$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa File: 5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa (raw, json) Hash identifier: 7eEULbOgzrqUqX1Xv2FMx9OAr1H6xRbE+Tsxkj3xlYA= Subject key identifier: AE:1E:F4:45:B8:22:15:70:5E:66:D8:E6:85:FD:27:FB:CB:29:06:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A2574594770D11F716E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.41.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a2:57:45:94:77:0d:11:f7:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=426c68d9-8032-41bf-8a4e-48ccad8e9300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:7a:5e:fb:ce:b3:80:78:a2:b8:87:19:01: 0a:c5:fe:f3:8e:aa:c2:2e:57:48:84:92:05:4a:2a: d4:98:22:71:14:53:69:bc:44:12:26:f1:86:a9:e2: 99:27:f9:68:78:f0:b3:b8:c8:19:4f:3b:4e:28:3f: 65:e7:d8:ff:3f:8f:70:b5:f9:25:d4:16:fc:37:65: a0:a8:33:32:40:a2:7b:1a:03:50:df:34:27:f4:c2: ea:d4:bf:02:09:d1:f6:b6:00:b4:8a:7c:6e:5a:d4: 6a:c0:86:64:9b:cc:2e:f1:c4:ab:7a:9a:cf:57:c8: 97:45:3a:02:a5:c4:10:66:29:c8:2a:e1:ca:7a:4d: c0:90:82:78:5c:02:ab:69:73:bc:72:d3:c0:31:3e: 82:62:15:c4:fd:02:98:c0:a7:76:e4:b4:1d:9d:6d: 3d:f0:3d:e0:f2:7a:9e:06:bf:de:04:64:5b:f6:ac: d2:83:99:44:5a:ac:df:5a:72:88:17:3a:e6:8b:4e: 90:49:5a:34:2b:8f:d8:ba:79:a8:bf:3b:a7:63:12: df:22:a4:74:1a:80:a6:99:1a:c1:bf:91:48:ee:c2: ec:e2:16:0c:f5:71:db:1e:44:5c:e0:12:93:69:0d: 0a:e6:31:35:e0:d9:64:c7:88:94:c2:8a:30:23:88: 02:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1E:F4:45:B8:22:15:70:5E:66:D8:E6:85:FD:27:FB:CB:29:06:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cb16fce-38d8-340b-b4d7-e0dc1892bea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:6e:b7:36:5e:eb:26:f5:08:49:b6:13:b0:82:77:fd:c5:5d: fd:40:35:13:61:23:ba:c1:19:52:a8:6a:80:e9:0c:9d:04:f4: 49:e8:10:18:de:24:9b:8e:c5:e5:a5:73:04:6c:7b:e9:ca:e6: 5e:77:ea:c7:39:69:74:42:06:e1:f0:22:e3:35:27:25:4b:64: f5:90:73:48:c5:01:c2:cf:27:61:34:f2:c5:2c:09:3d:0b:76: 20:7d:bc:86:76:a8:21:1a:6f:3e:eb:5e:d2:97:0f:37:bb:9c: 48:be:bf:af:5c:43:b9:86:56:78:dc:0e:17:40:d8:2e:d4:07: 6c:58:10:7f:ae:69:55:f2:2b:60:b3:b6:71:50:ce:90:85:01: 09:9e:0f:25:ad:f8:b1:2a:0f:f1:0e:8e:15:d9:41:21:d4:02: c2:d9:b8:5f:d3:4c:18:5a:3b:5e:e3:0e:6d:0c:a1:28:89:0e: 62:07:f1:b8:35:23:40:2e:2b:18:0f:05:df:a4:af:e2:6b:0f: f2:d8:e7:c9:4d:bf:08:ff:3a:a0:6d:63:ea:b2:a0:54:fb:2b: 0e:43:ea:68:2f:b3:26:52:e0:84:9d:ba:c1:c8:4e:16:2e:9a: ed:5b:eb:55:72:1b:3a:3b:6e:36:e2:b0:fa:42:9a:44:02:26: dd:52:ed:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aJXRZR3DRH3FuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NDI2YzY4ZDktODAzMi00MWJmLThhNGUtNDhjY2FkOGU5MzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIV6XvvOs4B4oriHGQEKxf7zjqrCLldIhJIF SirUmCJxFFNpvEQSJvGGqeKZJ/loePCzuMgZTztOKD9l59j/P49wtfkl1Bb8N2Wg qDMyQKJ7GgNQ3zQn9MLq1L8CCdH2tgC0inxuWtRqwIZkm8wu8cSreprPV8iXRToC pcQQZinIKuHKek3AkIJ4XAKraXO8ctPAMT6CYhXE/QKYwKd25LQdnW098D3g8nqe Br/eBGRb9qzSg5lEWqzfWnKIFzrmi06QSVo0K4/YunmovzunYxLfIqR0GoCmmRrB v5FI7sLs4hYM9XHbHkRc4BKTaQ0K5jE14Nlkx4iUwoowI4gCQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4e9EW4IhVwXmbY5oX9J/vLKQYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNiMTZmY2UtMzhkOC0z NDBiLWI0ZDctZTBkYzE4OTJiZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFykEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5utzZe6yb1CEm2E7CCd/3FXf1ANRNhI7rBGVKoaoDpDJ0E9EnoEBje JJuOxeWlcwRse+nK5l536sc5aXRCBuHwIuM1JyVLZPWQc0jFAcLPJ2E08sUsCT0L diB9vIZ2qCEabz7rXtKXDze7nEi+v69cQ7mGVnjcDhdA2C7UB2xYEH+uaVXyK2Cz tnFQzpCFAQmeDyWt+LEqD/EOjhXZQSHUAsLZuF/TTBhaO17jDm0MoSiJDmIH8bg1 I0AuKxgPBd+kr+JrD/LY58lNvwj/OqBtY+qyoFT7Kw5D6mgvsyZS4ISdusHIThYu mu1b61VyGzo7bjbisPpCmkQCJt1S7Sg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:58 2025 by rpki-client