$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc901ba5-410d-33b3-9b66-56e6243af3c7.roa File: dc901ba5-410d-33b3-9b66-56e6243af3c7.roa (raw, json) Hash identifier: sJZfmuryV5EnMuL4dcqc+l8SreO4l+rK1Y2IIcEGloI= Subject key identifier: 3B:B9:40:79:8E:EF:29:9E:10:79:EE:D3:EA:77:58:D7:BB:C9:83:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFEE6B8504CFB3A2F3D8B4500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc901ba5-410d-33b3-9b66-56e6243af3c7.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.53.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b8:50:4c:fb:3a:2f:3d:8b:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=4c3ed935-27fa-45a4-bc70-c51cecb4c345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:b8:b3:a5:2e:32:8c:2a:d8:09:ad:70:63: 83:20:cf:ec:bc:f3:e3:b4:96:15:b9:ab:52:2b:00: e8:93:f8:e8:be:e9:e9:09:42:04:ac:09:61:a0:04: 4a:53:9a:da:38:a0:1c:b2:35:de:8b:48:9e:58:c4: e8:1b:96:86:e7:24:3a:44:0d:5a:99:e4:67:63:da: c8:8a:e4:a2:d4:92:6e:b9:02:ac:40:ce:4c:f6:9d: 21:a1:14:19:00:ec:df:dd:a3:0f:53:e2:6f:6d:c9: 8b:8c:74:bc:54:69:f3:c6:58:f0:af:9a:41:7a:fe: a9:4c:96:02:c6:6d:44:2c:1d:1b:5d:75:d8:da:52: 0f:12:79:40:b3:a6:75:03:39:48:67:94:1e:09:2d: da:3c:e5:af:84:b4:88:b7:69:75:b5:72:e1:3c:78: a2:ce:3b:22:5e:b9:d2:ce:92:db:cc:6b:63:42:13: 36:46:5d:5e:ce:78:a1:0f:26:ce:6c:ba:44:63:8a: c4:fa:a6:72:2d:30:4a:57:95:78:a9:33:bf:b2:b1: cc:f6:89:8d:c6:32:bc:f3:e1:ed:f9:88:75:97:5f: 03:24:65:ac:a8:75:fc:43:91:54:14:a8:fd:b5:2c: 71:fb:68:e7:34:0c:f6:ff:fd:30:5a:f6:46:7a:5e: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B9:40:79:8E:EF:29:9E:10:79:EE:D3:EA:77:58:D7:BB:C9:83:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc901ba5-410d-33b3-9b66-56e6243af3c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:70:f8:f7:28:bb:81:04:df:9c:8a:e2:1c:16:86:30:50:49: 91:32:3a:5b:16:2e:5c:4f:c6:0a:5c:3a:7d:c5:39:fa:cb:24: e1:8c:cf:04:b3:54:5a:5e:22:5a:97:2d:c3:07:20:a3:7b:a0: ec:98:e8:01:e1:85:bd:23:4d:16:e5:0d:81:8b:af:a3:b7:02: 36:42:98:cf:56:6f:34:47:e4:46:9a:ef:59:0a:21:76:e6:f6: 4f:4b:b8:c0:b3:de:0e:65:70:30:d5:42:64:cc:d8:54:68:60: d7:85:6a:51:4f:31:84:de:49:16:35:d6:33:63:0e:57:68:af: 18:b9:71:fb:f2:17:29:19:3a:98:3b:94:1a:d4:7a:2d:e5:34: 7b:3b:70:9f:f6:51:56:3e:4c:0c:51:17:3c:dc:84:dc:30:a9: 14:84:e2:b9:95:b4:d2:5f:82:46:5d:49:33:52:ca:69:85:9f: a3:46:4b:1d:fe:a3:c6:3e:77:48:de:f5:b9:ff:3a:95:27:5d: 32:5e:53:a1:8c:be:15:29:cb:1f:8d:45:25:9d:e3:cb:be:93: 52:9e:9f:2e:90:e2:45:c5:fb:dd:d9:35:8f:b9:d5:d9:9c:61: 34:bd:52:57:0a:b9:1a:0f:b7:00:f6:f3:8a:19:c4:6b:82:33: 5f:91:67:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rhQTPs6Lz2LRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NGMzZWQ5MzUtMjdmYS00NWE0LWJjNzAtYzUxY2VjYjRjMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAply4s6UuMowq2AmtcGODIM/svPPjtJYVuatS KwDok/jovunpCUIErAlhoARKU5raOKAcsjXei0ieWMToG5aG5yQ6RA1ameRnY9rI iuSi1JJuuQKsQM5M9p0hoRQZAOzf3aMPU+JvbcmLjHS8VGnzxljwr5pBev6pTJYC xm1ELB0bXXXY2lIPEnlAs6Z1AzlIZ5QeCS3aPOWvhLSIt2l1tXLhPHiizjsiXrnS zpLbzGtjQhM2Rl1eznihDybObLpEY4rE+qZyLTBKV5V4qTO/srHM9omNxjK88+Ht +Yh1l18DJGWsqHX8Q5FUFKj9tSxx+2jnNAz2//0wWvZGel6FawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDu5QHmO7ymeEHnu0+p3WNe7yYN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGM5MDFiYTUtNDEwZC0z M2IzLTliNjYtNTZlNjI0M2FmM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhw+Pcou4EE35yK4hwWhjBQSZEyOlsWLlxPxgpcOn3FOfrLJOGMzwSz VFpeIlqXLcMHIKN7oOyY6AHhhb0jTRblDYGLr6O3AjZCmM9WbzRH5Eaa71kKIXbm 9k9LuMCz3g5lcDDVQmTM2FRoYNeFalFPMYTeSRY11jNjDldorxi5cfvyFykZOpg7 lBrUei3lNHs7cJ/2UVY+TAxRFzzchNwwqRSE4rmVtNJfgkZdSTNSymmFn6NGSx3+ o8Y+d0je9bn/OpUnXTJeU6GMvhUpyx+NRSWd48u+k1Keny6Q4kXF+93ZNY+51dmc YTS9UlcKuRoPtwD284oZxGuCM1+RZ7Y= -----END CERTIFICATE-----Generated at Wed Oct 22 07:18:21 2025 by rpki-client