$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a107ab4-e627-3c44-9206-4076966570f1.roa File: 4a107ab4-e627-3c44-9206-4076966570f1.roa (raw, json) Hash identifier: f4K4j3c/keLgO2SGUMHHj4guy2xLloYQmHUbvX0ts5o= Subject key identifier: 9E:C6:68:1C:F4:A0:C6:B8:31:7F:05:77:D8:8D:93:51:25:A3:90:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A0C3FDC3FF4E5C000B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a107ab4-e627-3c44-9206-4076966570f1.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 9299 IP address blocks: 23.40.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a0:c3:fd:c3:ff:4e:5c:00:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=8b7ffb80-5a2a-4d1b-b286-8f854ef49cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:72:d6:46:3b:87:0c:a7:eb:f1:d0:5e:cb:54: 74:e8:98:c9:cb:07:67:fd:e5:bb:75:09:c1:ad:cf: 0a:bd:2c:0e:0c:c5:51:cd:07:cb:6a:77:1f:06:a1: 91:de:fc:d3:4a:95:e3:91:09:55:6b:6c:2a:85:8a: 22:20:18:ae:fe:c9:87:e9:c5:ce:fb:83:cd:96:e4: e7:3e:9a:d6:65:0a:03:f4:88:ec:37:6c:51:21:8b: 2c:e9:57:8d:cc:f3:c8:33:11:50:c8:04:83:90:13: 23:71:90:1a:93:4a:88:ff:f7:be:c8:04:78:86:b4: 03:11:43:55:93:bf:88:ac:d5:af:e1:49:88:a9:ab: 4a:7e:1a:88:09:23:ce:50:24:78:f5:65:75:90:66: 09:e0:b5:ae:47:88:f9:94:0b:0a:8e:ae:d8:b6:74: 48:4e:06:43:1c:12:50:10:37:2b:28:7c:0b:e1:4c: fa:43:80:d3:70:6d:d3:25:54:4c:3b:09:38:c4:ab: e0:3c:e2:73:4e:39:95:37:f7:20:ae:13:ad:6c:83: 3a:f9:78:02:c9:ef:e3:66:c3:dc:5f:14:f4:42:13: ce:d9:e8:cd:ee:4d:62:dc:1f:5f:9d:ad:46:1b:48: 67:80:e5:33:b1:a8:20:1f:f5:42:8b:c5:e1:b3:5d: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C6:68:1C:F4:A0:C6:B8:31:7F:05:77:D8:8D:93:51:25:A3:90:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a107ab4-e627-3c44-9206-4076966570f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a3:90:f0:09:32:e8:60:85:5e:d2:6d:b1:0b:5d:a2:cd:44: 08:fd:60:c5:80:64:89:01:d3:41:8d:16:60:4e:5d:62:3a:8e: 5d:23:4c:b1:82:d5:58:a2:c2:41:3f:6f:8f:e7:58:43:bb:31: d0:a1:7e:ed:f2:76:27:d7:76:26:25:5a:ea:14:ff:35:73:d0: 08:03:bf:dd:2e:66:9a:5b:2f:85:69:0b:88:fb:86:7a:19:47: 82:47:33:59:83:ae:e4:33:c9:cd:79:b5:58:06:c9:7a:db:ed: a6:50:13:06:ae:b0:bd:fb:f6:29:b5:f5:85:cf:74:b3:10:10: d3:7e:36:a2:ec:2d:c7:e5:15:85:8f:37:44:22:63:8c:24:2a: 1c:1b:46:b5:68:9a:40:b7:e1:8a:66:43:0b:1b:4e:79:0e:ac: d4:35:5e:c6:bb:ee:41:a8:73:f6:f4:57:f9:20:6a:22:1a:92: cf:d0:98:fc:01:80:ff:2a:02:ec:02:68:0e:4f:15:cb:ca:54: 76:13:f7:26:6b:28:6d:0a:6d:42:ac:22:a0:87:10:23:2d:f6: 22:58:fd:a1:88:4d:d0:0e:43:0a:b0:0f:5b:fa:1d:08:ab:c1: 91:37:84:81:ef:08:6c:23:19:55:6a:50:60:97:ca:0a:9e:1e: 9c:85:75:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aDD/cP/TlwACwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OGI3ZmZiODAtNWEyYS00ZDFiLWIyODYtOGY4NTRlZjQ5Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XLWRjuHDKfr8dBey1R06JjJywdn/eW7dQnB rc8KvSwODMVRzQfLancfBqGR3vzTSpXjkQlVa2wqhYoiIBiu/smH6cXO+4PNluTn PprWZQoD9IjsN2xRIYss6VeNzPPIMxFQyASDkBMjcZAak0qI//e+yAR4hrQDEUNV k7+IrNWv4UmIqatKfhqICSPOUCR49WV1kGYJ4LWuR4j5lAsKjq7YtnRITgZDHBJQ EDcrKHwL4Uz6Q4DTcG3TJVRMOwk4xKvgPOJzTjmVN/cgrhOtbIM6+XgCye/jZsPc XxT0QhPO2ejN7k1i3B9fna1GG0hngOUzsaggH/VCi8Xhs13HkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7GaBz0oMa4MX8Fd9iNk1Elo5CLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGExMDdhYjQtZTYyNy0z YzQ0LTkyMDYtNDA3Njk2NjU3MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACjkPAJMuhghV7SbbELXaLNRAj9YMWAZIkB00GNFmBOXWI6jl0jTLGC 1ViiwkE/b4/nWEO7MdChfu3ydifXdiYlWuoU/zVz0AgDv90uZppbL4VpC4j7hnoZ R4JHM1mDruQzyc15tVgGyXrb7aZQEwausL379im19YXPdLMQENN+NqLsLcflFYWP N0QiY4wkKhwbRrVomkC34YpmQwsbTnkOrNQ1Xsa77kGoc/b0V/kgaiIaks/QmPwB gP8qAuwCaA5PFcvKVHYT9yZrKG0KbUKsIqCHECMt9iJY/aGITdAOQwqwD1v6HQir wZE3hIHvCGwjGVVqUGCXygqeHpyFdVI= -----END CERTIFICATE-----Generated at Tue Oct 21 04:45:39 2025 by rpki-client