$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa File: 3652813a-a892-3010-b000-d65c7c03786a.roa (raw, json) Hash identifier: rPLvC2SO4FeZL5IbY3JhT3/Bi9Kli9Y5se57hLGwgtQ= Subject key identifier: D2:FB:C0:47:95:22:21:32:8F:A4:A2:0E:D1:D6:A1:97:F6:28:6B:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A7EA15E9AEA988455220 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.38.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a7:ea:15:e9:ae:a9:88:45:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b000a0ed-e957-4462-b549-4f77949412de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:cb:9a:48:5a:2d:a0:45:33:37:d3:ea:5c: a1:3e:a1:d6:0c:b1:8d:0a:87:cd:c1:6d:fd:0b:17: ff:de:26:83:75:03:4d:41:18:8a:8b:ef:88:77:74: 7b:58:04:f6:6c:ce:84:7c:5e:9f:80:80:08:58:d7: 84:71:67:ee:2b:b0:7b:8c:1a:fd:33:3d:21:8a:75: a7:5c:37:6a:2b:74:50:23:58:6e:35:44:fd:8b:3c: 75:c3:06:68:13:05:8f:38:de:25:c7:72:d1:af:2a: c8:87:46:4e:2b:12:8f:99:8d:54:6e:8d:bf:34:82: b0:89:98:d5:cc:ae:c9:db:50:f3:a9:3c:12:46:3f: 24:11:54:27:d4:b5:a7:e6:47:8b:0e:26:ee:99:ae: 8e:15:87:71:33:ce:66:da:18:df:fe:ed:72:35:14: ea:5e:c7:72:dc:a1:d4:9a:11:5c:1d:07:32:45:9a: c0:bd:88:2c:9f:2c:d4:f8:52:25:b1:77:ef:da:84: b4:09:45:6b:cd:5d:f7:66:09:63:29:94:6d:e9:56: b0:97:c6:6d:27:a5:6d:4e:7a:a3:45:a4:d3:ee:dd: 41:81:91:83:a4:c8:24:ad:af:da:55:a6:a8:4b:4d: 87:09:da:7d:b2:dc:97:7b:62:45:c7:4e:df:27:23: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FB:C0:47:95:22:21:32:8F:A4:A2:0E:D1:D6:A1:97:F6:28:6B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:56:0f:5c:55:a5:db:4a:bc:88:28:d5:47:d4:c7:55:96:2a: e5:15:6a:09:f5:8b:a0:5e:f7:4a:90:98:a8:22:21:68:61:ea: c2:a6:25:e3:3f:b7:65:2a:4e:15:07:76:3e:ef:3e:fd:60:0b: 4a:cf:ff:b5:3b:70:e7:f8:84:ef:93:56:c1:fc:fa:c6:df:0d: 9e:ad:88:ca:ff:63:4b:88:f6:0c:1a:9f:3d:0b:28:c6:c0:2e: 71:a6:08:17:b3:20:03:6e:1e:30:94:23:9f:83:10:fe:f8:29: 48:54:84:73:a5:39:66:d6:2f:c0:a9:27:d2:55:83:e7:30:53: 0e:0e:ed:38:40:8b:af:41:d8:d8:c3:f8:fd:0a:59:7e:9a:9e: ac:23:64:d5:2f:a8:6a:fb:ca:13:00:5f:e1:d5:55:2f:e9:09: 3e:a1:07:89:e9:48:23:44:3e:b5:b5:e8:e8:f9:a1:e4:fb:f9: 77:d2:6e:98:e2:7f:82:76:64:85:8c:fa:3c:b9:9b:05:c1:d2: f1:b1:f8:0c:b4:ae:b6:2c:ed:8e:01:9b:ed:66:89:56:0e:8d: dd:29:f9:18:be:b1:f1:0c:e9:65:85:77:76:c6:b0:12:b3:ef: 7b:f1:fe:5d:57:76:06:6f:07:0b:29:fd:29:3d:18:a6:55:79: ba:dd:b7:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0afqFemuqYhFUiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjAwMGEwZWQtZTk1Ny00NDYyLWI1NDktNGY3Nzk0OTQxMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvbLmkhaLaBFMzfT6lyhPqHWDLGNCofNwW39 Cxf/3iaDdQNNQRiKi++Id3R7WAT2bM6EfF6fgIAIWNeEcWfuK7B7jBr9Mz0hinWn XDdqK3RQI1huNUT9izx1wwZoEwWPON4lx3LRryrIh0ZOKxKPmY1Ubo2/NIKwiZjV zK7J21DzqTwSRj8kEVQn1LWn5keLDibuma6OFYdxM85m2hjf/u1yNRTqXsdy3KHU mhFcHQcyRZrAvYgsnyzU+FIlsXfv2oS0CUVrzV33ZgljKZRt6Vawl8ZtJ6VtTnqj RaTT7t1BgZGDpMgkra/aVaaoS02HCdp9styXe2JFx07fJyNFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL7wEeVIiEyj6SiDtHWoZf2KGsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzY1MjgxM2EtYTg5Mi0z MDEwLWIwMDAtZDY1YzdjMDM3ODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlWD1xVpdtKvIgo1UfUx1WWKuUVagn1i6Be90qQmKgiIWhh6sKmJeM/ t2UqThUHdj7vPv1gC0rP/7U7cOf4hO+TVsH8+sbfDZ6tiMr/Y0uI9gwanz0LKMbA LnGmCBezIANuHjCUI5+DEP74KUhUhHOlOWbWL8CpJ9JVg+cwUw4O7ThAi69B2NjD +P0KWX6anqwjZNUvqGr7yhMAX+HVVS/pCT6hB4npSCNEPrW16Oj5oeT7+XfSbpji f4J2ZIWM+jy5mwXB0vGx+Ay0rrYs7Y4Bm+1miVYOjd0p+Ri+sfEM6WWFd3bGsBKz 73vx/l1XdgZvBwsp/Sk9GKZVebrdt04= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:31 2025 by rpki-client