$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d134a4a0-eb54-3f05-ae71-d8885b2ac163.roa File: d134a4a0-eb54-3f05-ae71-d8885b2ac163.roa (raw, json) Hash identifier: 6XQbM5eyqz78cmnDaO+hf+Z8q9cWjGJAKglu6Xrjik8= Subject key identifier: 90:2E:23:44:92:2F:3E:79:A0:AB:D1:5A:80:6E:B7:43:3F:95:8C:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C96511E488B7F74B326A4 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d134a4a0-eb54-3f05-ae71-d8885b2ac163.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.206.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:96:51:1e:48:8b:7f:74:b3:26:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=1a5f2e86-7958-48e1-b4b3-4ececcc408a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:36:82:b2:1b:78:93:43:f3:a6:99:0b:4a: 84:f2:d7:36:b8:f0:25:06:ee:94:25:95:28:e6:b4: 1d:2a:2a:55:60:1b:ea:fc:f0:6c:ed:96:0f:1f:1d: 0c:f7:75:42:5c:a4:13:f1:7b:a9:15:80:e6:79:62: 95:f0:e7:77:ed:4c:a7:62:c5:53:ec:0c:59:a8:24: ba:80:f0:cd:5e:d8:6e:12:c5:f8:ff:bd:d6:03:b5: a5:17:ca:47:b4:89:b4:6b:09:76:da:c0:26:62:29: 96:31:91:3f:60:de:2e:e9:56:3c:94:15:d3:ed:6d: b5:1f:74:91:61:2d:35:ee:bc:14:7f:0b:5d:fc:ec: 87:f3:ea:81:c5:2f:a6:30:fe:8e:e7:d5:78:39:9a: b8:7a:31:36:70:51:cd:3b:bf:4b:fd:96:30:75:cf: 75:cf:5d:0f:1b:6f:44:7e:f2:6e:14:4e:d8:c4:f7: fd:ff:fe:30:4c:88:9a:d9:55:93:45:68:c1:1d:40: 9d:ac:2a:ff:fb:fc:8a:94:58:d7:ef:78:cd:6f:21: ed:36:ea:78:37:8f:fb:c0:10:c9:73:b6:af:52:c7: 1f:20:4a:b3:e7:69:0b:dd:b6:59:9f:20:bb:03:4e: 5c:aa:79:e2:7b:55:a9:36:88:e8:e6:1a:28:66:2a: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2E:23:44:92:2F:3E:79:A0:AB:D1:5A:80:6E:B7:43:3F:95:8C:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d134a4a0-eb54-3f05-ae71-d8885b2ac163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:89:c7:5e:23:dc:20:3a:15:a1:b8:58:7a:6b:a1:25:2b:6c: 31:30:ef:f1:88:df:25:ac:fa:49:52:31:4d:60:c8:03:24:af: 01:ac:e4:4b:40:6e:5f:c1:60:ef:70:08:64:d7:b4:42:ed:93: 16:b6:7b:dc:22:6a:e1:8c:6f:85:83:fc:27:d8:49:22:9a:7b: 94:4a:c4:bf:67:6f:f3:8b:b9:cf:9d:60:23:53:a1:a2:02:a6: 86:d7:50:6d:8f:8b:ee:f4:f8:60:c1:ac:b8:b5:46:d6:37:b7: 46:75:c2:9b:a2:8a:7b:94:1e:69:54:6f:a2:05:be:29:48:f5: 55:66:70:52:48:c5:4d:15:f4:13:d5:7f:b4:22:7f:99:60:87: b1:c5:b9:8d:d1:71:7e:f9:c5:90:5f:81:20:2d:54:d0:cf:22: 6b:58:bf:56:9a:72:30:09:06:b8:94:7b:6e:8f:3f:13:95:c7: 66:aa:c0:0d:2a:6f:89:c2:c5:33:96:52:ae:7d:86:52:10:c8: 88:e7:4c:b5:a0:82:f4:8a:2a:ea:c1:e1:1d:6b:cf:7c:ae:81: 7a:06:49:33:d6:e8:90:0a:9b:2a:6b:70:5e:77:68:90:0e:27: 5c:f2:df:ab:9f:cf:2c:31:44:98:09:6b:08:e2:64:81:6f:36: 34:c1:7f:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJZRHkiLf3SzJqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MWE1ZjJlODYtNzk1OC00OGUxLWI0YjMtNGVjZWNjYzQwOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqg2grIbeJND86aZC0qE8tc2uPAlBu6UJZUo 5rQdKipVYBvq/PBs7ZYPHx0M93VCXKQT8XupFYDmeWKV8Od37UynYsVT7AxZqCS6 gPDNXthuEsX4/73WA7WlF8pHtIm0awl22sAmYimWMZE/YN4u6VY8lBXT7W21H3SR YS017rwUfwtd/OyH8+qBxS+mMP6O59V4OZq4ejE2cFHNO79L/ZYwdc91z10PG29E fvJuFE7YxPf9//4wTIia2VWTRWjBHUCdrCr/+/yKlFjX73jNbyHtNup4N4/7wBDJ c7avUscfIEqz52kL3bZZnyC7A05cqnnie1WpNojo5hooZirYLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAuI0SSLz55oKvRWoBut0M/lYy3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDEzNGE0YTAtZWI1NC0z ZjA1LWFlNzEtZDg4ODViMmFjMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF86rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuJx14j3CA6FaG4WHproSUrbDEw7/GI3yWs+klSMU1gyAMkrwGs5EtA bl/BYO9wCGTXtELtkxa2e9wiauGMb4WD/CfYSSKae5RKxL9nb/OLuc+dYCNToaIC pobXUG2Pi+70+GDBrLi1RtY3t0Z1wpuiinuUHmlUb6IFvilI9VVmcFJIxU0V9BPV f7Qif5lgh7HFuY3RcX75xZBfgSAtVNDPImtYv1aacjAJBriUe26PPxOVx2aqwA0q b4nCxTOWUq59hlIQyIjnTLWggvSKKurB4R1rz3yugXoGSTPW6JAKmyprcF53aJAO J1zy36ufzywxRJgJawjiZIFvNjTBfyQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:43 2025 by rpki-client