$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc02b7f-a0d6-3250-8382-438f1367b4c3.roa File: 6fc02b7f-a0d6-3250-8382-438f1367b4c3.roa (raw, json) Hash identifier: jlP+Qlx4ZwBACSUbvxDUXVC9UQnDrdEjQ5krVeVoxNg= Subject key identifier: A5:19:FE:C4:0E:4F:4A:3D:E1:65:65:B3:C9:D4:07:F8:1F:8E:87:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C74B484B797DFC0B018C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc02b7f-a0d6-3250-8382-438f1367b4c3.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.196.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:74:b4:84:b7:97:df:c0:b0:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=cee8139d-a786-4e36-ae5e-7b9fcfe875c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:8a:35:7c:7c:76:bc:fb:ef:01:b0:c2:b7: 9f:bc:30:6a:94:0e:b8:63:71:bb:4e:de:34:b5:9f: 6b:53:58:22:91:91:98:1b:43:69:20:e6:6f:b9:3d: 99:04:28:c4:40:5a:79:01:1a:1d:e3:c8:a8:b4:d7: 5f:84:9d:e0:1c:ad:55:9d:86:f2:22:f7:6a:54:d3: 7d:bc:3a:1b:a9:89:2a:61:54:45:9a:f3:f5:56:bc: 5a:00:26:8b:5d:41:69:f7:b9:9b:d4:34:bb:85:ca: d6:a4:b5:0e:48:26:65:f8:99:a2:59:f4:6b:7e:be: b7:47:a0:2b:9c:70:9e:19:23:b9:7d:39:c7:6e:e0: ed:65:fa:15:81:a3:06:04:51:96:7d:d0:0d:f5:84: 4c:a4:c9:9c:59:5e:eb:24:ec:50:cd:0d:99:26:f4: 29:0c:1e:16:cf:7c:96:99:f4:3f:5e:60:f9:15:ba: e2:b5:45:0c:bf:9e:45:9f:3e:db:a6:9f:ae:f2:3d: 32:ab:8c:71:a7:5e:58:99:57:6f:c0:9f:89:20:38: 66:87:27:f7:49:f6:18:46:78:2f:ea:8f:23:bd:0f: 1b:97:ae:b1:b2:c4:b5:16:18:c8:ec:b3:64:67:80: b3:4b:5b:11:0c:b1:eb:1f:31:ab:14:b5:86:0e:04: a2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:19:FE:C4:0E:4F:4A:3D:E1:65:65:B3:C9:D4:07:F8:1F:8E:87:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc02b7f-a0d6-3250-8382-438f1367b4c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:bd:97:6b:ff:a1:48:f6:1f:0b:4c:0a:b2:ca:a4:61:d1:eb: a5:8f:11:4c:75:9d:22:7b:af:dc:55:ac:0b:be:2c:68:8a:8f: 91:e9:7c:42:54:61:d4:ca:ec:02:6e:84:17:9a:26:24:aa:26: 10:1a:f8:bd:b2:86:28:2a:db:41:88:8a:f7:a1:20:6c:7c:14: bb:29:48:87:0c:f7:35:0b:f9:b8:4d:71:52:87:e2:07:ab:c3: 40:51:49:dc:87:30:7c:6a:dd:cd:18:86:2c:64:e0:59:d0:84: ac:3a:98:99:27:a8:00:81:e1:4d:33:32:19:48:36:eb:af:63: 93:b1:59:ae:41:65:ac:32:44:f4:0e:e2:37:42:51:f8:d5:59: fb:2a:80:17:d7:6c:03:ab:93:5b:bc:a2:75:71:5e:71:69:2a: 1e:36:74:1e:20:84:19:04:f2:eb:4a:a7:0b:72:8b:07:63:17: 16:99:55:2f:30:da:dd:e5:1f:5b:6b:1e:4c:fb:b0:9c:39:66: 8c:5e:1e:e7:ba:a3:e6:4e:82:e8:4e:04:30:0e:c7:1e:a9:73: 6e:37:17:8e:80:be:43:70:b0:5b:cb:04:ad:29:41:50:cb:59: 6e:42:72:c7:19:87:4d:8e:75:9d:d8:f2:9b:9a:17:03:4c:2f: 5d:af:96:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTHS0hLeX38CwGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2VlODEzOWQtYTc4Ni00ZTM2LWFlNWUtN2I5ZmNmZTg3NWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKqKNXx8drz77wGwwrefvDBqlA64Y3G7Tt40 tZ9rU1gikZGYG0NpIOZvuT2ZBCjEQFp5ARod48iotNdfhJ3gHK1VnYbyIvdqVNN9 vDobqYkqYVRFmvP1VrxaACaLXUFp97mb1DS7hcrWpLUOSCZl+JmiWfRrfr63R6Ar nHCeGSO5fTnHbuDtZfoVgaMGBFGWfdAN9YRMpMmcWV7rJOxQzQ2ZJvQpDB4Wz3yW mfQ/XmD5FbritUUMv55Fnz7bpp+u8j0yq4xxp15YmVdvwJ+JIDhmhyf3SfYYRngv 6o8jvQ8bl66xssS1FhjI7LNkZ4CzS1sRDLHrHzGrFLWGDgSifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUZ/sQOT0o94WVls8nUB/gfjoc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmZjMDJiN2YtYTBkNi0z MjUwLTgzODItNDM4ZjEzNjdiNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8ToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO9l2v/oUj2HwtMCrLKpGHR66WPEUx1nSJ7r9xVrAu+LGiKj5HpfEJU YdTK7AJuhBeaJiSqJhAa+L2yhigq20GIivehIGx8FLspSIcM9zUL+bhNcVKH4ger w0BRSdyHMHxq3c0Yhixk4FnQhKw6mJknqACB4U0zMhlINuuvY5OxWa5BZawyRPQO 4jdCUfjVWfsqgBfXbAOrk1u8onVxXnFpKh42dB4ghBkE8utKpwtyiwdjFxaZVS8w 2t3lH1trHkz7sJw5ZoxeHue6o+ZOguhOBDAOxx6pc243F46AvkNwsFvLBK0pQVDL WW5CcscZh02OdZ3Y8puaFwNML12vllQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:23 2025 by rpki-client