$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa File: aa87476e-6587-32f8-9e25-ff671f5c947a.roa (raw, json) Hash identifier: DZSjqOQ/Jw6+cxfOa965uNJv6mfAgurakDLdy5s0tYQ= Subject key identifier: FA:A3:56:F1:0F:06:F2:6D:98:07:DE:B5:90:70:11:E3:95:39:39:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2FC1AE9D1DDBF6556633CC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.195.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ae:9d:1d:db:f6:55:66:33:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=a2d9557e-7770-4ee2-803e-7d9c48201f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:a7:40:7a:55:d0:6f:19:45:85:24:d1:2e: 0f:0b:7f:eb:56:19:a8:f0:29:9f:98:08:8c:91:29: 17:dc:19:17:3b:91:97:5f:42:2f:8a:59:bc:eb:e1: 64:bc:7d:c4:15:35:a3:30:3c:ef:c4:98:56:ad:2e: 6c:78:55:57:d2:00:e8:83:96:1d:c0:3e:04:e1:94: 1f:48:69:ab:6e:a7:35:d2:e3:69:92:9b:0b:24:14: 08:a5:0d:f2:ec:11:f3:4b:d7:e4:0a:e9:aa:dc:77: c1:9b:81:8f:53:0c:f6:81:b8:9f:07:8b:a7:fe:30: 03:f1:bc:86:5b:be:d1:fa:81:f5:81:42:c3:85:16: dd:b5:62:d2:ae:c2:1b:0e:22:f3:f3:bb:13:3a:39: 8a:0d:d1:b3:01:21:3a:00:73:01:84:47:45:00:11: a8:b9:0b:a3:e3:bf:e6:ec:00:ae:44:93:d8:4a:7c: 7b:b8:fa:80:fa:50:ff:1f:c1:07:a2:d5:09:77:e5: 32:12:ed:94:df:10:f6:ce:0b:a3:c8:ea:bf:3f:20: 86:24:05:20:a9:08:a3:ae:81:a5:c1:43:c1:be:28: b5:a7:f3:95:44:98:8a:f2:44:ad:cf:55:e6:bb:28: d5:05:c8:0c:31:18:29:af:d0:4e:27:59:fa:1d:8a: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A3:56:F1:0F:06:F2:6D:98:07:DE:B5:90:70:11:E3:95:39:39:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa87476e-6587-32f8-9e25-ff671f5c947a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:7b:59:72:b2:71:2c:f3:13:0e:d9:6f:4e:4a:3d:f6:fb:d0: fe:d3:07:00:79:f9:c0:6f:e7:27:4d:39:02:77:bc:89:19:a4: 9d:67:ee:36:13:36:c4:fd:ac:23:20:d0:34:06:62:e2:52:cd: e6:82:d8:03:85:9a:c0:7f:35:88:7e:d6:c4:fa:b1:b9:70:6c: 75:1b:2d:12:95:8e:d9:7b:ab:0b:68:c7:a2:5e:87:5f:ca:8e: 51:2c:07:ee:de:85:5b:64:80:d8:fa:77:c6:f1:69:a5:81:d1: 8b:7c:0e:ea:da:88:11:0f:00:81:f5:71:af:5f:ae:e5:a6:ce: ac:08:e7:be:0c:d6:ea:7c:62:b5:9d:2b:d7:65:98:f1:33:da: 36:18:d8:dc:71:04:da:93:85:90:69:3d:62:36:01:c5:3c:13: 69:8d:d6:b1:52:d0:0e:81:a2:a5:43:59:35:07:3f:59:12:64: 6d:67:42:b9:bb:fb:27:2c:eb:d9:aa:39:21:5a:0e:9c:e2:7f: cc:3b:6c:2f:b7:8a:aa:33:23:26:cc:ed:61:25:b9:b8:18:4e: 28:12:f0:f1:c3:14:23:1b:43:6e:57:b8:3c:68:2e:e3:13:ba: 8e:09:8c:94:b4:44:59:d9:2e:4b:e3:70:1a:23:1b:ac:83:6e: 61:38:60:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwa6dHdv2VWYzzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YTJkOTU1N2UtNzc3MC00ZWUyLTgwM2UtN2Q5YzQ4MjAxZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2inQHpV0G8ZRYUk0S4PC3/rVhmo8CmfmAiM kSkX3BkXO5GXX0Ivilm86+FkvH3EFTWjMDzvxJhWrS5seFVX0gDog5YdwD4E4ZQf SGmrbqc10uNpkpsLJBQIpQ3y7BHzS9fkCumq3HfBm4GPUwz2gbifB4un/jAD8byG W77R+oH1gULDhRbdtWLSrsIbDiLz87sTOjmKDdGzASE6AHMBhEdFABGouQuj47/m 7ACuRJPYSnx7uPqA+lD/H8EHotUJd+UyEu2U3xD2zgujyOq/PyCGJAUgqQijroGl wUPBvii1p/OVRJiK8kStz1XmuyjVBcgMMRgpr9BOJ1n6HYr7zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqjVvEPBvJtmAfetZBwEeOVOTmcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4NzQ3NmUtNjU4Ny0z MmY4LTllMjUtZmY2NzFmNWM5NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF7WXKycSzzEw7Zb05KPfb70P7TBwB5+cBv5ydNOQJ3vIkZpJ1n7jYT NsT9rCMg0DQGYuJSzeaC2AOFmsB/NYh+1sT6sblwbHUbLRKVjtl7qwtox6Jeh1/K jlEsB+7ehVtkgNj6d8bxaaWB0Yt8DuraiBEPAIH1ca9fruWmzqwI574M1up8YrWd K9dlmPEz2jYY2NxxBNqThZBpPWI2AcU8E2mN1rFS0A6BoqVDWTUHP1kSZG1nQrm7 +ycs69mqOSFaDpzif8w7bC+3iqozIybM7WElubgYTigS8PHDFCMbQ25XuDxoLuMT uo4JjJS0RFnZLkvjcBojG6yDbmE4YLg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:50 2025 by rpki-client