$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1343549-e1ad-360d-9a2f-35985053a68b.roa File: e1343549-e1ad-360d-9a2f-35985053a68b.roa (raw, json) Hash identifier: ZVPGEaTRr1H9bD6uH4mDc4c6nLCR8JM8PgaWLJkFqoU= Subject key identifier: 44:CA:0E:35:B0:8F:CD:42:FA:CD:B6:7E:30:18:C0:CA:E8:38:73:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C93B31F1FB3093523BF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1343549-e1ad-360d-9a2f-35985053a68b.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.205.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:93:b3:1f:1f:b3:09:35:23:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=cb46fc71-3cdb-4d4e-a381-755013355a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:39:b3:22:d9:d4:44:cf:3d:d0:12:ba:39:31: 31:cb:e7:c1:89:43:df:47:b9:fe:5e:32:30:f8:b5: dd:ef:ab:b5:92:a3:37:e9:0b:1c:9e:4d:e3:a8:d7: f0:62:35:9e:4c:de:45:7d:a5:26:ce:8e:78:f5:76: 97:56:ba:79:70:8c:a9:55:07:89:92:25:38:1d:c1: 69:a6:0a:13:ee:b2:ed:6e:1a:f4:69:7c:d8:97:a1: 77:10:0c:45:35:c5:44:79:29:d1:8d:f8:d3:5c:ca: d4:75:21:58:c1:b7:32:d9:ae:cc:ca:2e:c9:ff:d1: b9:be:58:d8:53:80:15:19:4a:bc:8f:d4:56:88:fa: cf:6b:39:a7:63:9d:54:09:05:f1:0b:08:3b:03:00: 37:e9:37:f8:81:f0:fb:b1:44:e6:69:58:64:44:36: 3a:04:e9:0f:98:6a:0c:aa:d0:20:4f:6a:62:a3:20: 3f:17:5c:44:97:ab:17:62:5a:9e:3d:41:ee:5c:17: f2:cc:f2:34:7e:e1:7e:92:c4:d4:cf:ff:55:0d:5b: 59:08:2a:b9:40:4f:46:a3:7d:d6:41:10:7b:46:11: 63:af:5b:e5:68:aa:72:ca:3e:62:f6:d4:b2:a6:6d: 18:64:d8:47:c5:7c:7f:29:90:f4:20:5b:22:e0:24: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CA:0E:35:B0:8F:CD:42:FA:CD:B6:7E:30:18:C0:CA:E8:38:73:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1343549-e1ad-360d-9a2f-35985053a68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:58:ff:61:9b:a5:0d:e3:37:e7:eb:a7:50:27:50:6c:8e:a3: c4:fc:58:4e:9f:4e:2a:33:eb:f0:1e:d6:cb:39:a2:fa:ee:3c: a6:bc:a8:b6:c3:56:90:94:39:6f:48:42:6e:e4:fb:8f:bd:27: 61:06:27:89:73:39:15:a8:28:f0:c9:ef:04:13:6f:c5:5a:56: 48:6c:9d:58:ca:f6:1e:0d:30:52:7b:1b:a0:19:ce:db:2d:50: 02:ef:9b:d9:e0:21:8c:41:16:cc:5e:ad:26:f7:44:ef:fe:04: 61:4d:c9:8d:f3:d4:b3:97:ed:e0:10:7d:19:b0:3b:51:14:0b: b1:ed:af:fc:33:b9:de:cd:59:a9:93:0c:61:1b:71:7b:8d:b4: f3:43:d8:5f:12:6b:0d:b8:66:14:6d:b9:f0:84:d7:c5:fc:96: 51:7f:d0:c1:e2:60:dc:4a:74:31:4b:f8:f2:47:12:2b:0a:05: b9:ca:90:d9:fd:8d:9a:64:05:11:ef:85:ca:fe:3b:c1:dc:8c: bf:e7:be:ee:a8:bc:73:95:ae:3e:bd:57:99:41:1b:46:d7:f4: 35:1f:4b:91:15:e1:bc:c6:b9:47:be:5d:ae:81:e9:2e:82:06: 1e:2b:f7:cc:d3:c5:f4:b5:ac:4d:c9:b1:f8:3f:7f:25:a2:1d: a1:51:f0:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJOzHx+zCTUjvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2I0NmZjNzEtM2NkYi00ZDRlLWEzODEtNzU1MDEzMzU1YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzmzItnURM890BK6OTExy+fBiUPfR7n+XjIw +LXd76u1kqM36Qscnk3jqNfwYjWeTN5FfaUmzo549XaXVrp5cIypVQeJkiU4HcFp pgoT7rLtbhr0aXzYl6F3EAxFNcVEeSnRjfjTXMrUdSFYwbcy2a7Myi7J/9G5vljY U4AVGUq8j9RWiPrPazmnY51UCQXxCwg7AwA36Tf4gfD7sUTmaVhkRDY6BOkPmGoM qtAgT2pioyA/F1xEl6sXYlqePUHuXBfyzPI0fuF+ksTUz/9VDVtZCCq5QE9Go33W QRB7RhFjr1vlaKpyyj5i9tSypm0YZNhHxXx/KZD0IFsi4CQi9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETKDjWwj81C+s22fjAYwMroOHMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTEzNDM1NDktZTFhZC0z NjBkLTlhMmYtMzU5ODUwNTNhNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNY/2GbpQ3jN+frp1AnUGyOo8T8WE6fTioz6/Ae1ss5ovruPKa8qLbD VpCUOW9IQm7k+4+9J2EGJ4lzORWoKPDJ7wQTb8VaVkhsnVjK9h4NMFJ7G6AZztst UALvm9ngIYxBFsxerSb3RO/+BGFNyY3z1LOX7eAQfRmwO1EUC7Htr/wzud7NWamT DGEbcXuNtPND2F8Saw24ZhRtufCE18X8llF/0MHiYNxKdDFL+PJHEisKBbnKkNn9 jZpkBRHvhcr+O8HcjL/nvu6ovHOVrj69V5lBG0bX9DUfS5EV4bzGuUe+Xa6B6S6C Bh4r98zTxfS1rE3Jsfg/fyWiHaFR8IM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:38 2025 by rpki-client