$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510b49b3-6a5e-3dbe-892d-054c4bae45cf.roa File: 510b49b3-6a5e-3dbe-892d-054c4bae45cf.roa (raw, json) Hash identifier: e2BjvdAZ0w2eU8srvO1YknJUijNVl51mNjrENoe8jgw= Subject key identifier: 19:F9:F7:8E:A5:2E:86:5C:AF:74:98:87:BC:17:88:D7:2E:54:57:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A90ED9C250B892AE1700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510b49b3-6a5e-3dbe-892d-054c4bae45cf.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.39.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a9:0e:d9:c2:50:b8:92:ae:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=51c31e27-efa1-4ed3-bf07-b2ddb652056a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:33:e7:04:a5:48:e7:b9:cc:a7:16:b6:54:6a: be:b8:a8:4f:79:db:49:5c:ae:a0:39:24:bb:19:98: db:e1:b2:de:a4:4d:8b:4c:79:a8:42:4d:b1:ce:04: 76:18:dd:2d:9c:85:d0:b9:49:10:50:47:6f:4f:e8: 42:69:27:1f:2d:19:a2:91:c7:92:c8:8f:f8:b1:ac: 45:6f:88:fd:eb:87:3e:ca:73:9c:db:86:4e:7f:8a: fe:49:d6:b2:ea:52:2b:91:f7:eb:01:7c:b4:ae:90: e4:f2:da:33:44:63:74:f8:ad:16:67:07:59:d3:62: b8:49:2f:06:58:36:38:18:65:61:6b:1f:bd:7b:40: 8a:88:24:ae:e4:b8:f5:0d:dc:6e:07:44:23:81:fa: 1a:14:d9:1b:d0:fa:b8:55:64:bf:b4:6d:d8:93:fd: ea:b4:8e:fb:14:ae:97:0c:ae:71:a8:ae:43:02:a0: 75:98:5e:bb:66:9a:aa:c7:3b:16:a1:f0:79:b0:fe: 9f:9b:af:18:f2:0e:f2:c2:fd:be:e7:8c:eb:3b:b1: db:3e:ee:29:9d:fc:3b:93:18:91:b2:55:d8:9b:d5: 14:34:f1:98:16:dc:5e:23:3a:4c:85:37:69:dd:7a: aa:f1:7d:0a:15:94:11:78:eb:62:3b:c0:c6:19:14: 19:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F9:F7:8E:A5:2E:86:5C:AF:74:98:87:BC:17:88:D7:2E:54:57:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510b49b3-6a5e-3dbe-892d-054c4bae45cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f9:68:63:36:e1:a7:4d:13:30:b5:d9:84:0a:4d:fe:f6:f6: a7:8d:14:42:4e:0e:3c:79:6c:2f:a7:df:b3:96:99:3b:f7:02: 6e:26:98:7b:41:bb:39:aa:e2:e2:30:02:d6:06:d4:27:28:c8: e1:a4:b3:6c:51:f4:5e:15:b2:67:71:c0:9d:d4:6b:30:5d:47: cc:b0:5b:7f:15:ec:f5:f9:5b:80:5c:c7:bf:79:68:84:f2:25: af:1d:9d:1a:e5:44:5d:bc:6d:fb:fa:77:7f:62:73:3f:0b:73: 28:00:28:16:72:d8:43:e7:12:a3:88:6c:4f:ea:71:20:53:6a: c9:e2:1a:f8:79:a1:68:cd:dd:4c:42:60:b0:38:cf:24:29:2f: 91:f5:cd:31:a1:43:d3:7a:0e:7a:26:b1:0e:02:bf:1f:e5:7e: 9f:4b:0c:bc:5a:81:2e:4c:60:3c:1c:cd:c4:d8:c0:77:cd:64: 70:5a:69:e4:15:20:35:aa:de:a2:57:2d:02:13:45:10:9f:ed: 9b:39:d5:1f:83:e4:06:dd:ab:30:ab:c1:0a:6b:68:25:24:38: b6:76:3c:03:8a:ac:09:28:0d:5b:be:f5:39:d9:9c:91:ed:22: 02:f6:82:12:f1:22:16:c7:37:ab:f6:73:58:22:6a:d7:be:9a: 3f:dc:40:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0akO2cJQuJKuFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NTFjMzFlMjctZWZhMS00ZWQzLWJmMDctYjJkZGI2NTIwNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjPnBKVI57nMpxa2VGq+uKhPedtJXK6gOSS7 GZjb4bLepE2LTHmoQk2xzgR2GN0tnIXQuUkQUEdvT+hCaScfLRmikceSyI/4saxF b4j964c+ynOc24ZOf4r+Sday6lIrkffrAXy0rpDk8tozRGN0+K0WZwdZ02K4SS8G WDY4GGVhax+9e0CKiCSu5Lj1DdxuB0QjgfoaFNkb0Pq4VWS/tG3Yk/3qtI77FK6X DK5xqK5DAqB1mF67ZpqqxzsWofB5sP6fm68Y8g7ywv2+54zrO7HbPu4pnfw7kxiR slXYm9UUNPGYFtxeIzpMhTdp3Xqq8X0KFZQReOtiO8DGGRQZhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn5946lLoZcr3SYh7wXiNcuVFdTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTEwYjQ5YjMtNmE1ZS0z ZGJlLTg5MmQtMDU0YzRiYWU0NWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFycEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH5aGM24adNEzC12YQKTf729qeNFEJODjx5bC+n37OWmTv3Am4mmHtB uzmq4uIwAtYG1CcoyOGks2xR9F4VsmdxwJ3UazBdR8ywW38V7PX5W4Bcx795aITy Ja8dnRrlRF28bfv6d39icz8LcygAKBZy2EPnEqOIbE/qcSBTasniGvh5oWjN3UxC YLA4zyQpL5H1zTGhQ9N6DnomsQ4Cvx/lfp9LDLxagS5MYDwczcTYwHfNZHBaaeQV IDWq3qJXLQITRRCf7Zs51R+D5AbdqzCrwQpraCUkOLZ2PAOKrAkoDVu+9TnZnJHt IgL2ghLxIhbHN6v2c1giate+mj/cQOo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:39 2025 by rpki-client