$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/312bf3d8-fd99-3cba-82dc-dfbc379ff4c2.roa File: 312bf3d8-fd99-3cba-82dc-dfbc379ff4c2.roa (raw, json) Hash identifier: jqDUfZTc+nclN4mgW+7Xh4MJT+a1KUxt+HXMTLCSnHw= Subject key identifier: 6B:BC:BB:BE:D3:A5:C2:06:FE:29:96:50:6E:99:12:17:0F:8A:EA:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2331905A48FF3CDD4F587F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/312bf3d8-fd99-3cba-82dc-dfbc379ff4c2.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.51.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:90:5a:48:ff:3c:dd:4f:58:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=f704e2ad-a501-419d-876f-f588d04ca29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:9a:b8:30:fe:5d:e1:a4:ed:cc:2f:98:d2: 53:a0:1e:05:37:9d:ee:0c:05:3b:dd:1f:c3:53:5a: 44:d6:85:cb:71:3d:28:12:3f:c3:5d:2b:81:6d:da: 7f:34:0c:60:a1:74:49:7e:e7:f9:93:ab:10:18:7a: e2:17:74:04:f7:45:6d:06:f9:10:22:b8:b5:d1:92: 02:a2:5c:87:b9:ee:f2:b9:e7:1b:74:7d:cc:c0:8b: 98:26:25:1f:27:12:aa:34:90:95:4e:89:1c:06:cb: b0:cc:00:94:f1:26:c5:ba:51:ff:1b:08:a7:88:33: 89:b1:f0:73:f6:9c:82:8c:b0:2b:4b:11:b2:ed:f7: 42:e9:a7:e6:c7:ea:c3:e1:69:52:41:52:d1:a6:4f: a7:23:50:c3:a8:2c:44:5a:3f:1c:4b:d6:49:e9:a9: 18:06:2d:a9:e9:db:fb:08:9b:fa:e8:75:3e:0c:97: 53:7a:1c:6f:cf:15:f6:fd:e7:20:fa:4b:23:29:fc: 46:45:8b:72:0d:44:09:c7:ff:ed:bc:a9:36:14:52: c2:ce:c1:10:3c:6f:ce:74:25:ae:16:75:d2:51:23: 32:d5:14:22:22:f3:63:54:2c:17:91:a3:8c:45:69: cd:eb:a4:bf:37:72:9e:1a:18:43:01:99:21:cd:7f: bf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BC:BB:BE:D3:A5:C2:06:FE:29:96:50:6E:99:12:17:0F:8A:EA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/312bf3d8-fd99-3cba-82dc-dfbc379ff4c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.51.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f4:b0:ae:cd:d2:8f:d0:e6:6b:36:8f:be:7c:f0:90:9c:08: 2e:00:30:d8:2c:32:ed:1b:a1:53:84:02:da:b4:9a:cf:4b:44: 10:e8:3d:79:53:9a:73:dd:ab:72:7b:9d:94:63:3a:88:7f:27: 42:45:71:6c:af:77:d0:36:0a:eb:0a:4d:ac:b9:e6:88:a3:83: 11:4a:ca:be:ca:a1:9a:cc:ea:fe:bc:74:f9:77:70:9a:24:9c: e0:ad:dc:fb:73:31:7d:9c:65:e9:53:8d:b4:b9:b4:dd:f7:29: fb:bf:63:5e:91:57:6f:5e:a8:1a:a8:75:6a:b8:bb:6c:50:5b: ba:2d:32:02:c7:7f:97:cb:da:2d:71:d9:dc:96:45:aa:16:fa: 10:72:8d:a6:3f:1a:9c:0d:0b:0d:8c:6c:f7:86:ca:51:0a:65: cf:4b:d2:8e:25:b3:0b:ee:01:49:de:5f:87:0f:e5:fa:3b:eb: cf:d8:18:a8:d1:bb:16:ea:3d:ae:75:13:46:d7:f9:5e:08:cf: a6:44:87:b6:76:64:c4:4d:5f:98:f5:65:68:ec:24:bc:a5:98: 58:9c:e6:47:e3:48:fc:97:75:4f:6a:9e:97:02:f9:e5:4c:0b: ec:e0:0c:35:d7:59:1e:c0:28:8d:4e:e9:b6:8a:6b:6f:01:96: c8:cf:e4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZBaSP883U9Yf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZjcwNGUyYWQtYTUwMS00MTlkLTg3NmYtZjU4OGQwNGNhMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIOauDD+XeGk7cwvmNJToB4FN53uDAU73R/D U1pE1oXLcT0oEj/DXSuBbdp/NAxgoXRJfuf5k6sQGHriF3QE90VtBvkQIri10ZIC olyHue7yuecbdH3MwIuYJiUfJxKqNJCVTokcBsuwzACU8SbFulH/GwiniDOJsfBz 9pyCjLArSxGy7fdC6afmx+rD4WlSQVLRpk+nI1DDqCxEWj8cS9ZJ6akYBi2p6dv7 CJv66HU+DJdTehxvzxX2/ecg+ksjKfxGRYtyDUQJx//tvKk2FFLCzsEQPG/OdCWu FnXSUSMy1RQiIvNjVCwXkaOMRWnN66S/N3KeGhhDAZkhzX+/awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu8u77TpcIG/imWUG6ZEhcPiuprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzEyYmYzZDgtZmQ5OS0z Y2JhLTgyZGMtZGZiYzM3OWZmNGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf0sK7N0o/Q5ms2j7588JCcCC4AMNgsMu0boVOEAtq0ms9LRBDoPXlT mnPdq3J7nZRjOoh/J0JFcWyvd9A2CusKTay55oijgxFKyr7KoZrM6v68dPl3cJok nOCt3PtzMX2cZelTjbS5tN33Kfu/Y16RV29eqBqodWq4u2xQW7otMgLHf5fL2i1x 2dyWRaoW+hByjaY/GpwNCw2MbPeGylEKZc9L0o4lswvuAUneX4cP5fo768/YGKjR uxbqPa51E0bX+V4Iz6ZEh7Z2ZMRNX5j1ZWjsJLylmFic5kfjSPyXdU9qnpcC+eVM C+zgDDXXWR7AKI1O6baKa28BlsjP5Jg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:58:09 2025 by rpki-client