$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/242f023e-e0af-3111-8437-f5ba8e016e0b.roa File: 242f023e-e0af-3111-8437-f5ba8e016e0b.roa (raw, json) Hash identifier: b39/G11u2o4x867hYeklai9ynqZr2fxxNs6s5A6VIFA= Subject key identifier: B4:10:B3:41:63:F0:AE:B1:BE:24:22:4C:45:01:04:5B:60:2D:DC:3B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A91AC87AB77F6B66F200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/242f023e-e0af-3111-8437-f5ba8e016e0b.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.39.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a9:1a:c8:7a:b7:7f:6b:66:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=89b58ddc-4965-435c-afc4-54df62195742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:12:ca:6f:42:b2:ad:ff:db:78:a1:01:98:79: 0f:7c:45:5b:e3:1c:90:1a:9f:1c:5d:f0:12:2f:57: b0:c4:87:50:15:2d:43:9b:db:c0:27:60:9c:8d:59: 1e:f0:2d:f6:95:fa:80:ca:50:f6:3f:e1:c3:5c:8b: 92:c8:59:2c:b3:47:b5:c4:ba:5f:7f:c0:03:d2:0b: 8b:bb:82:f3:91:90:ca:e6:5c:30:65:2d:dc:07:57: 37:84:4f:f8:95:46:03:01:3d:0a:16:71:e0:68:30: 9f:41:01:7e:9a:26:d8:64:d1:d2:50:0e:01:6f:18: 25:1b:41:70:6a:8f:94:76:11:db:28:f6:ce:6e:74: 75:82:42:31:86:94:4d:21:24:67:13:86:49:8c:df: 97:fd:8e:db:c6:11:a6:30:11:9b:71:63:72:25:ee: 58:c2:e2:27:bd:97:9d:47:0a:70:0e:3b:42:04:78: 17:6c:f8:fc:69:03:d8:08:0f:f6:06:64:82:68:f3: 13:eb:32:6a:02:f5:93:14:9d:c8:58:d4:72:68:03: 02:52:54:7f:fe:27:f3:11:8d:ab:37:40:4e:3e:5b: 64:31:35:29:57:89:b0:fa:c9:23:5a:f2:d2:ef:63: 84:da:09:2e:25:ae:38:6a:ad:93:2a:1e:7f:bf:d3: c3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:10:B3:41:63:F0:AE:B1:BE:24:22:4C:45:01:04:5B:60:2D:DC:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/242f023e-e0af-3111-8437-f5ba8e016e0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0a:fe:93:da:91:6d:17:d8:fa:1b:ca:00:47:82:79:58:e4: 06:d2:8a:44:ab:ec:5b:4c:ee:a5:01:78:09:3f:a0:ce:63:a6: 11:0f:d3:ef:83:70:2c:c4:e1:26:4e:42:8f:5a:5d:2d:56:c1: c9:30:61:56:9a:3b:22:35:43:8c:59:22:67:23:7b:db:3d:39: 92:0d:5b:bd:12:64:9b:5b:32:a6:76:c8:0b:36:2c:82:cc:76: d3:99:66:cc:01:8d:ba:b7:d7:cf:3f:f5:8c:6c:8e:6d:22:db: 58:88:88:31:79:2d:0d:4c:63:aa:1f:8d:c6:eb:61:f3:d7:fd: c8:66:51:6f:0e:cd:13:b0:a5:d3:8e:e7:2f:5f:87:33:b7:06: ef:29:e2:a6:62:c2:98:fc:8f:b5:65:2c:5e:20:70:5b:cd:be: 74:88:46:13:f0:03:8e:f4:30:b9:ca:ad:93:a5:8f:d2:4f:74: 14:31:b7:7f:08:d3:70:d2:c2:78:b6:ef:0a:02:39:67:3b:ae: 3d:2d:d7:fc:9a:b7:e1:1c:35:59:19:28:5a:a2:9c:be:53:d3: d3:b7:7f:29:93:91:8a:fc:28:b0:45:c5:f6:8b:6a:08:41:8c: 72:84:3b:f3:07:5f:69:ae:2c:61:59:af:72:6d:43:2f:62:6c: aa:82:e9:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0akayHq3f2tm8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODliNThkZGMtNDk2NS00MzVjLWFmYzQtNTRkZjYyMTk1NzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hLKb0Kyrf/beKEBmHkPfEVb4xyQGp8cXfAS L1ewxIdQFS1Dm9vAJ2CcjVke8C32lfqAylD2P+HDXIuSyFkss0e1xLpff8AD0guL u4LzkZDK5lwwZS3cB1c3hE/4lUYDAT0KFnHgaDCfQQF+mibYZNHSUA4BbxglG0Fw ao+UdhHbKPbObnR1gkIxhpRNISRnE4ZJjN+X/Y7bxhGmMBGbcWNyJe5YwuInvZed RwpwDjtCBHgXbPj8aQPYCA/2BmSCaPMT6zJqAvWTFJ3IWNRyaAMCUlR//ifzEY2r N0BOPltkMTUpV4mw+skjWvLS72OE2gkuJa44aq2TKh5/v9PDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQQs0Fj8K6xviQiTEUBBFtgLdw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjQyZjAyM2UtZTBhZi0z MTExLTg0MzctZjViYThlMDE2ZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFycGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwK/pPakW0X2PobygBHgnlY5AbSikSr7FtM7qUBeAk/oM5jphEP0++D cCzE4SZOQo9aXS1WwckwYVaaOyI1Q4xZImcje9s9OZINW70SZJtbMqZ2yAs2LILM dtOZZswBjbq3188/9Yxsjm0i21iIiDF5LQ1MY6ofjcbrYfPX/chmUW8OzROwpdOO 5y9fhzO3Bu8p4qZiwpj8j7VlLF4gcFvNvnSIRhPwA470MLnKrZOlj9JPdBQxt38I 03DSwni27woCOWc7rj0t1/yat+EcNVkZKFqinL5T09O3fymTkYr8KLBFxfaLaghB jHKEO/MHX2muLGFZr3JtQy9ibKqC6Ss= -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:27 2025 by rpki-client