$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02588b4d-3e64-3646-ba02-dbc979fa7485.roa File: 02588b4d-3e64-3646-ba02-dbc979fa7485.roa (raw, json) Hash identifier: xOwBKyNe70zkcYUp+ZQbeDmwb11ksbpYamn8gLOMvZQ= Subject key identifier: ED:B7:6C:0D:50:68:31:3F:C3:A2:17:89:14:84:A5:02:1A:71:D2:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2E5C58597393430F93B3CA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02588b4d-3e64-3646-ba02-dbc979fa7485.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.63.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:58:59:73:93:43:0f:93:b3:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=ebe44c78-320c-4c5d-84a9-a72762256cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:3e:07:ef:06:0b:be:8c:76:48:da:e7:ab: ad:16:47:5b:4a:26:7a:c3:48:84:5c:6b:04:01:db: a1:45:30:85:d4:b3:d6:38:d0:c4:0e:b3:2d:6d:16: 32:2d:d2:db:50:37:38:31:13:fb:d5:dd:93:c8:01: c9:ce:15:8c:09:85:3d:e9:fd:59:e7:d0:b7:20:a2: dd:5a:ae:3d:15:93:81:26:2e:08:73:c4:93:c9:ec: b3:74:b8:96:1e:87:ce:fe:de:6e:87:64:1c:43:5f: eb:a1:62:d6:9e:e4:3f:e0:95:e3:97:cd:94:4b:a1: e1:47:8b:a7:1c:98:92:60:bf:5c:a9:68:c7:45:61: 38:01:e1:7a:ff:e9:45:49:74:e4:dd:24:07:7c:cb: 03:9d:4d:71:84:c0:51:82:a5:c8:82:b0:3a:53:c8: 09:86:f4:13:1b:3a:77:f7:08:9d:53:39:e7:e0:3c: ad:f3:da:cf:c6:37:c5:c4:9d:2e:d8:07:98:77:44: 46:75:04:9a:fc:86:48:c5:31:f4:fb:ee:60:ac:e3: 33:f1:ab:42:46:e8:b2:a7:6c:0d:1f:02:23:3a:a2: 53:e0:4f:b1:e8:c6:76:b9:c7:77:ef:a3:57:dd:d4: 9d:23:87:da:4d:ef:04:98:1e:b8:cb:97:91:e4:95: 8d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B7:6C:0D:50:68:31:3F:C3:A2:17:89:14:84:A5:02:1A:71:D2:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02588b4d-3e64-3646-ba02-dbc979fa7485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3e:d2:08:a6:88:c5:c5:55:b5:2e:89:64:e8:0e:be:7b:16: 5d:f8:17:89:e9:cb:bb:1a:99:60:7b:52:5d:dc:07:3c:8f:a3: 57:d7:27:00:61:5d:65:e5:89:30:99:d6:69:08:4e:2d:2a:8b: f0:a4:60:4a:b8:55:55:0f:49:19:c4:cc:52:4c:85:69:a9:af: 71:46:fd:94:d6:96:4d:53:88:90:b6:1f:b9:80:60:3d:cf:bf: 4b:19:ef:84:c4:c1:67:b4:20:67:0a:1e:d5:5c:64:91:8e:80: 20:50:0e:06:09:57:8b:1e:f6:56:60:1e:4d:2e:06:18:50:e1: 0f:9a:23:38:2e:ca:d7:97:8b:ee:1d:62:d8:03:e4:e5:a1:8c: 74:42:bf:15:d4:be:b6:15:40:ef:d8:37:8b:ed:d8:a5:17:75: 2a:c5:a4:04:56:d1:f2:38:85:bf:16:56:39:08:f8:9d:79:cd: c8:7a:c4:97:b2:91:aa:18:4c:bd:16:ca:16:44:24:95:41:c5: 67:d8:b5:a0:23:ac:13:88:f8:56:f7:38:70:f4:28:e1:ee:0e: de:08:cd:f3:77:ba:f1:90:e9:f1:45:5f:1d:5f:81:01:aa:12: f9:e1:ff:14:b1:09:8f:f6:d4:bc:8c:8b:b0:3f:22:d8:0a:5d: 3b:db:1b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFhZc5NDD5OzygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk ZWJlNDRjNzgtMzIwYy00YzVkLTg0YTktYTcyNzYyMjU2Y2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHs+B+8GC76Mdkja56utFkdbSiZ6w0iEXGsE AduhRTCF1LPWONDEDrMtbRYyLdLbUDc4MRP71d2TyAHJzhWMCYU96f1Z59C3IKLd Wq49FZOBJi4Ic8STyeyzdLiWHofO/t5uh2QcQ1/roWLWnuQ/4JXjl82US6HhR4un HJiSYL9cqWjHRWE4AeF6/+lFSXTk3SQHfMsDnU1xhMBRgqXIgrA6U8gJhvQTGzp3 9widUznn4Dyt89rPxjfFxJ0u2AeYd0RGdQSa/IZIxTH0++5grOMz8atCRuiyp2wN HwIjOqJT4E+x6MZ2ucd376NX3dSdI4faTe8EmB64y5eR5JWNEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO23bA1QaDE/w6IXiRSEpQIacdJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDI1ODhiNGQtM2U2NC0z NjQ2LWJhMDItZGJjOTc5ZmE3NDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFz/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4+0gimiMXFVbUuiWToDr57Fl34F4npy7samWB7Ul3cBzyPo1fXJwBh XWXliTCZ1mkITi0qi/CkYEq4VVUPSRnEzFJMhWmpr3FG/ZTWlk1TiJC2H7mAYD3P v0sZ74TEwWe0IGcKHtVcZJGOgCBQDgYJV4se9lZgHk0uBhhQ4Q+aIzguyteXi+4d YtgD5OWhjHRCvxXUvrYVQO/YN4vt2KUXdSrFpARW0fI4hb8WVjkI+J15zch6xJey kaoYTL0WyhZEJJVBxWfYtaAjrBOI+Fb3OHD0KOHuDt4IzfN3uvGQ6fFFXx1fgQGq Evnh/xSxCY/21LyMi7A/ItgKXTvbG8g= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:27 2025 by rpki-client