$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa File: 535ca5e8-8eea-348a-8f21-12be826d9d2f.roa (raw, json) Hash identifier: xOtbVtbgP0LcPig6nkBcHeb4mxoeb9J1dJoVdFOJfb0= Subject key identifier: 36:7B:F0:62:41:74:9C:A4:E8:DB:18:86:9D:F6:9C:BC:3D:D8:F1:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B5B075844FB136AFBA57BE100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.209.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:58:44:fb:13:6a:fb:a5:7b:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9a263b41-df59-47d4-9d77-fd617845ef49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:80:36:e9:74:6d:21:ad:43:34:b1:f8:6f: 3e:3a:fd:5a:68:d4:18:37:76:46:71:cf:9a:c7:16: da:9b:ef:66:c1:c1:a0:e1:81:10:de:77:a2:3a:38: 2d:e4:2f:1f:80:93:5d:48:0e:62:39:b8:82:03:de: 11:18:a3:1f:79:fb:f6:68:52:3c:12:e7:6e:85:36: c3:f6:87:99:36:55:ef:fe:32:ec:e3:c2:fe:e3:fa: 98:0f:22:9a:a5:74:9b:55:c9:7a:0d:a0:83:4f:b1: e6:03:4c:68:8b:c7:16:ca:b3:97:5d:09:f1:f0:d9: 15:aa:2a:01:f0:0d:fa:2f:e1:e0:bd:3a:17:6c:3b: 91:13:61:f8:50:e3:d0:f6:3b:ae:d1:fa:08:ae:92: 6f:8b:41:27:c5:0c:c8:49:64:f1:0d:86:bb:dd:35: 66:f9:70:0c:69:25:4b:ea:b9:b2:8c:59:8d:5f:68: f5:cf:90:00:40:2f:3e:87:4c:b2:ae:71:11:25:10: 38:6b:17:ef:e5:55:ea:0e:6d:bf:ee:f0:58:e3:09: 7c:fc:69:ca:b0:e6:63:33:33:ee:09:92:28:75:e5: d1:07:33:06:36:3d:56:84:69:5a:86:0c:0e:e7:18: e7:ac:76:2a:b0:64:4f:6e:41:72:02:d2:75:47:66: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7B:F0:62:41:74:9C:A4:E8:DB:18:86:9D:F6:9C:BC:3D:D8:F1:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/535ca5e8-8eea-348a-8f21-12be826d9d2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.209.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:29:f0:53:23:6c:f6:9e:35:24:68:75:1c:82:a8:72:c5:5b: 14:83:42:78:5d:2c:05:ca:07:f6:05:7b:25:46:ba:10:77:cf: 1f:97:49:d5:76:ed:fc:6f:70:ac:af:f1:80:cf:76:bb:f8:14: 88:d5:c9:b2:03:7f:ae:48:b2:40:d7:90:ce:34:42:42:14:ad: c3:c2:a3:ea:81:8c:cb:3b:cd:5c:9d:59:c8:53:e1:c7:de:85: 5a:96:2a:f2:0f:01:20:ef:67:63:d5:2c:41:d4:f5:de:81:fb: 27:c9:00:8b:41:55:bb:d8:ee:44:1e:47:b1:98:22:7d:9f:91: 6e:8a:7a:e4:7b:b2:ae:5f:3e:d3:c6:51:d8:da:1a:fb:e9:fb: 22:73:83:cc:ae:10:3d:00:50:0c:8c:61:4f:4f:6d:b8:c9:c4: 4e:b6:ac:55:50:6f:40:11:d0:ad:b6:52:6f:18:50:ee:88:32: f5:6c:74:d8:bd:fb:0e:b8:7f:98:e3:3e:5b:22:a6:40:f1:2c: cd:e6:bc:07:87:2b:7f:cd:84:5f:27:dd:38:58:63:1e:ed:d4: 37:6c:1c:af:64:53:35:41:e6:f9:66:60:21:81:be:87:b1:30: 95:a1:dc:13:90:19:f2:d8:b7:a6:ec:9a:e4:5c:f8:43:f6:01: c4:c7:cb:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1hE+xNq+6V74QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWEyNjNiNDEtZGY1OS00N2Q0LTlkNzctZmQ2MTc4NDVlZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOaANul0bSGtQzSx+G8+Ov1aaNQYN3ZGcc+a xxbam+9mwcGg4YEQ3neiOjgt5C8fgJNdSA5iObiCA94RGKMfefv2aFI8EuduhTbD 9oeZNlXv/jLs48L+4/qYDyKapXSbVcl6DaCDT7HmA0xoi8cWyrOXXQnx8NkVqioB 8A36L+HgvToXbDuRE2H4UOPQ9juu0foIrpJvi0EnxQzISWTxDYa73TVm+XAMaSVL 6rmyjFmNX2j1z5AAQC8+h0yyrnERJRA4axfv5VXqDm2/7vBY4wl8/GnKsOZjMzPu CZIodeXRBzMGNj1WhGlahgwO5xjnrHYqsGRPbkFyAtJ1R2a3swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ78GJBdJyk6NsYhp32nLw92PGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTM1Y2E1ZTgtOGVlYS0z NDhhLThmMjEtMTJiZTgyNmQ5ZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF9EoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwp8FMjbPaeNSRodRyCqHLFWxSDQnhdLAXKB/YFeyVGuhB3zx+XSdV2 7fxvcKyv8YDPdrv4FIjVybIDf65IskDXkM40QkIUrcPCo+qBjMs7zVydWchT4cfe hVqWKvIPASDvZ2PVLEHU9d6B+yfJAItBVbvY7kQeR7GYIn2fkW6KeuR7sq5fPtPG UdjaGvvp+yJzg8yuED0AUAyMYU9PbbjJxE62rFVQb0AR0K22Um8YUO6IMvVsdNi9 +w64f5jjPlsipkDxLM3mvAeHK3/NhF8n3ThYYx7t1DdsHK9kUzVB5vlmYCGBvoex MJWh3BOQGfLYt6bsmuRc+EP2AcTHy/w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:31 2025 by rpki-client