$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbcf19cf-0da2-3c21-999b-8aa737b98297.roa File: dbcf19cf-0da2-3c21-999b-8aa737b98297.roa (raw, json) Hash identifier: RY9HCt3GtTHa1ic/N3V4W1z6605M7AVr1PWESmO8D38= Subject key identifier: A9:40:31:DE:88:5B:17:EE:C6:7F:8E:A4:80:C8:B9:98:4D:3B:C3:81 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1F01880D2B1B1B38D8FEB880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbcf19cf-0da2-3c21-999b-8aa737b98297.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.48.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:88:0d:2b:1b:1b:38:d8:fe:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=cc7c6a9b-1cff-4b26-b04f-f276f4a475d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:64:6e:87:9b:56:86:be:39:26:d3:6c:25: da:97:2c:b0:5c:59:6f:49:4f:f6:0d:4e:32:8e:19: b3:a8:66:c1:1d:7a:bb:92:49:56:6d:09:4a:dd:7a: 42:2a:39:fd:4f:98:22:30:3d:20:d7:e9:e9:e5:c9: 53:b7:9e:07:48:1e:07:e2:94:9c:14:12:ce:49:33: cb:65:6c:b5:6e:8a:d4:38:9d:b2:a7:f2:14:54:15: ad:9e:37:f4:81:06:33:64:22:11:22:db:af:8f:1c: 75:48:9a:e6:ba:e6:42:d5:2a:18:db:ab:42:0f:3e: ed:05:2d:d9:02:00:84:66:6e:91:ae:d7:e3:c2:ec: 59:e0:aa:2f:af:15:68:21:77:82:35:1f:1d:c4:2f: bb:f2:1c:3f:64:29:74:71:35:6f:88:47:c3:d8:38: 24:4e:87:f4:65:e9:d1:63:59:b9:60:a8:1d:93:8d: b8:be:7a:ce:e9:79:bb:d0:bc:dc:38:68:1d:4e:4f: 2e:51:ab:19:cb:8a:a8:5e:35:fa:90:b1:46:ff:11: 8d:77:7e:db:82:fa:8d:f8:3a:d6:ed:7c:5b:a5:12: 32:56:31:52:47:2e:30:64:cb:5f:bf:3b:3a:d3:41: 56:39:92:0d:10:51:ef:b3:4c:cb:b0:d4:c4:0a:41: 1b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:40:31:DE:88:5B:17:EE:C6:7F:8E:A4:80:C8:B9:98:4D:3B:C3:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbcf19cf-0da2-3c21-999b-8aa737b98297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:5e:22:ee:f6:30:47:50:03:87:ec:f9:9b:7a:7b:4d:c2:4b: fc:1b:d9:bf:f2:25:9e:6f:1d:3c:94:3c:86:f8:98:67:c3:2a: 22:54:e0:f5:f0:2a:87:a0:21:af:80:c8:33:ad:f9:ce:3b:10: 56:29:34:0e:ff:1c:ec:84:a4:78:fc:95:4f:2a:0d:2c:1c:59: 87:fb:17:8a:ea:5a:78:0c:dc:65:e4:79:d5:d7:0d:36:2f:8a: 3e:12:11:1b:b2:04:8c:6c:f9:ce:0a:b2:42:9e:7c:94:b2:0c: 28:53:89:a6:3c:03:a2:c2:f2:98:87:02:0c:8c:dd:c2:b5:f3: 59:88:7e:ce:92:c7:75:8f:e7:fd:6a:cd:a8:fa:09:82:0a:ef: ed:f0:52:19:fa:b4:23:43:d9:40:79:36:5e:be:02:96:79:c5: a9:c0:4c:b0:45:31:a3:33:3e:31:bf:af:7e:d6:e4:65:65:7b: bd:47:93:65:71:85:aa:c4:fc:f6:61:d4:5f:0d:66:b7:e5:aa: 89:a9:27:4f:20:51:4d:d8:52:eb:42:30:57:f5:66:b4:0f:3c: 42:70:4a:45:2c:c4:8b:fd:6c:49:04:20:e8:46:b6:f0:84:1e: f2:c0:6c:08:ee:29:d2:0a:87:71:6a:9a:8c:84:4c:c3:ce:b3: 97:05:72:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAYgNKxsbONj+uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2M3YzZhOWItMWNmZi00YjI2LWIwNGYtZjI3NmY0YTQ3NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXFkboebVoa+OSbTbCXalyywXFlvSU/2DU4y jhmzqGbBHXq7kklWbQlK3XpCKjn9T5giMD0g1+np5clTt54HSB4H4pScFBLOSTPL ZWy1borUOJ2yp/IUVBWtnjf0gQYzZCIRItuvjxx1SJrmuuZC1SoY26tCDz7tBS3Z AgCEZm6RrtfjwuxZ4KovrxVoIXeCNR8dxC+78hw/ZCl0cTVviEfD2DgkTof0ZenR Y1m5YKgdk424vnrO6Xm70LzcOGgdTk8uUasZy4qoXjX6kLFG/xGNd37bgvqN+DrW 7XxbpRIyVjFSRy4wZMtfvzs600FWOZINEFHvs0zLsNTECkEbGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlAMd6IWxfuxn+OpIDIuZhNO8OBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJjZjE5Y2YtMGRhMi0z YzIxLTk5OWItOGFhNzM3Yjk4Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5eIu72MEdQA4fs+Zt6e03CS/wb2b/yJZ5vHTyUPIb4mGfDKiJU4PXw KoegIa+AyDOt+c47EFYpNA7/HOyEpHj8lU8qDSwcWYf7F4rqWngM3GXkedXXDTYv ij4SERuyBIxs+c4KskKefJSyDChTiaY8A6LC8piHAgyM3cK181mIfs6Sx3WP5/1q zaj6CYIK7+3wUhn6tCND2UB5Nl6+ApZ5xanATLBFMaMzPjG/r37W5GVle71Hk2Vx harE/PZh1F8NZrflqompJ08gUU3YUutCMFf1ZrQPPEJwSkUsxIv9bEkEIOhGtvCE HvLAbAjuKdIKh3FqmoyETMPOs5cFchg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:51 2025 by rpki-client