$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de65df7c-bad9-3f9b-bb5d-a74868c5d94d.roa File: de65df7c-bad9-3f9b-bb5d-a74868c5d94d.roa (raw, json) Hash identifier: ed2IrQMqC4WtaJ/viczl5uHxN4TVxwwBpf7oJ89k+DE= Subject key identifier: BB:1D:56:86:9E:B7:93:3D:8A:48:87:A6:F1:B1:E6:94:54:A6:13:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C94E3379C1B5F8C94AB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de65df7c-bad9-3f9b-bb5d-a74868c5d94d.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.205.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:94:e3:37:9c:1b:5f:8c:94:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=b8061e4f-a9b2-4945-82d1-f0cdb7e43056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:27:ec:19:5e:c4:90:63:bb:97:ef:70:80: 4a:0d:3c:b3:e3:24:51:6d:e2:f3:80:cf:f9:8c:71: fe:59:ef:64:cc:86:87:84:10:23:65:56:92:76:95: f8:46:8d:38:75:89:ce:1d:c2:be:f4:c8:43:11:4f: 6b:0b:91:23:02:9f:ce:23:0e:af:8a:40:de:0c:6a: 45:3f:4f:6b:19:4d:8d:ed:d5:c9:da:cb:b6:64:89: 01:97:fe:4a:03:e9:68:a2:11:b3:59:e1:89:fb:8d: 2b:c8:cd:b8:c0:7a:99:30:9d:f9:21:db:8f:06:c7: f7:de:bf:2f:ef:38:12:51:19:e6:78:ce:16:f1:fe: 55:fb:cb:9e:8b:49:ae:29:e4:72:e6:09:1c:6d:9c: 16:c7:d1:fa:2e:62:96:4d:2b:94:fd:f7:bb:50:a9: 53:fe:4c:32:72:b9:ae:c9:35:fb:0b:f1:e7:dc:d9: 13:bb:88:0b:69:f9:4d:82:a3:1b:f3:57:76:20:3c: 7e:01:65:41:01:25:7d:f5:f2:dc:57:8b:3b:9a:51: 2e:0d:3b:fa:e4:c2:3d:3b:8c:e6:47:3f:29:56:e6: 0b:68:27:a9:f8:e3:92:3c:31:a5:04:89:1a:16:a4: d3:70:5a:77:ce:22:5f:46:aa:d4:8b:b7:2f:fc:fd: 0a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:56:86:9E:B7:93:3D:8A:48:87:A6:F1:B1:E6:94:54:A6:13:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de65df7c-bad9-3f9b-bb5d-a74868c5d94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f5:75:56:09:dc:75:a1:41:54:7c:64:a8:de:9a:3f:24:c9: 20:9b:58:7c:8c:a3:f7:fe:be:03:be:6f:eb:4f:54:f4:9c:c8: 52:02:c2:d6:e6:ab:3b:8e:b0:34:aa:08:56:e5:ed:ad:b1:5c: 7f:50:db:d8:f5:15:63:98:76:dd:a5:9d:d6:6f:9a:4b:79:39: 62:70:08:fb:2d:fb:51:f6:b5:2d:a7:50:79:7f:00:08:d3:0e: df:60:60:ce:8d:cf:bd:49:fd:72:58:79:21:f6:93:18:6c:69: c8:c7:68:21:1f:cf:5e:d1:ff:95:8e:3a:6b:46:26:ac:07:ea: b6:1a:46:26:eb:d3:12:c2:5c:e5:17:c2:80:19:44:74:a8:ca: a7:c3:6d:6c:17:e0:e9:2f:7c:eb:b0:8d:b2:76:db:1c:5d:80: 31:d1:4c:9e:ec:a2:ca:de:17:9e:45:c1:c8:67:4c:ea:9c:97: d3:2c:05:98:91:f2:aa:bf:7f:2d:f2:d7:8c:e2:59:9b:dc:36: 79:87:97:13:32:65:2c:7c:13:c9:1e:ad:da:21:4f:7c:67:7c: 05:8c:85:e3:c0:7c:5b:fd:ed:74:3d:54:2b:8d:58:1e:78:d6: d3:56:0a:4f:ac:22:13:83:7c:bc:fe:82:3a:12:09:90:1a:b9: 66:54:e4:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJTjN5wbX4yUqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YjgwNjFlNGYtYTliMi00OTQ1LTgyZDEtZjBjZGI3ZTQzMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCwn7BlexJBju5fvcIBKDTyz4yRRbeLzgM/5 jHH+We9kzIaHhBAjZVaSdpX4Ro04dYnOHcK+9MhDEU9rC5EjAp/OIw6vikDeDGpF P09rGU2N7dXJ2su2ZIkBl/5KA+loohGzWeGJ+40ryM24wHqZMJ35IduPBsf33r8v 7zgSURnmeM4W8f5V+8uei0muKeRy5gkcbZwWx9H6LmKWTSuU/fe7UKlT/kwycrmu yTX7C/Hn3NkTu4gLaflNgqMb81d2IDx+AWVBASV99fLcV4s7mlEuDTv65MI9O4zm Rz8pVuYLaCep+OOSPDGlBIkaFqTTcFp3ziJfRqrUi7cv/P0KMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsdVoaet5M9ikiHpvGx5pRUphNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGU2NWRmN2MtYmFkOS0z ZjliLWJiNWQtYTc0ODY4YzVkOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF83AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE71dVYJ3HWhQVR8ZKjemj8kySCbWHyMo/f+vgO+b+tPVPScyFICwtbm qzuOsDSqCFbl7a2xXH9Q29j1FWOYdt2lndZvmkt5OWJwCPst+1H2tS2nUHl/AAjT Dt9gYM6Nz71J/XJYeSH2kxhsacjHaCEfz17R/5WOOmtGJqwH6rYaRibr0xLCXOUX woAZRHSoyqfDbWwX4OkvfOuwjbJ22xxdgDHRTJ7sosreF55FwchnTOqcl9MsBZiR 8qq/fy3y14ziWZvcNnmHlxMyZSx8E8kerdohT3xnfAWMhePAfFv97XQ9VCuNWB54 1tNWCk+sIhODfLz+gjoSCZAauWZU5Jw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:30 2025 by rpki-client