$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3eb7ed4-978e-3850-b6f7-bb3651bbfef8.roa File: a3eb7ed4-978e-3850-b6f7-bb3651bbfef8.roa (raw, json) Hash identifier: TUZ+V48r4sLRGecDVeJ+U5sbyD3bVkTdqIoY1bxt3s0= Subject key identifier: D2:A4:92:59:F7:6B:29:1F:FE:E7:26:FF:FB:60:53:46:AE:F9:52:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C6DCE652E1FF558F09600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3eb7ed4-978e-3850-b6f7-bb3651bbfef8.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.193.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6d:ce:65:2e:1f:f5:58:f0:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=b28cbf4d-14ab-47ae-93fe-9b8a8f4e4bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1a:8f:99:9c:cb:59:4f:65:b1:42:c8:0c:73: 43:e3:95:d2:50:af:13:bf:78:02:b7:d3:93:cd:9c: 12:9c:05:64:72:18:cf:c2:d6:9c:c2:07:15:87:60: 6c:19:3c:f5:85:81:32:b5:20:23:b5:8c:96:0c:0e: 8a:d8:0c:52:f7:11:08:d3:bc:e0:ba:2d:49:01:5f: 4b:b1:f1:ca:55:fe:b1:ce:19:31:79:1a:9f:1d:d7: 4e:45:e7:80:89:ea:22:0a:4c:ec:a6:88:ee:46:75: 88:8f:f1:53:2b:3e:94:b9:75:18:5e:b9:1c:49:0c: 57:3e:9f:bb:33:9b:c3:44:b1:8d:2c:99:34:2f:f8: 2a:54:14:92:d9:70:ac:32:13:c6:62:2e:77:5c:32: f7:40:99:2e:c8:cd:0f:b1:f4:2c:99:c0:00:72:c3: 4b:a5:58:da:7a:b2:88:65:3f:3e:b3:fa:b0:77:35: b0:ac:18:d5:d7:a1:98:db:2f:c7:32:7a:7d:00:04: b7:42:14:5c:b4:f9:e5:20:32:cf:33:50:de:c0:88: 18:f5:85:5c:82:6d:e9:ae:b6:14:b4:2d:33:56:bb: d9:b5:e2:db:7b:df:a3:c4:3a:ac:35:0d:e1:c8:4b: fb:1f:9e:a0:04:97:7d:34:75:90:bc:a9:57:bb:4a: f4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A4:92:59:F7:6B:29:1F:FE:E7:26:FF:FB:60:53:46:AE:F9:52:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3eb7ed4-978e-3850-b6f7-bb3651bbfef8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.193.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:e3:f3:af:0c:bc:09:18:4b:0c:65:3e:20:8b:9a:e8:3f:98: 7b:57:5b:cc:36:68:b8:ad:6a:4a:c0:75:1d:b3:6a:8b:7a:1e: d1:49:31:1c:a2:e2:c9:8b:63:b1:5b:ef:a7:39:88:98:59:1b: 5d:ef:98:08:2b:d8:34:00:05:2a:04:1b:7f:fe:98:48:bc:be: 4d:b3:3a:a4:57:da:4b:22:9e:d6:c2:a8:af:d6:1f:2a:97:2c: a0:de:5e:75:7d:c1:40:66:82:89:5e:ed:8e:43:89:25:18:5a: 61:fb:17:10:a8:63:36:9d:70:ff:fc:49:9f:f7:b1:32:3d:dd: ee:88:f1:c0:76:d3:64:8c:6a:c7:89:1c:01:9a:17:39:d9:79: 51:58:fc:64:bb:a7:d9:8b:5d:b6:5b:69:0b:6c:f2:82:e6:35: 6a:fd:e1:be:3b:34:5f:7b:0c:0b:db:c5:ee:5d:69:f0:86:18: 13:48:37:28:c9:94:44:52:06:c2:97:8c:a0:6c:3a:28:28:a3: c8:20:8a:48:4f:bd:bd:db:80:f5:b3:57:c8:fc:55:60:26:b9: c1:ef:24:f3:68:fa:fc:7a:46:3f:24:52:a4:ca:02:23:e2:06: 09:ce:65:4a:d2:94:50:5a:b3:ad:ee:24:c9:75:ec:e4:de:10: c4:06:dd:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTG3OZS4f9VjwlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YjI4Y2JmNGQtMTRhYi00N2FlLTkzZmUtOWI4YThmNGU0YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohqPmZzLWU9lsULIDHND45XSUK8Tv3gCt9OT zZwSnAVkchjPwtacwgcVh2BsGTz1hYEytSAjtYyWDA6K2AxS9xEI07zgui1JAV9L sfHKVf6xzhkxeRqfHddOReeAieoiCkzspojuRnWIj/FTKz6UuXUYXrkcSQxXPp+7 M5vDRLGNLJk0L/gqVBSS2XCsMhPGYi53XDL3QJkuyM0PsfQsmcAAcsNLpVjaerKI ZT8+s/qwdzWwrBjV16GY2y/HMnp9AAS3QhRctPnlIDLPM1DewIgY9YVcgm3prrYU tC0zVrvZteLbe9+jxDqsNQ3hyEv7H56gBJd9NHWQvKlXu0r01wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKkkln3aykf/ucm//tgU0au+VLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTNlYjdlZDQtOTc4ZS0z ODUwLWI2ZjctYmIzNjUxYmJmZWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8EmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvj868MvAkYSwxlPiCLmug/mHtXW8w2aLitakrAdR2zaot6HtFJMRyi 4smLY7Fb76c5iJhZG13vmAgr2DQABSoEG3/+mEi8vk2zOqRX2ksintbCqK/WHyqX LKDeXnV9wUBmgole7Y5DiSUYWmH7FxCoYzadcP/8SZ/3sTI93e6I8cB202SMaseJ HAGaFznZeVFY/GS7p9mLXbZbaQts8oLmNWr94b47NF97DAvbxe5dafCGGBNINyjJ lERSBsKXjKBsOigoo8ggikhPvb3bgPWzV8j8VWAmucHvJPNo+vx6Rj8kUqTKAiPi BgnOZUrSlFBas63uJMl17OTeEMQG3fw= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:15 2025 by rpki-client