$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf0bfee-2b65-38e6-982c-1ac91fa5d961.roa File: bcf0bfee-2b65-38e6-982c-1ac91fa5d961.roa (raw, json) Hash identifier: Kyt6Kfnl5QHHG7LpukFrZyWcTA1rD+Q8rSqWpQZRxAI= Subject key identifier: 10:4C:E4:4C:9E:08:26:40:FE:8A:8F:66:6C:A6:7E:09:73:3B:F3:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC23CB82A2CA19AF3FF340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf0bfee-2b65-38e6-982c-1ac91fa5d961.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.32.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:23:cb:82:a2:ca:19:af:3f:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=6249e8cf-d773-4e81-9af3-59bf244e0a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:ce:1f:ad:93:ae:e9:a7:82:ab:43:1d:79: 44:df:9e:bd:3a:a7:6c:b7:70:6c:48:f4:f2:74:0c: 8d:32:cf:e9:01:ae:cf:d4:4f:78:84:63:6f:93:68: fa:57:09:da:3a:9c:4a:90:54:81:89:09:ff:49:74: 6b:26:8f:2a:d9:9b:3c:dd:ee:35:9e:0e:74:35:39: 75:1d:af:42:ce:c6:65:f9:de:a1:2e:04:98:43:3c: e5:f4:80:14:18:f8:ef:0f:f6:50:35:59:77:7b:c6: b1:ae:b0:0d:eb:eb:5a:73:cc:86:9b:e5:35:a8:a2: 26:a5:d0:52:35:ff:e7:9e:08:ca:18:4d:e8:df:19: 71:2d:18:54:7b:15:d6:e2:ff:a9:bb:a0:be:3a:2c: fe:4c:ee:51:9b:db:75:fd:35:06:2e:f2:73:41:6a: ae:97:c1:1a:41:62:64:44:0e:d6:63:0c:73:89:90: 9d:45:3a:b2:16:ce:fd:52:77:99:ab:67:34:20:6a: 6d:38:cb:83:b3:5e:14:32:4a:b2:9f:de:da:46:03: 5f:09:f3:22:e2:f7:b4:95:e3:d7:72:1d:ac:8c:00: 05:50:de:af:71:5c:9b:cb:f1:6e:e8:35:b1:1c:9e: 94:19:0e:be:44:8f:b9:08:cd:38:b2:03:f7:53:18: c0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4C:E4:4C:9E:08:26:40:FE:8A:8F:66:6C:A6:7E:09:73:3B:F3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf0bfee-2b65-38e6-982c-1ac91fa5d961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:26:96:db:0d:df:98:d0:5f:d4:14:aa:00:22:16:a0:8c:01: 0d:c9:ab:59:82:9a:81:a0:1c:c1:4d:34:22:3e:d1:19:17:bd: 3e:c6:bf:05:01:a1:37:64:b5:76:56:e8:e2:38:86:0f:74:0f: 31:b5:c1:b1:f6:0a:d2:51:8c:e4:16:3a:88:ef:6c:63:e0:77: 49:77:6f:5c:ff:36:97:24:2d:99:61:c5:b6:f7:11:b6:da:e4: 56:43:19:88:dd:cb:cd:b5:7c:dd:ca:d8:af:80:94:74:c1:a0: 46:f6:26:0a:6f:17:2b:33:b6:f0:43:4f:38:4c:76:d0:5b:cb: cf:8d:26:13:a3:43:65:0b:be:42:46:70:df:ae:11:c1:ca:df: 96:c5:e5:49:41:82:b6:67:51:25:92:1b:0b:12:a3:71:99:88: 2e:b8:60:f4:0b:d4:a3:3e:fd:3e:5f:d2:e5:d0:41:e8:c6:2c: de:7a:d5:cf:26:f2:12:fa:51:61:c4:ab:d3:d8:60:69:35:f3: 91:3d:a8:09:18:35:a2:b2:35:17:6f:eb:39:7d:94:4f:0f:32: 70:1a:b4:b0:a7:99:df:c2:aa:27:f9:bb:d8:55:f9:1f:53:d3: ad:42:a1:0a:89:ea:1e:0e:bf:89:ce:2f:b3:08:c6:f0:cc:20: b9:25:76:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CPLgqLKGa8/80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NjI0OWU4Y2YtZDc3My00ZTgxLTlhZjMtNTliZjI0NGUwYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13LOH62TrumngqtDHXlE3569Oqdst3BsSPTy dAyNMs/pAa7P1E94hGNvk2j6VwnaOpxKkFSBiQn/SXRrJo8q2Zs83e41ng50NTl1 Ha9CzsZl+d6hLgSYQzzl9IAUGPjvD/ZQNVl3e8axrrAN6+tac8yGm+U1qKImpdBS Nf/nngjKGE3o3xlxLRhUexXW4v+pu6C+Oiz+TO5Rm9t1/TUGLvJzQWqul8EaQWJk RA7WYwxziZCdRTqyFs79UneZq2c0IGptOMuDs14UMkqyn97aRgNfCfMi4ve0lePX ch2sjAAFUN6vcVyby/Fu6DWxHJ6UGQ6+RI+5CM04sgP3UxjAbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBM5EyeCCZA/oqPZmymfglzO/PhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmNmMGJmZWUtMmI2NS0z OGU2LTk4MmMtMWFjOTFmYTVkOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0mltsN35jQX9QUqgAiFqCMAQ3Jq1mCmoGgHMFNNCI+0RkXvT7GvwUB oTdktXZW6OI4hg90DzG1wbH2CtJRjOQWOojvbGPgd0l3b1z/NpckLZlhxbb3Ebba 5FZDGYjdy821fN3K2K+AlHTBoEb2JgpvFysztvBDTzhMdtBby8+NJhOjQ2ULvkJG cN+uEcHK35bF5UlBgrZnUSWSGwsSo3GZiC64YPQL1KM+/T5f0uXQQejGLN561c8m 8hL6UWHEq9PYYGk185E9qAkYNaKyNRdv6zl9lE8PMnAatLCnmd/Cqif5u9hV+R9T 061CoQqJ6h4Ov4nOL7MIxvDMILkldlE= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:44 2025 by rpki-client