$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f264371-09ec-3588-9cfc-ef6fdf8e3302.roa File: 4f264371-09ec-3588-9cfc-ef6fdf8e3302.roa (raw, json) Hash identifier: gf4pieybpsF+HvB2+LDUk9VcgI69liCKdMMaEq8m74A= Subject key identifier: A9:E0:F3:F0:6A:71:0C:AF:5F:A1:0D:CA:24:2C:27:E0:73:2E:47:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B540C68566A089E560D80DF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f264371-09ec-3588-9cfc-ef6fdf8e3302.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.36.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:68:56:6a:08:9e:56:0d:80:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=fa531a5b-9280-438b-942b-71d219857f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:bb:37:af:c9:2f:d2:cd:9f:94:ac:4b:3a: 2f:bd:13:7a:f3:ef:c9:77:1c:f8:f5:e5:14:88:59: dd:d0:f3:d0:40:39:2b:55:9e:e2:2e:8e:71:77:eb: 3d:07:61:da:e6:89:07:6f:82:6d:26:c9:83:a7:98: 56:16:e8:49:5c:76:0f:a3:d8:7a:f6:1d:c7:7a:2b: 71:66:ed:75:2b:5a:a4:2e:78:b0:01:c6:a0:87:a3: 36:ed:fa:99:6a:33:27:d1:bd:99:47:9d:73:b8:39: 25:5a:e9:80:17:87:a8:57:4a:74:76:b0:c2:db:66: d3:7a:6c:55:e8:84:60:61:ba:c8:6d:af:79:8c:da: 00:7c:ca:33:25:7d:0b:b0:44:e7:ea:70:f8:33:e5: 15:c1:9c:a0:2d:c2:23:26:50:cc:3e:cd:cb:cd:aa: 61:29:e9:98:10:d7:3b:5d:c5:19:ff:2c:e9:c9:3e: 30:04:a8:5e:e5:c1:76:f7:7b:e7:0b:a6:89:aa:ef: 8b:15:ee:8e:3f:7c:88:3b:1c:60:7f:c8:3a:1a:a5: 31:55:e4:a6:97:e7:8e:5c:5b:dd:a2:da:17:8a:17: a3:80:c3:fc:8b:02:8a:48:e7:23:8a:19:6b:2b:58: f1:37:85:34:d3:1d:f2:eb:ff:d5:37:c8:8e:d2:27: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E0:F3:F0:6A:71:0C:AF:5F:A1:0D:CA:24:2C:27:E0:73:2E:47:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f264371-09ec-3588-9cfc-ef6fdf8e3302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:28:df:af:13:5b:4b:d8:62:c6:f8:8d:d4:f3:9a:1c:33:22: 07:0d:cc:d2:38:d7:be:54:c9:b5:f9:aa:b5:b9:9b:95:40:70: 7f:0a:08:97:06:a4:45:98:36:c6:65:24:33:31:75:d0:16:9f: 33:73:b2:b5:23:18:a4:a1:1c:b7:2d:8b:18:d7:ae:4a:d5:03: cb:62:aa:38:3a:89:ce:88:6b:a3:dd:8a:cb:06:e0:f5:69:ef: 27:bc:60:23:b9:de:bf:c5:82:58:f1:34:08:43:f7:7f:33:ab: 50:33:7e:7e:6e:de:60:36:2d:1b:e7:42:6f:e2:3e:70:5b:55: dc:a9:8b:ac:92:34:8b:06:ae:cd:ab:15:ab:e2:cd:88:44:84: aa:d0:d9:5d:80:d4:99:da:22:77:af:f1:af:46:37:da:d8:f5: 35:5e:e3:2c:05:d3:74:09:c0:f7:de:53:cc:8f:78:cf:8f:99: 24:0e:54:e6:17:b1:55:36:6c:5c:29:c4:5c:1e:d2:94:2c:0a: b1:09:b6:be:59:6c:3e:2c:f0:78:6c:9c:69:7d:c0:1e:dc:67: 29:8c:96:a9:8a:af:fa:56:7c:ca:c7:e8:13:5e:e1:66:99:af: ad:25:08:61:7b:49:9d:09:12:1a:13:93:3a:92:f6:d6:96:cb: f0:9c:b2:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGhWagieVg2A3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmE1MzFhNWItOTI4MC00MzhiLTk0MmItNzFkMjE5ODU3Zjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAC7N6/JL9LNn5SsSzovvRN68+/Jdxz49eUU iFnd0PPQQDkrVZ7iLo5xd+s9B2Ha5okHb4JtJsmDp5hWFuhJXHYPo9h69h3Heitx Zu11K1qkLniwAcagh6M27fqZajMn0b2ZR51zuDklWumAF4eoV0p0drDC22bTemxV 6IRgYbrIba95jNoAfMozJX0LsETn6nD4M+UVwZygLcIjJlDMPs3LzaphKemYENc7 XcUZ/yzpyT4wBKhe5cF293vnC6aJqu+LFe6OP3yIOxxgf8g6GqUxVeSml+eOXFvd otoXihejgMP8iwKKSOcjihlrK1jxN4U00x3y6//VN8iO0ieqfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKng8/BqcQyvX6ENyiQsJ+BzLkfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGYyNjQzNzEtMDllYy0z NTg4LTljZmMtZWY2ZmRmOGUzMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8o368TW0vYYsb4jdTzmhwzIgcNzNI4175UybX5qrW5m5VAcH8KCJcG pEWYNsZlJDMxddAWnzNzsrUjGKShHLctixjXrkrVA8tiqjg6ic6Ia6PdissG4PVp 7ye8YCO53r/FgljxNAhD938zq1Azfn5u3mA2LRvnQm/iPnBbVdypi6ySNIsGrs2r FavizYhEhKrQ2V2A1JnaInev8a9GN9rY9TVe4ywF03QJwPfeU8yPeM+PmSQOVOYX sVU2bFwpxFwe0pQsCrEJtr5ZbD4s8HhsnGl9wB7cZymMlqmKr/pWfMrH6BNe4WaZ r60lCGF7SZ0JEhoTkzqS9taWy/Ccstg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:58:53 2025 by rpki-client