$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2698ff38-292e-3b1a-b441-b755392767a6.roa File: 2698ff38-292e-3b1a-b441-b755392767a6.roa (raw, json) Hash identifier: NGWbZYSkzxQ0U4zDw54LkkfR3lqCn8e+ZnmY0Q0gvic= Subject key identifier: 47:79:4D:84:7F:AD:7C:A1:EF:35:03:74:B8:3C:63:81:50:65:DC:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3821AE2715BEAAD9F9320EFC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2698ff38-292e-3b1a-b441-b755392767a6.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.192.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:ae:27:15:be:aa:d9:f9:32:0e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=3be93411-e065-400b-babb-1588e5bdec15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:eb:ff:b5:5d:1e:c0:8f:6d:af:5a:ee:1a: f9:e2:24:ae:4c:29:0e:cb:44:31:de:b7:f4:30:03: 2f:42:0f:8c:52:5e:72:2e:ed:a6:ec:c5:fc:c8:1e: a4:e8:4e:85:2c:cb:9f:bd:30:fa:ed:97:f6:2e:00: f1:d6:14:91:11:cd:21:67:ba:25:f9:b0:be:0e:05: 76:9a:d8:0b:3b:45:26:d1:57:45:e6:f4:ea:80:a0: b3:dd:39:87:71:39:54:40:29:48:fd:5e:0d:41:d5: df:1b:4f:cb:5b:e8:5d:4a:bb:3b:a8:e6:d1:7e:da: 11:43:69:4a:1f:ba:d0:c5:f6:f1:74:ce:a3:38:3c: 73:1b:1c:4d:17:de:50:79:d9:d4:0b:d7:a5:c5:14: 44:42:93:23:79:b4:34:3a:7a:17:bb:51:03:01:b0: 8c:37:07:27:71:32:a1:7f:53:7b:fd:94:44:86:74: cc:fb:03:e3:83:0a:d4:df:3a:f4:d6:1b:a6:41:99: 2f:19:8f:4c:50:b4:91:ad:7b:9b:17:77:ef:7f:ab: 13:b0:3a:dc:f5:eb:c0:39:b1:61:a7:06:4a:84:69: 10:a1:3b:07:ba:07:50:2b:5d:ae:7c:22:2c:69:86: 9f:85:49:1d:98:f6:ef:a2:4b:41:fa:8a:45:9e:d6: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:79:4D:84:7F:AD:7C:A1:EF:35:03:74:B8:3C:63:81:50:65:DC:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2698ff38-292e-3b1a-b441-b755392767a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.192.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1e:06:74:b5:8e:f5:83:4c:a8:2c:29:40:d7:fb:76:f7:7f: df:83:d3:71:de:fc:22:42:44:b8:92:6e:3c:c0:2e:03:37:61: dd:fb:50:69:70:c7:01:1d:27:6c:20:ff:c4:ee:7e:2b:aa:64: 23:32:9a:41:72:c6:43:ac:5a:6e:1c:c2:d4:1c:f9:d7:48:d5: f3:c6:e7:48:fe:ab:0a:93:86:90:8e:33:31:f7:84:46:44:8d: 6d:c9:b6:c0:22:3d:27:85:2f:50:b6:b2:5f:d1:62:d7:f7:af: 54:cd:ed:1a:07:25:55:64:69:cf:73:b3:77:ac:65:95:bc:5a: 06:10:6b:43:30:06:5d:18:e8:71:43:a5:71:0d:c7:52:6a:51: b6:cf:9d:3a:11:ed:e0:76:75:0c:58:16:89:ad:91:73:cc:d5: 65:9d:94:05:dd:31:43:13:89:28:d8:88:c4:9e:02:5e:ff:4c: 72:91:24:f9:2d:1e:c3:36:66:e3:75:61:5d:ef:7b:ab:d1:ef: c7:79:6b:12:ac:ce:d6:e2:d1:a2:c0:0b:f6:a7:bc:36:7d:47: d6:69:cc:e1:05:55:0b:4f:72:53:6c:ef:04:95:49:5d:8c:63: 95:c3:1a:60:b5:8c:87:29:7c:5e:45:57:38:28:d7:20:cf:ed: c0:1f:0a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4Ia4nFb6q2fkyDvwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk M2JlOTM0MTEtZTA2NS00MDBiLWJhYmItMTU4OGU1YmRlYzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjazr/7VdHsCPba9a7hr54iSuTCkOy0Qx3rf0 MAMvQg+MUl5yLu2m7MX8yB6k6E6FLMufvTD67Zf2LgDx1hSREc0hZ7ol+bC+DgV2 mtgLO0Um0VdF5vTqgKCz3TmHcTlUQClI/V4NQdXfG0/LW+hdSrs7qObRftoRQ2lK H7rQxfbxdM6jODxzGxxNF95QednUC9elxRREQpMjebQ0OnoXu1EDAbCMNwcncTKh f1N7/ZREhnTM+wPjgwrU3zr01humQZkvGY9MULSRrXubF3fvf6sTsDrc9evAObFh pwZKhGkQoTsHugdQK12ufCIsaYafhUkdmPbvoktB+opFntYhGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEd5TYR/rXyh7zUDdLg8Y4FQZdx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjY5OGZmMzgtMjkyZS0z YjFhLWI0NDEtYjc1NTM5Mjc2N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8CmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0eBnS1jvWDTKgsKUDX+3b3f9+D03He/CJCRLiSbjzALgM3Yd37UGlw xwEdJ2wg/8TufiuqZCMymkFyxkOsWm4cwtQc+ddI1fPG50j+qwqThpCOMzH3hEZE jW3JtsAiPSeFL1C2sl/RYtf3r1TN7RoHJVVkac9zs3esZZW8WgYQa0MwBl0Y6HFD pXENx1JqUbbPnToR7eB2dQxYFomtkXPM1WWdlAXdMUMTiSjYiMSeAl7/THKRJPkt HsM2ZuN1YV3ve6vR78d5axKsztbi0aLAC/anvDZ9R9ZpzOEFVQtPclNs7wSVSV2M Y5XDGmC1jIcpfF5FVzgo1yDP7cAfCkA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:03 2025 by rpki-client