$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa File: 5fd12087-5523-3229-876f-88f686d794a9.roa (raw, json) Hash identifier: NBgpxMJt88uKQcS9wdcZvgM6aII51FNd3TTnWl3/Dys= Subject key identifier: 8B:8D:26:B5:DB:4C:B2:F4:69:AF:E0:8F:2F:5B:CF:9F:03:1E:EC:D0 Certificate issuer: /CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Certificate serial: 010D0C9F4328584B39870A523040817F5360BF40 Authority key identifier: 04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 32507 IP address blocks: 23.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0a:52:30:40:81:7f:53:60:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=e6fe26d6-9eea-4288-8ab7-87d5c6c012e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:00:1f:95:9e:8f:d7:f5:17:f5:17:f2:24: 48:d4:7c:71:d3:1a:19:1f:1e:43:45:56:82:b2:f8: e4:ce:e2:b7:54:2b:25:ca:54:44:17:34:e2:e5:64: e0:99:cc:73:dc:db:8b:85:83:43:90:30:ba:a3:e3: 0b:6b:79:65:38:67:c8:69:84:d8:95:09:14:9e:48: 2d:4f:75:3c:92:df:85:86:03:ce:f3:84:fd:d3:dd: 8b:6e:bb:64:70:df:7e:13:15:58:ee:04:8a:2a:cc: 91:47:46:ac:03:c5:6a:b4:4b:2a:a9:f8:20:fd:5d: 38:9c:02:b9:d3:71:53:ea:4d:fd:6c:ca:d1:54:55: b1:9a:48:4e:52:08:5f:7b:58:30:94:4b:76:13:c6: 60:cc:2c:6b:b9:b2:4a:30:6b:54:a3:17:ff:87:fa: 42:89:03:b0:b0:99:8c:32:b1:36:79:3d:b5:1d:d0: 50:38:9e:d0:62:d7:93:41:84:78:3a:bf:fa:3a:6b: f6:ba:59:f5:41:5a:51:21:1e:cb:9a:82:56:3d:56: d7:b0:d0:e6:68:fd:8f:78:0b:60:0f:35:3e:82:ae: fa:f9:1b:10:8d:2a:d1:17:48:0d:50:98:8b:56:2b: 3a:2f:41:37:25:3d:60:ec:83:2b:6a:dc:0e:1b:4e: dc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8D:26:B5:DB:4C:B2:F4:69:AF:E0:8F:2F:5B:CF:9F:03:1E:EC:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5fd12087-5523-3229-876f-88f686d794a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.crl X509v3 Authority Key Identifier: keyid:04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer sbgp-ipAddrBlock: critical IPv4: 23.186.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f1:fe:f5:a2:c8:94:0a:a3:01:37:7f:02:77:74:59:91:4b: 06:d5:e7:ad:15:a0:c3:ca:0f:dd:93:5a:39:2f:e4:b1:f7:97: a1:c2:61:5d:06:cb:6f:14:13:8b:c2:00:ee:a4:d0:e4:f5:78: c2:10:4e:3b:df:27:77:d5:dc:3c:cb:55:56:82:85:3d:80:e4: e8:58:f9:09:f1:f7:9f:b0:fd:99:36:3c:9b:60:8d:b7:cc:18: b7:8d:52:90:2b:f1:b9:db:73:fc:86:ec:d1:45:23:b2:cc:46: 21:84:4d:a0:97:43:7d:47:ac:bb:dc:4d:05:62:12:c3:9b:40: 22:84:31:31:c7:8c:fa:6d:aa:bd:44:97:41:2a:73:14:c9:80: b0:67:7e:21:d9:ee:a8:1d:47:35:6a:e0:3e:f2:75:56:cd:91: 5f:9d:80:32:27:33:50:e6:c6:a8:eb:6e:84:28:34:be:52:c8: 6a:16:0a:c3:45:85:ed:40:95:c0:93:94:22:08:4f:3e:c5:57: 0a:43:8e:a1:86:02:f1:97:25:9e:0e:a4:af:a2:df:f9:9d:00: e3:bb:8c:e2:40:9f:f2:0f:f4:a9:e1:eb:17:fc:70:da:b5:8e: 75:18:b3:6d:0e:67:2f:62:65:e5:ac:d2:99:6a:05:c2:e2:a7: aa:06:6f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwpSMECBf1Ngv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNhZmJkMzItN2Q2ZS00Mjk3LTlhYzUtZGMxMjBhYWE5 N2RhMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTZmZTI2ZDYtOWVlYS00Mjg4LThhYjctODdkNWM2YzAxMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnoAH5Wej9f1F/UX8iRI1Hxx0xoZHx5DRVaC svjkzuK3VCslylREFzTi5WTgmcxz3NuLhYNDkDC6o+MLa3llOGfIaYTYlQkUnkgt T3U8kt+FhgPO84T9092LbrtkcN9+ExVY7gSKKsyRR0asA8VqtEsqqfgg/V04nAK5 03FT6k39bMrRVFWxmkhOUghfe1gwlEt2E8ZgzCxrubJKMGtUoxf/h/pCiQOwsJmM MrE2eT21HdBQOJ7QYteTQYR4Or/6Omv2uln1QVpRIR7LmoJWPVbXsNDmaP2PeAtg DzU+gq76+RsQjSrRF0gNUJiLVis6L0E3JT1g7IMratwOG07c/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuNJrXbTLL0aa/gjy9bz58DHuzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81Y2Fm YmQzMi03ZDZlLTQyOTctOWFjNS1kYzEyMGFhYTk3ZGEvNWZkMTIwODctNTUyMy0z MjI5LTg3NmYtODhmNjg2ZDc5NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWNhZmJkMzItN2Q2ZS00Mjk3LTlh YzUtZGMxMjBhYWE5N2RhLzVjYWZiZDMyLTdkNmUtNDI5Ny05YWM1LWRjMTIwYWFh OTdkYS5jcmwwHwYDVR0jBBgwFoAUBA171YO4i3ZvSYgkTFBwi0y3h1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81Y2FmYmQzMi03ZDZlLTQyOTctOWFjNS1kYzEy MGFhYTk3ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbx/vWiyJQKowE3fwJ3dFmRSwbV560VoMPKD92TWjkv5LH3l6HCYV0G y28UE4vCAO6k0OT1eMIQTjvfJ3fV3DzLVVaChT2A5OhY+Qnx95+w/Zk2PJtgjbfM GLeNUpAr8bnbc/yG7NFFI7LMRiGETaCXQ31HrLvcTQViEsObQCKEMTHHjPptqr1E l0EqcxTJgLBnfiHZ7qgdRzVq4D7ydVbNkV+dgDInM1DmxqjrboQoNL5SyGoWCsNF he1AlcCTlCIITz7FVwpDjqGGAvGXJZ4OpK+i3/mdAOO7jOJAn/IP9Knh6xf8cNq1 jnUYs20OZy9iZeWs0plqBcLip6oGbxQ= -----END CERTIFICATE-----Generated at Fri Oct 10 03:54:16 2025 by rpki-client