$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1795594a-f4e2-3646-8a29-d117eb50f6b6.roa File: 1795594a-f4e2-3646-8a29-d117eb50f6b6.roa (raw, json) Hash identifier: msY5YkF+YxZu4uSlFJTBtsi8FFZylb7SX6FAu2tt6Mk= Subject key identifier: C2:A6:CD:35:30:F7:07:B2:D5:6B:2D:44:A1:1E:A2:99:0A:66:8D:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A7677845173419301A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1795594a-f4e2-3646-8a29-d117eb50f6b6.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.37.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a7:67:78:45:17:34:19:30:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b82af3f1-d903-4b41-bb97-d7804c12783b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:a1:20:f8:8f:74:3c:6b:a9:84:65:4e:13: 26:ae:17:10:52:75:74:85:3b:e4:d0:1e:06:d6:b3: 0d:35:91:7b:e0:04:f7:10:94:f5:af:64:4d:51:c7: 23:8b:26:60:32:8b:bf:ce:8e:a6:69:17:12:fd:70: 87:6f:32:6f:d7:18:2a:65:54:f0:97:56:fc:f5:e9: 46:d3:71:5a:0f:34:94:ef:e8:8e:e0:49:6e:8f:b7: f9:c7:9e:3c:4b:39:48:ad:64:ca:c2:f2:e8:e9:72: fa:96:a2:b6:08:ae:42:ec:23:b9:62:23:ce:7b:61: a4:46:31:dc:19:96:93:12:ee:c3:8e:45:b4:be:b3: 54:5a:1a:69:48:45:ce:66:64:a8:44:3b:ae:22:e3: 87:88:4c:7e:4f:10:f0:cd:3d:13:99:0e:a8:4c:50: b2:27:42:47:4b:f7:58:9d:00:70:eb:9b:03:a6:fd: e4:90:c5:eb:38:4e:fa:30:8a:d8:73:44:9f:6a:1a: 55:4f:f6:c8:b0:80:6f:f0:cf:8f:ff:02:14:5a:cd: 05:1d:2e:d3:e9:bc:c7:28:dd:d8:8d:79:c4:37:e1: 2b:04:a6:b8:e6:3f:e7:bf:1d:16:06:e9:2f:4c:38: ef:77:11:0c:ff:75:61:97:9c:54:97:45:35:2f:d4: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A6:CD:35:30:F7:07:B2:D5:6B:2D:44:A1:1E:A2:99:0A:66:8D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1795594a-f4e2-3646-8a29-d117eb50f6b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:fc:96:da:ee:5e:37:41:38:8f:ad:4b:a7:11:6b:35:05:39: d1:b1:a9:ba:bc:b0:4d:f6:82:8e:36:83:b8:ef:0e:a4:c3:ec: de:49:2b:f9:f7:73:fc:52:9d:1a:a6:18:bf:93:8e:61:62:59: 1a:dd:38:85:bd:99:6a:ff:5a:38:e0:8b:b8:0c:22:92:88:50: 3a:c6:f4:78:e5:b6:f6:b0:10:b6:ae:9d:e2:80:8d:31:d2:f2: 55:01:93:87:0a:21:71:cf:92:14:12:1c:c9:44:00:19:be:3b: 10:c7:42:06:c8:13:45:ec:89:cf:7b:81:6a:f4:a7:5e:9a:e7: 0b:de:e4:11:30:9c:72:71:5e:06:3e:19:93:57:c8:50:a5:90: 66:df:6c:73:f7:a7:ef:8a:d5:66:3f:8b:a9:17:42:64:84:0d: b5:e3:82:2d:fc:36:3d:9c:01:23:9d:dd:5e:e8:bd:38:87:bb: 1a:42:81:66:67:f5:6f:bb:d9:0b:25:85:41:ce:85:e6:95:d9: 59:4a:94:b1:85:6c:3f:a3:8e:6d:8b:41:88:1c:5d:4b:20:26: 54:7c:0c:a9:3d:0b:6a:92:b3:62:53:45:1d:9f:e4:7e:fb:4c: 55:ae:fe:8f:93:cd:18:7b:66:f4:b8:94:97:88:1a:c8:1b:90: 44:11:8e:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0adneEUXNBkwGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjgyYWYzZjEtZDkwMy00YjQxLWJiOTctZDc4MDRjMTI3ODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJChIPiPdDxrqYRlThMmrhcQUnV0hTvk0B4G 1rMNNZF74AT3EJT1r2RNUccjiyZgMou/zo6maRcS/XCHbzJv1xgqZVTwl1b89elG 03FaDzSU7+iO4Eluj7f5x548SzlIrWTKwvLo6XL6lqK2CK5C7CO5YiPOe2GkRjHc GZaTEu7DjkW0vrNUWhppSEXOZmSoRDuuIuOHiEx+TxDwzT0TmQ6oTFCyJ0JHS/dY nQBw65sDpv3kkMXrOE76MIrYc0SfahpVT/bIsIBv8M+P/wIUWs0FHS7T6bzHKN3Y jXnEN+ErBKa45j/nvx0WBukvTDjvdxEM/3Vhl5xUl0U1L9SXvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKmzTUw9wey1WstRKEeopkKZo2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTc5NTU5NGEtZjRlMi0z NjQ2LThhMjktZDExN2ViNTBmNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv8ltruXjdBOI+tS6cRazUFOdGxqbq8sE32go42g7jvDqTD7N5JK/n3 c/xSnRqmGL+TjmFiWRrdOIW9mWr/Wjjgi7gMIpKIUDrG9HjltvawELauneKAjTHS 8lUBk4cKIXHPkhQSHMlEABm+OxDHQgbIE0Xsic97gWr0p16a5wve5BEwnHJxXgY+ GZNXyFClkGbfbHP3p++K1WY/i6kXQmSEDbXjgi38Nj2cASOd3V7ovTiHuxpCgWZn 9W+72QslhUHOheaV2VlKlLGFbD+jjm2LQYgcXUsgJlR8DKk9C2qSs2JTRR2f5H77 TFWu/o+TzRh7ZvS4lJeIGsgbkEQRjs4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:07 2025 by rpki-client