$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b69d7ba7-0e38-3590-8cad-aa0a51aee3e2.roa File: b69d7ba7-0e38-3590-8cad-aa0a51aee3e2.roa (raw, json) Hash identifier: 4k0wYXHtEyVY3AJuREnTeGzfOy6K/DLaROBtvNOp6Ng= Subject key identifier: 58:C2:75:80:11:A5:C0:35:2F:C9:99:ED:86:58:5D:DC:6F:BD:47:C9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9C5B32AABC56E340CB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b69d7ba7-0e38-3590-8cad-aa0a51aee3e2.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.204.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9c:5b:32:aa:bc:56:e3:40:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=c26a4de6-f5cc-4d4c-8c6e-afaefe140057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:fe:5b:04:44:21:4d:86:d6:3b:67:86:dc: c6:aa:0c:99:b3:52:e1:84:3c:8e:dc:9d:f5:0a:e8: 66:ef:33:89:d9:a6:2b:13:21:0c:cd:e4:e7:c1:c6: 81:86:b9:d4:63:84:13:15:a5:3d:db:25:61:c5:8b: eb:af:fa:29:39:3a:e8:4b:5a:42:f6:bc:95:ac:2f: 8b:ae:c2:e4:84:8e:8b:a2:12:ce:e0:d3:f6:00:55: e4:46:fa:4e:d6:71:02:32:25:dc:61:8b:0f:77:82: 66:87:6c:7c:bd:3a:ef:a9:c8:5e:4f:f4:d9:a9:e9: ea:a2:f3:87:09:1d:66:9e:7a:9d:b0:9f:83:cc:a3: 0b:00:54:83:04:9e:50:15:3b:ab:4b:ef:74:93:78: e2:94:35:4b:45:a3:bc:ab:10:b7:4d:40:eb:d9:38: 4f:c7:f3:43:2b:b9:7e:92:4f:6b:be:4a:1b:47:77: 97:7c:86:7a:1c:d2:66:79:50:37:24:54:4f:fe:2b: 94:8f:b2:dd:22:49:c2:ad:8a:74:b0:4e:f1:64:48: cc:47:66:51:cf:b1:6a:fd:bd:78:20:85:ea:de:89: 29:e0:22:48:b5:2b:78:4c:c9:f4:b0:9c:6f:01:23: d1:18:22:13:f6:a1:43:ce:c2:04:11:e6:4a:78:54: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:75:80:11:A5:C0:35:2F:C9:99:ED:86:58:5D:DC:6F:BD:47:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b69d7ba7-0e38-3590-8cad-aa0a51aee3e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:e3:12:cc:c4:a4:8e:8f:46:b0:ea:5f:6d:74:06:3b:ca:6a: 39:46:6b:75:c9:25:67:67:15:74:89:cb:c7:cf:ac:c1:e1:67: 49:06:37:35:19:b0:79:38:42:d5:0f:9b:cb:10:9f:f2:9c:42: 23:28:03:08:3e:01:19:79:d1:56:d6:43:59:42:f7:8d:5b:49: 24:4a:87:89:b3:9f:e5:3a:50:ee:12:f1:6a:0f:16:a4:ec:fc: 24:62:97:2f:b7:0e:a5:65:68:ed:b7:86:91:e4:41:50:5d:5c: ab:92:38:51:63:2b:a3:05:b6:d1:c1:21:2f:36:65:01:2e:6b: d9:8a:64:de:a1:a0:23:e6:21:91:19:b5:71:da:c3:e5:3e:76: 00:1f:cb:6b:29:14:55:a1:98:d8:63:61:33:ce:d4:40:d7:94: 26:63:1a:08:31:0d:70:fb:95:f8:b1:25:bc:40:3c:f5:54:5b: 20:ee:05:fa:72:a5:25:d8:c2:59:0d:b9:c5:e1:85:23:47:83: c7:02:de:21:da:89:1a:10:15:ef:59:b4:9e:e8:c1:09:ff:60: 9d:1e:a5:dd:80:9a:17:8c:43:7c:be:ee:1a:ee:9a:66:e3:cf: 56:27:92:01:5c:39:b1:65:b4:63:95:5b:ad:48:76:e5:24:ad: 76:ec:f6:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJxbMqq8VuNAy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzI2YTRkZTYtZjVjYy00ZDRjLThjNmUtYWZhZWZlMTQwMDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGP+WwREIU2G1jtnhtzGqgyZs1LhhDyO3J31 Cuhm7zOJ2aYrEyEMzeTnwcaBhrnUY4QTFaU92yVhxYvrr/opOTroS1pC9ryVrC+L rsLkhI6LohLO4NP2AFXkRvpO1nECMiXcYYsPd4Jmh2x8vTrvqcheT/TZqenqovOH CR1mnnqdsJ+DzKMLAFSDBJ5QFTurS+90k3jilDVLRaO8qxC3TUDr2ThPx/NDK7l+ kk9rvkobR3eXfIZ6HNJmeVA3JFRP/iuUj7LdIknCrYp0sE7xZEjMR2ZRz7Fq/b14 IIXq3okp4CJItSt4TMn0sJxvASPRGCIT9qFDzsIEEeZKeFRFmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjCdYARpcA1L8mZ7YZYXdxvvUfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjY5ZDdiYTctMGUzOC0z NTkwLThjYWQtYWEwYTUxYWVlM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDjEszEpI6PRrDqX210BjvKajlGa3XJJWdnFXSJy8fPrMHhZ0kGNzUZ sHk4QtUPm8sQn/KcQiMoAwg+ARl50VbWQ1lC941bSSRKh4mzn+U6UO4S8WoPFqTs /CRily+3DqVlaO23hpHkQVBdXKuSOFFjK6MFttHBIS82ZQEua9mKZN6hoCPmIZEZ tXHaw+U+dgAfy2spFFWhmNhjYTPO1EDXlCZjGggxDXD7lfixJbxAPPVUWyDuBfpy pSXYwlkNucXhhSNHg8cC3iHaiRoQFe9ZtJ7owQn/YJ0epd2AmheMQ3y+7hrummbj z1YnkgFcObFltGOVW61IduUkrXbs9mo= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:11 2025 by rpki-client