$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371546e6-624b-3149-b4f9-c33c907a1a43.roa File: 371546e6-624b-3149-b4f9-c33c907a1a43.roa (raw, json) Hash identifier: cUn7SxWNHxwc5S2iNrGnvdGnPjhgGdWszceeix2bAxQ= Subject key identifier: DB:ED:D3:EC:94:E9:37:26:5F:A1:BE:D7:08:F6:D4:46:6C:BF:E9:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6F4E8CDE8E8D76253B180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371546e6-624b-3149-b4f9-c33c907a1a43.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.56.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:f4:e8:cd:e8:e8:d7:62:53:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=9a285512-1561-46f2-baa0-24f4815648e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:5f:dd:fb:3a:1c:a4:d1:c0:67:98:f5:28: c0:24:19:c1:8d:88:d2:90:38:a3:69:ae:63:56:23: 68:da:2d:12:b5:a7:65:bc:62:91:b1:0e:1b:33:b1: 7a:b8:bb:76:43:a8:48:ef:f0:49:f1:45:27:48:6f: 7e:c3:55:4a:7a:e8:85:60:2a:aa:24:c9:ba:ea:46: a1:2d:b5:0c:3f:98:35:f5:4a:20:3c:2d:ba:58:68: a1:70:0d:99:c1:c7:9f:35:00:0f:d2:13:b3:1d:47: 3f:4e:47:0c:fc:4f:cc:80:2b:d4:1b:cd:3f:05:cc: 23:04:8f:3b:cf:c1:c3:33:2f:1c:a8:f0:e9:f4:c0: ed:97:77:f0:22:80:e4:32:2d:b8:65:0b:29:36:ad: ad:e8:c0:5a:87:9b:f9:d1:bb:06:5d:4e:0d:f7:d2: a1:3c:b5:28:8d:ca:70:6d:47:35:96:f3:8d:2c:6a: c8:ea:18:aa:4a:32:78:45:ff:2b:bd:18:d0:5e:a0: c6:42:17:40:2c:33:bd:db:37:30:f5:6d:ff:23:08: 85:8d:13:69:2c:f1:62:c4:7f:79:27:30:f1:bf:a5: 8c:85:ec:1d:84:8b:88:54:c2:5c:58:8e:f3:1b:14: fc:a0:38:24:5c:3f:9d:c5:35:6a:e1:77:c4:70:e6: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:ED:D3:EC:94:E9:37:26:5F:A1:BE:D7:08:F6:D4:46:6C:BF:E9:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/371546e6-624b-3149-b4f9-c33c907a1a43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:09:c9:93:69:04:d7:20:d2:9f:8b:3a:2b:34:8b:81:82:52: a8:46:da:01:0d:d0:76:52:1f:89:ea:39:04:cb:6d:1b:5d:4e: 00:49:7c:83:5c:79:2a:cd:91:78:1f:84:45:b7:93:19:7f:1e: 55:38:61:eb:62:d4:01:84:f8:34:bc:03:ad:a0:3e:89:b7:1a: 14:65:19:1a:b0:5a:d9:d1:c8:05:b9:6b:ba:b0:18:24:92:fa: c1:f1:d0:00:47:eb:48:9f:07:52:70:3d:cc:de:28:af:14:37: 86:7d:f7:9d:99:97:d1:2e:41:cf:bd:ce:f7:da:69:d6:3c:10: 7b:7e:95:79:3e:02:58:ae:bf:46:a4:9b:fb:67:c7:1b:a3:16: 52:1b:20:42:61:1b:b9:e3:4c:0e:e6:80:76:9d:d1:e7:cd:d9: f2:0e:ec:39:55:35:11:5b:f9:3a:58:e2:71:20:70:2e:07:0d: 98:90:29:8b:bc:c2:af:c8:0f:37:fe:c9:2c:8b:73:b5:b0:f5: 85:80:71:0f:8a:e6:76:ec:8f:1c:3b:85:49:ca:44:ad:af:26: e8:58:d5:66:0e:d8:66:60:5d:17:4f:e6:fb:6d:7d:75:f9:b1: 72:17:20:87:c6:60:d6:07:e2:09:42:a4:76:3d:a4:4a:86:d2: 76:e7:23:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vTozejo12JTsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OWEyODU1MTItMTU2MS00NmYyLWJhYTAtMjRmNDgxNTY0OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudtf3fs6HKTRwGeY9SjAJBnBjYjSkDijaa5j ViNo2i0StadlvGKRsQ4bM7F6uLt2Q6hI7/BJ8UUnSG9+w1VKeuiFYCqqJMm66kah LbUMP5g19UogPC26WGihcA2ZwcefNQAP0hOzHUc/TkcM/E/MgCvUG80/BcwjBI87 z8HDMy8cqPDp9MDtl3fwIoDkMi24ZQspNq2t6MBah5v50bsGXU4N99KhPLUojcpw bUc1lvONLGrI6hiqSjJ4Rf8rvRjQXqDGQhdALDO92zcw9W3/IwiFjRNpLPFixH95 JzDxv6WMhewdhIuIVMJcWI7zGxT8oDgkXD+dxTVq4XfEcOYFxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvt0+yU6TcmX6G+1wj21EZsv+leMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzcxNTQ2ZTYtNjI0Yi0z MTQ5LWI0ZjktYzMzYzkwN2ExYTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgJyZNpBNcg0p+LOis0i4GCUqhG2gEN0HZSH4nqOQTLbRtdTgBJfINc eSrNkXgfhEW3kxl/HlU4Yeti1AGE+DS8A62gPom3GhRlGRqwWtnRyAW5a7qwGCSS +sHx0ABH60ifB1JwPczeKK8UN4Z9952Zl9EuQc+9zvfaadY8EHt+lXk+Aliuv0ak m/tnxxujFlIbIEJhG7njTA7mgHad0efN2fIO7DlVNRFb+TpY4nEgcC4HDZiQKYu8 wq/IDzf+ySyLc7Ww9YWAcQ+K5nbsjxw7hUnKRK2vJuhY1WYO2GZgXRdP5vttfXX5 sXIXIIfGYNYH4glCpHY9pEqG0nbnI7I= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:05 2025 by rpki-client