$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd37b7f4-86c9-3a76-8489-42f60e2542d6.roa File: dd37b7f4-86c9-3a76-8489-42f60e2542d6.roa (raw, json) Hash identifier: zvYZNSwGTtrvCf4pHdnASR4dD1faNdYHfzPVSdyrFao= Subject key identifier: 46:B7:2D:CF:51:E8:4A:71:1D:76:DA:26:F3:18:49:22:BB:E9:33:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9D0D0BB068764A33CA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd37b7f4-86c9-3a76-8489-42f60e2542d6.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.204.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9d:0d:0b:b0:68:76:4a:33:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=7213ee86-fb66-4591-9da7-a507317db486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:b0:44:35:fa:4c:15:8e:e6:1d:c9:cb:33: 72:58:a0:7c:ec:a1:60:d3:84:34:47:73:b7:99:f8: 32:b9:80:64:2d:f3:95:1d:c3:93:5d:bb:6d:c6:42: 2a:12:61:93:db:b1:1c:ee:a4:4e:0a:5d:ff:1b:5c: 4a:83:6f:26:26:20:93:71:1e:9b:e7:98:91:91:2a: 35:f4:e3:26:69:eb:ff:61:69:ab:fe:03:6e:d7:66: d3:81:24:47:fc:2c:7d:30:28:eb:a1:b3:87:f1:4a: bf:1e:28:11:8a:26:20:1a:5d:52:32:f7:72:5b:a2: 92:58:36:64:9d:6c:f9:03:03:d5:de:51:20:29:a7: bc:1d:7a:bf:23:4c:30:ba:d4:1b:c5:64:68:a7:dd: 6e:8f:d6:8c:fd:b7:c6:b8:01:b5:79:d2:b5:28:cc: 7d:57:ce:5b:d8:c8:14:b5:84:df:27:f5:c8:70:45: 3f:99:7d:f8:98:c4:af:72:ab:f9:89:6f:ef:c1:fc: 71:fc:90:ca:90:c2:93:42:c4:ea:1f:99:0e:e0:ce: f5:e8:cc:7f:67:95:8d:48:33:08:c8:2a:00:16:d3: f5:2e:6a:ac:bb:9a:5a:6a:57:98:57:33:80:f7:7b: e3:71:25:54:06:df:b5:82:96:e1:a7:59:96:67:66: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B7:2D:CF:51:E8:4A:71:1D:76:DA:26:F3:18:49:22:BB:E9:33:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd37b7f4-86c9-3a76-8489-42f60e2542d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8e:3c:3a:50:b7:09:d9:f6:e7:d5:85:c6:34:9e:c7:de:16: c3:64:aa:3b:7e:09:ee:05:52:d3:99:25:da:34:7c:5d:1c:e0: 49:bb:a1:06:5f:28:66:0a:d5:d6:32:06:32:dc:01:3c:33:86: da:94:b3:db:5e:6a:62:d7:57:44:04:14:9e:2d:2f:f7:18:9f: 7a:03:2d:1a:93:9d:18:7d:67:b5:31:68:0b:e0:65:dc:14:33: 9b:ea:9c:d3:9b:8f:a8:e3:0f:c1:f8:38:1a:7a:64:86:b5:d7: 14:1a:d2:03:89:bf:58:f2:86:69:c0:80:7b:6f:ff:1b:b5:89: b3:93:d2:4c:1b:7a:99:ea:fd:d9:7a:4a:e2:a0:13:a2:30:92: 2f:9e:c5:5c:29:41:e6:55:5e:c1:28:5d:5c:08:47:ad:01:44: de:8f:f4:3c:35:33:71:bb:0a:9d:9f:70:f3:1e:fd:e0:60:e3: 92:61:d7:b7:af:56:e7:06:94:36:e0:f4:c9:61:23:b4:02:f2: 5f:8b:67:b9:48:e2:f3:54:40:15:45:c1:99:5d:11:01:21:e6: d5:cb:00:b4:6a:96:3d:95:be:86:06:07:35:ce:97:07:46:a6: 91:30:de:0c:20:4e:16:22:69:24:be:56:36:bd:b3:44:71:3e: 1f:2b:5d:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJ0NC7BodkozyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NzIxM2VlODYtZmI2Ni00NTkxLTlkYTctYTUwNzMxN2RiNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncewRDX6TBWO5h3JyzNyWKB87KFg04Q0R3O3 mfgyuYBkLfOVHcOTXbttxkIqEmGT27Ec7qROCl3/G1xKg28mJiCTcR6b55iRkSo1 9OMmaev/YWmr/gNu12bTgSRH/Cx9MCjrobOH8Uq/HigRiiYgGl1SMvdyW6KSWDZk nWz5AwPV3lEgKae8HXq/I0wwutQbxWRop91uj9aM/bfGuAG1edK1KMx9V85b2MgU tYTfJ/XIcEU/mX34mMSvcqv5iW/vwfxx/JDKkMKTQsTqH5kO4M716Mx/Z5WNSDMI yCoAFtP1Lmqsu5paaleYVzOA93vjcSVUBt+1gpbhp1mWZ2bN/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa3Lc9R6EpxHXbaJvMYSSK76TMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQzN2I3ZjQtODZjOS0z YTc2LTg0ODktNDJmNjBlMjU0MmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8xiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSOPDpQtwnZ9ufVhcY0nsfeFsNkqjt+Ce4FUtOZJdo0fF0c4Em7oQZf KGYK1dYyBjLcATwzhtqUs9teamLXV0QEFJ4tL/cYn3oDLRqTnRh9Z7UxaAvgZdwU M5vqnNObj6jjD8H4OBp6ZIa11xQa0gOJv1jyhmnAgHtv/xu1ibOT0kwbepnq/dl6 SuKgE6Iwki+exVwpQeZVXsEoXVwIR60BRN6P9Dw1M3G7Cp2fcPMe/eBg45Jh17ev VucGlDbg9MlhI7QC8l+LZ7lI4vNUQBVFwZldEQEh5tXLALRqlj2VvoYGBzXOlwdG ppEw3gwgThYiaSS+Vja9s0RxPh8rXZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:11 2025 by rpki-client