$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c70c6df-238b-35d2-9418-2828e34388b1.roa File: 0c70c6df-238b-35d2-9418-2828e34388b1.roa (raw, json) Hash identifier: dBerBwWToJRcsUrja2vItoS1VFISRyHlfzx6ImpmdRc= Subject key identifier: BE:86:FD:4A:84:53:57:12:8F:F4:40:31:C7:B8:4E:A6:88:F3:35:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C36E2D971404FB378C17740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c70c6df-238b-35d2-9418-2828e34388b1.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.44.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:e2:d9:71:40:4f:b3:78:c1:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b3cb78af-9a59-4535-b25a-4ffee890cc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:2d:01:0f:17:c2:85:39:ef:0e:35:89:2a: e5:c7:0e:8c:5d:b1:fa:96:70:0a:8f:19:38:37:4a: 3b:75:40:ed:6d:da:a3:76:cc:11:b8:18:39:e8:bc: de:65:2f:fd:68:8e:ef:3e:17:18:2e:56:4b:94:e4: ee:95:8e:1e:3c:0e:2d:1b:80:ca:cd:58:cf:9f:bb: fd:52:57:09:17:e2:1d:3a:ac:9a:33:0c:0c:a4:b1: 59:d2:19:e2:b3:50:a9:cd:67:f3:8e:c2:02:60:b6: d9:22:44:b0:1a:1c:65:35:15:5c:38:6b:18:95:e5: db:62:50:c1:3e:79:db:be:ab:bb:f7:38:6c:3d:78: 4b:62:3c:d4:96:d2:c6:7e:cc:9b:67:00:d1:f6:74: d6:8b:f2:f5:e8:34:7f:bb:dc:89:30:9e:be:ce:37: b2:bf:b0:45:4c:8a:59:49:9c:d9:4e:22:17:6a:bb: ea:17:2a:9d:e9:1a:e8:9b:67:ab:e1:1d:9e:0a:6a: b9:69:56:7f:61:2a:3d:f5:86:c7:7e:d3:49:fb:5b: d2:91:76:10:98:57:f2:78:d2:d9:bf:9b:27:46:2d: 84:94:73:30:1e:38:fa:ba:63:ea:c2:e6:19:28:b5: b4:47:a6:f8:95:54:a4:24:a2:38:20:4a:1f:81:ed: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:86:FD:4A:84:53:57:12:8F:F4:40:31:C7:B8:4E:A6:88:F3:35:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c70c6df-238b-35d2-9418-2828e34388b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4e:74:9a:5f:e8:95:04:92:03:26:7e:9a:eb:7b:6e:82:d7: 8f:6e:46:75:e4:79:93:d8:c4:5c:ea:06:e2:e7:cd:eb:97:a9: 36:66:0f:f6:0c:f1:e2:b3:14:e6:d2:4d:b8:5b:66:17:e3:ff: a7:14:88:40:1a:18:18:fe:17:e0:d3:f2:89:d3:0c:21:48:d3: 27:88:c1:10:05:d1:cc:ed:88:a9:ed:a8:c9:54:2d:16:9f:99: 44:04:f5:20:43:4c:f1:2e:f6:91:6d:99:14:7f:5e:77:56:9d: 1d:42:d8:0d:52:72:12:ea:64:f6:e9:28:fd:7d:32:22:39:0f: 99:48:e4:33:56:1e:00:43:85:f5:ec:b8:2a:98:0d:b9:1e:31: d3:96:bc:de:03:83:a0:63:6e:60:48:7a:5d:0e:a0:4b:2f:02: 44:5a:a8:bc:fb:1e:6e:bd:e8:10:15:d3:18:e9:8f:29:f5:75: 92:61:af:e6:37:f3:a1:98:46:ac:32:bf:43:f5:99:39:7e:1a: 02:21:0f:28:08:9b:80:3e:b9:13:7b:8f:7e:95:c0:e5:30:5b: d7:25:d0:04:67:3b:d9:69:aa:e2:0c:54:be:39:6c:9f:28:65: ad:e8:63:61:bd:c4:c4:25:b3:f1:bf:1b:57:a6:7d:a3:52:b4: dc:22:75:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNuLZcUBPs3jBd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YjNjYjc4YWYtOWE1OS00NTM1LWIyNWEtNGZmZWU4OTBjYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNEtAQ8XwoU57w41iSrlxw6MXbH6lnAKjxk4 N0o7dUDtbdqjdswRuBg56LzeZS/9aI7vPhcYLlZLlOTulY4ePA4tG4DKzVjPn7v9 UlcJF+IdOqyaMwwMpLFZ0hnis1CpzWfzjsICYLbZIkSwGhxlNRVcOGsYleXbYlDB Pnnbvqu79zhsPXhLYjzUltLGfsybZwDR9nTWi/L16DR/u9yJMJ6+zjeyv7BFTIpZ SZzZTiIXarvqFyqd6Rrom2er4R2eCmq5aVZ/YSo99YbHftNJ+1vSkXYQmFfyeNLZ v5snRi2ElHMwHjj6umPqwuYZKLW0R6b4lVSkJKI4IEofge2GmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6G/UqEU1cSj/RAMce4TqaI8zUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM3MGM2ZGYtMjM4Yi0z NWQyLTk0MTgtMjgyOGUzNDM4OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyznMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdOdJpf6JUEkgMmfprre26C149uRnXkeZPYxFzqBuLnzeuXqTZmD/YM 8eKzFObSTbhbZhfj/6cUiEAaGBj+F+DT8onTDCFI0yeIwRAF0cztiKntqMlULRaf mUQE9SBDTPEu9pFtmRR/XndWnR1C2A1SchLqZPbpKP19MiI5D5lI5DNWHgBDhfXs uCqYDbkeMdOWvN4Dg6BjbmBIel0OoEsvAkRaqLz7Hm696BAV0xjpjyn1dZJhr+Y3 86GYRqwyv0P1mTl+GgIhDygIm4A+uRN7j36VwOUwW9cl0ARnO9lpquIMVL45bJ8o Za3oY2G9xMQls/G/G1emfaNStNwiddg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:54 2025 by rpki-client