$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80b3a56-1235-32e2-86b6-880254645285.roa File: b80b3a56-1235-32e2-86b6-880254645285.roa (raw, json) Hash identifier: fE7/qz60feyrsW53sepEveuoMiQL+x1Fy/vQ6kG5Ue8= Subject key identifier: DC:55:71:34:D6:2A:54:89:45:18:1A:68:58:67:E6:9F:93:4D:C1:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9F298270DB5D4BAE9600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80b3a56-1235-32e2-86b6-880254645285.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.205.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9f:29:82:70:db:5d:4b:ae:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=6c375e0c-19e9-4941-95de-6243efd0c720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:63:76:7e:66:a1:be:3d:ca:a4:61:ae:a4: 80:0a:f8:a2:98:e6:94:0e:88:dc:9e:06:e0:4b:4d: b2:bf:b7:69:2d:aa:26:a4:69:19:d9:4d:40:80:28: b0:25:3b:44:7e:4f:2c:84:10:a0:89:70:a1:3a:9c: 87:17:41:d4:9e:e8:c0:75:95:a7:4e:63:82:0a:42: 25:05:33:c4:38:d5:13:ea:5e:16:97:63:00:08:7c: c4:7c:48:d8:0e:26:fc:e4:63:d2:ba:b0:d2:3a:67: ef:0c:30:9d:71:5f:86:ab:60:53:6c:10:3c:b3:29: 87:c5:36:03:22:08:ef:18:25:f4:f6:44:04:c1:a5: fd:88:22:3a:70:11:81:88:07:17:ae:6c:50:ea:9b: c1:29:98:b3:b0:b5:69:01:34:d5:33:61:b5:f9:f3: d6:f4:f4:bd:cc:52:5c:ba:a1:90:50:12:17:9f:44: f0:3a:ed:5e:f6:2e:88:d1:bd:fb:34:58:e6:71:04: 9d:b6:f4:37:ee:4b:ee:74:29:4d:a8:3a:50:8d:58: 4c:4c:ff:58:06:26:73:e3:35:6e:f4:6b:a5:26:2f: 32:11:2d:75:48:59:13:42:63:85:fd:82:57:72:9a: d8:8d:63:94:79:fe:8c:31:51:a2:39:0d:e5:3f:05: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:55:71:34:D6:2A:54:89:45:18:1A:68:58:67:E6:9F:93:4D:C1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b80b3a56-1235-32e2-86b6-880254645285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:80:c5:f3:58:58:09:a1:67:e1:ba:40:0e:04:58:7a:19:9d: b6:fe:41:75:db:e1:33:30:ec:b6:ff:de:ec:93:e4:4e:26:f5: 45:0a:8b:b4:8e:0e:2e:51:71:0e:0b:e2:4f:c8:f3:9d:15:8c: 6a:76:bf:9c:10:ed:f8:8e:a8:70:7d:61:f5:e5:ba:d7:b8:e8: 88:07:44:61:71:49:be:2b:a2:29:1e:33:40:10:80:5b:48:c3: 51:a4:91:a6:9a:fd:92:25:bb:e3:82:e4:b9:8d:08:40:e7:a3: b4:f4:78:70:39:ca:d1:26:f8:43:e7:ff:3b:f5:f3:ac:6a:96: 24:de:0b:97:cf:e6:e7:f1:48:77:ef:55:82:55:02:ae:e6:df: 0b:3b:18:48:78:00:e2:9e:97:b9:ac:8e:98:12:05:f5:d6:10: de:03:23:3e:53:2e:06:aa:b5:b5:24:01:28:12:4a:8a:18:d9: 86:e1:55:0c:72:38:dd:1a:86:0d:df:ac:33:54:38:30:c7:e9: 2a:b7:e1:a5:b0:de:3b:54:a6:17:f7:2a:00:60:e6:95:2d:89: 7b:a6:cc:8e:aa:1a:0d:6e:f1:dc:9a:1b:c7:84:d8:b2:31:93: 1a:69:e5:87:e7:07:22:35:90:39:8a:07:ac:a4:7f:6f:b6:38: 2f:83:7e:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJ8pgnDbXUuulgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NmMzNzVlMGMtMTllOS00OTQxLTk1ZGUtNjI0M2VmZDBjNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd1jdn5mob49yqRhrqSACviimOaUDojcngbg S02yv7dpLaompGkZ2U1AgCiwJTtEfk8shBCgiXChOpyHF0HUnujAdZWnTmOCCkIl BTPEONUT6l4Wl2MACHzEfEjYDib85GPSurDSOmfvDDCdcV+Gq2BTbBA8symHxTYD IgjvGCX09kQEwaX9iCI6cBGBiAcXrmxQ6pvBKZizsLVpATTVM2G1+fPW9PS9zFJc uqGQUBIXn0TwOu1e9i6I0b37NFjmcQSdtvQ37kvudClNqDpQjVhMTP9YBiZz4zVu 9GulJi8yES11SFkTQmOF/YJXcprYjWOUef6MMVGiOQ3lPwUbZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxVcTTWKlSJRRgaaFhn5p+TTcFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjgwYjNhNTYtMTIzNS0z MmUyLTg2YjYtODgwMjU0NjQ1Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF808MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqAxfNYWAmhZ+G6QA4EWHoZnbb+QXXb4TMw7Lb/3uyT5E4m9UUKi7SO Di5RcQ4L4k/I850VjGp2v5wQ7fiOqHB9YfXlute46IgHRGFxSb4roikeM0AQgFtI w1Gkkaaa/ZIlu+OC5LmNCEDno7T0eHA5ytEm+EPn/zv186xqliTeC5fP5ufxSHfv VYJVAq7m3ws7GEh4AOKel7msjpgSBfXWEN4DIz5TLgaqtbUkASgSSooY2YbhVQxy ON0ahg3frDNUODDH6Sq34aWw3jtUphf3KgBg5pUtiXumzI6qGg1u8dyaG8eE2LIx kxpp5YfnByI1kDmKB6ykf2+2OC+DfrY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:42:24 2025 by rpki-client