$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123cdf98-ba9c-3934-aaf0-010fe582140b.roa File: 123cdf98-ba9c-3934-aaf0-010fe582140b.roa (raw, json) Hash identifier: URt6gSj+GvCRDPTVfLCUFbUUv8OUmgYYz1xh3A7K7ZI= Subject key identifier: 19:00:93:2D:75:25:E5:AF:E7:90:3F:00:61:9B:D0:3B:74:80:0C:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715D0AA67087760E8F4C4B60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123cdf98-ba9c-3934-aaf0-010fe582140b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 23.47.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:0a:a6:70:87:76:0e:8f:4c:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=78c3fdd5-2212-44a1-baae-3c862e0ed316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:48:f6:6c:39:5d:ee:5a:c4:59:2a:6c:44: e6:0d:a9:2c:63:61:29:0c:d9:10:d8:3a:80:d1:ac: ab:df:8f:ad:1f:08:30:0a:ef:cb:0c:d9:b5:e4:4e: 7e:b2:fa:43:a8:6f:7a:09:32:3d:c7:bd:46:87:f3: 67:ae:d3:85:36:23:69:9a:22:65:20:3e:77:bb:80: 7c:f8:82:84:88:05:37:d6:7f:f1:48:24:6a:38:8a: a2:0c:83:62:99:94:d5:8b:8b:15:fc:c5:7e:c4:95: 1d:b2:cb:45:30:12:d6:c6:b7:5a:ee:41:78:13:3e: 30:cc:5c:2f:fb:76:96:4c:8c:e7:65:b6:80:3d:0f: 7b:35:7f:ef:28:34:c6:12:e0:79:e8:21:c7:51:ae: f9:1d:15:ce:22:6f:c4:93:23:c5:0f:69:70:37:f9: 98:7d:e3:4a:73:05:e3:04:90:6b:a3:fa:4d:28:7d: c1:08:db:38:43:4a:06:81:dc:17:f7:d2:51:f6:f9: 9c:ee:9e:b5:60:d6:59:60:e0:fe:c9:80:c2:25:cf: 65:cf:43:81:b5:c5:db:8b:fc:82:07:27:11:73:53: 5b:05:fa:dd:c0:90:5f:3b:4c:a5:5b:18:88:06:59: 66:73:35:65:e9:49:f5:ea:c0:e1:d1:5d:16:ba:64: 2e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:00:93:2D:75:25:E5:AF:E7:90:3F:00:61:9B:D0:3B:74:80:0C:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/123cdf98-ba9c-3934-aaf0-010fe582140b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c6:8c:1a:f1:aa:48:f6:32:15:ca:ad:f7:de:7b:8e:f2:97: 44:3a:42:3c:09:4c:96:30:00:21:7a:c1:ac:a6:7b:06:47:25: 39:2d:76:9e:ce:fb:8e:55:19:d0:56:9d:82:73:f1:16:b0:ff: 19:af:a3:94:45:a7:58:45:5e:fd:64:0c:9d:0f:dd:44:3f:d8: 79:71:eb:95:28:9b:a9:9f:be:97:c1:d3:20:a5:43:de:a6:6a: 4e:91:9f:7b:8d:2b:a3:6e:14:2f:99:84:77:bb:65:f7:73:eb: 36:3b:43:8e:85:d9:7d:03:7f:cb:16:3f:2e:e8:18:c4:22:bb: 00:f0:35:10:bd:c1:57:65:19:1e:2c:c7:63:6e:fb:e5:c3:c8: a1:6e:45:b0:16:56:f5:06:6e:85:f3:db:1a:58:bb:b3:b2:a8: 3a:cd:16:b8:03:5c:66:f6:80:67:99:35:8c:33:3c:91:86:0b: 43:e1:c5:02:55:0f:17:f6:41:e7:7a:14:07:90:20:37:6a:c6: 5b:64:8c:2c:8f:1f:0e:cd:75:05:21:8d:1e:79:aa:91:97:5b: 56:20:ee:69:57:7c:74:da:6d:1f:9a:cf:ae:5e:6d:0d:1a:03: 73:36:14:ae:a7:d1:43:55:1c:f8:dc:f0:a9:61:a8:46:b0:83: f8:de:d4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQqmcId2Do9MS2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk NzhjM2ZkZDUtMjIxMi00NGExLWJhYWUtM2M4NjJlMGVkMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNpI9mw5Xe5axFkqbETmDaksY2EpDNkQ2DqA 0ayr34+tHwgwCu/LDNm15E5+svpDqG96CTI9x71Gh/NnrtOFNiNpmiJlID53u4B8 +IKEiAU31n/xSCRqOIqiDINimZTVi4sV/MV+xJUdsstFMBLWxrda7kF4Ez4wzFwv +3aWTIznZbaAPQ97NX/vKDTGEuB56CHHUa75HRXOIm/EkyPFD2lwN/mYfeNKcwXj BJBro/pNKH3BCNs4Q0oGgdwX99JR9vmc7p61YNZZYOD+yYDCJc9lz0OBtcXbi/yC BycRc1NbBfrdwJBfO0ylWxiIBllmczVl6Un16sDh0V0WumQuIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkAky11JeWv55A/AGGb0Dt0gAyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIzY2RmOTgtYmE5Yy0z OTM0LWFhZjAtMDEwZmU1ODIxNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvGjBrxqkj2MhXKrffee47yl0Q6QjwJTJYwACF6waymewZHJTktdp7O +45VGdBWnYJz8Raw/xmvo5RFp1hFXv1kDJ0P3UQ/2Hlx65Uom6mfvpfB0yClQ96m ak6Rn3uNK6NuFC+ZhHe7Zfdz6zY7Q46F2X0Df8sWPy7oGMQiuwDwNRC9wVdlGR4s x2Nu++XDyKFuRbAWVvUGboXz2xpYu7OyqDrNFrgDXGb2gGeZNYwzPJGGC0PhxQJV Dxf2Qed6FAeQIDdqxltkjCyPHw7NdQUhjR55qpGXW1Yg7mlXfHTabR+az65ebQ0a A3M2FK6n0UNVHPjc8KlhqEawg/je1F4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:35 2025 by rpki-client