$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/355f48df-ddd4-36a9-a0ee-4bbe5f760cd4.roa File: 355f48df-ddd4-36a9-a0ee-4bbe5f760cd4.roa (raw, json) Hash identifier: qfDVounCEUgLhQekksTOF+87MSsVOBXEAnQOTH9VKLU= Subject key identifier: 11:A6:A5:FD:4A:BD:75:F1:43:66:B6:F6:FA:47:1D:5E:EF:9D:60:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B249705152FD1279E859D6000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/355f48df-ddd4-36a9-a0ee-4bbe5f760cd4.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.53.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:97:05:15:2f:d1:27:9e:85:9d:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=dc4efa2e-f5b3-4d4c-8547-e8c1b64eef3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:38:d8:8a:a2:5a:ac:e1:63:1f:f4:27:80: f4:54:30:ec:f8:c9:09:08:a4:fc:94:0e:97:7c:c0: 39:cc:12:e5:8b:62:3d:84:0e:ce:88:f1:ee:98:d7: 99:9c:1e:1f:f9:ef:89:e5:51:47:ec:ab:54:af:51: 6b:77:05:25:40:18:0d:99:2d:b7:2e:3a:1f:c3:57: db:ba:c4:d0:42:fd:ec:f7:d6:46:66:00:39:30:b4: a0:84:75:d9:05:db:b0:e3:cc:32:7e:b8:ad:e4:ac: 90:0a:de:15:20:2e:d4:ce:c7:63:58:11:b5:c1:54: b6:65:99:ba:10:d0:28:de:6c:6a:22:59:69:4b:04: 2a:03:17:34:3b:38:80:29:15:1b:c3:21:e7:ae:8b: f6:6d:91:e1:51:15:11:84:90:2a:5f:23:19:4b:dd: d1:6b:bc:08:9b:2c:1f:64:ad:e4:a6:67:73:f5:04: 64:42:07:5f:9f:c1:57:a6:63:30:68:5c:73:de:44: e1:ab:41:b3:76:ba:86:e7:9c:86:f0:a2:d0:cf:2a: f0:3e:1e:4f:5f:e1:c2:de:64:c7:ee:71:7d:17:e1: 63:a6:05:cd:f8:65:7e:2b:1b:ea:6b:27:83:da:08: 5b:d5:b5:45:49:99:e6:7e:fe:a1:0d:b6:9d:f3:8d: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A6:A5:FD:4A:BD:75:F1:43:66:B6:F6:FA:47:1D:5E:EF:9D:60:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/355f48df-ddd4-36a9-a0ee-4bbe5f760cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:42:76:4f:44:b5:b5:2a:1d:0a:22:63:e6:b9:96:cc:3a:6c: fa:f6:6e:a0:6c:4d:81:a1:92:46:cf:b4:59:2d:32:85:d2:3f: 1e:c8:d1:95:fe:94:7b:66:f3:fb:9e:db:44:71:96:2d:ee:2b: 22:96:a8:81:61:0d:2d:19:f5:89:4d:53:10:9e:5d:e2:8c:e8: 65:03:bf:6a:c7:74:a6:34:5b:a6:2d:ee:b5:68:19:26:13:92: cc:1c:40:fe:ba:46:62:a7:d3:44:57:6d:f8:ea:12:a5:3b:23: c3:8d:20:e1:9a:ae:5b:1f:ba:6a:a9:3d:67:1d:d9:77:21:35: ca:c1:21:64:47:52:15:92:1e:ec:01:60:75:d0:21:d3:23:ba: 65:d3:f4:dd:8d:af:cf:63:fd:eb:8c:bc:4e:18:7c:3d:e1:ba: 26:13:fd:75:e8:0b:0a:31:5d:3c:8d:a2:4e:2f:ef:fc:4c:16: e6:14:10:eb:5c:82:31:e8:f0:0f:7e:46:a7:a8:22:cf:f9:3a: e5:ab:c7:ba:15:5c:30:cb:3c:b9:23:e1:06:97:36:30:ed:57: 6a:cf:08:71:4f:54:86:fe:f3:5b:e0:5e:4b:2f:f3:69:fd:9a: e4:0e:d5:1b:72:ba:47:51:1a:0b:44:ef:0b:e7:93:cb:5a:a3: fb:70:9d:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklwUVL9EnnoWdYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZGM0ZWZhMmUtZjViMy00ZDRjLTg1NDctZThjMWI2NGVlZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDg42IqiWqzhYx/0J4D0VDDs+MkJCKT8lA6X fMA5zBLli2I9hA7OiPHumNeZnB4f+e+J5VFH7KtUr1FrdwUlQBgNmS23Ljofw1fb usTQQv3s99ZGZgA5MLSghHXZBduw48wyfrit5KyQCt4VIC7UzsdjWBG1wVS2ZZm6 ENAo3mxqIllpSwQqAxc0OziAKRUbwyHnrov2bZHhURURhJAqXyMZS93Ra7wImywf ZK3kpmdz9QRkQgdfn8FXpmMwaFxz3kThq0GzdrqG55yG8KLQzyrwPh5PX+HC3mTH 7nF9F+FjpgXN+GV+KxvqayeD2ghb1bVFSZnmfv6hDbad840SAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGmpf1KvXXxQ2a29vpHHV7vnWDmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzU1ZjQ4ZGYtZGRkNC0z NmE5LWEwZWUtNGJiZTVmNzYwY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzUkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZCdk9EtbUqHQoiY+a5lsw6bPr2bqBsTYGhkkbPtFktMoXSPx7I0ZX+ lHtm8/ue20Rxli3uKyKWqIFhDS0Z9YlNUxCeXeKM6GUDv2rHdKY0W6Yt7rVoGSYT kswcQP66RmKn00RXbfjqEqU7I8ONIOGarlsfumqpPWcd2XchNcrBIWRHUhWSHuwB YHXQIdMjumXT9N2Nr89j/euMvE4YfD3huiYT/XXoCwoxXTyNok4v7/xMFuYUEOtc gjHo8A9+RqeoIs/5OuWrx7oVXDDLPLkj4QaXNjDtV2rPCHFPVIb+81vgXksv82n9 muQO1RtyukdRGgtE7wvnk8tao/twnVM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:28:55 2025 by rpki-client