$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3579bb1d-e103-3f50-8e4a-1da5d96d60a4.roa File: 3579bb1d-e103-3f50-8e4a-1da5d96d60a4.roa (raw, json) Hash identifier: WIFlzaOetVV29vEHUZ47tYwl/yX9J91XTAB3uXWCUe4= Subject key identifier: C6:3D:F6:01:78:49:61:EB:54:DE:FA:B3:56:C5:7C:7D:A2:4E:2C:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C9CD6480640DD8220F000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3579bb1d-e103-3f50-8e4a-1da5d96d60a4.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 25019 IP address blocks: 23.204.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:9c:d6:48:06:40:dd:82:20:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=9748c590-e347-4e23-8692-ab4e69bbe64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c2:4d:30:bb:f7:3f:f2:3a:cb:53:ca:19:4e: c9:0b:e6:c5:c0:20:65:44:f4:04:60:84:1c:52:ae: 4f:21:4e:15:b1:35:dd:15:b9:c1:9a:0f:3d:c2:3f: 35:21:d4:bb:2c:4c:75:e9:00:43:27:71:3d:ce:e0: 46:db:4b:5f:7c:70:12:03:0a:f8:1d:55:32:ee:52: 35:f2:ed:d8:b7:26:d7:97:94:03:42:58:e7:a2:e1: 67:12:8f:42:7c:72:c2:ae:66:24:dd:cc:02:34:d0: 5a:14:ac:f5:82:bd:8c:c0:ef:e8:bf:ff:e6:de:6e: 73:5c:a2:bb:d1:3a:4a:0b:a7:cc:0e:0f:a3:fe:02: 79:6a:c7:14:bc:c6:8e:19:bc:22:4d:f6:a9:d8:f0: 99:63:a0:07:97:66:f7:fa:37:dc:09:89:1b:c5:4e: f0:08:1d:e4:6b:52:3a:d3:47:32:ae:f3:fd:14:cd: a8:12:fc:45:c7:47:e9:89:0c:10:67:d9:ca:fd:dc: fa:5b:3a:d0:49:8a:09:c3:33:68:a9:28:d9:56:e2: 7f:2d:98:ed:86:14:d0:42:11:e2:2f:c8:f4:44:a5: 78:c0:37:ea:91:80:f0:03:60:50:d9:fd:7d:6c:86: 21:ed:0c:c1:ca:97:53:bc:40:28:28:cd:ab:36:60: 96:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3D:F6:01:78:49:61:EB:54:DE:FA:B3:56:C5:7C:7D:A2:4E:2C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3579bb1d-e103-3f50-8e4a-1da5d96d60a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.204.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c4:3a:a7:9d:b7:71:39:3c:e5:cf:9b:ae:33:b7:69:e7:06: ae:da:b8:7e:29:f6:03:a7:7b:8f:d5:c9:c0:77:57:e7:f0:24: 8d:09:c1:1d:24:fd:0f:12:77:4b:15:c0:71:b8:24:f2:0d:8a: f5:78:9f:35:b5:4d:a2:17:bb:79:1d:08:90:88:22:02:b1:a3: 5f:bc:32:b9:6b:8c:29:ba:a8:65:d8:90:4a:8c:a6:49:db:1d: ab:53:2b:68:a2:7c:a9:c7:d1:55:82:14:f6:da:d0:a5:66:dd: 8b:dd:1a:08:1d:75:67:36:00:6f:ee:ab:63:9a:d3:79:a8:ea: 4b:a6:b3:fa:66:ad:07:3b:40:ea:a8:97:d0:c2:bd:92:91:32: 4b:c7:3f:3d:be:0c:58:0f:d6:4d:63:69:da:44:73:c6:26:5a: 41:02:fc:13:86:99:8b:50:10:f2:8c:b4:22:ae:78:b3:2d:f5: 2b:9a:dd:62:d9:03:d5:1c:ff:7c:d4:bf:3f:7f:92:dd:fc:5b: 9b:c7:95:13:46:c0:6b:b9:68:8b:20:57:71:83:7e:4e:13:22: 88:d8:fe:5b:39:db:5a:90:f8:53:12:8e:84:01:ca:5c:ea:ea: 7f:c3:e5:59:05:b8:5a:99:b6:2c:c1:11:20:e3:03:71:c6:17: 5d:f4:4b:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJzWSAZA3YIg8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk OTc0OGM1OTAtZTM0Ny00ZTIzLTg2OTItYWI0ZTY5YmJlNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMJNMLv3P/I6y1PKGU7JC+bFwCBlRPQEYIQc Uq5PIU4VsTXdFbnBmg89wj81IdS7LEx16QBDJ3E9zuBG20tffHASAwr4HVUy7lI1 8u3YtybXl5QDQljnouFnEo9CfHLCrmYk3cwCNNBaFKz1gr2MwO/ov//m3m5zXKK7 0TpKC6fMDg+j/gJ5ascUvMaOGbwiTfap2PCZY6AHl2b3+jfcCYkbxU7wCB3ka1I6 00cyrvP9FM2oEvxFx0fpiQwQZ9nK/dz6WzrQSYoJwzNoqSjZVuJ/LZjthhTQQhHi L8j0RKV4wDfqkYDwA2BQ2f19bIYh7QzBypdTvEAoKM2rNmCWswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMY99gF4SWHrVN76s1bFfH2iTix9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzU3OWJiMWQtZTEwMy0z ZjUwLThlNGEtMWRhNWQ5NmQ2MGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF8xUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrEOqedt3E5POXPm64zt2nnBq7auH4p9gOne4/VycB3V+fwJI0JwR0k /Q8Sd0sVwHG4JPINivV4nzW1TaIXu3kdCJCIIgKxo1+8MrlrjCm6qGXYkEqMpknb HatTK2iifKnH0VWCFPba0KVm3YvdGggddWc2AG/uq2Oa03mo6kums/pmrQc7QOqo l9DCvZKRMkvHPz2+DFgP1k1jadpEc8YmWkEC/BOGmYtQEPKMtCKueLMt9Sua3WLZ A9Uc/3zUvz9/kt38W5vHlRNGwGu5aIsgV3GDfk4TIojY/ls521qQ+FMSjoQBylzq 6n/D5VkFuFqZtizBESDjA3HGF130Swg= -----END CERTIFICATE-----Generated at Mon Oct 27 01:33:34 2025 by rpki-client