$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8103bb2-6fb1-347c-a4f2-baa8f9fb125f.roa File: f8103bb2-6fb1-347c-a4f2-baa8f9fb125f.roa (raw, json) Hash identifier: fDVoPGAAEeblc+x9afkQGv4+WQGSrqjQo/dM1wdFCCA= Subject key identifier: D9:34:F6:73:0F:F1:E4:A6:48:D1:61:4A:3F:05:91:6A:54:25:59:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6FD4610302722D81912A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8103bb2-6fb1-347c-a4f2-baa8f9fb125f.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.60.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:fd:46:10:30:27:22:d8:19:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=25d17b6c-c35e-4671-aeb0-076cb0eb9be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:36:6e:df:93:cf:9d:e8:4a:71:a1:8d:31:c2: 8e:5d:a6:21:52:ce:58:32:0e:0a:73:2a:42:b0:42: 06:94:84:5a:9e:05:c8:4c:6f:0d:31:5a:20:d1:97: 76:ef:24:ed:28:3d:58:66:22:ab:77:99:83:43:30: 53:29:b2:84:f1:75:dc:17:e3:92:47:e9:78:1f:50: ea:a7:87:2d:8e:05:67:79:be:77:3b:4f:02:58:53: d0:e9:05:12:78:30:68:32:26:72:0e:3f:91:c1:bc: b0:ae:e2:cd:2c:66:6e:6c:f1:47:cd:82:bd:11:29: ee:da:7a:37:89:5b:0b:bd:e5:09:30:41:c9:d6:41: 5e:b4:0f:7c:0c:40:7b:d0:27:aa:fa:c5:74:63:ce: d9:94:0c:2e:23:1c:82:9d:3f:77:35:80:12:59:6d: fe:dc:2d:45:2b:d8:26:f4:97:ea:b3:ae:a6:41:9a: ef:cb:1c:92:e2:94:2d:70:62:19:14:5c:3a:a8:07: f9:b7:d0:dd:38:e2:5f:0d:46:c1:c1:00:6a:a2:55: 9a:4b:e2:f4:de:a2:44:59:48:fd:2b:b4:63:9d:86: ab:28:0f:d1:11:e4:72:09:63:59:0e:da:c7:80:c8: 16:56:b7:42:a2:a3:b1:47:29:16:72:a2:e7:33:91: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:F6:73:0F:F1:E4:A6:48:D1:61:4A:3F:05:91:6A:54:25:59:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8103bb2-6fb1-347c-a4f2-baa8f9fb125f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:97:e0:27:31:fb:7a:4a:b8:89:69:21:5d:a2:9b:9b:c0:75: a8:6b:98:cc:83:ba:90:dd:43:17:0b:9d:ca:76:43:ff:5e:6e: ab:02:6d:88:64:21:c6:49:27:01:38:00:9d:7c:2a:8b:97:4c: bf:30:a8:5c:a8:53:8e:bc:e4:84:48:d1:f8:53:43:41:ce:fe: 9c:1b:53:ae:d7:47:0f:c3:34:5a:9d:50:ab:75:2a:41:89:c0: 37:2d:8a:d7:00:d8:bc:e9:11:42:33:97:46:14:5b:88:c9:8f: ff:de:c3:3c:c2:ef:dd:c5:9b:b8:f8:ba:51:40:32:e8:5c:41: 70:38:52:89:7b:1b:06:ff:6d:c3:c4:d2:f5:4f:a8:ff:c7:26: 78:9a:94:e3:dd:6d:ef:7e:09:00:46:5f:96:fd:bf:6e:dc:f0: 18:3e:8a:36:c3:6c:02:83:35:d3:a1:53:bc:13:7c:90:9c:7c: e4:43:0e:28:2c:9d:fa:de:4d:09:d5:38:91:86:04:eb:cf:fe: 77:32:d1:d8:e7:6e:29:3c:06:ef:81:79:6b:df:92:03:6e:ec: dd:e6:20:c6:6f:33:3b:29:bb:e8:a1:a5:ff:f0:0b:b2:c0:14: df:a1:79:e8:f9:71:66:06:31:60:e0:63:5a:8e:66:fd:30:fd: e6:a5:ee:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9v1GEDAnItgZEqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MjVkMTdiNmMtYzM1ZS00NjcxLWFlYjAtMDc2Y2IwZWI5YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTZu35PPnehKcaGNMcKOXaYhUs5YMg4KcypC sEIGlIRangXITG8NMVog0Zd27yTtKD1YZiKrd5mDQzBTKbKE8XXcF+OSR+l4H1Dq p4ctjgVneb53O08CWFPQ6QUSeDBoMiZyDj+RwbywruLNLGZubPFHzYK9ESnu2no3 iVsLveUJMEHJ1kFetA98DEB70Ceq+sV0Y87ZlAwuIxyCnT93NYASWW3+3C1FK9gm 9Jfqs66mQZrvyxyS4pQtcGIZFFw6qAf5t9DdOOJfDUbBwQBqolWaS+L03qJEWUj9 K7RjnYarKA/REeRyCWNZDtrHgMgWVrdCoqOxRykWcqLnM5FpZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk09nMP8eSmSNFhSj8FkWpUJVmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjgxMDNiYjItNmZiMS0z NDdjLWE0ZjItYmFhOGY5ZmIxMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzytMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKX4Ccx+3pKuIlpIV2im5vAdahrmMyDupDdQxcLncp2Q/9ebqsCbYhk IcZJJwE4AJ18KouXTL8wqFyoU4685IRI0fhTQ0HO/pwbU67XRw/DNFqdUKt1KkGJ wDctitcA2LzpEUIzl0YUW4jJj//ewzzC793Fm7j4ulFAMuhcQXA4Uol7Gwb/bcPE 0vVPqP/HJnialOPdbe9+CQBGX5b9v27c8Bg+ijbDbAKDNdOhU7wTfJCcfORDDigs nfreTQnVOJGGBOvP/ncy0djnbik8Bu+BeWvfkgNu7N3mIMZvMzspu+ihpf/wC7LA FN+heej5cWYGMWDgY1qOZv0w/eal7qk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:56 2025 by rpki-client