$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/60db8efb-3423-3e01-b3ad-425f954691a3.roa File: 60db8efb-3423-3e01-b3ad-425f954691a3.roa (raw, json) Hash identifier: mX+s4hDlc40q2WlfC2FmSWu6wPTG+dOCg3EWpV5cRMM= Subject key identifier: DE:75:89:97:B8:D8:2B:6B:09:6C:38:1B:71:C9:F5:0D:B9:DC:E3:3D Certificate issuer: /CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Certificate serial: 010D0C9F4328584B713D4E24A27268CFB3E6ED80 Authority key identifier: 02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/60db8efb-3423-3e01-b3ad-425f954691a3.roa Signing time: Tue 07 Oct 2025 11:57:34 +0000 ROA not before: Tue 07 Oct 2025 11:57:34 +0000 ROA not after: Mon 05 Jan 2026 12:57:34 +0000 asID: 8143 IP address blocks: 23.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:3d:4e:24:a2:72:68:cf:b3:e6:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Validity Not Before: Oct 7 11:57:34 2025 GMT Not After : Jan 5 12:57:34 2026 GMT Subject: CN=491c0eca-1424-4571-97f3-fa7bff096e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:1d:17:47:c2:77:ff:b4:15:dd:fb:80:55: 6d:cf:0a:80:59:1f:81:1e:b5:df:99:d9:01:b8:c5: 3b:a0:70:9d:2d:41:f5:3a:c5:83:93:a1:76:e0:d5: 93:ae:1a:94:11:ed:4d:07:9c:88:ae:e2:7a:c2:cb: 9d:29:c2:a0:96:83:01:20:21:49:03:df:ba:11:a3: 1c:42:31:7f:da:79:6c:ee:15:7d:3a:81:02:0c:ab: c9:8a:66:eb:3a:e1:9d:1a:81:54:ef:ee:56:72:00: 83:98:62:8b:47:47:df:0b:13:a5:91:72:54:3b:55: 71:42:15:fb:c3:ac:44:51:f6:f5:2f:3a:ba:b3:2b: 5f:67:87:a3:02:09:b1:45:9f:25:1f:ed:b5:eb:3a: 71:3e:60:f4:79:ca:15:32:12:b9:aa:d0:57:6d:50: c5:eb:0b:95:83:3f:47:b2:4e:3c:49:da:15:ca:c3: f6:d4:0b:4f:2e:df:13:d1:7a:bc:d3:60:7e:f9:38: 58:72:b8:5c:34:b9:19:8b:2c:f0:6e:27:d8:52:60: 59:66:c4:03:b6:d7:db:d5:8a:88:4e:4d:6e:7d:69: 7b:62:7d:73:9f:24:d2:6b:27:28:24:21:9d:31:76: 22:f2:21:3b:bf:d4:36:0e:f6:4e:61:f1:8e:f0:bf: e7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:75:89:97:B8:D8:2B:6B:09:6C:38:1B:71:C9:F5:0D:B9:DC:E3:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/60db8efb-3423-3e01-b3ad-425f954691a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl X509v3 Authority Key Identifier: keyid:02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer sbgp-ipAddrBlock: critical IPv4: 23.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:cc:31:26:fa:eb:83:ad:f2:1f:1a:69:45:06:6f:a8:2b:17: c6:08:18:0c:07:86:03:d7:83:e4:23:7b:66:59:54:94:d7:44: d6:57:48:a2:c8:98:0c:c8:7f:0c:56:f8:b7:2b:97:3a:76:b3: 28:cb:0b:00:7e:74:50:bd:80:18:4c:e3:59:6a:4f:18:51:a3: 58:aa:14:62:86:ff:ee:72:56:de:c9:49:4e:aa:b4:67:e8:e6: b8:c7:10:c0:a3:e0:93:9c:6d:6e:98:40:a8:99:54:ab:9b:d5: 62:cb:98:53:c8:ea:c7:9f:35:c0:6b:a4:28:85:05:1c:73:e2: d8:aa:8a:20:1e:07:5b:58:86:22:e8:6a:f7:f1:15:85:5e:e4: ae:88:1e:d7:c3:65:1a:ef:d5:98:40:7e:ae:9b:c2:47:bc:03: 49:48:18:ec:6e:38:3a:5f:fe:11:83:8e:ab:b3:c3:33:e3:0f: ee:06:2d:87:7d:de:1b:d0:ac:20:db:d2:9f:8e:33:f4:90:b2: 28:93:2c:56:1f:04:6d:76:9d:01:a8:c3:f5:85:d1:ff:d0:bd: 7b:8b:1c:25:9e:f6:d4:1b:a5:f5:9c:2e:bc:34:88:11:64:83: 0c:ff:ba:52:e9:8f:fb:82:0a:24:0f:18:24:ea:71:56:a0:5e: 75:93:26:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxPU4konJoz7Pm7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1NDk4NWEtZTkyYS00NzVjLWI1NTQtM2I5ZWQxYjIz OWRjMB4XDTI1MTAwNzExNTczNFoXDTI2MDEwNTEyNTczNFowLzEtMCsGA1UEAxMk NDkxYzBlY2EtMTQyNC00NTcxLTk3ZjMtZmE3YmZmMDk2ZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUMdF0fCd/+0Fd37gFVtzwqAWR+BHrXfmdkB uMU7oHCdLUH1OsWDk6F24NWTrhqUEe1NB5yIruJ6wsudKcKgloMBICFJA9+6EaMc QjF/2nls7hV9OoECDKvJimbrOuGdGoFU7+5WcgCDmGKLR0ffCxOlkXJUO1VxQhX7 w6xEUfb1Lzq6sytfZ4ejAgmxRZ8lH+216zpxPmD0ecoVMhK5qtBXbVDF6wuVgz9H sk48SdoVysP21AtPLt8T0Xq802B++ThYcrhcNLkZiyzwbifYUmBZZsQDttfb1YqI Tk1ufWl7Yn1znyTSaycoJCGdMXYi8iE7v9Q2DvZOYfGO8L/n4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN51iZe42CtrCWw4G3HJ9Q253OM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0 OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjllZDFiMjM5ZGMvNjBkYjhlZmItMzQyMy0z ZTAxLWIzYWQtNDI1Zjk1NDY5MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU1NDk4NWEtZTkyYS00NzVjLWI1 NTQtM2I5ZWQxYjIzOWRjLzJlNTQ5ODVhLWU5MmEtNDc1Yy1iNTU0LTNiOWVkMWIy MzlkYy5jcmwwHwYDVR0jBBgwFoAUAl15dIvL+EI76EnOKcLxtXx6XyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjll ZDFiMjM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDMMSb664Ot8h8aaUUGb6grF8YIGAwHhgPXg+Qje2ZZVJTXRNZXSKLI mAzIfwxW+Lcrlzp2syjLCwB+dFC9gBhM41lqTxhRo1iqFGKG/+5yVt7JSU6qtGfo 5rjHEMCj4JOcbW6YQKiZVKub1WLLmFPI6sefNcBrpCiFBRxz4tiqiiAeB1tYhiLo avfxFYVe5K6IHtfDZRrv1ZhAfq6bwke8A0lIGOxuODpf/hGDjquzwzPjD+4GLYd9 3hvQrCDb0p+OM/SQsiiTLFYfBG12nQGow/WF0f/QvXuLHCWe9tQbpfWcLrw0iBFk gwz/ulLpj/uCCiQPGCTqcVagXnWTJrg= -----END CERTIFICATE-----Generated at Thu Oct 9 00:59:13 2025 by rpki-client