$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56355e88-f9ac-3cf1-a195-fb5786b5dc80.roa File: 56355e88-f9ac-3cf1-a195-fb5786b5dc80.roa (raw, json) Hash identifier: ZrFqmdgsJ0R4V98SXZekHE3m+xQpINW8vzOo8ke30b0= Subject key identifier: 63:1E:CC:2B:24:09:50:16:B6:E3:E7:AD:F3:36:CE:99:29:D8:E0:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF70B0F29999A4952824940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56355e88-f9ac-3cf1-a195-fb5786b5dc80.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.58.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:0b:0f:29:99:9a:49:52:82:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=0627a141-41de-4a9f-85b7-1a36a68762d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:33:14:0a:90:4a:90:4e:cd:c2:d2:71:f3: 64:ca:29:d9:d3:b1:f2:fa:2d:6f:da:7a:52:c3:2b: 01:12:f1:a0:09:e5:7e:f7:64:18:0d:ef:9b:29:1c: 5d:31:35:0f:69:17:5c:77:4c:25:a9:68:f1:d7:6c: 73:b0:fa:cd:e4:e0:15:00:dd:5c:7d:f3:da:43:20: c2:83:dd:ea:b7:7b:66:0e:4e:aa:7e:72:50:54:8d: a8:0d:55:6b:88:f1:08:2f:4a:02:30:58:68:03:fb: 3e:84:63:8c:f3:ad:69:54:c2:e5:79:17:62:09:1b: 59:70:d5:80:52:59:b7:1b:cf:8a:26:b6:6e:ae:92: a4:b0:97:6d:97:81:de:0a:ec:f9:7e:b5:4b:88:7c: 35:68:1c:1d:12:60:ab:05:cc:f5:60:31:4d:bd:64: ab:07:05:a1:c4:04:05:46:0a:4c:a4:e9:6d:e6:a6: 25:5c:aa:99:7b:a9:9b:31:65:c0:ad:af:b7:0b:db: 5d:fb:11:61:a8:8a:5a:1a:fd:15:d0:83:78:8e:05: 3b:88:47:79:53:d8:97:86:79:bf:36:6c:70:e8:04: 18:65:33:9a:f2:bf:ef:a6:f2:c7:37:93:87:be:58: ad:29:76:73:69:62:20:3e:f9:ab:1d:a6:f8:02:99: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1E:CC:2B:24:09:50:16:B6:E3:E7:AD:F3:36:CE:99:29:D8:E0:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56355e88-f9ac-3cf1-a195-fb5786b5dc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f8:0e:e5:7e:98:05:51:ee:10:52:d3:78:d7:96:ad:3a:93: 21:51:29:55:18:24:0b:72:a7:e8:96:32:ad:51:74:c2:21:bf: 43:7f:f6:ba:7a:a5:a1:7f:36:ae:05:7c:02:f9:b4:39:19:e4: 4f:70:58:56:93:ad:86:55:50:12:d1:bb:a0:3c:00:88:ca:8f: 98:bb:83:26:a6:b9:0e:98:31:9b:4a:3b:ca:02:6d:51:e9:4d: 12:38:4c:bd:25:07:52:86:86:5b:6a:30:ad:77:87:71:c8:69: 1e:ec:e9:a5:d6:92:34:09:3d:86:1d:64:ab:e9:45:d3:98:c9: 6e:23:b4:17:7d:f2:fc:0f:7b:04:13:30:b8:fb:92:e6:2c:85: f5:25:e9:d2:40:e1:b3:44:82:98:ec:c4:ad:c4:72:d6:e3:ce: 3f:47:35:72:9c:54:2e:f1:39:ab:e1:f3:69:3e:5f:86:90:de: 7e:80:fe:00:90:78:89:d9:63:29:e5:2d:e2:c9:08:b6:78:dd: b8:1c:e6:08:91:59:94:83:be:6e:aa:3b:b0:b0:25:90:39:30: de:30:3e:6b:ac:b7:56:ab:fd:69:70:df:b5:dc:e0:1e:3f:10: b0:d2:42:2d:86:71:7a:5e:cf:9c:9e:78:26:d8:81:a4:34:81: 41:91:5a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9wsPKZmaSVKCSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDYyN2ExNDEtNDFkZS00YTlmLTg1YjctMWEzNmE2ODc2MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq20zFAqQSpBOzcLScfNkyinZ07Hy+i1v2npS wysBEvGgCeV+92QYDe+bKRxdMTUPaRdcd0wlqWjx12xzsPrN5OAVAN1cffPaQyDC g93qt3tmDk6qfnJQVI2oDVVriPEIL0oCMFhoA/s+hGOM861pVMLleRdiCRtZcNWA Ulm3G8+KJrZurpKksJdtl4HeCuz5frVLiHw1aBwdEmCrBcz1YDFNvWSrBwWhxAQF RgpMpOlt5qYlXKqZe6mbMWXAra+3C9td+xFhqIpaGv0V0IN4jgU7iEd5U9iXhnm/ Nmxw6AQYZTOa8r/vpvLHN5OHvlitKXZzaWIgPvmrHab4AplSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMezCskCVAWtuPnrfM2zpkp2OA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTYzNTVlODgtZjlhYy0z Y2YxLWExOTUtZmI1Nzg2YjVkYzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr4DuV+mAVR7hBS03jXlq06kyFRKVUYJAtyp+iWMq1RdMIhv0N/9rp6 paF/Nq4FfAL5tDkZ5E9wWFaTrYZVUBLRu6A8AIjKj5i7gyamuQ6YMZtKO8oCbVHp TRI4TL0lB1KGhltqMK13h3HIaR7s6aXWkjQJPYYdZKvpRdOYyW4jtBd98vwPewQT MLj7kuYshfUl6dJA4bNEgpjsxK3Ectbjzj9HNXKcVC7xOavh82k+X4aQ3n6A/gCQ eInZYynlLeLJCLZ43bgc5giRWZSDvm6qO7CwJZA5MN4wPmust1ar/Wlw37Xc4B4/ ELDSQi2GcXpez5yeeCbYgaQ0gUGRWp8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:27 2025 by rpki-client