$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542fc499-d4fa-3704-a429-d5298e8dbea3.roa File: 542fc499-d4fa-3704-a429-d5298e8dbea3.roa (raw, json) Hash identifier: xYs4QbpcUp0Z4g+TWtcZZHY2WeIzbzw8qlW00seYvMY= Subject key identifier: 37:E7:3C:EE:97:14:B5:95:48:08:A2:C7:00:3C:73:41:F0:2F:5E:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1AE34AF8B562A9CA35000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542fc499-d4fa-3704-a429-d5298e8dbea3.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.42.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:ae:34:af:8b:56:2a:9c:a3:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=9a88be22-52ff-4191-8d74-9649900d5b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:f2:a0:f9:f2:7e:ac:b0:7f:d7:64:cb:cf: 3c:93:fa:9b:4c:78:2f:e9:98:74:dd:88:40:d9:ee: 15:1c:12:0d:30:3d:98:cd:99:20:2d:21:08:db:ad: 8f:43:c2:06:31:ad:e9:1d:73:19:9f:8f:dd:7f:2b: f1:9e:7b:9b:36:54:8d:bc:91:ef:ef:70:bb:e1:40: cf:35:41:53:a1:e3:d3:52:6e:36:97:0f:a1:f8:12: 5f:9a:80:3e:c6:d1:d8:69:ff:9c:88:56:02:52:58: a9:4f:59:5c:4b:bb:d6:c0:bc:9f:18:a8:c4:c2:e0: 6f:19:8b:51:3e:e9:03:62:aa:92:96:68:5d:5f:a9: 88:0f:e8:e0:ad:49:21:11:d9:36:5b:97:15:ef:c6: d2:a1:33:69:e7:a9:38:0c:7f:0b:d8:84:86:ff:17: b2:80:71:a1:4b:51:eb:ea:e3:55:5f:97:11:09:41: 81:37:b2:22:1a:ee:e6:72:d0:9d:15:bb:57:e2:e7: da:e9:9e:8d:c6:67:8d:fe:5a:38:3f:04:65:e9:bf: b3:64:42:49:52:99:ca:4a:5c:d1:ae:a7:82:72:d6: d0:3a:fa:d3:ff:f4:6d:80:18:3d:98:31:09:42:12: f1:f3:63:3d:f2:90:f4:5c:8c:06:87:9c:c0:12:de: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E7:3C:EE:97:14:B5:95:48:08:A2:C7:00:3C:73:41:F0:2F:5E:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/542fc499-d4fa-3704-a429-d5298e8dbea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:2b:82:4b:d2:2d:8f:61:da:bd:c3:54:ee:06:66:64:f8:06: d1:76:cf:60:94:28:91:4c:dd:a7:1a:7e:eb:42:38:96:cd:61: e2:86:18:28:80:fc:bf:0c:50:3e:f6:23:c1:96:1a:ee:63:ba: 45:a8:38:c4:e9:ae:75:c7:d4:4c:f9:55:4b:9c:48:a4:b5:e1: 94:fe:01:38:76:be:d3:8b:71:c7:71:8b:82:b5:16:2e:89:75: 77:30:93:95:53:cb:18:20:b4:9c:f1:99:9e:46:d1:6e:01:2a: 20:b5:5e:c7:21:b7:e1:fc:92:5e:ab:f9:b7:dd:22:5a:94:c8: bd:83:55:71:3e:8d:2c:65:92:8a:5b:b1:fc:e2:01:64:4b:14: de:5c:1b:a2:a6:03:74:47:65:1c:20:6e:a6:54:ac:8e:80:b7: 5e:48:23:c8:af:75:ee:90:1f:cf:d1:b2:e4:d8:52:11:6d:be: d9:f7:14:3a:97:0d:44:d3:f7:18:6b:a0:cd:ed:d7:e3:95:3c: 1a:b4:89:11:f4:fb:a6:cd:ab:d4:9e:38:11:c9:32:29:10:8a: f7:1f:40:4c:3b:c0:28:cb:a1:e8:84:32:77:2c:96:8f:08:84: bc:2c:54:dc:53:d0:f7:66:d2:13:69:b2:60:2b:b5:9d:8c:69: f3:ef:60:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0a40r4tWKpyjUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OWE4OGJlMjItNTJmZi00MTkxLThkNzQtOTY0OTkwMGQ1YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YLyoPnyfqywf9dky888k/qbTHgv6Zh03YhA 2e4VHBINMD2YzZkgLSEI262PQ8IGMa3pHXMZn4/dfyvxnnubNlSNvJHv73C74UDP NUFToePTUm42lw+h+BJfmoA+xtHYaf+ciFYCUlipT1lcS7vWwLyfGKjEwuBvGYtR PukDYqqSlmhdX6mID+jgrUkhEdk2W5cV78bSoTNp56k4DH8L2ISG/xeygHGhS1Hr 6uNVX5cRCUGBN7IiGu7mctCdFbtX4ufa6Z6NxmeN/lo4PwRl6b+zZEJJUpnKSlzR rqeCctbQOvrT//RtgBg9mDEJQhLx82M98pD0XIwGh5zAEt6/fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfnPO6XFLWVSAiixwA8c0HwL14PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTQyZmM0OTktZDRmYS0z NzA0LWE0MjktZDUyOThlOGRiZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFypwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgrgkvSLY9h2r3DVO4GZmT4BtF2z2CUKJFM3acafutCOJbNYeKGGCiA /L8MUD72I8GWGu5jukWoOMTprnXH1Ez5VUucSKS14ZT+ATh2vtOLccdxi4K1Fi6J dXcwk5VTyxggtJzxmZ5G0W4BKiC1Xscht+H8kl6r+bfdIlqUyL2DVXE+jSxlkopb sfziAWRLFN5cG6KmA3RHZRwgbqZUrI6At15II8ivde6QH8/RsuTYUhFtvtn3FDqX DUTT9xhroM3t1+OVPBq0iRH0+6bNq9SeOBHJMikQivcfQEw7wCjLoeiEMncslo8I hLwsVNxT0Pdm0hNpsmArtZ2MafPvYM4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:25 2025 by rpki-client