$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d601b4d4-57ea-3448-8d12-76a7f2c1bb10.roa File: d601b4d4-57ea-3448-8d12-76a7f2c1bb10.roa (raw, json) Hash identifier: E3xqwrY5YDJZ7okroqDCkDIrDNq73+j5cH9tlvDkcsU= Subject key identifier: FF:A3:2D:78:06:CA:4E:FA:47:80:16:C6:17:1B:D7:1F:83:EC:04:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C734EC197D9525BA6CAC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d601b4d4-57ea-3448-8d12-76a7f2c1bb10.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.196.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:73:4e:c1:97:d9:52:5b:a6:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=28c84b3a-8287-427b-ba8a-f586e022cc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:1f:2c:b3:19:02:d5:58:61:c1:7f:ef:d4: b1:87:4a:b0:cd:03:45:4d:0f:38:0f:4d:d5:67:2d: a5:37:0c:ed:d7:c5:49:62:60:6d:f0:bd:87:6c:4f: b8:27:04:1d:73:9a:ee:42:03:97:5f:74:8d:82:f7: fc:cb:66:e4:e9:f6:a5:0c:3b:52:e3:95:93:6d:6b: 5b:be:26:04:a6:85:b7:0b:27:6a:b8:fb:4a:34:d1: 92:23:d6:94:d1:84:3e:19:67:aa:68:64:b2:b1:3a: 3a:11:76:7a:4b:3b:7d:4a:8b:13:79:5f:e6:02:93: 27:27:7f:a5:34:1e:db:11:36:c2:2f:7f:23:94:05: 56:be:05:e6:48:8c:91:c4:98:2d:b5:a0:30:13:98: d6:59:81:df:12:ae:60:11:d0:83:18:02:60:58:df: 6a:0f:dc:02:a6:b0:58:d3:ae:3f:0c:b6:89:d9:ab: 26:ab:ca:57:8f:a1:6f:c8:34:f8:77:99:00:56:d1: cc:47:63:b2:ba:47:a1:b4:50:4d:8b:8b:83:12:b5: c9:4d:46:5c:5e:68:db:de:bc:2a:72:87:a6:82:19: 8d:03:a6:8e:79:a9:b9:0e:d1:dc:05:ec:7e:63:2d: 41:22:35:3d:b2:f6:50:27:56:b5:cf:9f:ac:da:da: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A3:2D:78:06:CA:4E:FA:47:80:16:C6:17:1B:D7:1F:83:EC:04:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d601b4d4-57ea-3448-8d12-76a7f2c1bb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:24:4f:96:b5:12:07:54:7f:68:58:58:e3:43:f6:cf:e8:49: 67:be:5e:e2:b2:5b:15:81:49:83:61:d8:33:a7:56:af:f4:44: 5c:64:5f:74:eb:05:69:37:39:db:d8:f2:c9:23:15:5a:08:bd: db:1e:4f:18:2c:e4:61:f8:3b:47:dc:91:b4:a8:47:15:03:7f: c8:6e:3c:d9:17:cd:69:5c:63:c1:d8:3e:ed:27:01:4f:a9:86: 2c:a9:16:d9:72:77:af:a9:b3:db:e1:68:b2:e4:cb:a4:38:25: 55:41:9c:4f:22:e9:25:25:ec:d9:5a:1d:ed:e2:38:b4:b3:0c: 88:f7:c8:60:51:54:1a:53:da:fa:c0:fe:70:f6:ab:80:a2:fb: 1d:c5:93:ee:63:ba:c6:1c:f8:d0:a8:ce:16:b0:3e:21:b4:3b: 12:79:0f:3f:f7:9f:ac:97:40:45:c4:b4:11:1f:80:be:f1:26: 84:d1:94:36:5f:d5:d6:89:ba:c8:ec:07:83:8b:0d:f3:cc:37: 86:d5:40:72:6e:8b:2c:70:80:e3:e8:ed:b7:5c:ac:8f:27:f5: e5:86:43:1a:a2:08:b5:5f:e2:14:e3:ed:9e:91:d1:78:b3:7c: 47:7a:d0:f2:ce:00:a3:87:89:71:68:97:e4:6a:a3:73:d6:10: ed:d5:14:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTHNOwZfZUlumysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MjhjODRiM2EtODI4Ny00MjdiLWJhOGEtZjU4NmUwMjJjYzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPYfLLMZAtVYYcF/79Sxh0qwzQNFTQ84D03V Zy2lNwzt18VJYmBt8L2HbE+4JwQdc5ruQgOXX3SNgvf8y2bk6falDDtS45WTbWtb viYEpoW3CydquPtKNNGSI9aU0YQ+GWeqaGSysTo6EXZ6Szt9SosTeV/mApMnJ3+l NB7bETbCL38jlAVWvgXmSIyRxJgttaAwE5jWWYHfEq5gEdCDGAJgWN9qD9wCprBY 064/DLaJ2asmq8pXj6FvyDT4d5kAVtHMR2OyukehtFBNi4uDErXJTUZcXmjb3rwq coemghmNA6aOeam5DtHcBex+Yy1BIjU9svZQJ1a1z5+s2tqV+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+jLXgGyk76R4AWxhcb1x+D7ATvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDYwMWI0ZDQtNTdlYS0z NDQ4LThkMTItNzZhN2YyYzFiYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8QGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEokT5a1EgdUf2hYWOND9s/oSWe+XuKyWxWBSYNh2DOnVq/0RFxkX3Tr BWk3OdvY8skjFVoIvdseTxgs5GH4O0fckbSoRxUDf8huPNkXzWlcY8HYPu0nAU+p hiypFtlyd6+ps9vhaLLky6Q4JVVBnE8i6SUl7NlaHe3iOLSzDIj3yGBRVBpT2vrA /nD2q4Ci+x3Fk+5jusYc+NCozhawPiG0OxJ5Dz/3n6yXQEXEtBEfgL7xJoTRlDZf 1daJusjsB4OLDfPMN4bVQHJuiyxwgOPo7bdcrI8n9eWGQxqiCLVf4hTj7Z6R0Xiz fEd60PLOAKOHiXFol+Rqo3PWEO3VFJ8= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:31 2025 by rpki-client