$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa File: 39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa (raw, json) Hash identifier: PO4IPgZCZLVbdMAXQKTDt4rUa8OIsYFle53TCCvrEqg= Subject key identifier: 6D:3D:C4:E9:BC:40:31:FB:55:B6:77:FA:E2:A8:04:39:27:31:FC:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715CD94B2A01F5C6B994D480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 23.32.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:d9:4b:2a:01:f5:c6:b9:94:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=8bb73027-e75a-45e0-977b-c295c90adc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:93:ee:e9:40:94:e9:34:37:f5:68:c8:29: 24:6f:d9:34:90:f1:2f:21:1c:0c:3c:fb:ad:03:1a: e9:9c:dc:1e:f0:f8:0b:4d:94:f2:80:e3:af:a8:a2: 39:9d:9a:e3:11:7f:c8:7e:bd:52:6f:3d:e2:a6:b9: a5:23:d4:5c:30:3d:fd:b1:a2:2a:3d:2c:37:54:b3: 4e:b4:93:31:2a:26:1e:95:d8:0b:8f:9c:ad:17:32: 56:57:01:0d:a1:74:1a:ed:d0:f6:20:4d:db:f2:b9: 07:54:47:44:19:0d:41:55:57:88:7f:36:fa:d9:e3: 30:8a:b7:90:72:cb:25:e3:b3:6a:1e:73:df:3c:11: 6e:a2:5d:d1:ad:03:13:83:45:4a:03:48:b1:57:6b: e5:f9:38:6d:5d:37:e0:7f:4a:26:0d:46:66:c8:9f: ee:67:33:15:13:2a:47:45:5e:c2:cb:72:a1:55:6d: 58:6c:5d:45:7a:08:ba:8a:15:30:c6:9f:5d:78:88: 3d:b2:51:4b:b4:18:f4:12:ee:52:50:c7:ce:9e:1f: f7:7f:4a:bf:73:ef:18:ec:25:49:75:c5:f6:ca:49: e5:3f:4a:6d:9b:9d:7b:5c:8f:73:26:7e:a8:10:b0: 5a:cb:40:26:cd:f0:89:d3:11:5a:6b:f2:89:75:dc: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3D:C4:E9:BC:40:31:FB:55:B6:77:FA:E2:A8:04:39:27:31:FC:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39c06ad6-c6d3-3427-93f1-c7af7259a5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:1a:a4:5c:ea:2d:3e:c0:dd:05:ea:3c:55:b6:95:bb:88:c3: 92:20:47:d4:95:d5:24:e3:d5:4e:d1:15:7a:d7:8f:e1:6e:43: f6:86:f2:d0:bf:bf:83:1e:71:db:96:a1:59:e9:b6:c2:66:bb: 8e:8b:79:a8:e7:6d:9c:5f:f3:ab:76:ce:5c:e8:68:1f:25:22: ff:7e:3e:e2:c5:e1:77:79:66:8c:4f:84:4d:1d:dd:52:4e:69: 06:b4:a9:a7:c9:86:0f:c7:06:2f:46:15:55:16:91:26:71:0b: 2a:18:c4:14:ed:c2:42:8b:61:49:86:51:67:42:b8:cf:b7:a5: bc:dd:a7:b1:b7:02:de:76:42:c3:4f:9a:79:dd:e6:22:54:8b: 86:f5:43:24:21:6e:7f:13:bc:1d:af:18:91:50:52:d4:bb:1e: 07:4c:9a:17:56:08:52:19:eb:d7:34:cf:f0:b8:4a:be:7b:88: fd:64:00:8a:af:7c:f0:3a:c7:df:31:fb:66:04:dc:2e:bb:4a: 53:d8:d9:14:92:ad:71:84:42:25:20:d2:24:1e:f5:86:6d:e0: 87:97:ce:44:da:5b:25:73:18:e2:e1:e3:35:f5:64:9b:c3:b5: 5c:1e:42:bd:9c:7a:9c:f9:1d:3e:0b:7f:d6:a1:1f:25:fd:da: 84:2e:5c:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXNlLKgH1xrmU1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk OGJiNzMwMjctZTc1YS00NWUwLTk3N2ItYzI5NWM5MGFkYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArraT7ulAlOk0N/VoyCkkb9k0kPEvIRwMPPut AxrpnNwe8PgLTZTygOOvqKI5nZrjEX/Ifr1Sbz3iprmlI9RcMD39saIqPSw3VLNO tJMxKiYeldgLj5ytFzJWVwENoXQa7dD2IE3b8rkHVEdEGQ1BVVeIfzb62eMwireQ cssl47NqHnPfPBFuol3RrQMTg0VKA0ixV2vl+ThtXTfgf0omDUZmyJ/uZzMVEypH RV7Cy3KhVW1YbF1Fegi6ihUwxp9deIg9slFLtBj0Eu5SUMfOnh/3f0q/c+8Y7CVJ dcX2yknlP0ptm517XI9zJn6oELBay0AmzfCJ0xFaa/KJddysxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG09xOm8QDH7VbZ3+uKoBDknMfz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzljMDZhZDYtYzZkMy0z NDI3LTkzZjEtYzdhZjcyNTlhNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8apFzqLT7A3QXqPFW2lbuIw5IgR9SV1STj1U7RFXrXj+FuQ/aG8tC/ v4MecduWoVnptsJmu46LeajnbZxf86t2zlzoaB8lIv9+PuLF4Xd5ZoxPhE0d3VJO aQa0qafJhg/HBi9GFVUWkSZxCyoYxBTtwkKLYUmGUWdCuM+3pbzdp7G3At52QsNP mnnd5iJUi4b1QyQhbn8TvB2vGJFQUtS7HgdMmhdWCFIZ69c0z/C4Sr57iP1kAIqv fPA6x98x+2YE3C67SlPY2RSSrXGEQiUg0iQe9YZt4IeXzkTaWyVzGOLh4zX1ZJvD tVweQr2cepz5HT4Lf9ahHyX92oQuXAs= -----END CERTIFICATE-----Generated at Mon Oct 20 02:29:50 2025 by rpki-client