$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fcbaff1-0e90-319d-813a-731c15aafaf8.roa File: 3fcbaff1-0e90-319d-813a-731c15aafaf8.roa (raw, json) Hash identifier: ZYEhghWCXg0Xzo6nR8SvPbkqX4Dh376bqPbzuL1Pnu0= Subject key identifier: 28:EB:A1:25:61:04:1F:45:81:AB:C3:1F:AD:17:C1:AA:4B:DD:EF:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A685EBD8D740ED2632F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fcbaff1-0e90-319d-813a-731c15aafaf8.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.36.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a6:85:eb:d8:d7:40:ed:26:32:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=ab3b9f47-be08-4383-ab09-2b7a7e394e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:3c:ec:f7:a3:ba:6f:f1:5a:be:8a:3d:b3: 19:05:a5:5e:25:1a:1f:6d:c5:ac:85:3d:05:f1:73: 5c:b4:eb:b0:74:4e:0a:6a:87:ee:5b:d4:09:11:6d: 53:67:f1:9c:68:79:51:56:b8:7c:b9:9b:30:2e:7e: 05:82:a6:ae:1b:b4:aa:f7:33:ab:c6:c9:9c:da:f6: dd:d1:01:99:e1:20:d5:e1:db:83:03:72:06:ee:03: 46:3d:0e:33:1b:3e:cb:c2:49:b6:ab:bc:1c:08:ec: e3:ea:cc:68:40:5e:d3:27:36:cb:38:65:74:0e:25: ea:2f:3a:f5:b8:68:99:d2:7b:a2:d1:41:85:30:b9: dd:07:b5:30:7d:7a:b5:80:58:6a:71:57:7c:e4:69: e5:71:0b:99:24:8b:29:63:fb:9a:a9:cb:99:29:89: 02:4d:a8:24:57:35:27:c1:79:8b:dd:45:bc:d6:43: 31:17:7f:f8:52:fb:b5:4e:c7:e9:e5:7c:b4:af:62: 74:e8:c7:62:ff:73:fc:39:28:1a:5d:2f:ee:88:a3: 0d:12:96:3e:d1:f2:5e:9e:f3:34:3d:9f:69:d2:45: 65:a4:a4:00:93:8e:da:51:83:fd:d4:a7:6f:c8:b9: ef:f6:4f:2c:db:41:37:29:f4:8e:e0:68:d0:e3:88: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:A1:25:61:04:1F:45:81:AB:C3:1F:AD:17:C1:AA:4B:DD:EF:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fcbaff1-0e90-319d-813a-731c15aafaf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:21:d2:35:1f:38:ef:c2:76:93:69:74:e2:15:ef:d7:a7:ad: 82:03:73:ea:9a:09:aa:dd:74:fd:bb:b5:ee:24:4b:c2:ab:95: 96:d0:ed:fb:2e:5e:0d:47:79:2d:e9:73:70:38:37:ac:a0:ba: f2:50:92:2f:e5:1e:fc:80:d0:1c:62:33:9d:76:46:4c:d8:47: 7e:af:fc:fb:ee:5d:72:27:66:63:e9:b3:09:7f:87:f9:cc:62: ca:db:82:8d:89:58:e4:98:72:ca:5d:a0:bf:d0:21:c1:ea:43: e2:25:f4:44:2e:23:af:04:1e:96:38:2f:e0:ca:11:55:c6:1a: 03:89:a4:01:92:48:d3:b6:6a:01:54:73:61:a5:0d:f1:b3:97: ed:84:68:74:f0:22:8f:5b:10:7e:f2:4b:9c:4c:d5:6e:44:89: 57:ba:0c:73:5f:7e:2e:28:1a:c0:46:06:57:8e:96:07:62:83: 26:90:44:15:8b:d5:2c:ec:62:ac:c1:ef:2a:be:19:12:e8:c0: d3:14:c0:c0:93:5c:3c:fe:ea:73:c3:38:be:98:aa:44:7f:04: 0b:b2:99:fc:29:44:b1:ee:64:0a:99:a8:54:57:82:9b:ff:5e: 4c:6b:45:22:b9:d3:24:bf:7f:0d:11:55:d9:5a:64:91:62:a2: 20:a3:e8:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aaF69jXQO0mMvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YWIzYjlmNDctYmUwOC00MzgzLWFiMDktMmI3YTdlMzk0ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvds87Pejum/xWr6KPbMZBaVeJRofbcWshT0F 8XNctOuwdE4KaofuW9QJEW1TZ/GcaHlRVrh8uZswLn4FgqauG7Sq9zOrxsmc2vbd 0QGZ4SDV4duDA3IG7gNGPQ4zGz7Lwkm2q7wcCOzj6sxoQF7TJzbLOGV0DiXqLzr1 uGiZ0nui0UGFMLndB7UwfXq1gFhqcVd85GnlcQuZJIspY/uaqcuZKYkCTagkVzUn wXmL3UW81kMxF3/4Uvu1Tsfp5Xy0r2J06Mdi/3P8OSgaXS/uiKMNEpY+0fJenvM0 PZ9p0kVlpKQAk47aUYP91KdvyLnv9k8s20E3KfSO4GjQ44iRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjroSVhBB9FgavDH60XwapL3e9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZjYmFmZjEtMGU5MC0z MTlkLTgxM2EtNzMxYzE1YWFmYWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQh0jUfOO/CdpNpdOIV79enrYIDc+qaCarddP27te4kS8KrlZbQ7fsu Xg1HeS3pc3A4N6yguvJQki/lHvyA0BxiM512RkzYR36v/PvuXXInZmPpswl/h/nM Ysrbgo2JWOSYcspdoL/QIcHqQ+Il9EQuI68EHpY4L+DKEVXGGgOJpAGSSNO2agFU c2GlDfGzl+2EaHTwIo9bEH7yS5xM1W5EiVe6DHNffi4oGsBGBleOlgdigyaQRBWL 1SzsYqzB7yq+GRLowNMUwMCTXDz+6nPDOL6YqkR/BAuymfwpRLHuZAqZqFRXgpv/ XkxrRSK50yS/fw0RVdlaZJFioiCj6Po= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:51 2025 by rpki-client