$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e41cb05-23f9-3633-b73a-ee44d5a2c41b.roa File: 3e41cb05-23f9-3633-b73a-ee44d5a2c41b.roa (raw, json) Hash identifier: wSFeqlIAHadsih16NMRiY2pQPRELYPT12XRSy7SRm/E= Subject key identifier: 51:55:E2:A6:97:B3:0D:1D:61:23:A5:BB:58:41:6D:AA:D5:E9:63:BE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC2576218B99FDC525ED40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e41cb05-23f9-3633-b73a-ee44d5a2c41b.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.32.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:25:76:21:8b:99:fd:c5:25:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=a60166ed-17a9-49d8-920b-cf51b7ea34a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:be:03:99:e4:0b:b3:99:6e:75:5f:cf:c6: a0:25:10:fa:35:d4:a2:0a:8e:2d:27:45:d5:75:5e: 2f:bc:29:42:0c:b6:f6:01:3d:0e:c7:d8:ab:6f:c2: 1a:37:c8:ed:39:38:49:fd:8a:b5:4e:8d:e0:29:a7: 62:bf:44:3d:4d:48:e4:f4:99:b2:19:2b:96:52:0a: 30:03:17:9c:f6:bc:94:5e:08:34:f0:c5:45:0e:7a: 44:f0:27:62:36:cf:d2:3b:4e:6d:e8:d2:f6:22:c6: c2:34:11:f2:e4:c4:b7:b5:ce:3e:de:25:03:bb:4f: e8:d4:ac:b2:32:d9:19:1f:5f:97:81:1b:2d:27:58: 91:70:92:47:8b:3c:20:c2:2e:1f:6a:e6:8e:d9:c8: c7:f8:5d:f5:e8:92:f1:67:cd:b7:6e:aa:b8:80:76: be:10:43:5f:f0:9a:af:5c:ab:19:02:0c:bf:93:1e: 80:49:18:73:3a:bc:5f:3b:89:39:e4:88:21:7f:6e: 78:2e:3a:43:1e:b4:0d:63:91:4b:54:db:34:65:cc: 8e:7d:fa:08:aa:61:38:de:b0:0f:78:4f:b4:8d:93: 69:da:4d:3b:45:99:8d:02:36:c6:78:16:cd:95:05: e3:d7:60:8f:d8:cb:f8:32:89:fa:37:af:85:90:fd: 51:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:55:E2:A6:97:B3:0D:1D:61:23:A5:BB:58:41:6D:AA:D5:E9:63:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e41cb05-23f9-3633-b73a-ee44d5a2c41b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:67:a6:5e:bb:9e:10:57:bf:bd:da:4d:86:18:ca:b9:6f:f7: 41:50:60:e6:fd:54:e5:1c:ad:da:c5:f5:ce:ee:6b:b3:db:92: 02:fe:5d:82:46:b3:f1:89:0b:52:3e:c3:d4:6e:2b:1f:3c:65: 9a:6f:2a:91:05:24:ce:61:b4:c5:47:bb:da:b8:7d:9b:5c:81: d1:66:ef:6d:62:b2:30:6a:cc:b0:4f:c1:5a:62:8e:ed:6b:f6: fe:11:3a:2d:1e:81:3d:36:65:b7:fb:40:70:e1:e3:0d:93:b3: 94:16:34:a5:0b:0e:22:3e:c3:0e:ef:8d:fe:2d:10:15:a7:d7: 6b:12:b8:ec:53:60:51:45:e0:9e:46:7d:9b:76:f3:77:74:1f: 99:fb:94:07:c9:2a:45:2f:c0:77:3d:d9:a1:d5:2a:41:d6:cb: ee:12:b1:31:88:83:8d:ec:eb:d8:75:db:7e:ab:76:fb:1f:f5: 0d:92:d6:2c:1a:f6:18:93:34:7d:d9:61:8e:d9:09:23:3c:20: d2:6d:ab:88:3b:5e:b4:cd:b0:84:ab:65:02:06:84:61:2f:98: 86:ca:fe:72:a2:70:f1:4f:5f:52:3a:01:da:b6:b9:77:70:0e: 89:31:da:a4:a2:46:f2:f7:eb:b9:95:f8:b2:7b:29:c5:18:b9: 9b:94:07:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CV2IYuZ/cUl7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk YTYwMTY2ZWQtMTdhOS00OWQ4LTkyMGItY2Y1MWI3ZWEzNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkie+A5nkC7OZbnVfz8agJRD6NdSiCo4tJ0XV dV4vvClCDLb2AT0Ox9irb8IaN8jtOThJ/Yq1To3gKadiv0Q9TUjk9JmyGSuWUgow Axec9ryUXgg08MVFDnpE8CdiNs/SO05t6NL2IsbCNBHy5MS3tc4+3iUDu0/o1Kyy MtkZH1+XgRstJ1iRcJJHizwgwi4fauaO2cjH+F316JLxZ823bqq4gHa+EENf8Jqv XKsZAgy/kx6ASRhzOrxfO4k55Ighf254LjpDHrQNY5FLVNs0ZcyOffoIqmE43rAP eE+0jZNp2k07RZmNAjbGeBbNlQXj12CP2Mv4Mon6N6+FkP1RnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFV4qaXsw0dYSOlu1hBbarV6WO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U0MWNiMDUtMjNmOS0z NjMzLWI3M2EtZWU0NGQ1YTJjNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyBLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxnpl67nhBXv73aTYYYyrlv90FQYOb9VOUcrdrF9c7ua7PbkgL+XYJG s/GJC1I+w9RuKx88ZZpvKpEFJM5htMVHu9q4fZtcgdFm721isjBqzLBPwVpiju1r 9v4ROi0egT02Zbf7QHDh4w2Ts5QWNKULDiI+ww7vjf4tEBWn12sSuOxTYFFF4J5G fZt283d0H5n7lAfJKkUvwHc92aHVKkHWy+4SsTGIg43s69h1236rdvsf9Q2S1iwa 9hiTNH3ZYY7ZCSM8INJtq4g7XrTNsISrZQIGhGEvmIbK/nKicPFPX1I6Adq2uXdw Dokx2qSiRvL367mV+LJ7KcUYuZuUB9k= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:20 2025 by rpki-client