$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de20a32-80c9-3be8-8ab2-3d86138b7492.roa File: 4de20a32-80c9-3be8-8ab2-3d86138b7492.roa (raw, json) Hash identifier: qV09aPsPY5Kp6tuZtBbQn1YLFlSADHGYoNUgK4v/aHs= Subject key identifier: D1:4A:34:76:EF:35:D5:EF:8D:0F:DB:05:1F:25:90:22:0C:FE:A9:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A16722C6329007F88580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de20a32-80c9-3be8-8ab2-3d86138b7492.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.41.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a1:67:22:c6:32:90:07:f8:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=35dda27d-df71-431f-91cb-c2edfa8c56b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:50:a0:38:a5:b3:c7:4e:ac:c9:86:45:e8: 74:2e:eb:fd:49:20:1c:07:b8:a7:a1:c3:77:a2:0c: c2:e7:e0:59:68:51:5e:27:45:54:8a:c3:6e:89:5d: 88:01:29:79:91:11:d8:3e:e9:30:e5:ea:20:73:51: cc:ce:70:18:ce:c8:c7:1a:40:81:ef:7a:b2:3d:11: 27:08:f4:56:6d:a0:e6:27:f9:d6:6e:4e:be:f8:eb: 5f:16:04:e3:fa:c5:d6:06:4d:ae:50:a6:7f:7e:23: 95:07:1f:e0:ea:22:73:01:ac:cd:9e:ba:62:a0:95: e8:88:f3:69:8c:56:4e:02:cb:d9:8f:11:1c:a6:f7: b9:04:27:7b:f2:4b:85:6f:49:af:c5:f4:4c:14:f5: 5b:4a:2d:04:a7:9b:ca:bd:d3:8c:21:57:21:21:ab: ff:84:18:5e:7f:62:96:65:4c:c0:3a:55:fd:49:fb: ca:0d:ea:58:21:16:28:4f:cd:60:7b:6a:a4:18:08: 4d:b7:89:ba:63:fa:24:03:99:5a:6a:40:55:5e:7b: f4:da:8f:9c:88:bc:b0:ca:70:72:32:af:2d:7a:31: fc:99:92:78:68:b0:01:35:70:c6:38:54:38:e3:24: ea:f8:aa:94:d1:f1:3e:9d:8a:f5:56:82:4c:14:e4: e4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:34:76:EF:35:D5:EF:8D:0F:DB:05:1F:25:90:22:0C:FE:A9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4de20a32-80c9-3be8-8ab2-3d86138b7492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:25:34:7c:99:9a:de:03:04:72:94:9f:7d:be:7c:cd:9f:4a: f0:86:41:1e:43:89:01:ea:52:f6:ed:18:c6:c9:a9:00:d4:5d: 06:1a:af:5f:4f:21:09:26:19:3d:40:65:5b:05:aa:8f:1b:81: 60:cd:2a:e8:29:2e:5c:93:32:43:9b:7a:b5:0a:bc:c4:ac:0e: 52:f1:2a:25:6a:25:35:21:b0:77:da:42:af:db:6a:9c:53:b5: 1f:e1:e3:a7:b1:f0:6d:89:25:22:ef:c4:25:52:81:77:ec:76: 33:0e:c9:46:80:00:9b:6e:b7:a4:b0:0a:b5:04:47:db:3f:02: 70:79:84:1a:81:e7:90:bf:ad:dc:2c:4f:5c:52:43:25:b0:b0: e2:90:eb:b7:67:e1:55:fa:22:4f:c5:bb:38:03:1f:19:89:1b: 27:f8:04:ca:5b:85:9a:b6:81:d7:1b:71:ea:51:da:e6:35:71: fd:22:dc:b0:53:72:21:79:d5:70:ef:21:f3:56:91:2c:cf:18: a0:68:6d:a9:9a:ce:9f:c7:b6:70:4d:b1:d5:19:b0:fa:6e:36: 2c:60:9b:86:50:73:1e:2c:b4:21:b2:f5:04:d7:f0:65:09:c4: 93:20:0a:62:a1:3f:3f:b0:d8:fd:c8:79:25:be:27:57:1f:19: 10:9d:9c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aFnIsYykAf4hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MzVkZGEyN2QtZGY3MS00MzFmLTkxY2ItYzJlZGZhOGM1NmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2VQoDils8dOrMmGReh0Luv9SSAcB7inocN3 ogzC5+BZaFFeJ0VUisNuiV2IASl5kRHYPukw5eogc1HMznAYzsjHGkCB73qyPREn CPRWbaDmJ/nWbk6++OtfFgTj+sXWBk2uUKZ/fiOVBx/g6iJzAazNnrpioJXoiPNp jFZOAsvZjxEcpve5BCd78kuFb0mvxfRMFPVbSi0Ep5vKvdOMIVchIav/hBhef2KW ZUzAOlX9SfvKDepYIRYoT81ge2qkGAhNt4m6Y/okA5laakBVXnv02o+ciLywynBy Mq8tejH8mZJ4aLABNXDGOFQ44yTq+KqU0fE+nYr1VoJMFOTkzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFKNHbvNdXvjQ/bBR8lkCIM/qlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGRlMjBhMzItODBjOS0z YmU4LThhYjItM2Q4NjEzOGI3NDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFymgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4lNHyZmt4DBHKUn32+fM2fSvCGQR5DiQHqUvbtGMbJqQDUXQYar19P IQkmGT1AZVsFqo8bgWDNKugpLlyTMkOberUKvMSsDlLxKiVqJTUhsHfaQq/bapxT tR/h46ex8G2JJSLvxCVSgXfsdjMOyUaAAJtut6SwCrUER9s/AnB5hBqB55C/rdws T1xSQyWwsOKQ67dn4VX6Ik/FuzgDHxmJGyf4BMpbhZq2gdcbcepR2uY1cf0i3LBT ciF51XDvIfNWkSzPGKBobamazp/HtnBNsdUZsPpuNixgm4ZQcx4stCGy9QTX8GUJ xJMgCmKhPz+w2P3IeSW+J1cfGRCdnGU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:54:04 2025 by rpki-client