$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1939975c-3e10-3950-91f1-1904ce380e1a.roa File: 1939975c-3e10-3950-91f1-1904ce380e1a.roa (raw, json) Hash identifier: KSbMjtVn2eE8tOnG5Mk8mAuMtHYaeFV5ydQ4hyo9vxI= Subject key identifier: 3F:FB:56:54:B7:44:76:3A:6E:06:2A:EF:D3:AE:F2:40:40:84:70:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A06A800B387523477800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1939975c-3e10-3950-91f1-1904ce380e1a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.40.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a0:6a:80:0b:38:75:23:47:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=ecfda657-9703-492e-975b-7513e165f45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:33:f3:69:62:19:9e:a0:d7:bf:7c:e9:a9: a7:98:00:c9:1e:c1:90:2a:c0:40:6e:23:91:1a:96: 6e:32:92:b9:4f:c3:7a:f5:95:aa:da:ac:48:54:eb: 82:d2:f4:0a:21:e4:59:63:a4:5a:08:d6:11:56:d9: 63:f6:c5:d0:da:51:c8:43:15:cd:73:9d:87:3b:14: fa:29:5b:a9:1d:7a:bf:36:d3:c3:0a:63:7b:2a:f9: 6a:72:9b:46:b8:99:ca:bb:e2:2f:f0:20:26:9d:c8: 82:cf:49:32:76:bd:f7:ff:30:c0:b0:de:2e:af:59: 4a:2b:1e:e8:88:6e:62:9a:a5:73:25:31:0a:90:77: ee:8b:4e:b2:a9:fa:ca:81:fa:a4:6f:31:1e:25:62: d1:5e:5f:cb:45:2c:fb:f4:e9:62:2a:41:5f:03:52: 0e:9e:83:5d:d8:63:fc:71:c6:01:0f:7e:d3:7c:f6: 76:40:dc:ac:89:d9:71:51:9a:04:77:de:aa:18:33: d3:7c:cb:d9:b9:8c:c2:e9:56:8e:b2:ea:60:ba:1e: b5:5e:da:2f:44:cb:20:31:4f:b7:c0:45:28:9b:2d: 54:15:0f:b0:b2:11:46:c2:27:3c:5f:fb:2f:e3:c4: ca:30:8c:a7:3e:91:0c:0d:c4:a2:9f:a4:29:ef:d1: 42:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FB:56:54:B7:44:76:3A:6E:06:2A:EF:D3:AE:F2:40:40:84:70:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1939975c-3e10-3950-91f1-1904ce380e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:75:c8:a7:6d:33:61:f0:06:47:84:75:71:24:5e:7f:5d:48: 1a:17:56:c6:88:9c:75:82:83:14:98:60:ef:3f:5c:c7:7e:a2: 3f:3e:9a:48:9c:e6:12:e6:76:db:3b:aa:da:80:e8:04:10:24: 21:9d:76:91:da:ad:95:8f:ae:63:6a:62:f5:0a:48:82:0f:75: 06:3f:a5:22:34:d5:df:9f:34:9f:94:86:18:4f:a3:4f:68:75: a5:a6:27:02:7d:f2:79:cc:95:0a:a5:d8:d4:a0:f0:c7:17:c4: 59:5d:52:ba:ea:92:02:08:12:c7:28:f0:ad:b4:df:07:e4:45: 3d:8c:23:37:aa:09:ab:41:68:33:2d:a4:bb:ac:0c:4b:fe:26: f3:d3:0b:f0:28:36:58:7d:44:09:b4:ff:e3:90:d6:04:08:da: 42:bf:3b:ed:5c:b6:b0:90:fd:79:91:8d:ab:00:a5:b6:30:3e: d8:7f:f8:88:7c:89:44:2d:fd:02:ef:96:68:a2:da:44:22:cd: b4:1b:be:d6:9d:9f:f2:3c:4b:da:2e:6e:1a:d2:0b:c7:8c:71: a9:79:82:13:03:ad:3b:3c:1b:87:26:14:5d:e0:66:d0:ea:7f: d8:5e:db:b5:d9:80:3b:a2:50:63:05:68:97:08:77:eb:40:cf: 50:c6:56:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aBqgAs4dSNHeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZWNmZGE2NTctOTcwMy00OTJlLTk3NWItNzUxM2UxNjVmNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Iz82liGZ6g17986amnmADJHsGQKsBAbiOR GpZuMpK5T8N69ZWq2qxIVOuC0vQKIeRZY6RaCNYRVtlj9sXQ2lHIQxXNc52HOxT6 KVupHXq/NtPDCmN7KvlqcptGuJnKu+Iv8CAmnciCz0kydr33/zDAsN4ur1lKKx7o iG5imqVzJTEKkHfui06yqfrKgfqkbzEeJWLRXl/LRSz79OliKkFfA1IOnoNd2GP8 ccYBD37TfPZ2QNysidlxUZoEd96qGDPTfMvZuYzC6VaOsupguh61XtovRMsgMU+3 wEUomy1UFQ+wshFGwic8X/sv48TKMIynPpEMDcSin6Qp79FC0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/7VlS3RHY6bgYq79Ou8kBAhHAcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTkzOTk3NWMtM2UxMC0z OTUwLTkxZjEtMTkwNGNlMzgwZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyiyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB1yKdtM2HwBkeEdXEkXn9dSBoXVsaInHWCgxSYYO8/XMd+oj8+mkic 5hLmdts7qtqA6AQQJCGddpHarZWPrmNqYvUKSIIPdQY/pSI01d+fNJ+UhhhPo09o daWmJwJ98nnMlQql2NSg8McXxFldUrrqkgIIEsco8K203wfkRT2MIzeqCatBaDMt pLusDEv+JvPTC/AoNlh9RAm0/+OQ1gQI2kK/O+1ctrCQ/XmRjasApbYwPth/+Ih8 iUQt/QLvlmii2kQizbQbvtadn/I8S9oubhrSC8eMcal5ghMDrTs8G4cmFF3gZtDq f9he27XZgDuiUGMFaJcId+tAz1DGVjc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:09 2025 by rpki-client