$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56b3873e-db4f-3011-b3c0-a4005ee0eeae.roa File: 56b3873e-db4f-3011-b3c0-a4005ee0eeae.roa (raw, json) Hash identifier: aEEPY2r2kFGU2uVCm9jOOrq8S8znrNepe06nzvm4214= Subject key identifier: 6B:E1:41:BC:B4:3C:D6:BC:7E:E2:F8:C7:F2:92:B6:3F:CB:2E:8B:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D7A1E921CF23987731E780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56b3873e-db4f-3011-b3c0-a4005ee0eeae.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 43766 IP address blocks: 23.209.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a1:e9:21:cf:23:98:77:31:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5f2d40a3-4d43-4c38-8851-c5195a9ee740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:d6:51:96:d1:00:5e:8e:4a:ec:8c:ee:0d: 04:01:31:d0:bb:ed:72:22:a6:df:1f:1a:df:95:87: bf:72:a4:2a:af:53:09:60:2c:b0:db:a5:7e:03:09: 0f:01:11:21:5b:50:a2:91:92:2e:62:55:33:49:1f: 3a:22:56:0a:98:a3:c9:58:b7:87:87:15:2f:3c:2f: a4:68:e3:b8:db:1c:85:26:41:c3:73:d3:02:6a:a1: 1f:29:3f:a7:fa:64:44:d2:8e:0b:a1:50:23:fb:01: a7:9d:c9:b7:d2:4a:ee:ec:53:ea:a0:cb:28:7a:a6: 39:47:bd:91:fe:46:9a:46:59:67:09:3a:8a:6c:1d: 67:27:68:e1:bb:71:a2:22:7d:fb:06:81:04:b5:67: 05:db:e5:5d:a6:a4:18:43:1e:79:d8:27:ae:e3:43: 42:67:68:1e:69:4b:b7:c4:54:d5:49:9c:6d:c5:58: 47:8d:fc:b8:04:96:de:75:83:a8:6c:42:1e:f7:e0: b2:a5:12:c0:81:ea:0e:1e:11:de:0e:b5:43:e9:cf: 82:4f:3d:14:1b:48:11:5f:a7:dc:7f:34:23:22:59: 45:fd:00:59:b2:56:b1:f3:e3:9c:ed:de:75:9b:83: 9a:f2:44:a7:15:7a:d4:dd:28:f8:1d:cc:65:48:ee: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E1:41:BC:B4:3C:D6:BC:7E:E2:F8:C7:F2:92:B6:3F:CB:2E:8B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56b3873e-db4f-3011-b3c0-a4005ee0eeae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:76:16:1b:b2:46:70:bd:d2:a2:16:98:43:df:ed:2c:d2:70: 44:1d:28:9a:af:c5:47:0f:3c:6f:ee:44:4d:69:25:89:64:b1: 40:a8:e6:78:30:e3:61:02:03:f4:cf:89:71:2d:25:74:6c:69: 53:d7:00:01:27:d2:07:72:7b:30:ff:18:8c:f9:59:b8:c3:99: 98:9c:03:46:48:4a:46:cb:e6:09:2f:cd:a1:bd:ad:63:d3:fd: 25:65:f6:39:a8:de:61:35:d2:e7:d0:05:46:f7:32:69:39:73: 77:27:9a:d1:75:5d:4e:49:57:6c:c3:ce:8a:80:9c:39:89:d2: e4:ba:18:04:b9:bf:be:37:f1:b9:76:57:a0:e0:a5:57:50:f0: f9:c4:ba:9f:3d:7a:39:c7:66:6e:0b:af:0e:5c:4e:42:bd:dc: 42:63:7c:48:ca:d6:a9:76:f0:87:6f:98:eb:36:19:b5:6a:99: f0:7b:52:4a:18:38:c7:6e:59:62:59:f5:7f:23:09:4b:2c:f8: a5:02:14:bd:ed:6c:c6:16:09:af:0d:b0:cf:5a:32:23:91:22: 1e:a8:9f:85:f5:0b:ea:44:33:e7:44:e4:3b:c8:d2:1e:de:0d: 80:da:74:c6:e1:7a:29:bf:0e:cd:52:e1:5c:e4:ca:14:32:9b: 88:b3:d4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16HpIc8jmHcx54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NWYyZDQwYTMtNGQ0My00YzM4LTg4NTEtYzUxOTVhOWVlNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghTWUZbRAF6OSuyM7g0EATHQu+1yIqbfHxrf lYe/cqQqr1MJYCyw26V+AwkPAREhW1CikZIuYlUzSR86IlYKmKPJWLeHhxUvPC+k aOO42xyFJkHDc9MCaqEfKT+n+mRE0o4LoVAj+wGnncm30kru7FPqoMsoeqY5R72R /kaaRllnCTqKbB1nJ2jhu3GiIn37BoEEtWcF2+VdpqQYQx552Ceu40NCZ2geaUu3 xFTVSZxtxVhHjfy4BJbedYOobEIe9+CypRLAgeoOHhHeDrVD6c+CTz0UG0gRX6fc fzQjIllF/QBZslax8+Oc7d51m4Oa8kSnFXrU3Sj4HcxlSO7QPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvhQby0PNa8fuL4x/KStj/LLovFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTZiMzg3M2UtZGI0Zi0z MDExLWIzYzAtYTQwMDVlZTBlZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF9FwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp2FhuyRnC90qIWmEPf7SzScEQdKJqvxUcPPG/uRE1pJYlksUCo5ngw 42ECA/TPiXEtJXRsaVPXAAEn0gdyezD/GIz5WbjDmZicA0ZISkbL5gkvzaG9rWPT /SVl9jmo3mE10ufQBUb3Mmk5c3cnmtF1XU5JV2zDzoqAnDmJ0uS6GAS5v7438bl2 V6DgpVdQ8PnEup89ejnHZm4Lrw5cTkK93EJjfEjK1ql28IdvmOs2GbVqmfB7UkoY OMduWWJZ9X8jCUss+KUCFL3tbMYWCa8NsM9aMiORIh6on4X1C+pEM+dE5DvI0h7e DYDadMbheim/Ds1S4VzkyhQym4iz1BE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:30:10 2025 by rpki-client