$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19749ae3-1fe1-3352-a031-1f1e10e36fe6.roa File: 19749ae3-1fe1-3352-a031-1f1e10e36fe6.roa (raw, json) Hash identifier: lE9Zmkw3LhuEScQWn/eH6Flvtrqv7zpLxFVtAPOhr9k= Subject key identifier: 03:01:DF:D2:34:3C:3B:5D:37:0A:0D:46:34:9D:21:30:36:C7:DF:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C136642DA4DC65D44D700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19749ae3-1fe1-3352-a031-1f1e10e36fe6.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.36.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:13:66:42:da:4d:c6:5d:44:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=9be306a5-c126-4ae9-a9a4-481466154801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:2f:13:13:9d:de:ea:93:b2:b6:a1:2e:f9: 32:31:eb:4a:7f:67:35:de:37:12:12:31:5c:e8:54: 9b:09:42:87:1b:af:34:7d:db:eb:10:34:ab:5a:09: aa:7f:83:e0:cf:c3:e9:2a:6b:03:79:30:20:5d:f6: 43:5e:a9:69:bd:a4:f0:8b:3a:bf:ec:6a:64:7f:ea: d0:f3:ed:ea:b9:81:a6:37:6e:eb:d2:af:bb:8f:43: 3f:cb:d6:de:55:6b:f3:62:01:c4:56:dc:c7:2d:03: 80:44:69:de:bc:1e:26:24:57:0b:da:b0:fd:df:73: 9b:a3:6d:36:e1:9c:b5:81:cf:da:7f:b6:e6:4c:da: 60:4e:9d:43:60:d4:0b:60:c6:8e:4a:78:a6:5f:c6: 36:7e:3f:df:f2:39:04:3c:e3:55:69:e0:cb:54:49: 30:82:9a:60:be:79:a2:ae:e6:fe:28:8c:b4:4e:34: b6:75:de:09:8a:ee:50:81:92:2d:b7:7c:ee:6d:2e: 0e:13:17:99:7e:be:02:55:14:86:96:5f:d2:0c:e3: 5a:2a:61:dc:89:14:0d:da:fa:d3:5e:28:48:fc:8e: b7:f3:90:53:53:f2:3f:08:8f:a7:06:22:53:05:e1: 5c:11:d8:4a:a1:7b:84:74:1e:bd:98:86:f6:3d:38: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:01:DF:D2:34:3C:3B:5D:37:0A:0D:46:34:9D:21:30:36:C7:DF:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19749ae3-1fe1-3352-a031-1f1e10e36fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d7:d9:69:4e:1b:d2:3f:bf:97:1d:1d:f6:e9:22:0b:52:b9: 87:0f:76:8f:f8:71:8e:72:7b:56:71:20:eb:ea:5b:80:31:9f: e1:34:a5:00:75:1a:1e:3d:59:44:be:d8:c6:b5:f6:04:7d:52: d6:e6:59:89:52:35:59:7a:87:20:8a:90:62:b6:22:e3:05:5d: b9:f0:12:b4:08:84:12:39:20:c0:37:e5:62:ef:ee:77:2d:0c: a9:9e:71:65:02:0c:66:02:72:a9:43:18:8a:d0:d5:e3:66:21: ba:b2:51:9f:8a:f8:b0:2e:91:74:6c:fe:79:e5:bf:79:ec:dd: 4c:2e:f3:85:85:36:09:cf:76:8b:ed:69:57:da:6b:46:30:66: 3c:fe:26:0a:90:89:82:a9:bf:13:fd:47:78:80:73:4d:39:0e: 85:68:56:65:a2:b8:5c:8f:5e:46:8f:88:1e:31:a2:1c:c0:86: 72:05:e1:89:10:5e:a7:b6:ce:27:0b:93:51:63:50:c7:e3:74: 2c:65:ba:38:04:28:30:47:18:a9:b7:4b:51:c4:74:c8:75:08: 45:44:1d:e1:90:ef:2b:da:e6:65:62:6a:0a:3e:12:38:de:f0: d5:60:cf:22:9f:ea:7d:7f:9d:3d:7b:ca:a3:51:54:7d:0b:ee: bd:0a:ec:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBNmQtpNxl1E1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OWJlMzA2YTUtYzEyNi00YWU5LWE5YTQtNDgxNDY2MTU0ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyskvExOd3uqTsrahLvkyMetKf2c13jcSEjFc 6FSbCUKHG680fdvrEDSrWgmqf4Pgz8PpKmsDeTAgXfZDXqlpvaTwizq/7Gpkf+rQ 8+3quYGmN27r0q+7j0M/y9beVWvzYgHEVtzHLQOARGnevB4mJFcL2rD933Obo202 4Zy1gc/af7bmTNpgTp1DYNQLYMaOSnimX8Y2fj/f8jkEPONVaeDLVEkwgppgvnmi rub+KIy0TjS2dd4Jiu5QgZItt3zubS4OExeZfr4CVRSGll/SDONaKmHciRQN2vrT XihI/I6385BTU/I/CI+nBiJTBeFcEdhKoXuEdB69mIb2PTh2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMB39I0PDtdNwoNRjSdITA2x9/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTk3NDlhZTMtMWZlMS0z MzUyLWEwMzEtMWYxZTEwZTM2ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFySSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfX2WlOG9I/v5cdHfbpIgtSuYcPdo/4cY5ye1ZxIOvqW4Axn+E0pQB1 Gh49WUS+2Ma19gR9UtbmWYlSNVl6hyCKkGK2IuMFXbnwErQIhBI5IMA35WLv7nct DKmecWUCDGYCcqlDGIrQ1eNmIbqyUZ+K+LAukXRs/nnlv3ns3Uwu84WFNgnPdovt aVfaa0YwZjz+JgqQiYKpvxP9R3iAc005DoVoVmWiuFyPXkaPiB4xohzAhnIF4YkQ Xqe2zicLk1FjUMfjdCxlujgEKDBHGKm3S1HEdMh1CEVEHeGQ7yva5mViago+Ejje 8NVgzyKf6n1/nT17yqNRVH0L7r0K7Ec= -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:44 2025 by rpki-client