$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3df8fd9a-12b8-3fce-ac94-0bcdf1cf132c.roa File: 3df8fd9a-12b8-3fce-ac94-0bcdf1cf132c.roa (raw, json) Hash identifier: i9mWhEQHrA82LeJad1Sirq3RFXwMfECq3Gk2TO5HAaw= Subject key identifier: FF:78:62:00:75:AA:C4:0C:B0:85:0D:23:F4:51:5A:04:90:20:18:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C37172A0F894A00F46D2580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3df8fd9a-12b8-3fce-ac94-0bcdf1cf132c.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.44.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:17:2a:0f:89:4a:00:f4:6d:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=1313bd02-e825-48a2-8f8f-46241db7a155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:e3:4f:14:2c:99:fc:1f:26:47:ee:c4:87: 28:80:f9:46:b2:0d:aa:fe:a6:57:55:67:4e:c2:42: d2:36:38:9b:9b:95:85:24:07:a4:7b:1e:99:3c:2b: a9:a3:ba:74:92:ee:02:e8:9d:7f:3f:6c:5f:35:e7: a5:9a:3c:2a:6f:96:c8:64:e5:3f:08:87:7b:81:09: a0:c2:34:2d:4d:16:4b:c3:57:0f:8e:49:19:27:2f: 72:d7:48:29:86:24:33:92:56:f6:e0:3b:62:e6:b0: 1e:98:9a:44:be:9b:7c:4a:9f:41:df:d8:59:11:c8: d2:a5:21:05:aa:ce:12:80:94:a0:d4:63:8c:f9:3f: 52:61:75:ac:ff:1e:21:aa:6a:5e:3f:48:2b:21:49: c6:21:98:77:dd:7b:fe:55:fd:32:e1:8b:6f:06:a4: dc:30:95:f2:39:e5:97:b2:89:66:aa:aa:83:bf:7d: 0c:28:42:2d:57:a0:53:d9:d5:25:30:f3:01:73:a1: cf:e3:d5:c1:f0:0a:05:74:67:62:88:b3:db:52:fc: 49:4c:b7:0c:35:81:17:30:2f:7f:a9:50:8d:1d:82: 31:f9:7e:21:fc:9e:0f:c3:ba:ad:2d:28:14:10:62: cb:af:07:dd:4a:bb:ea:d9:73:83:60:b9:7d:17:44: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:78:62:00:75:AA:C4:0C:B0:85:0D:23:F4:51:5A:04:90:20:18:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3df8fd9a-12b8-3fce-ac94-0bcdf1cf132c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:38:ec:3e:75:5c:bc:20:35:51:c6:42:7c:b3:25:eb:6b:b8: 11:5c:8e:5b:30:00:b4:22:ec:70:57:70:ea:3b:67:9e:32:fc: 8e:8e:0b:af:a4:f3:e6:24:d7:97:df:98:21:7b:81:58:80:2e: 70:ff:b6:eb:4d:cc:97:15:83:e5:b0:37:5c:ce:1e:01:70:b4: b4:79:52:a1:27:ad:8e:63:05:a6:3a:55:5b:5e:d1:b9:96:0a: 2d:f3:f2:7d:2d:de:42:a6:ca:f6:ef:fb:92:f5:06:77:d0:9a: 1e:46:91:c3:98:d4:1c:dd:df:70:e9:97:0b:36:bf:29:b4:17: 77:77:d3:9e:da:d5:9e:39:4f:75:7c:a8:e0:32:b3:97:ab:c3: 25:97:0d:0b:95:b2:97:ab:71:06:c8:e3:4c:12:29:b2:c3:33: c7:82:2b:5f:37:04:36:0c:cb:5d:0f:13:38:2a:70:07:56:27: 15:c1:c4:ba:7e:2d:ab:24:3c:e9:79:27:b8:33:ae:23:93:3e: 62:bf:16:ca:a0:df:08:6c:42:40:ec:17:42:b1:f3:a6:06:2f: 2a:6c:fe:35:45:33:5f:62:44:7a:84:61:5f:82:72:d7:e9:6a: c5:78:11:f2:0a:de:fb:4c:d5:33:90:d1:2f:9b:53:38:6b:8a: 5c:aa:11:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxcqD4lKAPRtJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTMxM2JkMDItZTgyNS00OGEyLThmOGYtNDYyNDFkYjdhMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw/jTxQsmfwfJkfuxIcogPlGsg2q/qZXVWdO wkLSNjibm5WFJAekex6ZPCupo7p0ku4C6J1/P2xfNeelmjwqb5bIZOU/CId7gQmg wjQtTRZLw1cPjkkZJy9y10gphiQzklb24Dti5rAemJpEvpt8Sp9B39hZEcjSpSEF qs4SgJSg1GOM+T9SYXWs/x4hqmpeP0grIUnGIZh33Xv+Vf0y4YtvBqTcMJXyOeWX solmqqqDv30MKEItV6BT2dUlMPMBc6HP49XB8AoFdGdiiLPbUvxJTLcMNYEXMC9/ qVCNHYIx+X4h/J4Pw7qtLSgUEGLLrwfdSrvq2XODYLl9F0TckwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP94YgB1qsQMsIUNI/RRWgSQIBhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2RmOGZkOWEtMTJiOC0z ZmNlLWFjOTQtMGJjZGYxY2YxMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk47D51XLwgNVHGQnyzJetruBFcjlswALQi7HBXcOo7Z54y/I6OC6+k 8+Yk15ffmCF7gViALnD/tutNzJcVg+WwN1zOHgFwtLR5UqEnrY5jBaY6VVte0bmW Ci3z8n0t3kKmyvbv+5L1BnfQmh5GkcOY1Bzd33Dplws2vym0F3d3057a1Z45T3V8 qOAys5erwyWXDQuVspercQbI40wSKbLDM8eCK183BDYMy10PEzgqcAdWJxXBxLp+ LaskPOl5J7gzriOTPmK/Fsqg3whsQkDsF0Kx86YGLyps/jVFM19iRHqEYV+Cctfp asV4EfIK3vtM1TOQ0S+bUzhrilyqEWQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:07:37 2025 by rpki-client