$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc2b7b5f-78f1-302e-9936-72e3133cbe36.roa File: dc2b7b5f-78f1-302e-9936-72e3133cbe36.roa (raw, json) Hash identifier: ofjvA0JSjytl6Ms3xu5dGjB5+SZGPZWqOQj5nWOpRLs= Subject key identifier: C3:78:8A:A7:02:B3:10:57:B9:99:32:62:D2:26:CA:19:CB:58:5C:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B076008DC761BC860062A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc2b7b5f-78f1-302e-9936-72e3133cbe36.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.213.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:60:08:dc:76:1b:c8:60:06:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=1822c74c-b661-4b05-8389-63695f566dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:dd:11:07:61:6d:9f:ba:80:73:70:d9:94:a4: 62:05:7a:f4:c4:ae:50:d7:08:8c:4d:54:d7:38:96: e1:75:96:42:bf:16:d6:44:9b:85:33:09:11:94:2e: 25:b5:54:35:c7:d9:5c:6f:87:b9:fa:e4:d6:7d:f9: 04:5c:be:da:20:01:eb:b1:74:b4:fa:62:04:84:b9: 46:fe:b1:db:02:14:8c:2f:15:0b:d4:0f:d5:7e:a0: ea:1c:6d:1b:a8:98:8d:bc:91:97:5e:60:66:23:89: 70:86:a6:7b:81:15:b4:b1:1c:ee:b8:60:cd:0f:a8: 1c:12:03:37:27:17:42:d6:e8:94:43:d5:97:b9:36: 0f:33:95:0f:92:37:53:83:6a:ab:65:22:7b:e4:14: bd:2e:80:5e:1c:80:33:57:88:f7:8c:e0:2f:54:08: 1b:75:85:07:b5:f3:0c:4c:90:74:75:26:e8:9d:98: 77:69:32:36:8a:64:13:4d:f5:2a:42:d8:42:1f:94: 26:1d:34:bf:92:f5:3a:5f:b2:f7:51:9d:e5:c3:dd: b6:c0:02:39:cf:6e:56:b8:91:32:79:98:89:b7:07: f0:49:59:c8:6b:c8:82:ca:4f:11:06:de:be:f5:a7: f8:11:6e:64:14:d6:90:a1:05:1d:42:6b:29:d0:7b: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:78:8A:A7:02:B3:10:57:B9:99:32:62:D2:26:CA:19:CB:58:5C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc2b7b5f-78f1-302e-9936-72e3133cbe36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.213.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:36:93:37:86:be:13:b1:5a:c3:fd:45:90:6f:48:77:03:a6: 21:38:5a:5e:9c:f7:d7:ae:47:7b:f7:8e:38:73:23:83:66:04: a9:53:97:00:2e:a9:2f:2f:b6:07:6b:b5:53:37:b9:f1:d1:b9: c1:9b:57:5f:1a:cc:cc:61:36:6b:df:7d:cf:93:a4:75:65:68: f4:81:a0:6a:a5:1c:6b:d7:f4:d5:a7:66:cf:f6:dd:59:45:1d: 37:7c:7e:d5:ea:53:70:bc:ef:69:e6:0e:8d:9f:25:c1:7d:17: 80:15:dc:63:46:82:dc:63:c7:a0:d0:56:34:63:a3:40:f5:29: cc:fa:bd:5c:69:f6:6e:e0:57:2b:6b:78:82:79:97:e9:c0:5f: 32:85:2c:fa:66:c2:e0:b3:7d:1a:1f:66:3a:6e:74:e0:55:6a: e9:98:08:3d:58:07:56:19:9b:d1:7d:93:28:bf:22:d0:60:ed: 00:05:d8:db:40:5a:d3:8a:23:23:8e:06:1d:3e:a5:23:e5:78: ec:b2:5d:eb:5d:b3:47:d0:2e:28:44:83:ef:cc:39:a9:3e:da: d2:b3:77:54:00:8c:df:59:7c:19:25:9c:4a:14:fe:be:55:29: b9:5a:f7:2a:97:17:7e:17:98:ac:6e:10:44:38:1a:2f:40:46: cf:b4:d6:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2AI3HYbyGAGKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MTgyMmM3NGMtYjY2MS00YjA1LTgzODktNjM2OTVmNTY2ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd0RB2Ftn7qAc3DZlKRiBXr0xK5Q1wiMTVTX OJbhdZZCvxbWRJuFMwkRlC4ltVQ1x9lcb4e5+uTWffkEXL7aIAHrsXS0+mIEhLlG /rHbAhSMLxUL1A/VfqDqHG0bqJiNvJGXXmBmI4lwhqZ7gRW0sRzuuGDND6gcEgM3 JxdC1uiUQ9WXuTYPM5UPkjdTg2qrZSJ75BS9LoBeHIAzV4j3jOAvVAgbdYUHtfMM TJB0dSbonZh3aTI2imQTTfUqQthCH5QmHTS/kvU6X7L3UZ3lw922wAI5z25WuJEy eZiJtwfwSVnIa8iCyk8RBt6+9af4EW5kFNaQoQUdQmsp0HtQ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN4iqcCsxBXuZkyYtImyhnLWFxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGMyYjdiNWYtNzhmMS0z MDJlLTk5MzYtNzJlMzEzM2NiZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9UqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk2kzeGvhOxWsP9RZBvSHcDpiE4Wl6c99euR3v3jjhzI4NmBKlTlwAu qS8vtgdrtVM3ufHRucGbV18azMxhNmvffc+TpHVlaPSBoGqlHGvX9NWnZs/23VlF HTd8ftXqU3C872nmDo2fJcF9F4AV3GNGgtxjx6DQVjRjo0D1Kcz6vVxp9m7gVytr eIJ5l+nAXzKFLPpmwuCzfRofZjpudOBVaumYCD1YB1YZm9F9kyi/ItBg7QAF2NtA WtOKIyOOBh0+pSPleOyyXetds0fQLihEg+/MOak+2tKzd1QAjN9ZfBklnEoU/r5V Kbla9yqXF34XmKxuEEQ4Gi9ARs+01i4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:44 2025 by rpki-client