$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c6ba7f-e8ae-3814-9850-3671ab1c3076.roa File: f5c6ba7f-e8ae-3814-9850-3671ab1c3076.roa (raw, json) Hash identifier: 2VGXzY1gHR9dlfbuKlX+hk7dtgABTb1RmXs6V6seZA0= Subject key identifier: 64:08:09:DE:9B:7C:0A:C1:81:7E:03:56:85:26:C2:9B:ED:C9:87:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C879D7D23AB4EA4283F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c6ba7f-e8ae-3814-9850-3671ab1c3076.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.194.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:87:9d:7d:23:ab:4e:a4:28:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=e5485bdc-a5e4-4bfa-a48f-59b65221db3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:ca:fa:8b:ab:5b:73:9e:12:48:f5:44:17: e3:52:46:0a:0a:61:2d:4c:99:67:a7:ca:e9:29:1c: 5a:4b:2b:b3:81:e0:d9:57:fc:49:f1:83:78:21:f2: e0:b5:df:6a:71:3b:21:23:67:9e:cd:88:f6:36:15: 87:6c:10:7c:40:74:f4:8a:2e:36:ac:4b:73:54:75: 4a:7b:bd:92:22:54:0b:32:92:6d:eb:32:09:fd:b4: 92:8d:99:0e:8a:01:1f:65:e3:26:ce:a0:c2:34:80: b5:91:9f:d8:63:a3:28:5d:d1:20:8a:30:da:32:20: 9d:c1:fe:5f:72:d2:7c:17:11:03:cd:9c:f4:09:ed: 61:76:2a:8d:6d:c4:39:b0:c6:8e:7e:a5:f6:20:ef: ad:c1:f6:28:c9:f1:65:b9:a0:88:c6:32:dd:1e:d3: 93:5e:77:e3:a7:67:a3:d6:9b:8e:7f:87:e5:12:bc: 6a:4c:bc:06:39:a9:54:89:94:fe:bd:50:5f:38:8e: af:e3:b3:f7:81:f3:5b:e3:b1:13:73:1e:5f:1a:56: 8d:05:2f:e0:3f:89:4b:ff:d0:fd:ee:d5:69:97:a6: 60:52:ed:ef:ac:95:46:62:68:cc:3d:02:67:ad:7f: 6f:18:55:3b:1f:7f:0e:a1:9d:13:1b:21:73:16:cc: 7c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:08:09:DE:9B:7C:0A:C1:81:7E:03:56:85:26:C2:9B:ED:C9:87:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c6ba7f-e8ae-3814-9850-3671ab1c3076.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.194.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:d5:b5:ed:e4:b4:24:14:0e:5b:c9:a5:6a:ca:98:5c:19:26: 6d:bd:fd:4e:60:9b:c4:81:23:b1:2c:95:8f:ea:4f:49:fd:d3: 72:b6:3c:75:c4:52:1b:33:5c:45:95:ff:7c:63:72:23:bc:42: ee:fd:95:30:21:6c:48:83:fd:0f:5d:07:2f:64:2d:1d:ff:73: 3e:39:57:ce:e2:81:db:b1:24:f2:77:8d:37:8e:b5:db:7f:42: dd:b0:ea:80:23:3f:69:c5:9a:54:6a:56:68:0c:28:72:a2:81: 6e:49:af:93:84:90:e0:c8:8a:bb:57:59:05:76:00:fb:d4:5d: ab:a9:ab:49:49:78:d9:84:e9:3b:58:c8:a1:5e:c1:f2:d1:9c: de:98:32:af:63:53:19:1f:c8:f9:50:43:78:77:8b:0f:f5:26: 2b:7c:c4:84:b6:1c:d3:66:1d:58:11:b4:30:17:81:f7:60:3c: ec:9b:cb:71:b5:61:ae:f4:a8:6a:ff:ff:59:e2:72:a3:2a:32: 8b:bc:93:ff:2b:a7:d2:a3:f7:0e:1b:2d:43:02:80:41:8b:b9: b1:df:88:8c:c5:45:7f:4f:ac:45:f3:bf:55:37:de:f1:ef:e9: b7:f6:2d:b5:cc:01:65:3f:6c:6b:eb:1c:a1:3a:31:c9:2e:6c: d5:41:ab:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTIedfSOrTqQoPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTU0ODViZGMtYTVlNC00YmZhLWE0OGYtNTliNjUyMjFkYjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX3K+ourW3OeEkj1RBfjUkYKCmEtTJlnp8rp KRxaSyuzgeDZV/xJ8YN4IfLgtd9qcTshI2eezYj2NhWHbBB8QHT0ii42rEtzVHVK e72SIlQLMpJt6zIJ/bSSjZkOigEfZeMmzqDCNIC1kZ/YY6MoXdEgijDaMiCdwf5f ctJ8FxEDzZz0Ce1hdiqNbcQ5sMaOfqX2IO+twfYoyfFluaCIxjLdHtOTXnfjp2ej 1puOf4flErxqTLwGOalUiZT+vVBfOI6v47P3gfNb47ETcx5fGlaNBS/gP4lL/9D9 7tVpl6ZgUu3vrJVGYmjMPQJnrX9vGFU7H38OoZ0TGyFzFsx8qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQICd6bfArBgX4DVoUmwpvtyYcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjVjNmJhN2YtZThhZS0z ODE0LTk4NTAtMzY3MWFiMWMzMDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF8IYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPVte3ktCQUDlvJpWrKmFwZJm29/U5gm8SBI7EslY/qT0n903K2PHXE UhszXEWV/3xjciO8Qu79lTAhbEiD/Q9dBy9kLR3/cz45V87igduxJPJ3jTeOtdt/ Qt2w6oAjP2nFmlRqVmgMKHKigW5Jr5OEkODIirtXWQV2APvUXaupq0lJeNmE6TtY yKFewfLRnN6YMq9jUxkfyPlQQ3h3iw/1Jit8xIS2HNNmHVgRtDAXgfdgPOyby3G1 Ya70qGr//1nicqMqMou8k/8rp9Kj9w4bLUMCgEGLubHfiIzFRX9PrEXzv1U33vHv 6bf2LbXMAWU/bGvrHKE6MckubNVBq9Q= -----END CERTIFICATE-----Generated at Tue Nov 4 21:07:34 2025 by rpki-client