$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa File: dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa (raw, json) Hash identifier: i/f/pnOLil3m4KRILTkUHmNPjLeA9b/KN8MXwz7I4Kk= Subject key identifier: 42:47:25:D7:3D:D7:80:9D:AE:0D:6B:E5:C2:EE:56:BE:44:28:65:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C91DD16AE66C8DF16E1A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.204.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:91:dd:16:ae:66:c8:df:16:e1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=934d5887-a4b1-4b26-84af-a65ffb1123a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:6e:c1:78:66:69:be:72:ac:13:6b:75:b9: 17:8e:8b:7a:e4:e3:5c:19:c2:23:10:42:ab:48:0e: 43:fa:2e:83:fb:6c:8a:3d:28:90:5a:6d:f0:a5:9b: b5:42:65:99:49:5b:6d:79:2e:ee:f2:09:14:10:94: d5:85:68:4d:b9:27:ee:13:b5:4d:f8:fc:0e:74:1f: bb:a0:6d:4b:22:1d:18:f1:77:7f:e1:d1:e7:b1:e2: 7b:4d:de:b0:07:f5:23:ef:e0:85:b7:63:48:82:98: 1b:4a:2b:84:d0:0d:01:6c:75:6e:53:5d:d1:2d:6e: 7e:4f:59:8b:3e:f5:2e:d2:b2:38:59:1a:35:df:e5: 4f:fa:52:82:8a:39:28:b7:8a:03:47:92:d9:38:24: a5:a8:6d:26:b1:11:48:08:96:b9:de:8f:6d:13:bd: 06:a8:2f:c6:9e:a6:c0:34:e4:a7:c3:4c:89:54:8e: f8:15:e5:ff:b9:fe:c7:4d:c4:95:84:7e:79:f4:b3: e4:be:2b:a1:c5:6b:73:4d:c6:81:ea:81:c7:24:e4: 31:70:7f:3e:61:1c:3c:65:7b:02:27:86:c9:1e:f9: 97:7e:43:83:69:70:d5:f3:83:3a:d6:27:b1:b6:90: be:ab:1e:c7:39:52:c7:95:ab:cd:bf:a5:ab:b2:0e: fb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:47:25:D7:3D:D7:80:9D:AE:0D:6B:E5:C2:EE:56:BE:44:28:65:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafcac1a-14f2-3b1e-9943-0b7f47c4327e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fb:d8:cf:34:95:03:12:91:ff:2d:37:25:5e:7b:7e:5f:cf: e2:f8:a9:40:52:14:99:99:73:d4:6d:00:46:c8:1c:56:87:d2: 82:cf:c2:99:cf:24:38:41:b8:8a:6c:c1:de:74:84:43:ec:07: 03:ff:74:a9:7e:fc:af:ad:08:ff:53:48:6c:0d:51:10:55:20: 6a:2f:3f:8a:8f:69:8b:6c:b2:74:fb:6a:4b:a0:33:e8:65:89: dd:91:76:0a:00:a0:33:63:c5:86:47:7c:d3:e6:a7:b3:f4:42: e8:38:ae:f7:d0:0b:22:22:bb:e0:36:f2:8e:2b:11:4b:58:0b: 4f:83:11:54:d2:b9:7f:f9:c0:f8:a1:7b:8e:f8:c9:9b:e4:3f: 71:01:6e:da:9d:3f:47:84:10:34:34:f7:d6:bf:d0:ed:76:81: a1:f5:2a:ea:e1:2e:30:a8:fc:92:c2:2c:b2:c0:4e:ee:d5:84: 7d:58:d2:40:3d:a6:58:5e:85:aa:3d:2c:b5:e5:9f:77:8f:32: 5c:5c:94:d8:1a:f8:bd:f4:c1:11:a2:5c:8f:db:cf:f8:3c:5d: 05:7e:47:e9:ab:7c:20:f6:f8:96:0a:d4:2f:29:45:5b:68:8b: 83:42:af:03:df:f5:23:97:bd:b0:f7:dd:bc:31:0a:e9:1b:96: ed:3a:f0:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJHdFq5myN8W4aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk OTM0ZDU4ODctYTRiMS00YjI2LTg0YWYtYTY1ZmZiMTEyM2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFpuwXhmab5yrBNrdbkXjot65ONcGcIjEEKr SA5D+i6D+2yKPSiQWm3wpZu1QmWZSVtteS7u8gkUEJTVhWhNuSfuE7VN+PwOdB+7 oG1LIh0Y8Xd/4dHnseJ7Td6wB/Uj7+CFt2NIgpgbSiuE0A0BbHVuU13RLW5+T1mL PvUu0rI4WRo13+VP+lKCijkot4oDR5LZOCSlqG0msRFICJa53o9tE70GqC/GnqbA NOSnw0yJVI74FeX/uf7HTcSVhH559LPkviuhxWtzTcaB6oHHJOQxcH8+YRw8ZXsC J4bJHvmXfkODaXDV84M61iextpC+qx7HOVLHlavNv6Wrsg771wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJHJdc914Cdrg1r5cLuVr5EKGX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGFmY2FjMWEtMTRmMi0z YjFlLTk5NDMtMGI3ZjQ3YzQzMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8yKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD72M80lQMSkf8tNyVee35fz+L4qUBSFJmZc9RtAEbIHFaH0oLPwpnP JDhBuIpswd50hEPsBwP/dKl+/K+tCP9TSGwNURBVIGovP4qPaYtssnT7akugM+hl id2RdgoAoDNjxYZHfNPmp7P0Qug4rvfQCyIiu+A28o4rEUtYC0+DEVTSuX/5wPih e474yZvkP3EBbtqdP0eEEDQ099a/0O12gaH1KurhLjCo/JLCLLLATu7VhH1Y0kA9 plhehao9LLXln3ePMlxclNga+L30wRGiXI/bz/g8XQV+R+mrfCD2+JYK1C8pRVto i4NCrwPf9SOXvbD33bwxCukblu068O8= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:06 2025 by rpki-client