$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/397bee94-4c95-3a72-95c8-179db23e6229.roa File: 397bee94-4c95-3a72-95c8-179db23e6229.roa (raw, json) Hash identifier: jsxD/toa5mP2Gk8Y09rrSb7xdYF7NisUB9QzJvKx0bc= Subject key identifier: EE:13:9E:FF:62:08:D0:18:71:8A:F4:22:15:45:70:51:D1:AF:9A:9D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9442C448BF963DACBB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/397bee94-4c95-3a72-95c8-179db23e6229.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.205.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:94:42:c4:48:bf:96:3d:ac:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=d2a2edc4-dd50-480d-822b-506fd96afed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:13:2c:c4:43:7c:4e:dd:b9:df:c4:b0:97:67: 50:fe:b0:b0:13:7f:72:45:4a:99:ed:00:e3:b9:a0: dd:b7:ff:65:d0:25:37:26:d8:d9:d7:a7:a9:bc:2c: d1:ab:4c:ef:6c:f1:fc:a9:89:71:18:c2:b1:52:ed: 31:e9:5d:f4:a9:3b:02:33:76:8a:77:76:5b:ba:77: aa:c8:53:9d:ed:d8:ea:b6:4b:7b:72:b1:6f:65:1b: c5:30:20:c6:d8:e7:f0:fb:90:3a:f6:cd:b0:e2:98: ec:a8:33:a1:fd:7e:c1:e0:30:5b:a3:7b:84:89:80: 45:ed:9a:86:bb:29:37:cd:a1:20:3b:38:64:e9:88: 5d:63:41:56:40:41:0b:c1:bd:9e:8e:26:a9:fa:3d: b5:c1:37:57:df:e0:09:34:68:86:02:1f:ea:d1:3e: 6c:92:c2:6c:c5:1c:32:36:a6:ef:16:33:c5:04:2b: 4a:d3:c3:69:35:4f:8e:23:d5:21:4d:ac:2c:e8:b2: 71:d7:c3:23:eb:f4:3d:f1:52:bb:8d:9a:b9:ff:4b: 51:ff:a9:0e:ee:ff:fb:5b:dd:62:d8:fa:d0:a0:f0: 18:4b:13:51:8d:95:fe:8e:bb:42:eb:1d:cd:a6:83: d0:55:cf:73:04:96:71:c9:80:e0:80:77:46:04:10: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:13:9E:FF:62:08:D0:18:71:8A:F4:22:15:45:70:51:D1:AF:9A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/397bee94-4c95-3a72-95c8-179db23e6229.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.205.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c7:95:d3:01:2d:a7:cd:32:4e:3a:58:b6:31:38:40:76:02: b3:9e:00:61:ca:ad:89:40:30:7b:9a:b9:33:60:79:f7:9d:2f: 24:b4:13:99:a5:bc:c1:60:94:bd:d9:65:db:00:40:dc:71:88: eb:0c:84:31:27:4c:e8:9c:13:02:9c:b1:b4:8f:bc:45:e9:8a: a9:31:bb:28:da:ce:5e:64:c9:4c:a8:c2:21:fb:7d:f9:06:ae: c8:8b:a7:01:67:72:06:b3:dc:de:7e:b3:3d:f1:2e:c4:1a:cc: 74:73:49:5e:4e:b7:98:b4:bb:4d:3c:80:a7:93:27:9a:6f:ed: f2:ea:0c:a4:40:cf:dd:4e:ad:8c:60:9d:e1:69:bc:53:05:99: 27:0c:e4:f3:54:f9:cb:80:ad:90:e8:cd:2b:43:fe:a5:41:0c: dd:cc:22:d8:41:65:a1:54:3f:50:3b:69:01:e3:9c:9d:0d:97: 06:22:93:b4:82:10:fd:1a:c9:71:00:80:cc:ef:e8:b8:7b:05: d1:86:d7:83:90:cb:24:6f:da:98:17:5e:04:4f:38:7b:a1:2f: 0a:8f:0e:7f:55:c1:44:2c:87:50:8c:b7:71:8b:0c:ba:94:e4: 96:67:cf:6b:db:01:96:2c:f6:2a:b7:32:16:c1:a2:b9:fc:d8: 8c:69:29:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJRCxEi/lj2suwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZDJhMmVkYzQtZGQ1MC00ODBkLTgyMmItNTA2ZmQ5NmFmZWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBMsxEN8Tt2538Swl2dQ/rCwE39yRUqZ7QDj uaDdt/9l0CU3JtjZ16epvCzRq0zvbPH8qYlxGMKxUu0x6V30qTsCM3aKd3Zbuneq yFOd7djqtkt7crFvZRvFMCDG2Ofw+5A69s2w4pjsqDOh/X7B4DBbo3uEiYBF7ZqG uyk3zaEgOzhk6YhdY0FWQEELwb2ejiap+j21wTdX3+AJNGiGAh/q0T5sksJsxRwy NqbvFjPFBCtK08NpNU+OI9UhTaws6LJx18Mj6/Q98VK7jZq5/0tR/6kO7v/7W91i 2PrQoPAYSxNRjZX+jrtC6x3NpoPQVc9zBJZxyYDggHdGBBCJgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4Tnv9iCNAYcYr0IhVFcFHRr5qdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk3YmVlOTQtNGM5NS0z YTcyLTk1YzgtMTc5ZGIyM2U2MjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF82QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbHldMBLafNMk46WLYxOEB2ArOeAGHKrYlAMHuauTNgefedLyS0E5ml vMFglL3ZZdsAQNxxiOsMhDEnTOicEwKcsbSPvEXpiqkxuyjazl5kyUyowiH7ffkG rsiLpwFncgaz3N5+sz3xLsQazHRzSV5Ot5i0u008gKeTJ5pv7fLqDKRAz91OrYxg neFpvFMFmScM5PNU+cuArZDozStD/qVBDN3MIthBZaFUP1A7aQHjnJ0NlwYik7SC EP0ayXEAgMzv6Lh7BdGG14OQyyRv2pgXXgRPOHuhLwqPDn9VwUQsh1CMt3GLDLqU 5JZnz2vbAZYs9iq3MhbBorn82IxpKUw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:29:45 2025 by rpki-client