$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1dd81d-af2a-3b5d-8676-b6f9b81fc80e.roa File: 4e1dd81d-af2a-3b5d-8676-b6f9b81fc80e.roa (raw, json) Hash identifier: mLvmHe+nMQP5SArHQLy7TviYi05EVqGQSFiDzcSAHvk= Subject key identifier: 62:0A:E9:5D:8A:DE:8B:2E:1E:06:96:72:A1:26:31:5E:3C:6B:52:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19B897F85007831A80BF8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1dd81d-af2a-3b5d-8676-b6f9b81fc80e.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.38.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9b:89:7f:85:00:78:31:a8:0b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=ba99acab-d1d8-4c25-a450-a8d35a75baec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:44:e0:ac:e7:4a:98:0e:2a:f4:05:52:2b: 25:10:21:12:85:7c:d2:d6:cc:b2:e9:7c:de:73:74: 1a:ee:04:54:16:30:65:49:62:a0:3a:d2:5f:9f:ca: bd:5f:07:a4:b0:99:e7:6b:d1:48:6c:d9:98:35:2c: a1:d6:e6:42:a5:16:21:2b:06:47:9b:ca:01:4b:88: 96:fc:6b:ff:ab:77:4e:4b:bc:a2:8c:73:61:d1:91: a7:0d:2a:41:00:64:66:3c:19:35:e3:cb:66:82:df: 02:34:54:04:6b:a1:7c:9f:6d:b4:64:aa:97:24:b7: 67:ba:07:0b:00:0b:d3:9c:63:63:3b:e1:44:1b:9f: ec:bb:27:97:85:22:2e:5c:cc:ab:89:17:3d:e0:63: a3:7d:e6:be:74:e0:a8:22:fc:2d:fa:c9:55:af:74: c4:25:09:65:07:2e:4c:0b:4c:fa:37:87:5a:ab:7d: c8:a1:3e:1b:fe:be:8a:9b:e0:51:78:e9:6a:ee:66: 18:8e:57:99:6b:43:e7:75:f6:3a:72:4b:5a:00:f7: 2e:53:88:44:6b:e6:66:1d:18:8c:f7:78:91:89:e1: 16:4e:1a:04:e6:95:ed:e2:46:fa:ad:42:86:8c:67: e5:c8:8f:d6:4f:94:3d:23:43:e6:d9:69:53:4d:9d: f9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0A:E9:5D:8A:DE:8B:2E:1E:06:96:72:A1:26:31:5E:3C:6B:52:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e1dd81d-af2a-3b5d-8676-b6f9b81fc80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:11:e9:d9:7f:08:c5:b3:2d:69:c6:aa:f5:af:94:41:ae:42: 1b:15:84:df:3b:42:0b:3a:65:09:6c:46:70:f5:5c:4c:1f:6b: c1:7b:8d:47:84:9e:1c:cc:df:e6:1c:a0:1c:15:76:b8:1a:f5: e6:a8:56:51:91:ef:87:a9:d1:70:7a:79:01:69:bb:ae:82:49: 0a:ce:40:10:f0:ef:6a:b0:9d:22:24:fa:33:bc:9b:43:c1:fe: a0:ac:0c:d7:5e:d7:ef:b5:20:d1:10:78:f3:34:db:9f:3a:9b: 58:1a:10:5f:37:36:34:fd:1a:5c:64:7b:9b:51:27:f5:36:bc: b3:0d:c9:81:bb:d3:c2:7c:79:a4:af:d5:0b:d9:bd:e1:59:0f: e3:f4:1a:84:1b:ca:13:fb:de:29:8e:b7:44:3f:0f:b5:15:54: 68:cf:ca:ad:e6:b0:66:89:ee:49:cf:82:15:f8:d8:56:f4:10: cd:1a:a7:3a:fd:d3:8a:78:a7:e9:0d:4d:86:c4:d5:00:f9:ee: 81:70:47:65:43:d0:2b:7c:24:53:f4:d4:48:50:92:d4:3c:47: 1a:71:90:14:6f:5c:03:e9:33:94:40:3b:27:7b:cf:0c:23:a8: fa:b4:9a:3b:6e:51:93:c0:4a:0c:20:e5:1c:ed:0c:62:4b:32: cd:12:64:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZuJf4UAeDGoC/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YmE5OWFjYWItZDFkOC00YzI1LWE0NTAtYThkMzVhNzViYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVJE4KznSpgOKvQFUislECEShXzS1syy6Xze c3Qa7gRUFjBlSWKgOtJfn8q9XweksJnna9FIbNmYNSyh1uZCpRYhKwZHm8oBS4iW /Gv/q3dOS7yijHNh0ZGnDSpBAGRmPBk148tmgt8CNFQEa6F8n220ZKqXJLdnugcL AAvTnGNjO+FEG5/suyeXhSIuXMyriRc94GOjfea+dOCoIvwt+slVr3TEJQllBy5M C0z6N4daq33IoT4b/r6Km+BReOlq7mYYjleZa0PndfY6cktaAPcuU4hEa+ZmHRiM 93iRieEWThoE5pXt4kb6rUKGjGflyI/WT5Q9I0Pm2WlTTZ35PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIK6V2K3osuHgaWcqEmMV48a1JrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGUxZGQ4MWQtYWYyYS0z YjVkLTg2NzYtYjZmOWI4MWZjODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEER6dl/CMWzLWnGqvWvlEGuQhsVhN87Qgs6ZQlsRnD1XEwfa8F7jUeE nhzM3+YcoBwVdrga9eaoVlGR74ep0XB6eQFpu66CSQrOQBDw72qwnSIk+jO8m0PB /qCsDNde1++1INEQePM02586m1gaEF83NjT9Glxke5tRJ/U2vLMNyYG708J8eaSv 1QvZveFZD+P0GoQbyhP73imOt0Q/D7UVVGjPyq3msGaJ7knPghX42Fb0EM0apzr9 04p4p+kNTYbE1QD57oFwR2VD0Ct8JFP01EhQktQ8RxpxkBRvXAPpM5RAOyd7zwwj qPq0mjtuUZPASgwg5RztDGJLMs0SZMA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:49 2025 by rpki-client