$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa File: f64bafe8-05eb-317a-8b7e-d51859d975f1.roa (raw, json) Hash identifier: DWXZdwYBx/QVl/OQxVrbOVUr2ZhQR6ToF3GYNXNDl6c= Subject key identifier: CE:A8:EE:F4:20:79:2E:F9:65:4B:00:1B:10:FC:29:49:6D:2B:24:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C94CFB4E0F195CE4021C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.205.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:94:cf:b4:e0:f1:95:ce:40:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=8d84e3a2-9e19-4124-8aa6-b5cdcff5d73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:7e:5a:96:84:2a:33:72:f2:06:1e:ad:aa: 48:ca:e2:f5:a2:24:ff:b9:2d:3e:51:ce:d4:87:1f: 77:d3:37:18:55:38:6d:9f:ec:1d:53:34:e4:6a:d3: 9b:67:82:ab:bb:e2:00:51:7d:6a:e9:4b:a9:9d:5e: 89:ee:95:3d:48:47:6e:dc:2b:da:0b:5c:05:59:6a: b8:a5:0b:1f:5d:ee:ac:e1:ea:4c:cb:f5:ed:ea:17: 8a:15:75:85:c5:3d:9d:95:60:33:ad:4b:2a:df:22: 54:8a:bb:71:c7:dc:77:01:b7:00:8a:69:11:a6:89: 04:99:d1:11:4f:e7:37:c9:6e:16:9b:94:85:82:90: 30:b1:92:2b:48:12:f4:72:a2:5b:c5:7f:f2:2a:82: e8:d0:e6:7e:a6:c3:d7:ce:b4:fc:c1:af:3b:ab:a8: 72:3d:c1:ba:fe:54:86:2a:e9:86:4b:1c:2d:f2:5a: 06:fe:48:6f:6e:37:0e:2f:65:22:34:91:94:5f:63: a0:df:f3:96:47:d0:a4:2e:dd:e1:c3:2d:3d:cb:f8: aa:d4:75:18:0e:b6:dd:ab:e2:16:f0:b8:b8:f0:d9: b3:27:6c:16:fe:cb:8e:92:ad:ab:e4:1a:3b:89:5b: 05:d5:64:24:a9:f9:8c:14:6a:26:90:86:c7:4e:e9: 1f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A8:EE:F4:20:79:2E:F9:65:4B:00:1B:10:FC:29:49:6D:2B:24:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f64bafe8-05eb-317a-8b7e-d51859d975f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4a:de:bd:d7:ca:96:d3:db:7e:71:31:54:2b:63:a9:84:8b: 15:da:74:0f:20:8a:11:38:22:dc:24:b6:77:98:a3:c0:92:fc: a6:4d:f0:de:e4:fa:72:7d:33:d2:13:2e:b2:78:8f:28:eb:9a: 29:d5:0f:de:7a:68:f0:bb:a1:17:5c:5a:e4:e6:d1:50:bf:46: 0c:47:31:0c:9f:a0:3d:2b:c8:3e:e6:e3:ce:7f:de:c6:3f:69: f6:a6:8f:b2:1c:1b:09:0d:a4:4b:7a:b3:2a:5d:24:9b:09:ee: ed:34:75:50:36:e9:97:9e:40:da:d7:f9:4d:53:30:aa:d2:d5: ca:c0:55:73:fe:bb:99:80:bb:8b:60:78:53:eb:d6:31:fc:8e: 4b:b4:fa:6c:ee:f7:ea:18:da:31:10:ba:1d:98:18:61:6d:68: f5:f3:4d:5c:3c:1c:1c:71:48:39:9b:32:d1:c4:ab:64:41:dc: 6a:36:03:4f:6d:1c:d4:44:97:7e:29:27:af:25:8a:c9:35:e1: e4:50:17:ea:bd:dc:78:52:89:52:65:b5:83:24:78:23:ae:9e: 9c:af:08:a6:d4:ac:3f:cd:13:3f:f4:92:54:5c:06:96:73:46: 69:cc:a3:87:81:63:77:f5:18:55:26:75:47:67:aa:f1:ea:f7: 32:20:cb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJTPtODxlc5AIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk OGQ4NGUzYTItOWUxOS00MTI0LThhYTYtYjVjZGNmZjVkNzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4p+WpaEKjNy8gYerapIyuL1oiT/uS0+Uc7U hx930zcYVThtn+wdUzTkatObZ4Kru+IAUX1q6UupnV6J7pU9SEdu3CvaC1wFWWq4 pQsfXe6s4epMy/Xt6heKFXWFxT2dlWAzrUsq3yJUirtxx9x3AbcAimkRpokEmdER T+c3yW4Wm5SFgpAwsZIrSBL0cqJbxX/yKoLo0OZ+psPXzrT8wa87q6hyPcG6/lSG KumGSxwt8loG/khvbjcOL2UiNJGUX2Og3/OWR9CkLt3hwy09y/iq1HUYDrbdq+IW 8Li48NmzJ2wW/suOkq2r5Bo7iVsF1WQkqfmMFGomkIbHTukfUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6o7vQgeS75ZUsAGxD8KUltKySuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjY0YmFmZTgtMDVlYi0z MTdhLThiN2UtZDUxODU5ZDk3NWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF82vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdK3r3XypbT235xMVQrY6mEixXadA8gihE4ItwktneYo8CS/KZN8N7k +nJ9M9ITLrJ4jyjrminVD956aPC7oRdcWuTm0VC/RgxHMQyfoD0ryD7m485/3sY/ afamj7IcGwkNpEt6sypdJJsJ7u00dVA26ZeeQNrX+U1TMKrS1crAVXP+u5mAu4tg eFPr1jH8jku0+mzu9+oY2jEQuh2YGGFtaPXzTVw8HBxxSDmbMtHEq2RB3Go2A09t HNREl34pJ68lisk14eRQF+q93HhSiVJltYMkeCOunpyvCKbUrD/NEz/0klRcBpZz RmnMo4eBY3f1GFUmdUdnqvHq9zIgy1M= -----END CERTIFICATE-----Generated at Mon Oct 20 00:25:59 2025 by rpki-client