$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206843a2-afca-3d97-9ef1-c438b797f1b5.roa File: 206843a2-afca-3d97-9ef1-c438b797f1b5.roa (raw, json) Hash identifier: J8h0/lrjcksGePZqd4iWM0Ea+RRjnq7iM+WC6gH+MOY= Subject key identifier: A2:6A:F0:EB:D2:02:5C:21:A8:A3:AF:75:A0:A6:AE:D7:6C:2C:F3:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C36DFF9D7968652F9061F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206843a2-afca-3d97-9ef1-c438b797f1b5.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.43.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:df:f9:d7:96:86:52:f9:06:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=58beacc7-0636-468e-8555-7a8d9b6d11a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:61:b8:a0:40:d0:1b:6d:1d:42:ee:66:36: 95:04:e8:0f:e7:74:1e:27:80:da:3d:48:f6:ad:d8: ff:d4:67:84:bb:c3:f2:6f:8d:57:ef:20:41:aa:b6: 1e:08:aa:56:5b:0b:af:0c:3d:c8:02:65:7f:ba:ce: ac:2f:2d:11:c5:c9:42:99:c4:b7:f3:8d:af:f4:75: 88:8c:1e:bc:8e:e2:f1:70:b5:df:0f:5a:f4:9b:48: b8:e5:d9:f1:3f:fd:ef:26:ee:5f:d7:07:65:37:c7: 00:91:8a:d5:68:b3:c0:b7:b8:bb:71:fc:30:5c:eb: c1:be:d2:69:05:c7:79:ef:a6:a2:41:17:96:be:c1: d4:32:09:18:59:a6:4a:a1:70:44:ce:32:66:5d:f4: 39:93:33:f5:1e:08:1e:67:47:3b:56:3e:a4:51:3c: e9:90:c8:8c:ab:3c:07:f1:93:22:eb:a9:8b:37:4c: b7:08:39:ab:06:18:54:50:ae:ee:29:a3:88:93:f9: a2:5b:8e:37:27:d4:b5:df:09:8f:8e:fd:a3:ba:be: bb:7c:50:5b:2a:d1:f0:bb:f9:06:e8:e2:77:e0:58: cd:9c:6b:dd:7d:74:db:86:28:a4:3a:f3:c9:4c:5d: 48:8b:e0:0b:48:18:ab:91:3a:db:e4:ca:67:40:53: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6A:F0:EB:D2:02:5C:21:A8:A3:AF:75:A0:A6:AE:D7:6C:2C:F3:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/206843a2-afca-3d97-9ef1-c438b797f1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7c:ec:56:c0:c8:8c:cb:fa:93:c3:d4:19:c8:e1:0c:c3:b1: 38:6b:3f:c8:bc:d0:86:4c:aa:68:0b:4c:22:55:05:1b:e0:f1: cd:6d:c6:9a:28:ed:ad:57:e5:09:ae:12:07:f3:dd:38:31:0f: 04:34:de:c9:96:65:4c:32:10:0e:9d:55:20:8a:bb:ae:f2:b8: 62:66:8c:68:5c:93:ac:bb:8e:8e:a9:ed:b0:4a:2b:7e:72:4b: 4e:3d:16:50:af:e2:1a:13:d0:45:03:03:72:b4:11:01:f2:4c: a5:2e:09:ad:7d:1c:37:99:35:3d:ea:17:e3:b7:a1:3e:b5:c7: cb:4a:22:06:2a:63:28:9f:f0:3f:94:c4:6f:ba:34:38:08:46: 99:36:c9:73:7d:cb:3a:23:63:1c:cb:a4:d9:f4:50:ef:e6:79: ae:95:1b:e3:f4:a6:e3:3f:f9:f2:33:ff:41:df:d6:86:a6:fd: 19:03:16:ae:2a:da:27:a4:bc:44:b1:00:f0:20:e1:f9:6f:ec: 4f:0c:2a:4b:d4:48:a9:1b:11:43:a4:85:30:ac:f2:f8:25:77: 98:e6:fc:6f:3a:23:ca:de:df:96:45:fa:5b:52:9e:6b:1c:cc: 1a:2b:f3:0f:9f:25:03:f1:ae:f0:cf:6d:44:67:df:d1:d6:75: de:c7:35:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNt/515aGUvkGHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NThiZWFjYzctMDYzNi00NjhlLTg1NTUtN2E4ZDliNmQxMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQBhuKBA0BttHULuZjaVBOgP53QeJ4DaPUj2 rdj/1GeEu8Pyb41X7yBBqrYeCKpWWwuvDD3IAmV/us6sLy0RxclCmcS3842v9HWI jB68juLxcLXfD1r0m0i45dnxP/3vJu5f1wdlN8cAkYrVaLPAt7i7cfwwXOvBvtJp Bcd576aiQReWvsHUMgkYWaZKoXBEzjJmXfQ5kzP1HggeZ0c7Vj6kUTzpkMiMqzwH 8ZMi66mLN0y3CDmrBhhUUK7uKaOIk/miW443J9S13wmPjv2jur67fFBbKtHwu/kG 6OJ34FjNnGvdfXTbhiikOvPJTF1Ii+ALSBirkTrb5MpnQFNrLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJq8OvSAlwhqKOvdaCmrtdsLPNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA2ODQzYTItYWZjYS0z ZDk3LTllZjEtYzQzOGI3OTdmMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFysoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN87FbAyIzL+pPD1BnI4QzDsThrP8i80IZMqmgLTCJVBRvg8c1txpoo 7a1X5QmuEgfz3TgxDwQ03smWZUwyEA6dVSCKu67yuGJmjGhck6y7jo6p7bBKK35y S049FlCv4hoT0EUDA3K0EQHyTKUuCa19HDeZNT3qF+O3oT61x8tKIgYqYyif8D+U xG+6NDgIRpk2yXN9yzojYxzLpNn0UO/mea6VG+P0puM/+fIz/0Hf1oam/RkDFq4q 2iekvESxAPAg4flv7E8MKkvUSKkbEUOkhTCs8vgld5jm/G86I8re35ZF+ltSnmsc zBor8w+fJQPxrvDPbURn39HWdd7HNek= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:13 2025 by rpki-client