$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95d9d2f2-8c57-36bd-b06b-8de16e4a5fd9.roa File: 95d9d2f2-8c57-36bd-b06b-8de16e4a5fd9.roa (raw, json) Hash identifier: HC0sFW6iNaM6cMrWz3uJZH1U5qrrwzjPrZJHfjmW8fU= Subject key identifier: F4:24:53:77:27:70:DB:68:5F:55:C8:03:C7:16:05:22:59:B1:E4:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E20536CC15857536C9B1A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95d9d2f2-8c57-36bd-b06b-8de16e4a5fd9.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.203.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:05:36:cc:15:85:75:36:c9:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=39c792eb-1051-49a3-8cdf-e6f7e61f5d21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0f:d1:1b:be:e4:83:90:ed:87:fb:31:24:9c: f4:ec:cc:2f:13:15:ab:24:89:72:76:6c:e7:69:7e: 92:2e:52:f3:b4:77:8d:f2:14:12:7c:71:18:db:e7: 23:32:ef:f9:d4:65:69:f1:e8:f4:21:3d:5b:b6:e5: 1c:75:ec:4c:e7:9e:fa:42:b3:10:2a:8c:63:b5:b0: 5d:23:67:cf:2e:30:4b:e7:51:35:fe:e7:e9:d5:07: 72:da:b0:6d:63:ca:30:df:a4:8f:bd:6a:fe:57:8e: f5:81:cb:91:85:0f:9f:6f:5c:cf:98:c0:fd:50:07: 61:72:bf:e4:a1:cd:41:50:06:95:c7:f8:78:12:d8: cb:3a:95:3f:84:bb:31:91:33:4a:e3:e1:49:22:ac: 88:c9:3d:f5:62:c7:86:51:9e:d7:79:8f:48:07:a7: 2e:8e:b1:66:f5:15:63:62:ec:16:b0:83:27:49:a8: 20:8f:89:3b:50:19:69:36:70:d4:5e:6f:2b:c1:96: c6:de:5e:e4:71:12:01:e1:4f:f4:5a:a7:f3:65:1b: c1:dd:3e:d9:2f:b8:bb:83:bf:4c:e3:c9:02:27:60: bf:67:19:49:69:b5:9a:88:03:54:66:a0:ab:b5:a9: 3e:0e:70:f1:cb:ac:7b:c1:ac:1f:62:f6:12:e9:1f: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:53:77:27:70:DB:68:5F:55:C8:03:C7:16:05:22:59:B1:E4:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95d9d2f2-8c57-36bd-b06b-8de16e4a5fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.203.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:04:8f:67:53:a7:4d:f8:23:6c:25:d8:d6:8e:3c:76:17:b7: 21:64:49:01:f2:ce:f5:39:6e:05:58:f6:03:a7:65:b5:de:eb: eb:c0:ab:5c:f0:8b:32:61:d0:ef:0b:14:7d:e1:bf:2d:24:b4: ce:77:85:15:26:fb:f5:a9:0e:35:f4:36:c2:c2:ad:8c:b7:1d: a4:bb:89:8a:87:7e:84:a2:56:12:b3:e7:1c:b5:06:71:74:2d: 0a:46:9a:ac:4e:d5:79:4e:56:13:fc:57:3e:25:b7:94:04:af: 47:06:5a:20:e7:07:0d:f4:43:53:d6:ed:98:74:27:24:2f:0a: 9a:31:d8:7f:f1:a9:80:11:01:42:19:87:3f:bc:7e:06:a0:ba: ad:62:29:83:6a:2b:93:39:61:bd:a2:bf:2d:ed:79:97:2c:3e: 3a:8d:e1:d8:7c:03:e0:cb:dd:36:f3:54:b9:09:bd:d0:85:97: 70:67:e6:a2:0b:1e:eb:c5:9f:6e:7f:c0:b0:c4:36:1e:20:af: 68:75:ea:fd:7d:62:9e:d6:1a:2e:e2:3f:a2:dc:6b:1e:81:39: e8:35:47:6e:13:02:8a:30:18:f9:6e:2d:bf:fa:86:d1:e5:70: b2:b0:73:9c:16:68:e5:5a:73:64:ce:3b:93:91:26:b8:4e:fa: 6a:f2:5a:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4gU2zBWFdTbJsaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzljNzkyZWItMTA1MS00OWEzLThjZGYtZTZmN2U2MWY1ZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ/RG77kg5Dth/sxJJz07MwvExWrJIlydmzn aX6SLlLztHeN8hQSfHEY2+cjMu/51GVp8ej0IT1btuUcdexM5576QrMQKoxjtbBd I2fPLjBL51E1/ufp1Qdy2rBtY8ow36SPvWr+V471gcuRhQ+fb1zPmMD9UAdhcr/k oc1BUAaVx/h4EtjLOpU/hLsxkTNK4+FJIqyIyT31YseGUZ7XeY9IB6cujrFm9RVj YuwWsIMnSaggj4k7UBlpNnDUXm8rwZbG3l7kcRIB4U/0WqfzZRvB3T7ZL7i7g79M 48kCJ2C/ZxlJabWaiANUZqCrtak+DnDxy6x7wawfYvYS6R/T5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQkU3cncNtoX1XIA8cWBSJZseS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTVkOWQyZjItOGM1Ny0z NmJkLWIwNmItOGRlMTZlNGE1ZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8uAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYEj2dTp034I2wl2NaOPHYXtyFkSQHyzvU5bgVY9gOnZbXe6+vAq1zw izJh0O8LFH3hvy0ktM53hRUm+/WpDjX0NsLCrYy3HaS7iYqHfoSiVhKz5xy1BnF0 LQpGmqxO1XlOVhP8Vz4lt5QEr0cGWiDnBw30Q1PW7Zh0JyQvCpox2H/xqYARAUIZ hz+8fgaguq1iKYNqK5M5Yb2ivy3teZcsPjqN4dh8A+DL3TbzVLkJvdCFl3Bn5qIL HuvFn25/wLDENh4gr2h16v19Yp7WGi7iP6Lcax6BOeg1R24TAoowGPluLb/6htHl cLKwc5wWaOVac2TOO5ORJrhO+mryWtI= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:43 2025 by rpki-client