$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa File: 898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa (raw, json) Hash identifier: NqragpSu3iPEKg5ujzTrfxOIxLXo8GquGSQYI6jckPg= Subject key identifier: 1A:E4:9F:E6:DF:48:10:FB:03:34:81:17:15:5F:71:50:56:4A:FC:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC27556394C389128E2300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.32.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:27:55:63:94:c3:89:12:8e:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=72afa6d9-e72c-4419-8b42-4fc799ae0244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:3c:6f:9c:3b:41:f6:66:87:c9:98:09:8a: 79:be:9d:a4:3c:3b:15:e1:58:8d:38:d0:1a:cc:a1: 0e:a5:8b:97:4d:87:13:a9:03:54:0c:4e:45:aa:e3: f9:9c:90:51:74:4c:c4:f8:ce:0d:5e:54:88:1d:34: 65:0e:e0:46:f7:db:c8:8a:c1:c6:54:48:34:e1:70: ef:f6:58:37:3f:a1:2c:f1:b1:e4:8c:10:82:99:a8: 54:d7:11:26:0c:a6:46:1a:95:34:53:1d:64:26:f3: ee:26:90:21:9f:2e:45:50:ae:de:07:92:ec:74:80: 43:77:70:01:6f:ec:d2:e3:e5:34:ee:5a:66:52:cf: 8d:6c:d0:80:1c:41:a7:c0:27:72:37:8d:af:98:87: 09:98:89:2a:43:e2:2b:e0:97:8b:a6:8e:11:b7:59: 37:42:64:4a:36:15:d4:56:c0:ff:77:65:7e:16:7b: 20:46:06:68:30:9a:20:5b:77:14:34:f8:9a:ec:e4: 37:7c:c3:38:ae:86:48:fa:0b:b7:24:ee:83:7e:18: a5:3f:62:b5:cd:c2:9d:72:74:e8:1c:ca:89:80:a9: 7c:cd:39:8f:54:b3:35:5f:de:cb:df:ca:21:0d:16: 84:84:29:1c:d3:1a:0a:11:97:a6:56:12:85:4e:f1: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E4:9F:E6:DF:48:10:FB:03:34:81:17:15:5F:71:50:56:4A:FC:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e4:c7:46:98:34:b1:8a:5d:4f:63:ec:8a:66:ca:5a:8c:ef: de:11:4e:25:2e:a2:70:cc:73:0c:1b:40:3a:0a:ea:2b:c3:cd: 5b:27:24:27:ae:ac:85:ed:42:5e:9b:2a:f5:15:91:37:f0:59: 04:88:bb:69:5e:5b:8a:85:7a:74:25:6b:65:e2:3f:08:fe:fb: ed:ce:95:60:bb:42:5a:62:66:b4:3c:28:64:07:10:82:02:c4: 23:e4:21:6d:bf:93:ba:4f:e9:70:37:af:81:2b:64:a3:e3:2d: e5:32:c4:5f:ba:1a:c3:df:3f:6b:14:db:38:9e:d9:f9:3b:31: 40:05:95:2e:ce:aa:f8:29:24:2a:9c:f1:8a:44:e0:95:b3:d4: 08:ad:3f:f5:4c:23:2f:69:47:46:c0:bc:c8:34:b4:34:1e:89: eb:9d:e1:42:c5:b8:00:80:0c:1f:dc:54:17:64:2a:06:9b:eb: bc:a6:19:84:b4:8e:c6:76:f9:e8:b8:bb:e8:66:90:d1:86:e2: 10:c6:54:5a:e1:24:50:7e:86:c0:0e:e7:4c:da:65:ab:00:9f: 20:a9:36:f8:29:4d:d5:a6:dc:f3:e2:af:2c:8c:e0:8d:3a:7f: c2:66:a7:8c:cc:92:c0:f7:55:83:89:c6:a0:16:34:4a:1e:85: 9d:43:80:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CdVY5TDiRKOIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NzJhZmE2ZDktZTcyYy00NDE5LThiNDItNGZjNzk5YWUwMjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hI8b5w7QfZmh8mYCYp5vp2kPDsV4ViNONAa zKEOpYuXTYcTqQNUDE5FquP5nJBRdEzE+M4NXlSIHTRlDuBG99vIisHGVEg04XDv 9lg3P6Es8bHkjBCCmahU1xEmDKZGGpU0Ux1kJvPuJpAhny5FUK7eB5LsdIBDd3AB b+zS4+U07lpmUs+NbNCAHEGnwCdyN42vmIcJmIkqQ+Ir4JeLpo4Rt1k3QmRKNhXU VsD/d2V+FnsgRgZoMJogW3cUNPia7OQ3fMM4roZI+gu3JO6DfhilP2K1zcKdcnTo HMqJgKl8zTmPVLM1X97L38ohDRaEhCkc0xoKEZemVhKFTvEwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrkn+bfSBD7AzSBFxVfcVBWSvx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk4ZjIwYjQtYTM5NC0z MGJjLWFmYzUtY2RiZjZlNmE0NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/kx0aYNLGKXU9j7IpmylqM794RTiUuonDMcwwbQDoK6ivDzVsnJCeu rIXtQl6bKvUVkTfwWQSIu2leW4qFenQla2XiPwj+++3OlWC7QlpiZrQ8KGQHEIIC xCPkIW2/k7pP6XA3r4ErZKPjLeUyxF+6GsPfP2sU2zie2fk7MUAFlS7OqvgpJCqc 8YpE4JWz1AitP/VMIy9pR0bAvMg0tDQeieud4ULFuACADB/cVBdkKgab67ymGYS0 jsZ2+ei4u+hmkNGG4hDGVFrhJFB+hsAO50zaZasAnyCpNvgpTdWm3PPiryyM4I06 f8Jmp4zMksD3VYOJxqAWNEoehZ1DgK4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:56:28 2025 by rpki-client