$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa File: 487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa (raw, json) Hash identifier: 2gCu8qfioiGXEHB9KnYTpZAqcBNP0kYJVJV+bizI+rw= Subject key identifier: 6C:9C:6C:21:43:72:BD:AA:AC:15:08:7C:B8:A4:FF:A1:27:C2:0E:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A7A4B1842B4D9B7F98A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.38.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a7:a4:b1:84:2b:4d:9b:7f:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=4a5c8e35-6da0-41d1-8f1c-bbe431fada19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:d5:64:25:d9:e7:d5:c8:29:5d:17:c9:e3: 8e:7c:e0:e6:78:ba:c4:37:3c:09:3c:88:1c:49:51: a2:75:34:b7:cf:9d:16:7a:91:1b:b4:0d:5d:6c:f5: ff:9a:4e:4e:ff:62:6f:1d:db:47:ad:60:49:aa:3b: fd:67:df:9b:47:88:78:b0:9b:b9:ed:10:6b:e3:c0: 5a:db:cd:a0:e4:7b:c9:a9:6b:22:a0:48:74:c4:53: b8:b2:13:f3:54:55:d7:c4:63:bc:55:6e:22:82:7c: 65:21:ca:d6:ab:b8:cb:cf:78:db:47:bc:6c:cc:20: f7:3e:17:b3:10:24:6c:6a:5f:94:0b:30:37:cc:fe: bc:55:12:0c:1f:30:99:89:90:94:36:ff:5a:c0:34: 88:16:92:d5:4a:43:26:b3:38:22:1c:f9:20:cf:28: 75:29:f2:6b:2d:54:a0:68:7c:5c:ae:6e:78:51:81: a6:93:6f:20:d1:c2:8a:be:ea:3d:1c:37:e2:6b:ee: 77:62:32:ac:be:e0:14:86:af:a7:ae:ac:a8:ad:b8: 12:2a:fa:09:49:04:db:7f:6e:a9:d7:68:7a:9b:1a: 7b:80:ee:84:20:0a:4b:29:05:61:ae:b7:9f:2f:be: 02:d3:53:70:ff:98:9d:dc:dd:52:bb:37:7c:d3:08: d7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9C:6C:21:43:72:BD:AA:AC:15:08:7C:B8:A4:FF:A1:27:C2:0E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/487f0a57-e9d5-3ad7-bbe4-07ea38a15c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:9f:06:a1:e6:60:46:9d:d8:57:fd:73:6a:17:e5:8a:69:41: de:60:36:c0:56:64:1c:80:fe:0e:d4:9b:5d:1f:98:10:60:c7: 70:f1:b9:88:a8:56:39:1a:fa:22:22:0c:79:8c:b6:04:06:2d: f2:2b:e7:0e:47:17:e0:11:b3:ca:2c:45:ea:72:4c:aa:27:6b: 48:f4:00:b4:f3:98:d3:dd:6d:b6:15:0f:b7:58:89:9a:9c:c0: 95:58:8f:ad:39:6a:da:68:85:9c:71:6d:8b:37:52:b8:86:21: 62:a2:3e:df:bc:34:b6:63:bd:ca:65:11:77:6e:3d:ff:76:ef: 57:78:f6:b5:24:4f:5a:19:cf:b4:75:ae:1a:61:64:03:98:de: 14:3c:97:b8:88:56:61:5e:27:39:fd:34:2c:9c:84:7e:3b:32: 85:c8:53:04:b3:dd:f2:d7:30:39:f1:aa:4b:f2:18:59:1f:3a: 6b:08:fa:86:d7:4e:cd:93:a9:9c:7c:88:1e:e0:82:8a:8b:59: 88:f5:fc:ee:b2:e3:95:af:9a:f0:40:5c:a9:66:fb:e8:7e:1e: ec:82:e4:6b:a8:72:ee:89:8f:81:b8:25:cb:2b:8d:f3:e7:a4: c1:2d:b1:b2:c7:02:bf:d7:2c:ad:40:39:b2:7a:62:36:9a:5f: ce:9d:0a:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aeksYQrTZt/mKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NGE1YzhlMzUtNmRhMC00MWQxLThmMWMtYmJlNDMxZmFkYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuPVZCXZ59XIKV0XyeOOfODmeLrENzwJPIgc SVGidTS3z50WepEbtA1dbPX/mk5O/2JvHdtHrWBJqjv9Z9+bR4h4sJu57RBr48Ba 282g5HvJqWsioEh0xFO4shPzVFXXxGO8VW4ignxlIcrWq7jLz3jbR7xszCD3Phez ECRsal+UCzA3zP68VRIMHzCZiZCUNv9awDSIFpLVSkMmszgiHPkgzyh1KfJrLVSg aHxcrm54UYGmk28g0cKKvuo9HDfia+53YjKsvuAUhq+nrqyorbgSKvoJSQTbf26p 12h6mxp7gO6EIApLKQVhrrefL74C01Nw/5id3N1Suzd80wjXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGycbCFDcr2qrBUIfLik/6Enwg6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDg3ZjBhNTctZTlkNS0z YWQ3LWJiZTQtMDdlYTM4YTE1YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKfBqHmYEad2Ff9c2oX5YppQd5gNsBWZByA/g7Um10fmBBgx3DxuYio Vjka+iIiDHmMtgQGLfIr5w5HF+ARs8osRepyTKona0j0ALTzmNPdbbYVD7dYiZqc wJVYj605atpohZxxbYs3UriGIWKiPt+8NLZjvcplEXduPf9271d49rUkT1oZz7R1 rhphZAOY3hQ8l7iIVmFeJzn9NCychH47MoXIUwSz3fLXMDnxqkvyGFkfOmsI+obX Ts2TqZx8iB7ggoqLWYj1/O6y45WvmvBAXKlm++h+HuyC5Guocu6Jj4G4JcsrjfPn pMEtsbLHAr/XLK1AObJ6YjaaX86dCg4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:02 2025 by rpki-client