$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b9528b-6572-3a1e-8337-2fd7c8ad266b.roa File: 28b9528b-6572-3a1e-8337-2fd7c8ad266b.roa (raw, json) Hash identifier: dnDUC2pkMZqzf/EXV+L3ggFtXS86h0hRZKeySlx6s7E= Subject key identifier: 64:05:99:54:91:BA:04:63:45:0A:DD:79:76:E3:17:ED:98:5D:5A:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E416179F69D9AFA86876C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b9528b-6572-3a1e-8337-2fd7c8ad266b.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 35994 IP address blocks: 23.34.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:61:79:f6:9d:9a:fa:86:87:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=4fa2884c-6806-42e4-b7a4-74c7443bc258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:91:99:dc:df:77:1f:eb:aa:53:48:77:39: 08:6b:96:67:09:02:b0:05:8b:08:fa:e8:17:87:10: 30:f9:a3:70:d7:b0:6f:3a:0b:cd:d1:cd:14:7b:5d: ad:34:33:1b:48:8e:5c:91:85:f0:7e:ec:7c:62:23: 8e:c2:33:39:31:a0:d4:d2:29:4c:64:46:6b:e6:78: 76:ef:dc:ed:7f:c7:e2:38:22:d0:06:80:af:3c:2a: 54:c4:50:8c:ed:a9:93:e2:b5:37:f8:65:e1:c0:b9: 14:4c:68:f5:41:dc:5e:26:f5:1a:b0:78:25:d4:05: 3e:e4:66:f5:67:25:a6:51:4c:92:09:83:67:99:c5: b7:77:5d:82:bf:99:b4:af:f7:f2:b1:5f:c0:cd:c0: c2:e3:07:0b:a5:c0:7a:5f:4c:07:69:70:14:3c:a8: ac:88:8d:0f:af:f7:76:eb:af:cf:0f:fa:61:94:b0: e8:54:f2:5a:cf:74:e1:45:43:59:b0:f8:b4:6e:94: 33:8f:0a:f8:5a:8b:d5:90:10:fe:db:32:4a:52:29: c9:07:ac:2e:08:24:0e:1c:61:cd:4a:63:7c:32:39: 38:bf:07:f7:54:28:8c:c7:ee:39:27:c2:e4:66:8b: 58:3d:be:b6:e1:5f:37:5b:34:37:a1:76:1a:34:e6: a5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:05:99:54:91:BA:04:63:45:0A:DD:79:76:E3:17:ED:98:5D:5A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28b9528b-6572-3a1e-8337-2fd7c8ad266b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:04:1e:da:af:e1:54:34:fc:33:48:88:d4:38:cb:43:0a:56: 1f:c3:b0:b9:63:28:78:f2:4c:d0:a7:65:85:ec:c9:0a:56:e6: 03:cf:4d:d0:6f:2e:4f:0f:d2:3f:e8:25:06:9c:1c:b7:e8:3a: 2b:55:7c:3e:17:c1:e6:21:c1:08:95:9e:68:79:6d:76:2c:ef: 41:62:13:12:4e:b8:a4:10:d7:c4:fa:11:17:66:af:8c:93:09: 0a:fd:27:8a:cf:fe:72:18:b9:8c:5b:a5:4b:8c:0f:4a:19:41: 90:0f:77:ea:ba:f0:b1:79:76:11:1c:36:bd:88:4c:a1:50:1d: 08:ab:22:d6:04:1a:6d:20:97:2b:8d:aa:b6:80:06:3b:12:c5: 2f:8b:0c:36:fc:f2:f3:ad:ac:dd:8e:2d:92:e9:f5:29:32:3c: ee:94:89:a9:10:a3:3d:e7:61:dd:63:7d:9b:73:19:78:d2:0c: 07:ad:04:9c:47:db:89:14:89:4d:ec:64:6a:5c:27:54:fe:96: 98:30:fc:a8:74:c1:5d:f2:9d:07:55:7a:8f:e7:9e:f1:3c:2f: 99:65:66:c4:c1:bb:9b:21:bf:a1:91:10:15:dd:db:89:57:da: ca:00:29:09:93:be:61:5a:d2:d0:a1:13:c9:75:72:c1:6e:da: 7d:be:1c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWF59p2a+oaHbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGZhMjg4NGMtNjgwNi00MmU0LWI3YTQtNzRjNzQ0M2JjMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplSRmdzfdx/rqlNIdzkIa5ZnCQKwBYsI+ugX hxAw+aNw17BvOgvN0c0Ue12tNDMbSI5ckYXwfux8YiOOwjM5MaDU0ilMZEZr5nh2 79ztf8fiOCLQBoCvPCpUxFCM7amT4rU3+GXhwLkUTGj1QdxeJvUasHgl1AU+5Gb1 ZyWmUUySCYNnmcW3d12Cv5m0r/fysV/AzcDC4wcLpcB6X0wHaXAUPKisiI0Pr/d2 66/PD/phlLDoVPJaz3ThRUNZsPi0bpQzjwr4WovVkBD+2zJKUinJB6wuCCQOHGHN SmN8Mjk4vwf3VCiMx+45J8LkZotYPb624V83WzQ3oXYaNOalAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQFmVSRugRjRQrdeXbjF+2YXVrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhiOTUyOGItNjU3Mi0z YTFlLTgzMzctMmZkN2M4YWQyNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwEHtqv4VQ0/DNIiNQ4y0MKVh/DsLljKHjyTNCnZYXsyQpW5gPPTdBv Lk8P0j/oJQacHLfoOitVfD4XweYhwQiVnmh5bXYs70FiExJOuKQQ18T6ERdmr4yT CQr9J4rP/nIYuYxbpUuMD0oZQZAPd+q68LF5dhEcNr2ITKFQHQirItYEGm0glyuN qraABjsSxS+LDDb88vOtrN2OLZLp9SkyPO6UiakQoz3nYd1jfZtzGXjSDAetBJxH 24kUiU3sZGpcJ1T+lpgw/Kh0wV3ynQdVeo/nnvE8L5llZsTBu5shv6GREBXd24lX 2soAKQmTvmFa0tChE8l1csFu2n2+HFQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:35 2025 by rpki-client