$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c9030d2-4286-3a25-a917-569ed0a640d2.roa File: 8c9030d2-4286-3a25-a917-569ed0a640d2.roa (raw, json) Hash identifier: 6jrN9V5Q1ypOl/G5LWBWcH24vP47zXs+Z7WIpI+qyxI= Subject key identifier: 01:92:3F:86:3D:03:CA:86:36:C4:43:0B:39:0B:D8:0B:18:2B:D4:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CFB1F583D75652AB7D420 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c9030d2-4286-3a25-a917-569ed0a640d2.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 33905 IP address blocks: 23.206.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fb:1f:58:3d:75:65:2a:b7:d4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=64a5bf04-3f50-49d6-b469-538f705815e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f5:5a:12:66:6a:4d:7c:33:9a:a7:09:04:72: cf:cc:25:ce:22:92:c1:c2:ed:5a:0e:fc:6a:4c:e2: 5b:2b:b0:93:7b:a1:a3:d6:5f:43:ce:7c:fb:d7:6b: b8:fd:5c:ad:eb:1a:09:35:63:2e:e8:c7:a6:cf:09: 0c:fc:df:5e:2f:22:cd:d0:af:33:e6:04:96:cd:95: 25:2e:0b:e1:86:a0:ea:53:20:d0:46:58:8f:8a:cb: 14:51:bd:17:c3:42:0f:52:33:41:5b:19:70:b4:6a: 74:c1:e8:47:0a:c9:b0:6b:52:11:9f:32:72:8d:69: 96:01:ee:60:36:16:7a:e5:d2:21:43:8f:b1:8f:41: 3c:fc:b4:bf:db:d5:b3:61:15:8d:9d:30:bf:16:82: b2:7a:41:63:f5:f1:48:30:a5:43:ba:2d:59:b8:c0: 3c:8c:4b:ab:ad:00:19:70:1d:48:22:6f:e2:92:2a: e3:2c:69:e9:1f:df:02:8a:e5:51:e4:29:71:47:5d: 71:89:e9:19:34:ce:b6:79:f0:d6:d2:8e:97:65:6a: b9:c7:58:6d:7e:2d:b1:55:14:22:8e:74:45:dc:15: 22:92:bd:f7:36:92:4b:f8:70:a9:1b:f5:83:83:d2: 19:a6:6a:cf:02:d1:54:db:95:5a:b2:c3:3f:63:97: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:92:3F:86:3D:03:CA:86:36:C4:43:0B:39:0B:D8:0B:18:2B:D4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c9030d2-4286-3a25-a917-569ed0a640d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.206.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:01:b2:ea:64:e2:5e:8e:28:94:52:f7:33:12:24:6b:d9:da: 41:61:cc:14:ff:d6:86:7b:a0:42:a4:69:7c:ab:7d:80:3f:2e: f7:eb:9a:1f:61:e1:2a:ab:da:44:b1:31:1a:69:da:90:11:4f: 55:93:35:93:7f:44:a2:92:e0:39:b4:c7:dc:67:85:f2:be:65: 21:57:8d:e4:ec:3c:86:00:5d:df:e8:c8:d5:b1:07:21:c2:7d: 79:f0:c1:ec:a2:66:e3:8d:eb:14:e8:9e:63:70:cc:00:8e:f1: 5a:01:3a:cb:91:51:6a:e9:6b:77:77:d1:75:22:99:06:d5:01: 3f:6b:78:40:21:1b:6f:27:55:cc:ec:63:61:20:eb:f3:3c:de: a8:d8:df:f3:d2:63:75:85:54:51:ec:50:6d:57:5d:b5:e8:52: c4:bf:39:f3:8f:13:42:78:23:de:f0:a8:ed:03:cb:9c:cf:29: 9d:97:c8:1d:f7:5a:85:11:e8:ac:22:d5:3f:6e:71:b7:30:03: 43:6e:81:3c:16:f8:e1:63:fd:ff:a8:37:fc:5c:98:eb:87:7d: ba:1f:29:65:1a:f5:bf:a3:05:85:1f:73:c1:52:92:6b:46:a8: b9:13:3a:31:52:52:b7:f3:b5:5b:ff:21:54:18:7c:c3:4f:88: 28:03:93:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPsfWD11ZSq31CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NjRhNWJmMDQtM2Y1MC00OWQ2LWI0NjktNTM4ZjcwNTgxNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvVaEmZqTXwzmqcJBHLPzCXOIpLBwu1aDvxq TOJbK7CTe6Gj1l9Dznz712u4/Vyt6xoJNWMu6MemzwkM/N9eLyLN0K8z5gSWzZUl LgvhhqDqUyDQRliPissUUb0Xw0IPUjNBWxlwtGp0wehHCsmwa1IRnzJyjWmWAe5g NhZ65dIhQ4+xj0E8/LS/29WzYRWNnTC/FoKyekFj9fFIMKVDui1ZuMA8jEurrQAZ cB1IIm/ikirjLGnpH98CiuVR5ClxR11xiekZNM62efDW0o6XZWq5x1htfi2xVRQi jnRF3BUikr33NpJL+HCpG/WDg9IZpmrPAtFU25VassM/Y5dsNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGSP4Y9A8qGNsRDCzkL2AsYK9QYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM5MDMwZDItNDI4Ni0z YTI1LWE5MTctNTY5ZWQwYTY0MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF846MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwBsupk4l6OKJRS9zMSJGvZ2kFhzBT/1oZ7oEKkaXyrfYA/Lvfrmh9h 4Sqr2kSxMRpp2pART1WTNZN/RKKS4Dm0x9xnhfK+ZSFXjeTsPIYAXd/oyNWxByHC fXnwweyiZuON6xTonmNwzACO8VoBOsuRUWrpa3d30XUimQbVAT9reEAhG28nVczs Y2Eg6/M83qjY3/PSY3WFVFHsUG1XXbXoUsS/OfOPE0J4I97wqO0Dy5zPKZ2XyB33 WoUR6Kwi1T9ucbcwA0NugTwW+OFj/f+oN/xcmOuHfbofKWUa9b+jBYUfc8FSkmtG qLkTOjFSUrfztVv/IVQYfMNPiCgDk/Q= -----END CERTIFICATE-----Generated at Wed Oct 22 04:41:23 2025 by rpki-client