$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7fce88-7f00-349b-ae68-7843cd9f0a5e.roa File: 4e7fce88-7f00-349b-ae68-7843cd9f0a5e.roa (raw, json) Hash identifier: 2/dGKVatdEHglPircpCm4eL6S8ze+9942t0J8Uu2xq4= Subject key identifier: B5:61:39:6D:72:64:A6:09:CE:4F:42:2B:B3:F0:12:44:EF:44:93:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1F017DFFD01F399AC9B50240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7fce88-7f00-349b-ae68-7843cd9f0a5e.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.47.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:7d:ff:d0:1f:39:9a:c9:b5:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3e3be4e1-3406-494a-b2e5-622137e23f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:4d:c4:94:5f:ba:16:18:2a:3b:de:87:91: 86:39:56:53:71:e0:a8:98:ec:88:88:49:34:4c:f5: 54:59:9f:45:2e:0e:a4:01:b5:ba:f2:9c:cc:98:3d: 0c:47:64:1d:9d:79:3f:87:90:95:98:51:1a:b7:fb: ca:17:9c:f0:ef:9e:67:29:28:f7:17:5f:a2:95:20: 8d:21:2b:8e:7c:a0:d4:92:71:a4:39:e3:c2:d8:63: 05:c0:7d:57:2e:40:e1:05:d6:aa:89:20:a4:f6:7c: ab:0e:2d:f5:1d:6a:c6:e4:d0:a3:91:00:c2:8e:0d: 45:fe:71:0b:2d:a2:51:82:34:3c:da:1f:3e:cb:d9: 87:92:60:50:9f:84:5d:81:9e:39:62:a7:2e:6a:88: e6:40:d7:16:09:31:f7:a2:6c:95:c6:cb:53:65:24: 83:ee:7a:e0:0c:8a:4d:4d:40:4d:f5:5c:3c:55:a4: 12:c6:b7:fe:d1:c3:a5:83:86:db:86:64:8d:c0:50: 75:6a:ae:93:0c:45:f2:dd:64:9a:ab:19:7c:18:ec: ce:7b:3e:35:2a:22:8e:18:7c:67:d9:2b:a4:68:7b: a0:a7:4a:6d:74:7d:d8:64:e5:8d:f4:6e:a4:92:a6: 63:2c:01:c5:d4:b9:b8:63:53:c8:ab:03:0e:c3:9b: 7c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:61:39:6D:72:64:A6:09:CE:4F:42:2B:B3:F0:12:44:EF:44:93:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4e7fce88-7f00-349b-ae68-7843cd9f0a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.47.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:13:3d:ba:89:6d:46:76:17:e1:52:5f:f8:cf:9b:9e:64:9a: 2f:2e:ac:ae:35:9b:5b:62:e6:a2:79:f2:59:a3:ab:c3:ec:09: f4:f7:41:b4:8f:94:99:d5:fc:ae:36:f2:5e:e0:e1:29:23:95: 32:0b:ef:c4:03:a2:8f:bd:73:2b:77:63:ec:00:96:5a:8f:0f: bc:c7:06:c3:c7:80:f7:ce:77:fd:ff:e9:8d:a4:5a:a7:91:02: c8:ac:88:72:2b:44:57:28:7b:4d:79:95:c1:cd:97:d5:32:ef: 01:5e:c0:59:ea:bb:11:bc:57:c4:29:7e:96:69:4c:8c:f7:39: ea:ca:1d:01:91:c8:c6:70:1b:1a:bf:f0:f1:a9:fe:67:d1:6a: dc:3f:49:e1:b7:d9:03:3b:a7:6a:fc:91:44:c7:fe:b6:7d:6e: 9c:63:11:76:17:aa:c3:ff:79:16:cd:2f:fe:e0:79:ed:cc:4a: dc:77:93:59:44:00:77:94:fc:39:7c:5e:07:4a:c1:e2:d1:50: 53:9b:55:a8:76:d9:e2:95:d8:94:76:c8:1c:4f:17:b2:1d:48: dd:52:22:f3:4f:d2:4b:53:00:69:ef:93:f9:8b:89:06:e6:38: 6f:60:4f:64:35:7f:d8:30:5f:40:28:b4:38:5c:a8:17:fc:8e: 9a:df:96:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAX3/0B85msm1AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2UzYmU0ZTEtMzQwNi00OTRhLWIyZTUtNjIyMTM3ZTIzZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4NNxJRfuhYYKjveh5GGOVZTceComOyIiEk0 TPVUWZ9FLg6kAbW68pzMmD0MR2QdnXk/h5CVmFEat/vKF5zw755nKSj3F1+ilSCN ISuOfKDUknGkOePC2GMFwH1XLkDhBdaqiSCk9nyrDi31HWrG5NCjkQDCjg1F/nEL LaJRgjQ82h8+y9mHkmBQn4RdgZ45YqcuaojmQNcWCTH3omyVxstTZSSD7nrgDIpN TUBN9Vw8VaQSxrf+0cOlg4bbhmSNwFB1aq6TDEXy3WSaqxl8GOzOez41KiKOGHxn 2SukaHugp0ptdH3YZOWN9G6kkqZjLAHF1Lm4Y1PIqwMOw5t8VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVhOW1yZKYJzk9CK7PwEkTvRJNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGU3ZmNlODgtN2YwMC0z NDliLWFlNjgtNzg0M2NkOWYwYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFy94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJITPbqJbUZ2F+FSX/jPm55kmi8urK41m1ti5qJ58lmjq8PsCfT3QbSP lJnV/K428l7g4SkjlTIL78QDoo+9cyt3Y+wAllqPD7zHBsPHgPfOd/3/6Y2kWqeR AsisiHIrRFcoe015lcHNl9Uy7wFewFnquxG8V8QpfpZpTIz3OerKHQGRyMZwGxq/ 8PGp/mfRatw/SeG32QM7p2r8kUTH/rZ9bpxjEXYXqsP/eRbNL/7gee3MStx3k1lE AHeU/Dl8XgdKweLRUFObVah22eKV2JR2yBxPF7IdSN1SIvNP0ktTAGnvk/mLiQbm OG9gT2Q1f9gwX0AotDhcqBf8jprfljo= -----END CERTIFICATE-----Generated at Mon Oct 20 05:27:17 2025 by rpki-client