$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa File: bc492877-0ce1-34b2-8751-238e5cf88357.roa (raw, json) Hash identifier: jo+yFmM3yzMIHRvnGUxELCA0xBtaEoFbwKMqI6gFaYY= Subject key identifier: 69:C2:80:63:A9:32:D0:EF:C2:D2:6B:B8:97:BA:6B:B9:69:5C:64:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C8B3EA55F18034BEB5220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.196.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:8b:3e:a5:5f:18:03:4b:eb:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=e1d2489a-450e-4fd2-ac71-88945b8b4f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:19:57:78:36:50:7d:12:e7:1e:b3:75:ef:b0: 65:5b:b9:be:1d:57:d4:28:f8:75:fb:a5:b3:64:b6: 58:b3:15:be:93:e6:7b:6e:8b:0e:e1:d9:be:91:7b: 4a:77:cf:2c:2a:53:16:6c:92:02:a0:61:e9:41:a4: ef:74:c4:8a:6b:38:cf:b1:be:e5:62:3f:7e:a9:01: 7b:60:94:cf:e4:86:fa:65:8e:c1:16:86:7b:8d:48: f4:47:87:02:cc:6f:19:ea:f2:3a:36:4b:9b:60:6b: ad:db:5a:d5:c1:d6:be:fe:4c:73:59:e6:f0:f3:94: 56:b7:ca:c9:94:ea:fb:2a:27:df:bb:0a:47:0e:62: eb:2a:4e:29:82:77:ab:d0:c4:e6:8e:ba:08:78:8e: 88:19:90:4b:b8:fd:b5:1d:3f:2d:f2:0d:10:4e:06: 16:f5:26:52:07:bc:e0:8d:c3:96:dd:51:aa:f9:10: e7:fa:f7:02:85:70:b7:78:50:0e:5a:a8:f8:58:7c: 60:98:57:fc:4e:23:d1:6f:17:97:2a:be:d9:e1:eb: 82:30:4d:6a:6a:ef:06:af:53:94:d5:a8:b9:3d:3b: 33:19:7c:c6:86:c4:38:30:c6:7b:d7:36:ad:22:92: 8c:27:68:cb:de:31:1a:94:01:18:d6:1d:c4:1e:71: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:80:63:A9:32:D0:EF:C2:D2:6B:B8:97:BA:6B:B9:69:5C:64:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc492877-0ce1-34b2-8751-238e5cf88357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cb:71:2d:7a:c4:e0:42:a1:20:90:da:bf:ba:56:5d:92:d0: 41:30:a6:0f:b5:c9:9b:61:2e:ea:21:41:d9:34:b8:0f:68:a5: 04:26:91:bd:ee:f7:82:a3:7b:81:84:3c:79:d7:7b:50:d5:86: 87:e8:cb:8c:d5:68:20:61:fe:3e:86:1c:3d:a7:1f:e1:c2:c0: 2c:22:a7:d4:6b:e3:53:d9:da:94:f8:59:ad:59:f8:85:75:16: ae:6a:f4:d3:db:c3:ee:59:5b:98:e3:62:8b:0e:1d:f0:6d:8c: fc:5c:dd:0a:aa:58:97:20:0d:29:36:59:06:f7:93:90:49:52: 10:36:b6:9d:40:88:57:d7:a3:00:29:d5:e4:43:cb:cd:2d:74: 69:6e:4a:db:bd:1e:c4:a4:48:51:f0:25:ab:0d:91:a2:29:f3: eb:0e:84:87:57:bb:1c:9f:5c:83:bc:a5:69:3b:71:c9:fa:e1: 83:da:08:0d:35:b3:8e:c5:ab:40:2e:a4:36:22:02:70:10:2b: 2d:19:cd:f8:cf:9f:d0:b8:24:f9:32:7b:fb:c7:32:07:17:28: 39:7e:4e:58:e5:b2:21:26:47:cc:92:cd:a0:da:dc:17:ef:17: aa:6d:c3:1e:f5:22:f8:1f:8c:34:b2:81:92:fe:69:ee:4a:68: c8:9f:e3:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIs+pV8YA0vrUiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTFkMjQ4OWEtNDUwZS00ZmQyLWFjNzEtODg5NDViOGI0ZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixlXeDZQfRLnHrN177BlW7m+HVfUKPh1+6Wz ZLZYsxW+k+Z7bosO4dm+kXtKd88sKlMWbJICoGHpQaTvdMSKazjPsb7lYj9+qQF7 YJTP5Ib6ZY7BFoZ7jUj0R4cCzG8Z6vI6NkubYGut21rVwda+/kxzWebw85RWt8rJ lOr7KiffuwpHDmLrKk4pgner0MTmjroIeI6IGZBLuP21HT8t8g0QTgYW9SZSB7zg jcOW3VGq+RDn+vcChXC3eFAOWqj4WHxgmFf8TiPRbxeXKr7Z4euCME1qau8Gr1OU 1ai5PTszGXzGhsQ4MMZ71zatIpKMJ2jL3jEalAEY1h3EHnE2xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnCgGOpMtDvwtJruJe6a7lpXGQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmM0OTI4NzctMGNlMS0z NGIyLTg3NTEtMjM4ZTVjZjg4MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8SoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLLcS16xOBCoSCQ2r+6Vl2S0EEwpg+1yZthLuohQdk0uA9opQQmkb3u 94Kje4GEPHnXe1DVhofoy4zVaCBh/j6GHD2nH+HCwCwip9Rr41PZ2pT4Wa1Z+IV1 Fq5q9NPbw+5ZW5jjYosOHfBtjPxc3QqqWJcgDSk2WQb3k5BJUhA2tp1AiFfXowAp 1eRDy80tdGluStu9HsSkSFHwJasNkaIp8+sOhIdXuxyfXIO8pWk7ccn64YPaCA01 s47Fq0AupDYiAnAQKy0ZzfjPn9C4JPkye/vHMgcXKDl+TljlsiEmR8ySzaDa3Bfv F6ptwx71IvgfjDSygZL+ae5KaMif48k= -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:21 2025 by rpki-client