$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa File: 3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa (raw, json) Hash identifier: QvF09vl935ZLzhd57VmHJ3bD6Lqd/2qRlMuoHlydNhc= Subject key identifier: CB:FF:DD:9D:A3:57:64:B6:2D:02:A5:F0:5B:B4:CF:FB:93:EB:D7:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B249706666943CE8F0B351B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 24319 IP address blocks: 23.53.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:97:06:66:69:43:ce:8f:0b:35:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=d8c4ced0-ea45-4305-b600-e5cf8df198c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:95:0e:a3:61:38:96:84:4a:55:bf:99:ae:5c: af:5b:fd:d5:24:29:be:6c:32:18:c7:63:98:93:91: f6:c7:52:8b:27:ef:09:c0:6b:f1:cd:9c:0f:00:bb: 4d:8d:d1:13:e0:49:55:a6:ae:40:12:80:0e:13:87: d6:51:5c:e7:a6:96:66:61:f6:60:29:1b:9f:31:af: ab:9c:59:8c:81:92:a8:c4:d7:82:d9:ee:08:58:51: 85:df:fb:83:4e:1e:85:b2:53:90:90:ba:05:83:b8: 92:10:85:09:c0:2e:ee:76:02:38:65:40:dc:25:bc: ca:28:b8:d7:3d:51:33:8f:b0:a8:5f:5d:4e:45:f3: 76:64:27:d8:9c:95:83:e5:09:04:99:b7:5b:d0:9a: 86:ec:27:78:a0:19:38:9b:16:49:fd:d1:95:cd:50: cd:66:43:83:dd:e2:f3:8c:00:83:94:41:90:b0:3d: a1:4e:15:bd:b2:e7:d0:4b:00:03:85:3a:6d:57:0e: 97:76:2d:48:db:01:5f:91:2d:a4:46:29:cb:52:ba: 7c:41:6f:33:0b:53:ed:ed:25:ba:64:3f:47:7a:c7: 3b:09:b8:1f:7c:a7:3d:92:34:44:1b:35:cd:73:0f: 57:5d:c5:17:55:71:4e:9a:89:9e:a5:2c:6e:85:05: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FF:DD:9D:A3:57:64:B6:2D:02:A5:F0:5B:B4:CF:FB:93:EB:D7:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:52:b0:1c:a5:d6:e9:86:a3:58:9f:83:c8:11:58:7d:a7:38: b2:0b:54:d3:58:2e:59:32:e9:58:6e:93:06:6a:df:93:07:4d: 36:e2:fa:4d:4e:78:84:1c:46:8e:18:97:93:a0:9a:c6:4a:36: 5f:3b:12:a0:27:68:af:bf:69:71:87:2c:b8:7a:d2:75:a3:15: a3:a1:3a:25:17:cd:24:5e:01:95:d0:5d:cb:81:51:2d:fd:74: 4e:10:89:5c:a1:32:ce:7b:e7:05:0e:7c:a9:21:6f:8a:04:c6: eb:cf:76:17:23:a9:e3:f6:36:cb:8e:96:6a:d0:e5:bf:c9:04: c3:33:e1:2f:b9:0f:34:44:98:cd:66:89:93:8b:87:cf:7c:d0: 72:42:ae:15:60:b6:64:e5:00:41:d8:18:c4:6c:e2:98:12:cd: fb:ea:6e:db:d5:dd:43:44:6d:2f:99:b3:56:4d:f0:df:15:0c: cc:5b:7a:90:48:71:7f:49:dd:81:8c:bf:ec:25:27:b7:42:9f: 94:e1:ba:00:0a:ac:ee:37:7d:1b:9b:80:b3:73:30:96:a8:49: 5a:1e:7e:76:47:05:a7:ba:5f:2e:c0:b7:92:f2:c9:7c:ba:6b: a9:4b:8e:5a:98:e0:6c:f7:71:c4:08:b9:24:5b:bc:11:9c:81: d3:dd:81:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklwZmaUPOjws1GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ZDhjNGNlZDAtZWE0NS00MzA1LWI2MDAtZTVjZjhkZjE5OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpUOo2E4loRKVb+ZrlyvW/3VJCm+bDIYx2OY k5H2x1KLJ+8JwGvxzZwPALtNjdET4ElVpq5AEoAOE4fWUVznppZmYfZgKRufMa+r nFmMgZKoxNeC2e4IWFGF3/uDTh6FslOQkLoFg7iSEIUJwC7udgI4ZUDcJbzKKLjX PVEzj7CoX11ORfN2ZCfYnJWD5QkEmbdb0JqG7Cd4oBk4mxZJ/dGVzVDNZkOD3eLz jACDlEGQsD2hThW9sufQSwADhTptVw6Xdi1I2wFfkS2kRinLUrp8QW8zC1Pt7SW6 ZD9Hesc7CbgffKc9kjREGzXNcw9XXcUXVXFOmomepSxuhQVJmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv/3Z2jV2S2LQKl8Fu0z/uT69d2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y1ZDRmMTAtNzQxMC0z ZjQwLTlhNjctOWFiNzZmZTE4ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClSsByl1umGo1ifg8gRWH2nOLILVNNYLlky6VhukwZq35MHTTbi+k1O eIQcRo4Yl5OgmsZKNl87EqAnaK+/aXGHLLh60nWjFaOhOiUXzSReAZXQXcuBUS39 dE4QiVyhMs575wUOfKkhb4oExuvPdhcjqeP2NsuOlmrQ5b/JBMMz4S+5DzREmM1m iZOLh8980HJCrhVgtmTlAEHYGMRs4pgSzfvqbtvV3UNEbS+Zs1ZN8N8VDMxbepBI cX9J3YGMv+wlJ7dCn5ThugAKrO43fRubgLNzMJaoSVoefnZHBae6Xy7At5LyyXy6 a6lLjlqY4Gz3ccQIuSRbvBGcgdPdgQ8= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:29 2025 by rpki-client