$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f44bcbca-c292-3f18-a077-714645037c9c.roa File: f44bcbca-c292-3f18-a077-714645037c9c.roa (raw, json) Hash identifier: OpKpfKN4rY8G5asTQkEOf7yA+aTQoSWG9UZ3VlMm5QY= Subject key identifier: 8D:6A:46:1C:18:4E:7E:13:54:28:78:24:17:70:B7:E4:72:28:85:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9F826723265A7CB37400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f44bcbca-c292-3f18-a077-714645037c9c.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.205.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9f:82:67:23:26:5a:7c:b3:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=33bccbbb-0b48-49df-895f-64619b5d20e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:41:b0:d5:f9:17:63:54:77:2c:02:d1:2f: 96:81:5a:4d:f2:65:25:6d:45:a2:be:ef:93:d1:b5: 94:5f:43:4d:e9:98:69:de:b2:b6:3c:cc:56:84:b0: 81:a3:d3:4a:a5:77:d0:c7:99:82:b2:0f:b5:b3:c6: 1f:69:03:90:6d:b6:3e:c4:19:6d:1c:f4:9e:d4:ea: aa:d9:01:9a:52:99:a0:b0:7c:24:b3:77:35:73:71: bb:2c:34:73:f2:bd:b5:4b:2e:50:0a:ed:5c:2f:30: c4:dc:08:0f:8b:f4:4e:24:8d:2e:28:f8:ed:17:26: 9e:95:d0:9d:94:95:8b:e5:4a:23:3c:eb:60:4f:ba: 53:4e:c6:d6:88:46:e5:74:8f:96:17:f8:bd:ae:7c: f8:15:e5:19:ff:34:a7:5b:9a:8f:49:5c:b5:d0:8f: ba:91:aa:0c:b5:8f:05:27:d5:22:73:36:8c:5b:e0: ec:d2:f1:05:88:b9:67:bf:a5:99:2c:dd:fb:f8:1d: 11:2f:8e:19:8a:87:e9:55:ed:31:13:78:89:3d:f2: d4:02:8e:f6:2c:91:ea:f8:f1:9b:00:38:5d:ba:46: 7d:25:a4:d2:42:6d:76:f0:3f:1e:d4:06:12:8f:57: ce:85:cb:35:67:2a:ce:7e:c4:0b:61:44:af:66:61: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:46:1C:18:4E:7E:13:54:28:78:24:17:70:B7:E4:72:28:85:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f44bcbca-c292-3f18-a077-714645037c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3d:96:bc:eb:81:81:10:b1:dc:1e:69:da:6b:de:e7:16:85: 16:da:ae:15:2f:e9:a9:88:56:a6:c3:ac:70:d0:df:8b:a9:8d: b0:6c:93:56:f9:cf:d9:a2:c2:ce:11:bd:13:2f:61:3b:e6:11: 83:a5:e6:a2:20:64:2a:6e:92:b7:92:97:88:bc:6c:72:b2:04: 05:46:a6:45:c5:41:04:d0:56:4b:0f:fe:56:ea:0a:ae:22:a5: cc:40:82:be:9b:d9:78:21:13:64:af:14:5d:0f:c3:f4:ef:e6: 38:11:39:34:bb:1b:56:b9:c5:99:88:ed:c2:68:b1:f4:c8:b4: 91:d6:0a:88:94:63:4f:d9:90:0f:8b:b0:86:87:2b:11:ed:73: 79:4c:cc:ee:16:44:cf:1a:17:fb:e8:0f:4a:86:56:cb:f1:2e: b1:bb:4d:f6:8d:4b:c9:89:28:ef:aa:39:09:c5:79:a9:76:d3: e0:e2:ed:67:a2:5f:dc:af:a8:52:f0:0b:d4:ff:14:fe:56:78: 3b:c9:f6:43:41:04:ca:03:b1:09:1a:c5:f6:89:73:84:6d:8e: b4:f3:98:f9:58:60:d0:37:27:e3:d5:f9:5f:cf:c1:2a:c8:e1: 90:cf:3d:4f:54:52:fb:dc:c9:7d:c4:d7:62:2a:bc:3f:eb:96: e0:e0:7b:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJ+CZyMmWnyzdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MzNiY2NiYmItMGI0OC00OWRmLTg5NWYtNjQ2MTliNWQyMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvupBsNX5F2NUdywC0S+WgVpN8mUlbUWivu+T 0bWUX0NN6Zhp3rK2PMxWhLCBo9NKpXfQx5mCsg+1s8YfaQOQbbY+xBltHPSe1Oqq 2QGaUpmgsHwks3c1c3G7LDRz8r21Sy5QCu1cLzDE3AgPi/ROJI0uKPjtFyaeldCd lJWL5UojPOtgT7pTTsbWiEbldI+WF/i9rnz4FeUZ/zSnW5qPSVy10I+6kaoMtY8F J9UiczaMW+Ds0vEFiLlnv6WZLN37+B0RL44ZiofpVe0xE3iJPfLUAo72LJHq+PGb ADhdukZ9JaTSQm128D8e1AYSj1fOhcs1ZyrOfsQLYUSvZmFPNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1qRhwYTn4TVCh4JBdwt+RyKIXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjQ0YmNiY2EtYzI5Mi0z ZjE4LWEwNzctNzE0NjQ1MDM3YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF81ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH49lrzrgYEQsdweadpr3ucWhRbarhUv6amIVqbDrHDQ34upjbBsk1b5 z9miws4RvRMvYTvmEYOl5qIgZCpukreSl4i8bHKyBAVGpkXFQQTQVksP/lbqCq4i pcxAgr6b2XghE2SvFF0Pw/Tv5jgROTS7G1a5xZmI7cJosfTItJHWCoiUY0/ZkA+L sIaHKxHtc3lMzO4WRM8aF/voD0qGVsvxLrG7TfaNS8mJKO+qOQnFeal20+Di7Wei X9yvqFLwC9T/FP5WeDvJ9kNBBMoDsQkaxfaJc4RtjrTzmPlYYNA3J+PV+V/PwSrI 4ZDPPU9UUvvcyX3E12IqvD/rluDge3s= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:08 2025 by rpki-client