$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa File: 2f69a741-6e96-3761-aea8-14609458ccb2.roa (raw, json) Hash identifier: UtbZ6ZNRemPMIBR2Mw1WofYE3RXHyY6VTF1OSW9Dhpc= Subject key identifier: 76:E3:95:79:44:4F:6C:96:03:11:66:E4:74:A4:62:DE:47:1E:2C:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19FC75D4BACDC691E9180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.40.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9f:c7:5d:4b:ac:dc:69:1e:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=76528ac5-28ae-4b02-9e2f-166e70881e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b6:35:ff:d5:99:b0:7c:82:20:ff:9b:8f:e6: 71:15:04:23:23:68:84:bb:e5:84:c0:09:d7:0f:31: 90:b0:18:20:77:76:a4:97:95:da:21:5e:e8:eb:d5: 35:66:81:20:b6:d2:26:a0:59:8c:3b:0f:29:2f:0e: 9c:09:26:c1:a3:02:21:e9:18:14:f3:10:d1:e9:4b: 7c:b5:0e:8f:35:62:fb:4a:6f:d3:6e:61:f8:6e:8b: b3:73:c0:2a:64:3e:b8:40:81:82:03:c9:9c:a7:1b: 35:2b:a9:bd:38:cb:19:a6:2b:13:ae:f0:e5:64:07: 8a:52:9e:96:ab:28:7b:60:91:73:78:44:e7:ef:37: f6:af:94:c3:e4:2e:e3:3f:36:4c:d6:2b:07:59:f5: 7a:7e:06:ef:7c:d3:83:f5:7a:c8:02:c9:a4:e1:6f: 23:41:c5:b8:45:02:eb:7c:10:8f:d0:b6:09:65:86: db:5e:9d:3b:ba:64:6b:64:c8:0e:7f:e6:ab:aa:47: 8f:d6:56:d2:80:c4:9f:f5:f3:a7:a6:b3:0b:c3:50: 00:09:92:ec:92:c8:d0:75:f7:da:fa:c4:d8:b4:58: ac:c8:ff:5f:88:99:ae:05:f0:1e:a9:6f:fe:a9:14: c9:35:8a:fd:89:fb:e4:49:c1:94:cb:c0:a4:3a:95: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:95:79:44:4F:6C:96:03:11:66:E4:74:A4:62:DE:47:1E:2C:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f69a741-6e96-3761-aea8-14609458ccb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:06:eb:23:06:84:5b:3d:9b:47:e6:7e:c1:77:19:c3:23:82: df:79:7a:5a:84:a4:bd:8e:83:6c:29:50:d9:b1:d7:cd:40:49: 66:ae:ee:cf:64:7c:3c:a7:d9:9b:bf:c6:4e:7e:49:99:12:3d: 58:73:8c:fd:d5:90:ad:62:cd:75:aa:94:34:50:e7:53:a2:23: 70:f5:8f:6e:6e:4f:d1:c6:d5:aa:64:65:b0:df:59:1f:3a:d9: 15:b6:1a:c2:49:2a:c6:bb:87:4a:b3:a9:b4:a9:c5:01:3a:62: e3:de:10:f2:52:44:e8:06:87:0d:b6:ee:37:aa:30:d5:87:be: 05:94:a3:1d:37:81:d1:92:40:82:dc:32:dc:d1:4b:66:13:05: 4e:e9:ed:7f:f5:63:4d:83:c1:0e:2c:db:3a:a7:f8:82:0e:42: 2d:c2:4a:da:8e:71:3c:54:13:75:d4:7e:1f:c7:b9:7f:c0:46: d5:1e:e5:ad:12:c6:ad:3d:a5:8f:b2:7a:86:84:d4:d5:14:7c: c3:ee:28:54:0e:cd:b8:c4:43:34:61:17:55:88:45:b0:10:4a: 16:e4:ac:a7:e0:f2:16:eb:21:16:2e:b8:5a:0d:c1:b0:87:37: 04:86:f1:64:da:40:bd:e3:08:fd:41:69:36:f0:43:14:5e:22: 98:dc:da:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Z/HXUus3GkekYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NzY1MjhhYzUtMjhhZS00YjAyLTllMmYtMTY2ZTcwODgxZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67Y1/9WZsHyCIP+bj+ZxFQQjI2iEu+WEwAnX DzGQsBggd3akl5XaIV7o69U1ZoEgttImoFmMOw8pLw6cCSbBowIh6RgU8xDR6Ut8 tQ6PNWL7Sm/TbmH4bouzc8AqZD64QIGCA8mcpxs1K6m9OMsZpisTrvDlZAeKUp6W qyh7YJFzeETn7zf2r5TD5C7jPzZM1isHWfV6fgbvfNOD9XrIAsmk4W8jQcW4RQLr fBCP0LYJZYbbXp07umRrZMgOf+arqkeP1lbSgMSf9fOnprMLw1AACZLsksjQdffa +sTYtFisyP9fiJmuBfAeqW/+qRTJNYr9ifvkScGUy8CkOpUw3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbjlXlET2yWAxFm5HSkYt5HHixWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmY2OWE3NDEtNmU5Ni0z NzYxLWFlYTgtMTQ2MDk0NThjY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwG6yMGhFs9m0fmfsF3GcMjgt95elqEpL2Og2wpUNmx181ASWau7s9k fDyn2Zu/xk5+SZkSPVhzjP3VkK1izXWqlDRQ51OiI3D1j25uT9HG1apkZbDfWR86 2RW2GsJJKsa7h0qzqbSpxQE6YuPeEPJSROgGhw227jeqMNWHvgWUox03gdGSQILc MtzRS2YTBU7p7X/1Y02DwQ4s2zqn+IIOQi3CStqOcTxUE3XUfh/HuX/ARtUe5a0S xq09pY+yeoaE1NUUfMPuKFQOzbjEQzRhF1WIRbAQShbkrKfg8hbrIRYuuFoNwbCH NwSG8WTaQL3jCP1BaTbwQxReIpjc2v0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:19 2025 by rpki-client