$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1cae425-84d4-33e6-96a1-a39c97948ee3.roa File: c1cae425-84d4-33e6-96a1-a39c97948ee3.roa (raw, json) Hash identifier: umOuvU41C4oK1hnMG4D4XTSPhPaqrZhPDniE7OdyTFs= Subject key identifier: D2:E3:DB:4A:52:7E:2D:B7:88:77:53:96:6A:F3:70:62:26:19:1E:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583CA26C533488E5E7AF0320 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1cae425-84d4-33e6-96a1-a39c97948ee3.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.206.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:a2:6c:53:34:88:e5:e7:af:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=0be5cb83-493a-44ad-a697-f89b8e45939e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:50:eb:b9:6f:53:e6:8d:57:e7:e1:92:2e: f4:f8:e2:17:2f:64:bc:7d:dc:dc:37:bf:8a:30:e3: d7:b0:f2:51:d9:9b:49:0d:e4:35:c9:b1:29:77:be: 45:78:04:5d:5e:a7:f9:d0:8e:29:7c:94:64:d8:39: b9:44:39:8f:ab:c5:b0:88:ac:30:f9:da:92:99:a1: 79:b7:6e:f5:a0:91:c2:8f:4c:98:6a:3b:15:f4:26: 9a:30:b3:35:38:1f:6d:47:bc:e6:79:fb:77:f6:92: 2f:73:68:6e:cc:16:76:e9:de:d5:60:b7:19:e6:26: 34:30:aa:fe:15:a1:13:bf:9b:f6:92:eb:17:3a:31: db:cd:b4:cc:f1:c0:4a:f1:b8:f0:e1:39:3e:96:e6: 5b:f0:0b:12:2e:74:d5:9a:40:4b:e5:ec:63:5f:98: b9:c7:d9:4c:bf:9f:ed:ff:2a:e9:3e:cc:c4:a2:d7: 5b:54:ad:37:d7:25:ca:1b:47:39:28:a5:f6:ba:fd: cf:77:1d:50:8e:63:4c:90:0e:4c:a1:31:c8:a5:d4: cf:bb:44:2f:46:e9:9c:19:1a:cf:95:79:33:e9:96: 34:66:bc:70:3e:21:e6:5a:f6:e4:ba:37:af:ef:b7: 13:f9:02:9d:24:e1:56:5c:57:b0:db:0f:df:51:30: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E3:DB:4A:52:7E:2D:B7:88:77:53:96:6A:F3:70:62:26:19:1E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1cae425-84d4-33e6-96a1-a39c97948ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:0c:4a:e7:3b:f7:da:24:7c:59:86:0c:e4:8e:e6:65:ad:05: af:36:c4:62:32:fa:c5:5d:8f:d2:06:63:60:9b:f6:c6:84:f9: 70:11:ca:d1:45:68:c5:ad:59:e3:35:84:d4:8a:c4:56:82:16: 4e:9a:91:23:8c:36:49:6c:01:b3:21:2c:50:58:73:15:fb:13: b0:06:9f:86:f7:85:2d:e4:af:db:62:00:d6:43:c6:54:cf:6c: 2a:92:19:85:52:21:18:83:49:47:35:56:22:c6:bb:75:94:f1: c4:fb:c9:6d:5f:e0:db:53:e7:3a:c6:f7:51:4e:eb:e0:4d:b3: 9e:ad:53:7a:ec:99:49:13:d8:43:05:17:58:d3:95:ba:c4:d1: db:2b:db:77:22:e8:f8:90:6c:52:17:40:c2:f2:62:23:d0:20: 7f:9a:b4:1d:82:d6:91:64:80:2a:c0:8b:7c:fa:59:fd:f6:99: 56:60:68:23:01:5b:7d:39:83:e1:13:55:47:a1:0f:b9:1e:18: d8:20:97:89:14:47:8b:d7:36:51:5d:05:39:17:5f:9c:21:76: 91:69:90:f8:1c:9c:1f:26:ea:8f:cd:b8:96:8a:99:5d:c3:b3: 7c:ed:9e:1b:6d:b5:78:f4:97:7f:2c:b7:f4:2c:97:88:48:75: 7d:f6:f4:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPKJsUzSI5eevAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MGJlNWNiODMtNDkzYS00NGFkLWE2OTctZjg5YjhlNDU5MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+1Q67lvU+aNV+fhki70+OIXL2S8fdzcN7+K MOPXsPJR2ZtJDeQ1ybEpd75FeARdXqf50I4pfJRk2Dm5RDmPq8WwiKww+dqSmaF5 t271oJHCj0yYajsV9CaaMLM1OB9tR7zmeft39pIvc2huzBZ26d7VYLcZ5iY0MKr+ FaETv5v2kusXOjHbzbTM8cBK8bjw4Tk+luZb8AsSLnTVmkBL5exjX5i5x9lMv5/t /yrpPszEotdbVK031yXKG0c5KKX2uv3Pdx1QjmNMkA5MoTHIpdTPu0QvRumcGRrP lXkz6ZY0ZrxwPiHmWvbkujev77cT+QKdJOFWXFew2w/fUTBALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLj20pSfi23iHdTlmrzcGImGR4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFjYWU0MjUtODRkNC0z M2U2LTk2YTEtYTM5Yzk3OTQ4ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF867MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0MSuc799okfFmGDOSO5mWtBa82xGIy+sVdj9IGY2Cb9saE+XARytFF aMWtWeM1hNSKxFaCFk6akSOMNklsAbMhLFBYcxX7E7AGn4b3hS3kr9tiANZDxlTP bCqSGYVSIRiDSUc1ViLGu3WU8cT7yW1f4NtT5zrG91FO6+BNs56tU3rsmUkT2EMF F1jTlbrE0dsr23ci6PiQbFIXQMLyYiPQIH+atB2C1pFkgCrAi3z6Wf32mVZgaCMB W305g+ETVUehD7keGNggl4kUR4vXNlFdBTkXX5whdpFpkPgcnB8m6o/NuJaKmV3D s3ztnhtttXj0l38st/Qsl4hIdX329MY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:16 2025 by rpki-client