$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b400f444-f983-3318-a4d8-a14bac57c182.roa File: b400f444-f983-3318-a4d8-a14bac57c182.roa (raw, json) Hash identifier: dEi9zQCPjzJnWmBWS6rW26BJgJf7ZMuGFLoWFvqYWSQ= Subject key identifier: 04:77:81:12:4E:5D:47:85:DC:DD:88:DB:E1:1E:2F:9F:D6:8F:26:F2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3821AD1A355E720050619A50 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b400f444-f983-3318-a4d8-a14bac57c182.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.192.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:ad:1a:35:5e:72:00:50:61:9a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=bffecf16-6540-4c55-984c-79d067303ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:42:26:ac:b0:13:8a:70:ff:c4:18:75:79:36: 88:96:50:f7:7d:b9:4a:ec:1b:be:2e:63:58:5c:5a: 35:7d:9a:0c:6c:68:0d:fd:d7:5c:95:4d:c1:c3:84: 16:54:8e:0e:db:bc:96:4b:75:23:4b:e3:6e:53:eb: 39:cf:42:b1:58:30:0e:99:c0:3b:b2:27:27:ed:7b: 74:71:b4:5d:de:54:d8:22:8c:d8:d5:46:aa:6d:95: e5:dd:00:1e:f1:b0:0e:4f:de:16:7e:96:85:c4:4b: 73:72:ea:7e:12:90:bb:e3:ea:62:7b:47:9d:a3:4d: 13:d1:6b:d0:2f:25:d9:e8:22:f1:94:53:8e:1e:13: c7:38:f8:52:96:97:39:b0:51:7b:b9:81:89:33:33: 90:ad:e7:4b:86:77:88:b7:22:ae:be:bc:3e:cb:b5: ea:26:1d:83:5b:ef:37:5d:d7:3e:1f:2a:d8:06:8f: 5f:bf:2d:23:b2:de:ab:ea:d8:41:58:b5:02:7a:9f: 74:89:33:b2:82:86:07:05:39:74:e0:68:6e:06:98: 00:e4:50:2d:cb:f9:05:48:0e:fd:db:d3:4a:06:48: 88:05:a1:29:16:b3:40:ad:a3:5b:ba:07:02:7a:2d: 23:80:95:c7:5d:8f:20:f2:5e:83:94:68:53:06:d5: 8d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:77:81:12:4E:5D:47:85:DC:DD:88:DB:E1:1E:2F:9F:D6:8F:26:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b400f444-f983-3318-a4d8-a14bac57c182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:8d:65:1b:59:8d:ac:38:f3:85:73:ea:6d:3b:08:8a:d4:36: 1a:8b:e9:65:5f:61:36:64:06:0a:b4:b4:08:fa:c0:02:bd:c1: 20:9d:7f:82:50:7c:82:58:8c:bc:ae:34:95:1f:78:24:7b:6b: d7:70:47:fe:95:c2:34:94:da:62:aa:83:c8:80:6a:a9:33:97: 57:96:6e:ff:63:b1:e2:11:6f:27:f8:69:1d:94:17:c3:e4:c8: fb:0c:23:b7:93:0d:40:c1:29:e3:23:6f:64:f3:a9:a8:24:86: cf:52:29:b6:9f:29:1b:ee:a2:d9:70:ef:b4:ec:91:ef:b2:a2: e5:81:26:f7:f9:f2:36:c0:9d:4f:b5:d1:66:42:38:16:20:71: fb:ac:f5:d6:9b:39:75:6e:8d:49:88:3d:54:0a:9b:5e:a6:95: 8c:36:c5:25:d9:78:8a:88:73:19:00:2b:07:a6:24:0f:97:0e: da:13:b8:18:b1:c0:f7:27:79:16:c5:41:e8:d3:cf:7c:eb:61: c3:a6:84:c6:a4:8e:67:1a:5c:62:22:5d:93:52:ed:5e:e8:72: ee:df:dd:e1:7b:c9:60:fa:e0:34:9a:ee:0d:e6:9a:f1:eb:3d: 97:0e:7f:4e:45:10:bd:97:99:d2:22:21:e1:a0:3a:79:8e:72: ca:6e:70:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4Ia0aNV5yAFBhmlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YmZmZWNmMTYtNjU0MC00YzU1LTk4NGMtNzlkMDY3MzAzY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUImrLATinD/xBh1eTaIllD3fblK7Bu+LmNY XFo1fZoMbGgN/ddclU3Bw4QWVI4O27yWS3UjS+NuU+s5z0KxWDAOmcA7sicn7Xt0 cbRd3lTYIozY1UaqbZXl3QAe8bAOT94WfpaFxEtzcup+EpC74+pie0edo00T0WvQ LyXZ6CLxlFOOHhPHOPhSlpc5sFF7uYGJMzOQredLhneItyKuvrw+y7XqJh2DW+83 Xdc+HyrYBo9fvy0jst6r6thBWLUCep90iTOygoYHBTl04GhuBpgA5FAty/kFSA79 29NKBkiIBaEpFrNAraNbugcCei0jgJXHXY8g8l6DlGhTBtWNBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR3gRJOXUeF3N2I2+EeL5/WjybyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjQwMGY0NDQtZjk4My0z MzE4LWE0ZDgtYTE0YmFjNTdjMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeNZRtZjaw484Vz6m07CIrUNhqL6WVfYTZkBgq0tAj6wAK9wSCdf4JQ fIJYjLyuNJUfeCR7a9dwR/6VwjSU2mKqg8iAaqkzl1eWbv9jseIRbyf4aR2UF8Pk yPsMI7eTDUDBKeMjb2Tzqagkhs9SKbafKRvuotlw77Tske+youWBJvf58jbAnU+1 0WZCOBYgcfus9dabOXVujUmIPVQKm16mlYw2xSXZeIqIcxkAKwemJA+XDtoTuBix wPcneRbFQejTz3zrYcOmhMakjmcaXGIiXZNS7V7ocu7f3eF7yWD64DSa7g3mmvHr PZcOf05FEL2XmdIiIeGgOnmOcspucPg= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:46 2025 by rpki-client