$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a79f2dff-4a3e-3125-af2f-06d8e684f082.roa File: a79f2dff-4a3e-3125-af2f-06d8e684f082.roa (raw, json) Hash identifier: aIV4FazeM0s+/+is+lcVuL8CE2llWt3EPd0a/kmg/wE= Subject key identifier: CC:4C:6C:EF:4A:54:20:13:E9:D3:5D:90:E6:AD:1F:23:3F:EA:AC:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9373212A3B63F98FD980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a79f2dff-4a3e-3125-af2f-06d8e684f082.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.205.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:93:73:21:2a:3b:63:f9:8f:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=a7ac853a-5eee-41b0-a80d-14bd2e3ee926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:24:b7:a5:07:2d:cb:51:f3:bc:52:dc:92:b1: c7:4b:cb:b8:90:a1:d4:61:11:0f:cb:81:55:1b:b8: cd:1e:01:3d:c9:db:2d:6b:05:d4:d8:a8:ee:16:26: f0:d3:a9:bf:ce:45:cc:1e:28:9a:70:ce:27:41:5b: de:1b:06:46:fc:e7:30:ad:a5:88:d7:5f:ca:b9:c4: 04:e8:ca:12:69:f1:3b:9d:38:78:0b:69:a2:d1:2a: 30:61:c2:29:ca:e3:42:ab:39:b8:e1:39:a4:d5:a4: 59:d3:b9:e5:99:b1:7d:aa:3e:8c:39:f6:f3:47:24: 19:1d:ed:86:00:e9:e8:f8:be:12:60:fb:ce:f1:b2: a0:1e:cb:da:22:bc:8a:dc:0b:8a:63:ed:b8:61:36: 1e:26:54:77:23:e4:22:96:70:60:7b:ce:40:79:20: b6:83:c8:54:a8:c1:2c:07:5f:1b:4b:41:85:eb:65: 36:27:1b:09:ab:80:db:f4:e0:c5:34:e2:e8:2f:2b: 75:5d:48:31:b2:50:18:ba:03:23:60:16:cb:1c:9d: 0f:d1:f3:da:4e:32:ae:fb:b7:71:8c:03:aa:7a:80: 65:9e:e9:65:a0:d5:3e:96:f4:85:52:1f:72:0c:24: 82:41:ba:50:c9:7b:fc:73:4e:04:4f:c3:80:bb:0f: bd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4C:6C:EF:4A:54:20:13:E9:D3:5D:90:E6:AD:1F:23:3F:EA:AC:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a79f2dff-4a3e-3125-af2f-06d8e684f082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:7a:b1:c0:05:2f:cb:03:81:cf:8a:84:93:bc:6b:9b:4b:5b: c4:5c:53:3a:09:be:eb:40:b4:50:0a:3b:71:b8:da:fc:42:58: 25:4d:ae:63:5e:ef:43:29:5d:79:09:6c:56:18:7b:e5:c5:d1: 74:99:d7:aa:1e:4a:e8:8f:80:77:17:cf:2a:4e:bf:bf:c0:e2: 17:41:e5:b1:cc:f6:71:01:83:aa:c7:80:ec:aa:5f:33:8d:49: eb:cf:2d:f3:20:ed:b4:90:c7:01:9a:ac:dc:07:7d:db:1b:1a: b2:2c:c2:52:55:e4:66:45:1f:bd:f5:9f:9a:3c:2f:78:fc:a5: 08:b9:26:4d:17:df:6b:7d:0d:34:01:2c:cd:da:81:7f:ab:19: a3:0f:0f:71:c1:7c:bf:65:b7:8e:bb:2d:25:a3:4e:54:cd:12: 25:55:ff:1f:eb:e4:d6:87:db:ca:62:5b:98:b2:bc:65:02:c8: df:81:47:ca:92:c3:4c:e9:ec:e2:0b:6c:16:fd:6c:da:7f:1b: dc:f3:d7:81:75:d2:03:55:38:0a:00:62:84:d2:60:34:5c:4d: 40:d1:23:90:21:13:58:30:43:1b:34:28:cf:c7:bc:f3:82:03: f0:0a:5d:1c:f7:89:a2:a2:02:a6:f1:09:17:7d:c4:31:ec:ba: e3:09:32:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJNzISo7Y/mP2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTdhYzg1M2EtNWVlZS00MWIwLWE4MGQtMTRiZDJlM2VlOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CS3pQcty1HzvFLckrHHS8u4kKHUYREPy4FV G7jNHgE9ydstawXU2KjuFibw06m/zkXMHiiacM4nQVveGwZG/OcwraWI11/KucQE 6MoSafE7nTh4C2mi0SowYcIpyuNCqzm44Tmk1aRZ07nlmbF9qj6MOfbzRyQZHe2G AOno+L4SYPvO8bKgHsvaIryK3AuKY+24YTYeJlR3I+QilnBge85AeSC2g8hUqMEs B18bS0GF62U2JxsJq4Db9ODFNOLoLyt1XUgxslAYugMjYBbLHJ0P0fPaTjKu+7dx jAOqeoBlnulloNU+lvSFUh9yDCSCQbpQyXv8c04ET8OAuw+9qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxMbO9KVCAT6dNdkOatHyM/6qyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTc5ZjJkZmYtNGEzZS0z MTI1LWFmMmYtMDZkOGU2ODRmMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEp6scAFL8sDgc+KhJO8a5tLW8RcUzoJvutAtFAKO3G42vxCWCVNrmNe 70MpXXkJbFYYe+XF0XSZ16oeSuiPgHcXzypOv7/A4hdB5bHM9nEBg6rHgOyqXzON SevPLfMg7bSQxwGarNwHfdsbGrIswlJV5GZFH731n5o8L3j8pQi5Jk0X32t9DTQB LM3agX+rGaMPD3HBfL9lt467LSWjTlTNEiVV/x/r5NaH28piW5iyvGUCyN+BR8qS w0zp7OILbBb9bNp/G9zz14F10gNVOAoAYoTSYDRcTUDRI5AhE1gwQxs0KM/HvPOC A/AKXRz3iaKiAqbxCRd9xDHsuuMJMrM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:04 2025 by rpki-client