e3:dc:f5:45:8f:df:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=e3aede3e-068b-4a4c-a0a3-0edf5c4cf68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:56:ab:c8:57:70:6f:23:91:b5:8a:54:db:b2: 79:93:da:ef:60:91:50:7f:8e:34:96:25:a8:af:3e: 08:d4:7f:06:0d:95:80:ec:0e:8e:54:d9:68:83:ba: 3b:5d:51:c8:38:de:ab:c4:1c:89:44:cd:c2:aa:4d: 01:20:0f:f8:5e:9e:41:6a:39:22:91:79:c5:bc:be: 20:8f:85:ac:ac:b7:8a:59:0b:83:0b:d0:24:a6:be: 3d:8c:e9:5e:78:9e:fa:8e:02:3c:99:70:a4:cb:b3: 83:c6:db:a8:8e:49:65:b4:98:9e:32:cf:b9:d0:b0: 30:ae:ed:86:1a:7e:1f:8b:15:15:aa:99:c1:66:9b: f1:24:71:ce:e9:a8:c9:db:35:3d:d6:45:d7:24:16: 3d:37:d7:9f:1f:e7:f0:20:60:b7:ab:ce:46:35:da: e0:39:9e:f9:aa:79:74:58:12:41:df:92:4f:a7:e9: 64:be:93:70:25:28:84:59:2a:7f:ec:09:53:ea:92: 79:d2:09:e5:b5:d3:21:76:93:12:05:27:b1:4b:82: f9:3b:47:f7:d4:40:9f:a9:72:a9:6c:7e:4c:64:4c: 2a:06:10:e4:63:1d:97:8a:3c:7f:45:77:6d:24:24: fc:57:d6:11:51:6f:46:25:15:b5:43:77:c8:c4:66: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:94:0D:36:33:9F:CD:6D:E5:76:16:81:60:C4:F5:A4:39:8C:47:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65c90301-c9fc-36c6-9dad-54a8834e28df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1f:4b:27:5c:52:e3:e3:1d:92:75:42:d1:78:5e:88:5e:be: 70:3c:17:b1:d5:0d:e0:50:53:d1:53:04:48:cb:a4:0b:85:e7: 16:51:9f:91:01:7a:5e:b6:69:d7:12:ec:47:ba:a4:6e:4f:6e: b8:8e:44:f3:68:32:22:d5:af:64:61:c4:ca:88:84:5e:c1:2d: f8:31:7d:00:aa:ef:f8:d7:52:1b:a0:10:26:8d:36:09:9a:38: 5c:27:ca:36:76:0a:fe:9a:22:2c:d8:f4:58:44:8c:f7:93:4d: 0d:38:cc:48:5c:4e:ec:83:a3:57:38:ff:87:f2:06:e3:f3:99: 78:66:88:4e:9d:ae:24:67:c0:6d:1e:ee:1f:37:90:0d:0f:c9: 65:12:9f:c3:ba:2c:13:a8:bf:12:c5:40:d6:c5:bc:f8:8e:a1: 5f:af:9f:72:69:14:b6:bf:57:0f:68:13:8a:b4:21:14:22:05: 6f:d3:de:c2:5d:5b:19:d7:a6:a6:a5:ce:48:e0:df:e5:33:82: c3:95:77:73:c9:7f:d5:67:5f:2b:13:3d:05:41:10:d1:16:0a: d4:c7:d6:3c:03:1e:82:20:b3:0e:18:9b:04:06:87:1f:18:44: 96:29:bc:c5:0b:75:f4:f6:24:57:2e:e5:ff:6f:1a:f6:26:a5: 9d:df:02:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIoF49z1RY/f0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTNhZWRlM2UtMDY4Yi00YTRjLWEwYTMtMGVkZjVjNGNmNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFaryFdwbyORtYpU27J5k9rvYJFQf440liWo rz4I1H8GDZWA7A6OVNlog7o7XVHION6rxByJRM3Cqk0BIA/4Xp5BajkikXnFvL4g j4WsrLeKWQuDC9Akpr49jOleeJ76jgI8mXCky7ODxtuojklltJieMs+50LAwru2G Gn4fixUVqpnBZpvxJHHO6ajJ2zU91kXXJBY9N9efH+fwIGC3q85GNdrgOZ75qnl0 WBJB35JPp+lkvpNwJSiEWSp/7AlT6pJ50gnltdMhdpMSBSexS4L5O0f31ECfqXKp bH5MZEwqBhDkYx2Xijx/RXdtJCT8V9YRUW9GJRW1Q3fIxGYPRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6UDTYzn81t5XYWgWDE9aQ5jEfOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjVjOTAzMDEtYzlmYy0z NmM2LTlkYWQtNTRhODgzNGUyOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8N1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcfSydcUuPjHZJ1QtF4XohevnA8F7HVDeBQU9FTBEjLpAuF5xZRn5EB el62adcS7Ee6pG5PbriORPNoMiLVr2RhxMqIhF7BLfgxfQCq7/jXUhugECaNNgma OFwnyjZ2Cv6aIizY9FhEjPeTTQ04zEhcTuyDo1c4/4fyBuPzmXhmiE6driRnwG0e 7h83kA0PyWUSn8O6LBOovxLFQNbFvPiOoV+vn3JpFLa/Vw9oE4q0IRQiBW/T3sJd WxnXpqalzkjg3+UzgsOVd3PJf9VnXysTPQVBENEWCtTH1jwDHoIgsw4YmwQGhx8Y RJYpvMULdfT2JFcu5f9vGvYmpZ3fAhM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:15 2025 by rpki-client