$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3c750cb-4665-3a85-bc5f-7d9e9621ec11.roa File: f3c750cb-4665-3a85-bc5f-7d9e9621ec11.roa (raw, json) Hash identifier: VGJ9ad21gbV/XltmD+sa7j7pxnOY/jNcLPzswYutPtk= Subject key identifier: 5C:F8:4B:86:3B:35:56:D0:08:36:70:9C:80:FC:C1:0D:B7:95:77:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D2596933B9C03039D22B8D Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3c750cb-4665-3a85-bc5f-7d9e9621ec11.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.206.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:59:69:33:b9:c0:30:39:d2:2b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=2bf424ed-b69e-410e-b450-16f2eb2eed7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:5f:2c:d7:0a:b9:e0:fe:e8:53:d0:49:9e: 9c:79:ba:e2:ee:db:46:6f:fb:ba:fc:fc:ae:92:01: fe:56:c1:42:30:23:d1:fa:43:bf:1e:35:b9:f0:81: 10:4a:5e:ed:97:60:8d:91:d8:9c:cb:68:26:bb:e3: 6e:b0:1e:9b:27:11:88:72:68:ce:cc:2f:90:08:f4: f1:09:1c:64:03:97:aa:b3:d4:4d:a3:e9:04:27:da: e7:8d:a1:72:36:db:e7:a7:99:1b:af:d2:a9:4a:e2: 29:ad:33:a0:26:ff:ac:8a:51:1d:f8:89:da:17:92: 0a:2d:03:13:17:55:f4:81:85:8a:56:54:68:fa:ab: b0:9c:01:a4:2f:95:28:7f:2f:70:63:9f:e1:4a:58: 60:6a:ba:dd:eb:f4:fe:c9:33:fd:73:30:35:47:0d: ef:50:3c:59:76:f2:5a:86:0c:e3:bd:4c:4a:fe:72: 8c:a9:c0:be:83:17:bb:fd:91:75:fa:3a:d4:b5:82: c3:3d:e8:b9:ab:73:c0:93:c1:3d:25:13:bb:30:53: 68:be:1f:40:e7:d4:6e:4f:bd:82:86:3f:9a:f8:1e: 30:18:c7:75:05:c3:ef:98:6e:2b:4a:80:5e:6e:1a: 3d:b7:13:62:ef:d5:44:97:5d:87:f1:ea:db:d4:35: c6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F8:4B:86:3B:35:56:D0:08:36:70:9C:80:FC:C1:0D:B7:95:77:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3c750cb-4665-3a85-bc5f-7d9e9621ec11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:43:41:a3:6c:a3:83:fc:c2:97:bb:a7:7d:e2:9f:ea:96:b7: 79:7e:70:d5:62:5d:c7:7d:db:89:19:95:3d:11:e9:35:63:3c: 0c:f3:ce:50:99:6f:90:79:c1:38:9e:2c:43:81:90:f9:2d:2b: 74:d9:32:41:57:5c:7c:48:67:12:3f:b2:48:f6:ce:61:34:a1: 31:6b:f9:53:b0:14:44:6e:f5:a0:b7:40:7c:0b:3d:e6:bc:79: 4d:89:4f:38:d6:15:d7:5e:bf:76:c7:ba:17:43:be:53:45:a1: d9:d9:7a:ef:dd:74:81:14:ea:d8:c6:fa:b3:37:0a:f2:6b:57: 3b:84:01:8c:15:e0:3d:07:5c:9f:e6:69:7c:f3:fa:96:f6:bc: 7e:f2:49:39:b9:bd:46:9e:52:f1:67:64:ee:71:fc:d8:5b:fa: 20:98:c4:21:94:02:cd:2d:c3:26:39:3d:84:87:30:60:d2:48: 99:06:bd:80:65:96:d5:0b:89:fa:66:9f:a8:82:f7:91:3d:9b: 02:43:f1:1b:1b:5b:6f:48:30:90:e3:7a:cb:3e:80:3b:bd:51: 8f:00:8b:e4:6f:d3:a1:17:9c:c5:5e:b7:6a:ab:93:c8:c3:01: c0:46:5f:07:05:ce:83:a4:b4:38:ed:49:cb:89:be:6a:79:c9: e1:c7:cc:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0llpM7nAMDnSK40wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MmJmNDI0ZWQtYjY5ZS00MTBlLWI0NTAtMTZmMmViMmVlZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsxfLNcKueD+6FPQSZ6cebri7ttGb/u6/Pyu kgH+VsFCMCPR+kO/HjW58IEQSl7tl2CNkdicy2gmu+NusB6bJxGIcmjOzC+QCPTx CRxkA5eqs9RNo+kEJ9rnjaFyNtvnp5kbr9KpSuIprTOgJv+silEd+InaF5IKLQMT F1X0gYWKVlRo+quwnAGkL5Uofy9wY5/hSlhgarrd6/T+yTP9czA1Rw3vUDxZdvJa hgzjvUxK/nKMqcC+gxe7/ZF1+jrUtYLDPei5q3PAk8E9JRO7MFNovh9A59RuT72C hj+a+B4wGMd1BcPvmG4rSoBebho9txNi79VEl12H8erb1DXGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFz4S4Y7NVbQCDZwnID8wQ23lXfHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjNjNzUwY2ItNDY2NS0z YTg1LWJjNWYtN2Q5ZTk2MjFlYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF87LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9DQaNso4P8wpe7p33in+qWt3l+cNViXcd924kZlT0R6TVjPAzzzlCZ b5B5wTieLEOBkPktK3TZMkFXXHxIZxI/skj2zmE0oTFr+VOwFERu9aC3QHwLPea8 eU2JTzjWFddev3bHuhdDvlNFodnZeu/ddIEU6tjG+rM3CvJrVzuEAYwV4D0HXJ/m aXzz+pb2vH7ySTm5vUaeUvFnZO5x/Nhb+iCYxCGUAs0twyY5PYSHMGDSSJkGvYBl ltULifpmn6iC95E9mwJD8RsbW29IMJDjess+gDu9UY8Ai+Rv06EXnMVet2qrk8jD AcBGXwcFzoOktDjtScuJvmp5yeHHzGI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:51 2025 by rpki-client