$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a1fea4-31aa-35e9-9125-888d67f4b3c6.roa File: c0a1fea4-31aa-35e9-9125-888d67f4b3c6.roa (raw, json) Hash identifier: ChJloMU4w4VmXdXLQuXxrcM6q+K7FSvc+ZS/Govg5a0= Subject key identifier: 73:83:02:66:BF:FC:E0:D2:FB:4B:E8:43:D5:B9:0D:E1:1C:64:20:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C6F9CCCD581414FDF8080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a1fea4-31aa-35e9-9125-888d67f4b3c6.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.194.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:6f:9c:cc:d5:81:41:4f:df:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=21928023-3088-42d1-8a8c-8444785ee313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:6d:02:1e:94:e8:20:82:82:dc:67:35:4a: 56:c7:a3:b1:6a:81:bc:29:32:a8:a6:6f:4a:ff:99: 26:83:23:f2:2a:6d:93:ed:b0:7a:87:27:c6:b2:70: af:52:36:3e:ba:8f:09:cf:9d:a2:09:d9:9d:01:76: 78:ad:9f:8c:4a:01:99:ff:20:d3:6b:84:dc:e6:88: b8:f1:88:c8:e2:35:64:39:ab:50:34:7a:7f:c4:65: 1c:6e:ef:ef:7e:9f:ef:11:d8:e8:32:7b:7b:cf:92: 60:df:c3:01:ef:bc:d1:1e:15:3d:f5:16:55:25:68: e8:cc:c4:5b:61:a3:4a:68:dd:d2:27:d9:4f:8a:a6: 4a:84:4d:bc:f0:b3:fe:4a:ea:ad:ac:a7:39:f8:9b: 2c:a8:38:ae:c7:6a:30:30:a5:5a:58:cb:0e:02:43: cb:74:ec:06:e5:d5:d5:d1:27:96:c6:0c:72:88:41: 3b:25:c5:55:1b:c3:65:8b:3c:b6:b1:1f:35:06:05: 09:19:5d:12:22:96:9b:76:ac:4a:47:96:29:58:0a: 7f:d7:69:cd:02:5a:10:79:26:68:fa:b9:d3:3f:59: 76:fc:7e:20:fc:a0:64:f8:e5:67:08:6e:01:76:22: 06:91:be:1a:a1:6c:40:2c:0d:fd:02:34:87:18:b2: 0c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:83:02:66:BF:FC:E0:D2:FB:4B:E8:43:D5:B9:0D:E1:1C:64:20:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0a1fea4-31aa-35e9-9125-888d67f4b3c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:eb:49:1e:b5:6f:32:22:7f:70:d4:c1:d0:49:e0:45:e2:d7: e2:eb:af:30:3c:34:0d:1d:f8:b7:25:27:be:ce:fe:f6:24:05: 5f:6c:38:b2:3e:d1:8e:75:7b:c9:50:68:8a:b2:ef:2f:7c:7b: 9e:68:6a:9c:82:91:71:e2:20:c4:27:6d:01:d8:2c:78:67:a5: 26:4e:37:9c:67:71:6e:94:2e:a3:ce:35:89:36:97:20:64:21: f5:a3:6f:0d:1a:11:49:4e:7b:4b:ff:68:65:a1:a5:28:3c:d9: 15:63:be:4a:e7:de:10:56:84:46:f8:37:b0:f0:d8:13:45:16: 60:17:28:c4:53:f1:64:7f:6c:39:5b:1d:d5:99:02:2f:49:e6: fa:c2:32:16:15:62:26:8f:05:0c:4a:18:7c:f2:8f:61:51:53: 63:d1:86:7c:57:f9:bb:12:38:7e:88:fd:f9:cd:91:e8:9f:52: 90:cd:1b:62:a3:7c:94:88:f2:3e:03:79:23:1d:d2:8a:35:66: ac:d0:0d:20:ac:25:2b:9f:ba:1b:bd:12:26:84:36:f9:d8:5d: a1:9e:40:66:a1:d2:c3:77:fa:c6:e0:1a:a2:54:a4:52:5a:84: 03:6d:ad:63:9a:2a:69:31:0d:26:8d:83:94:a1:45:01:02:ba: 47:e2:72:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTG+czNWBQU/fgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MjE5MjgwMjMtMzA4OC00MmQxLThhOGMtODQ0NDc4NWVlMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1dtAh6U6CCCgtxnNUpWx6OxaoG8KTKopm9K /5kmgyPyKm2T7bB6hyfGsnCvUjY+uo8Jz52iCdmdAXZ4rZ+MSgGZ/yDTa4Tc5oi4 8YjI4jVkOatQNHp/xGUcbu/vfp/vEdjoMnt7z5Jg38MB77zRHhU99RZVJWjozMRb YaNKaN3SJ9lPiqZKhE288LP+SuqtrKc5+JssqDiux2owMKVaWMsOAkPLdOwG5dXV 0SeWxgxyiEE7JcVVG8Nlizy2sR81BgUJGV0SIpabdqxKR5YpWAp/12nNAloQeSZo +rnTP1l2/H4g/KBk+OVnCG4BdiIGkb4aoWxALA39AjSHGLIMawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHODAma//ODS+0voQ9W5DeEcZCAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBhMWZlYTQtMzFhYS0z NWU5LTkxMjUtODg4ZDY3ZjRiM2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFF8JAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvrSR61bzIif3DUwdBJ4EXi1+LrrzA8NA0d+LclJ77O/vYkBV9sOLI+ 0Y51e8lQaIqy7y98e55oapyCkXHiIMQnbQHYLHhnpSZON5xncW6ULqPONYk2lyBk IfWjbw0aEUlOe0v/aGWhpSg82RVjvkrn3hBWhEb4N7Dw2BNFFmAXKMRT8WR/bDlb HdWZAi9J5vrCMhYVYiaPBQxKGHzyj2FRU2PRhnxX+bsSOH6I/fnNkeifUpDNG2Kj fJSI8j4DeSMd0oo1ZqzQDSCsJSufuhu9EiaENvnYXaGeQGah0sN3+sbgGqJUpFJa hANtrWOaKmkxDSaNg5ShRQECukficpI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:12:55 2025 by rpki-client