$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ad9fb7f-e35a-3ab2-982d-ff8a3be098f1.roa File: 4ad9fb7f-e35a-3ab2-982d-ff8a3be098f1.roa (raw, json) Hash identifier: ixZl2iiNRP+muHt0xK0eT/WDYwlxPrMP0RN8BUKrPQQ= Subject key identifier: 7E:4E:9D:30:1E:81:CE:B0:08:10:34:F4:21:1F:AF:FC:4A:45:8A:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6FB6764D1E9DE5A4A0120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ad9fb7f-e35a-3ab2-982d-ff8a3be098f1.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.59.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:fb:67:64:d1:e9:de:5a:4a:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=71f897c9-7d73-431c-a509-1ac5652f6d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:20:bd:d8:95:27:fa:d8:d2:aa:ed:48:42: 3b:d6:01:39:4f:2c:94:92:f3:73:af:52:fc:86:34: 54:f9:59:f4:30:80:d9:32:f7:56:d8:06:a0:11:5c: 31:96:ba:3f:69:fe:09:e6:ac:e2:d8:d0:94:62:ef: d2:f6:fe:0e:cc:cb:d7:54:cf:45:c4:d5:47:cc:8e: 55:24:93:5e:e4:72:07:0d:98:b7:f3:b7:53:7f:f8: a8:cb:df:17:bc:34:98:be:ce:bc:5a:a7:97:ff:a0: 9a:46:04:7b:a2:74:b5:ff:68:b4:d9:85:23:2f:e6: 7e:64:0e:17:17:dc:93:5b:29:b7:7e:fc:ed:31:7e: 8f:d0:f8:9d:61:4f:44:ce:c2:14:13:45:e6:11:b8: 7d:56:7c:a0:c3:c7:b8:23:42:a5:a7:3a:de:98:10: 1f:e4:ec:b9:d6:76:7f:46:a4:af:19:7c:da:72:6f: 46:1c:82:c6:d1:c3:62:bd:a5:0f:16:50:54:f6:33: 0a:bc:16:bf:1c:99:b2:e6:38:16:86:cf:71:e0:d4: db:01:c8:6e:1b:77:89:f7:0a:84:ef:9b:de:bc:11: 90:30:9a:77:50:ba:6e:97:24:84:69:d6:2e:95:48: 03:09:c5:1d:69:28:57:86:77:82:ff:bd:a6:18:7a: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4E:9D:30:1E:81:CE:B0:08:10:34:F4:21:1F:AF:FC:4A:45:8A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4ad9fb7f-e35a-3ab2-982d-ff8a3be098f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:bb:34:ab:47:6f:eb:69:ca:33:d6:f0:c5:17:d5:ee:cc:6b: f1:db:70:b0:73:18:57:d9:7f:26:2c:42:ae:51:e0:51:e1:cc: 49:07:52:cd:f3:c0:8e:6f:71:5c:f3:53:7a:c6:1a:dc:8d:e7: 69:30:68:b4:dc:4f:d1:28:80:78:43:1e:17:78:c5:2b:8a:29: 45:dd:ab:15:10:c3:b5:c8:e1:e1:eb:3a:31:97:48:c9:61:3d: bb:12:6c:c5:47:bd:dd:66:32:e5:6e:a3:3b:7b:e0:5a:fd:74: 5a:f2:7e:1c:d3:ab:a5:11:7b:5e:07:42:7a:14:1c:cb:df:30: 21:17:c4:79:ff:dd:75:e9:e8:9f:c0:eb:c3:ee:72:19:af:91: 6a:6d:cc:74:2d:bf:37:f8:b6:26:df:6b:d0:7b:f1:06:a6:40: 50:b5:5d:70:43:45:4b:fc:82:c3:e9:f3:f5:32:91:b9:c2:98: f9:0f:51:f1:d8:0d:b5:9f:08:2f:45:51:66:8a:f2:a0:fc:94: e1:cd:f6:77:84:c2:7c:4e:f0:6b:0e:60:8e:11:f3:8d:4d:cc: 96:c8:fd:05:15:40:5c:8b:23:a8:a6:66:ce:b9:a7:e4:18:fe: 78:cf:d6:ca:df:8a:83:20:c8:32:90:23:8e:cf:4a:97:1d:5a: d6:a4:f8:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vtnZNHp3lpKASAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NzFmODk3YzktN2Q3My00MzFjLWE1MDktMWFjNTY1MmY2ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b4gvdiVJ/rY0qrtSEI71gE5TyyUkvNzr1L8 hjRU+Vn0MIDZMvdW2AagEVwxlro/af4J5qzi2NCUYu/S9v4OzMvXVM9FxNVHzI5V JJNe5HIHDZi387dTf/ioy98XvDSYvs68WqeX/6CaRgR7onS1/2i02YUjL+Z+ZA4X F9yTWym3fvztMX6P0PidYU9EzsIUE0XmEbh9Vnygw8e4I0KlpzremBAf5Oy51nZ/ RqSvGXzacm9GHILG0cNivaUPFlBU9jMKvBa/HJmy5jgWhs9x4NTbAchuG3eJ9wqE 75vevBGQMJp3ULpulySEadYulUgDCcUdaShXhneC/72mGHpkVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH5OnTAegc6wCBA09CEfr/xKRYpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFkOWZiN2YtZTM1YS0z YWIyLTk4MmQtZmY4YTNiZTA5OGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK7NKtHb+tpyjPW8MUX1e7Ma/HbcLBzGFfZfyYsQq5R4FHhzEkHUs3z wI5vcVzzU3rGGtyN52kwaLTcT9EogHhDHhd4xSuKKUXdqxUQw7XI4eHrOjGXSMlh PbsSbMVHvd1mMuVuozt74Fr9dFryfhzTq6URe14HQnoUHMvfMCEXxHn/3XXp6J/A 68PuchmvkWptzHQtvzf4tibfa9B78QamQFC1XXBDRUv8gsPp8/UykbnCmPkPUfHY DbWfCC9FUWaK8qD8lOHN9neEwnxO8GsOYI4R841NzJbI/QUVQFyLI6imZs65p+QY /njP1srfioMgyDKQI47PSpcdWtak+Cc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:20:00 2025 by rpki-client