$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b276a19-795d-3865-9427-9fd17e39723d.roa File: 1b276a19-795d-3865-9427-9fd17e39723d.roa (raw, json) Hash identifier: KXlZ2U0D6quS1qcQ7VeLMigXFG4vqkiFlU4vF1xmUew= Subject key identifier: 41:14:51:44:DE:B0:76:2F:1F:4C:EC:E6:A9:33:30:01:53:2F:52:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC269F38026CEC5FE73580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b276a19-795d-3865-9427-9fd17e39723d.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.32.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:26:9f:38:02:6c:ec:5f:e7:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=3e316a7a-c9fc-40af-9440-6fefe9bf9fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:f7:3a:48:6c:6f:6c:e7:1b:b0:23:a7:09: 6f:8d:2a:2c:ce:3e:74:af:f1:7f:91:ce:47:93:7d: 1c:03:e4:01:f0:8f:59:c3:3b:61:ba:23:9f:73:e9: 35:de:a7:59:02:cf:b1:50:78:74:8a:fd:ff:80:ba: d7:81:e6:7c:a1:28:2a:7b:ff:26:6f:31:1d:c4:12: d9:7d:0b:00:6a:d1:04:c8:05:fe:a0:5a:22:17:07: 0a:4b:22:df:45:11:2f:22:15:02:54:90:6e:dd:cb: 5b:c0:05:3f:2a:f9:d8:c7:e0:78:96:ba:d8:1b:08: 7c:98:2c:a6:0c:08:26:c8:d9:cd:d9:aa:17:a1:d6: 19:c8:27:6f:e7:94:0f:66:b2:1c:58:5d:2c:65:ad: df:f8:bc:17:cd:2c:72:53:de:d2:27:7e:06:0e:0a: 1b:a2:59:7c:8a:b0:ba:ed:c5:8c:22:63:b0:0b:67: bd:83:a2:a4:e2:7d:6f:df:c8:e9:c9:3f:c5:77:82: 81:f1:4e:0a:c0:bc:bc:06:6f:24:88:9d:ae:e0:64: 76:2f:2b:27:06:48:cf:22:9c:56:48:18:b1:d9:fe: bd:20:e4:72:18:f1:cb:c7:f2:85:2b:c1:81:d6:6c: c3:7c:91:5b:8a:38:21:f3:35:7c:85:01:be:78:79: 80:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:14:51:44:DE:B0:76:2F:1F:4C:EC:E6:A9:33:30:01:53:2F:52:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b276a19-795d-3865-9427-9fd17e39723d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e4:2f:0a:61:38:33:22:fc:09:3c:8e:e8:07:a3:86:63:4e: 81:b4:8d:9a:36:a6:30:a9:b9:12:c7:50:ae:7b:a0:2f:90:b7: b8:d2:7c:55:b4:74:aa:03:02:e4:67:d7:88:56:1c:7e:67:fc: 1d:0f:80:dd:13:3c:9b:34:12:dc:2a:53:42:b0:5d:51:4d:58: 60:d9:0a:6a:7c:08:b7:e3:3d:d9:c8:8f:d2:66:dd:7f:aa:ac: 31:0a:bf:6c:58:9c:26:be:b3:f6:3a:b7:3f:79:fb:32:73:96: 5c:f5:9b:53:bf:62:20:db:50:00:99:cc:50:40:09:a4:ea:f7: b0:ba:82:09:77:df:2d:f9:8b:73:fa:d8:16:e7:50:5d:5f:98: da:f2:9c:3d:e8:0c:14:a9:7a:5b:80:68:68:d9:e5:6e:82:bd: 35:75:bc:f8:19:f2:48:34:46:da:e3:21:cd:24:49:90:1d:48: a7:15:b7:5b:7c:0b:4d:46:79:6a:39:ce:d4:4d:38:0b:a0:73: d1:2f:4a:61:b6:fe:87:6f:91:04:be:bd:b8:8f:1d:05:f0:72: a6:68:7e:a0:68:2d:a5:94:0f:4c:62:2f:2f:4e:5d:8a:20:d4: aa:1d:f6:6b:b1:ab:f2:a1:fc:51:03:32:3b:4f:10:5d:01:b3: fc:5e:e3:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CafOAJs7F/nNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk M2UzMTZhN2EtYzlmYy00MGFmLTk0NDAtNmZlZmU5YmY5ZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknf3Okhsb2znG7AjpwlvjSoszj50r/F/kc5H k30cA+QB8I9ZwzthuiOfc+k13qdZAs+xUHh0iv3/gLrXgeZ8oSgqe/8mbzEdxBLZ fQsAatEEyAX+oFoiFwcKSyLfRREvIhUCVJBu3ctbwAU/KvnYx+B4lrrYGwh8mCym DAgmyNnN2aoXodYZyCdv55QPZrIcWF0sZa3f+LwXzSxyU97SJ34GDgoboll8irC6 7cWMImOwC2e9g6Kk4n1v38jpyT/Fd4KB8U4KwLy8Bm8kiJ2u4GR2LysnBkjPIpxW SBix2f69IORyGPHLx/KFK8GB1mzDfJFbijgh8zV8hQG+eHmAKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEUUUTesHYvH0zs5qkzMAFTL1LOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWIyNzZhMTktNzk1ZC0z ODY1LTk0MjctOWZkMTdlMzk3MjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyCUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXkLwphODMi/Ak8jugHo4ZjToG0jZo2pjCpuRLHUK57oC+Qt7jSfFW0 dKoDAuRn14hWHH5n/B0PgN0TPJs0EtwqU0KwXVFNWGDZCmp8CLfjPdnIj9Jm3X+q rDEKv2xYnCa+s/Y6tz95+zJzllz1m1O/YiDbUACZzFBACaTq97C6ggl33y35i3P6 2BbnUF1fmNrynD3oDBSpeluAaGjZ5W6CvTV1vPgZ8kg0RtrjIc0kSZAdSKcVt1t8 C01GeWo5ztRNOAugc9EvSmG2/odvkQS+vbiPHQXwcqZofqBoLaWUD0xiLy9OXYog 1Kod9muxq/Kh/FEDMjtPEF0Bs/xe480= -----END CERTIFICATE-----Generated at Mon Oct 20 10:28:20 2025 by rpki-client