$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa File: dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa (raw, json) Hash identifier: Nd3l6TEP+y5R7UpKChGims31fZH8KiJSRDhY73k9Bf0= Subject key identifier: BC:04:0E:FA:48:72:39:91:11:37:B2:BD:01:46:D4:69:00:DC:E9:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2FC1AC27397B814F09FDED80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.196.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:ac:27:39:7b:81:4f:09:fd:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=d68a52c2-93a9-4009-813c-b155a4cb4d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:30:85:f9:cb:69:86:22:c6:38:29:30:11: f4:22:2b:c2:59:0c:bb:61:63:fc:2a:2c:26:8f:ef: 4a:ba:57:70:4b:ae:01:e6:0e:90:7b:49:7f:c8:75: 13:af:c1:4f:69:93:f9:2f:79:a1:5d:5a:43:fe:cd: f5:89:55:78:4e:a2:d9:e2:68:2d:67:38:01:e5:56: cc:9f:37:6e:92:f5:9d:b2:d4:a8:ab:8b:fc:32:79: c3:de:4d:cb:db:69:cf:48:c6:3e:c0:fa:8a:96:26: cd:92:f9:64:a8:11:09:d2:fb:9f:a3:76:71:d6:a3: 27:05:28:e3:4e:47:16:c0:9a:33:5b:09:dd:2f:59: d4:23:8f:19:5c:f6:ce:dd:ba:ea:47:15:65:da:3a: 1d:93:65:ec:84:f2:e5:4d:5f:a7:2f:6a:ad:30:9b: 02:24:c2:9d:d1:2c:fd:cc:05:4e:f3:37:df:91:8f: 83:98:48:6c:70:01:2e:9b:e0:f1:02:0f:4f:ff:c7: f7:52:13:d4:61:c4:bb:e9:29:1e:24:f0:cd:e9:02: f7:f5:d5:18:72:77:c6:73:78:21:e6:13:ab:62:29: 5e:ca:8e:4c:93:d0:52:65:e5:b7:4e:b3:a8:dc:c8: c2:e9:b0:ed:d4:38:90:8e:51:c9:91:50:59:8e:69: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:0E:FA:48:72:39:91:11:37:B2:BD:01:46:D4:69:00:DC:E9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbfdf8cc-52ba-3dd8-8124-bd9b036d60d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:23:cf:1b:f7:9c:1c:4b:52:2b:21:dc:d9:11:8f:01:b3:7d: 50:0f:7e:cf:3f:ea:da:9d:ff:e0:92:8c:1a:17:82:21:0f:59: a0:de:1e:37:6f:75:4c:e1:14:f9:3f:67:e9:8b:e6:7e:f5:73: f6:24:a1:f1:33:6d:24:53:69:45:36:c2:d4:22:31:2c:e1:cb: ac:c1:ef:e4:32:7d:82:8e:8f:c2:2a:e0:a3:8c:2b:ff:b9:00: 57:88:cd:93:4b:ef:5c:19:89:bf:cc:e7:ab:41:46:58:c3:f2: a5:90:b1:79:95:ad:21:1d:67:f7:3e:d0:5f:c1:bf:ce:4f:aa: f7:58:11:f4:e2:42:b2:a6:d9:20:48:49:49:c9:bf:ba:25:89: 9f:08:0b:bb:be:01:f1:ad:a9:2e:04:66:80:8a:a8:44:de:3b: 0e:3e:cb:50:49:8b:5f:de:0e:60:58:80:86:de:08:5b:91:f1: 33:fe:19:4b:0c:e0:c8:df:bf:45:d3:b5:48:2f:14:cd:bb:53: 9f:cd:9b:62:af:02:57:70:6b:89:9e:3e:84:f1:62:f2:e9:80: c0:38:70:42:5f:1a:08:6d:3a:51:3f:4d:31:97:05:e0:d1:40: 52:8b:77:72:49:26:61:a8:dc:f0:68:14:71:1e:ce:20:88:74: ab:ee:6e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwawnOXuBTwn97YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk ZDY4YTUyYzItOTNhOS00MDA5LTgxM2MtYjE1NWE0Y2I0ZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JMwhfnLaYYixjgpMBH0IivCWQy7YWP8Kiwm j+9KuldwS64B5g6Qe0l/yHUTr8FPaZP5L3mhXVpD/s31iVV4TqLZ4mgtZzgB5VbM nzdukvWdstSoq4v8MnnD3k3L22nPSMY+wPqKlibNkvlkqBEJ0vufo3Zx1qMnBSjj TkcWwJozWwndL1nUI48ZXPbO3brqRxVl2jodk2XshPLlTV+nL2qtMJsCJMKd0Sz9 zAVO8zffkY+DmEhscAEum+DxAg9P/8f3UhPUYcS76SkeJPDN6QL39dUYcnfGc3gh 5hOrYileyo5Mk9BSZeW3TrOo3MjC6bDt1DiQjlHJkVBZjmlGXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwEDvpIcjmRETeyvQFG1GkA3OmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJmZGY4Y2MtNTJiYS0z ZGQ4LTgxMjQtYmQ5YjAzNmQ2MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8TkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkjzxv3nBxLUish3NkRjwGzfVAPfs8/6tqd/+CSjBoXgiEPWaDeHjdv dUzhFPk/Z+mL5n71c/YkofEzbSRTaUU2wtQiMSzhy6zB7+QyfYKOj8Iq4KOMK/+5 AFeIzZNL71wZib/M56tBRljD8qWQsXmVrSEdZ/c+0F/Bv85PqvdYEfTiQrKm2SBI SUnJv7oliZ8IC7u+AfGtqS4EZoCKqETeOw4+y1BJi1/eDmBYgIbeCFuR8TP+GUsM 4Mjfv0XTtUgvFM27U5/Nm2KvAldwa4mePoTxYvLpgMA4cEJfGghtOlE/TTGXBeDR QFKLd3JJJmGo3PBoFHEeziCIdKvubrw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:35 2025 by rpki-client