$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aea3dde5-1d02-31a5-958c-e96e57fa5ded.roa File: aea3dde5-1d02-31a5-958c-e96e57fa5ded.roa (raw, json) Hash identifier: EKFoKeZ7GBOn9MvwBAEYC0tJQc/AAWjxTx1aMt3jnYg= Subject key identifier: 5F:67:2B:A2:F0:13:C4:2F:3D:3B:B3:E3:2B:49:26:89:8C:97:71:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C742D94340FE1E5BDCD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aea3dde5-1d02-31a5-958c-e96e57fa5ded.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.196.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:74:2d:94:34:0f:e1:e5:bd:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=116f4c10-8c6f-4362-8c11-385f72e43c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:e6:3c:59:4d:4d:11:ea:a0:50:a7:d1:a1: 1a:ee:4e:ba:c3:eb:5c:24:46:f8:91:79:39:6b:4b: 22:fa:8d:aa:e8:e3:56:c0:fd:f1:14:2e:4d:97:42: ff:9d:8f:2e:47:24:c2:21:23:0e:1c:50:33:19:2c: ae:7c:ba:46:21:04:c7:fb:80:1d:8b:dd:5b:86:f3: 24:2a:8c:1c:93:e5:ca:f9:56:95:5e:33:76:04:c0: 63:48:98:12:5a:67:df:f2:83:e6:75:92:62:ac:49: af:8f:3f:d5:c3:af:1a:e9:0f:3c:c4:1c:57:a0:ae: 2f:c3:b8:b3:73:cd:02:01:9f:c8:83:dc:10:db:1d: b9:ab:f8:db:47:c4:0a:be:c6:7f:81:e8:42:42:db: bf:d1:56:69:42:7c:d5:71:24:86:d9:36:a9:db:42: c0:00:c5:e5:a1:89:9b:50:9c:88:f5:63:9c:9f:b0: 7b:aa:f5:3d:4b:ba:63:ce:81:09:74:4f:15:f8:8c: 3a:af:b1:99:95:23:7b:90:ac:c1:55:e4:f4:4a:57: 31:a6:f5:8f:af:ff:9d:30:c2:65:e0:16:3c:1e:d0: ce:6b:5d:be:c7:92:28:0a:1a:6d:a8:50:55:84:3b: 07:05:13:8f:74:5b:21:35:37:e3:a2:19:c6:ae:99: 11:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:67:2B:A2:F0:13:C4:2F:3D:3B:B3:E3:2B:49:26:89:8C:97:71:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aea3dde5-1d02-31a5-958c-e96e57fa5ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.196.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:43:55:31:4a:54:47:04:10:34:21:33:47:74:f8:32:bb:dd: 84:21:38:c9:52:23:61:8a:51:d6:60:aa:94:0c:c0:97:29:56: d8:4b:2e:8e:81:23:0b:a3:48:65:8b:52:f2:75:2d:f1:c3:ae: 15:52:fa:6c:f8:7e:17:60:a3:7d:d1:57:c1:5b:56:e9:3a:8f: a2:73:5a:56:3d:7e:95:e4:60:40:fb:ea:e3:cb:a4:df:fb:db: 27:d4:0a:f5:9e:69:05:b9:09:cd:dc:f2:5d:5a:3f:7f:1d:57: 40:f4:56:6c:60:db:ef:1b:77:c9:20:bc:65:ee:9b:4c:db:d9: 47:bf:dc:02:cd:1a:2a:b1:c7:b0:e4:20:98:a4:10:01:9b:cd: c6:94:4c:db:09:3a:22:ac:49:3d:e1:0e:18:8f:16:c3:6a:22: bc:36:09:30:3d:27:2f:bb:50:f0:fd:30:c0:fb:a7:ff:14:f7: 46:c6:89:2b:5f:4f:fd:60:ba:3e:6a:a3:c4:c8:85:da:1e:4c: ee:fa:b5:db:f5:0c:14:e5:68:cb:12:e2:c3:df:f9:cf:9a:9a: aa:37:1b:50:d4:68:3b:d8:03:a1:79:1c:de:03:7d:3d:ae:c3: 1c:fb:09:be:15:92:e5:92:a1:01:13:6d:8a:99:9a:61:e6:4f: 66:99:79:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTHQtlDQP4eW9zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MTE2ZjRjMTAtOGM2Zi00MzYyLThjMTEtMzg1ZjcyZTQzYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKDmPFlNTRHqoFCn0aEa7k66w+tcJEb4kXk5 a0si+o2q6ONWwP3xFC5Nl0L/nY8uRyTCISMOHFAzGSyufLpGIQTH+4Adi91bhvMk Kowck+XK+VaVXjN2BMBjSJgSWmff8oPmdZJirEmvjz/Vw68a6Q88xBxXoK4vw7iz c80CAZ/Ig9wQ2x25q/jbR8QKvsZ/gehCQtu/0VZpQnzVcSSG2Tap20LAAMXloYmb UJyI9WOcn7B7qvU9S7pjzoEJdE8V+Iw6r7GZlSN7kKzBVeT0SlcxpvWPr/+dMMJl 4BY8HtDOa12+x5IoChptqFBVhDsHBROPdFshNTfjohnGrpkRiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9nK6LwE8QvPTuz4ytJJomMl3GiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVhM2RkZTUtMWQwMi0z MWE1LTk1OGMtZTk2ZTU3ZmE1ZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8S4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVDVTFKVEcEEDQhM0d0+DK73YQhOMlSI2GKUdZgqpQMwJcpVthLLo6B IwujSGWLUvJ1LfHDrhVS+mz4fhdgo33RV8FbVuk6j6JzWlY9fpXkYED76uPLpN/7 2yfUCvWeaQW5Cc3c8l1aP38dV0D0Vmxg2+8bd8kgvGXum0zb2Ue/3ALNGiqxx7Dk IJikEAGbzcaUTNsJOiKsST3hDhiPFsNqIrw2CTA9Jy+7UPD9MMD7p/8U90bGiStf T/1guj5qo8TIhdoeTO76tdv1DBTlaMsS4sPf+c+amqo3G1DUaDvYA6F5HN4DfT2u wxz7Cb4VkuWSoQETbYqZmmHmT2aZeWs= -----END CERTIFICATE-----Generated at Wed Nov 5 09:17:42 2025 by rpki-client