$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/120080a6-ef64-3325-a9e0-44dd600f0951.roa File: 120080a6-ef64-3325-a9e0-44dd600f0951.roa (raw, json) Hash identifier: h5hTABdibUV+y3dzoc29XmmTJeUhX+ebjfjyJ9yXlBs= Subject key identifier: 71:59:3F:53:F8:D0:CE:11:C3:02:02:80:42:49:6A:6B:83:35:5F:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C13EA0409161BAABC0180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/120080a6-ef64-3325-a9e0-44dd600f0951.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 35994 IP address blocks: 23.39.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:13:ea:04:09:16:1b:aa:bc:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=949cbfc3-e766-4545-a619-d3e3197a6301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:44:84:33:82:8b:8b:11:ff:73:ff:eb:fd:86: 41:00:bd:ae:14:ba:1f:7d:65:1b:e9:63:d2:38:75: 2e:26:3c:15:83:e8:6e:4f:33:e1:f6:3f:bc:40:e0: 40:13:57:ca:ca:c6:76:a0:32:43:10:7e:15:4c:97: 55:2a:58:36:eb:54:9c:4a:a3:19:0d:70:a0:f5:1e: f2:f8:a5:68:63:f9:ae:48:f6:94:9a:42:83:b3:68: ea:a3:43:3d:36:00:f6:e4:ed:15:f8:a3:7b:39:79: c3:62:b2:c2:2b:00:11:ae:1f:66:fc:c7:81:c5:36: 61:c2:2b:c3:c2:80:25:3f:f0:02:a5:83:a0:62:d5: 8b:64:34:2a:f6:43:4e:54:41:b2:b5:29:61:67:92: 10:42:57:ad:4e:b1:0a:2f:77:a7:6e:48:5d:cf:e0: da:62:b5:f5:bc:9b:8b:84:f1:12:d7:99:75:3a:c4: 58:36:26:2e:63:d1:8e:69:3e:8c:8c:a4:26:54:9a: 61:ec:2e:3b:bb:51:65:8d:84:bf:86:44:ba:f7:50: 41:db:93:87:f1:e7:ee:28:f4:ac:e6:b4:84:5f:b6: 9c:af:9b:6f:77:98:cc:30:0b:60:ce:92:a1:ee:9e: 99:22:ad:4a:95:6c:4f:82:f9:90:37:dc:6e:48:e9: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:59:3F:53:F8:D0:CE:11:C3:02:02:80:42:49:6A:6B:83:35:5F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/120080a6-ef64-3325-a9e0-44dd600f0951.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c1:e2:bb:a8:c6:3e:0c:16:9c:e7:42:ca:00:9c:2e:8c:9e: 10:7e:f2:80:33:43:59:ad:b9:81:79:92:07:10:42:8e:e0:c2: 43:a0:7c:11:ce:bf:1e:38:70:c4:03:0e:3b:2f:94:7e:bc:38: a3:dd:8f:eb:43:df:af:16:5b:4a:9a:95:7b:3c:d1:27:0f:5a: c4:53:c2:56:30:af:d8:fa:15:cc:36:17:1f:fa:ce:f3:12:67: 26:35:e3:93:9d:7c:07:2f:51:58:c6:60:e8:25:90:54:a6:7b: 96:c7:eb:0f:b2:28:38:92:5b:f2:ba:fe:0a:08:b1:cd:86:b1: e8:a7:58:15:cd:dd:36:f2:31:fa:3f:d7:5d:09:de:b0:59:f5: d8:3d:78:dd:62:bc:86:a2:2b:81:3b:ef:b2:9d:68:30:0c:ce: 2f:93:f8:26:3f:e1:9e:64:ea:1d:6c:72:ac:0c:fa:91:76:4d: 69:8b:8f:55:a8:3c:ed:1e:92:ec:02:2d:3c:97:85:1d:6b:5b: f8:d6:92:05:7a:8e:09:30:59:8a:3e:bf:11:9d:99:e1:f7:81: eb:bf:38:45:1d:1c:1e:53:15:b7:60:4d:03:42:f8:9a:f6:0f: b8:61:72:08:4d:4c:d3:b4:65:1e:55:28:65:63:15:ff:24:1f: dd:62:8f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBPqBAkWG6q8AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTQ5Y2JmYzMtZTc2Ni00NTQ1LWE2MTktZDNlMzE5N2E2MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgESEM4KLixH/c//r/YZBAL2uFLoffWUb6WPS OHUuJjwVg+huTzPh9j+8QOBAE1fKysZ2oDJDEH4VTJdVKlg261ScSqMZDXCg9R7y +KVoY/muSPaUmkKDs2jqo0M9NgD25O0V+KN7OXnDYrLCKwARrh9m/MeBxTZhwivD woAlP/ACpYOgYtWLZDQq9kNOVEGytSlhZ5IQQletTrEKL3enbkhdz+DaYrX1vJuL hPES15l1OsRYNiYuY9GOaT6MjKQmVJph7C47u1FljYS/hkS691BB25OH8efuKPSs 5rSEX7acr5tvd5jMMAtgzpKh7p6ZIq1KlWxPgvmQN9xuSOkBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFZP1P40M4RwwICgEJJamuDNV/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIwMDgwYTYtZWY2NC0z MzI1LWE5ZTAtNDRkZDYwMGYwOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyekMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHB4ruoxj4MFpznQsoAnC6MnhB+8oAzQ1mtuYF5kgcQQo7gwkOgfBHO vx44cMQDDjsvlH68OKPdj+tD368WW0qalXs80ScPWsRTwlYwr9j6Fcw2Fx/6zvMS ZyY145OdfAcvUVjGYOglkFSme5bH6w+yKDiSW/K6/goIsc2GseinWBXN3TbyMfo/ 110J3rBZ9dg9eN1ivIaiK4E777KdaDAMzi+T+CY/4Z5k6h1scqwM+pF2TWmLj1Wo PO0ekuwCLTyXhR1rW/jWkgV6jgkwWYo+vxGdmeH3geu/OEUdHB5TFbdgTQNC+Jr2 D7hhcghNTNO0ZR5VKGVjFf8kH91ij9U= -----END CERTIFICATE-----Generated at Mon Oct 20 05:29:20 2025 by rpki-client