$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67d1142a-9846-3835-b647-f3126b8c0b83.roa File: 67d1142a-9846-3835-b647-f3126b8c0b83.roa (raw, json) Hash identifier: zv+xaeIYRtURK2JBgGkA569f81nCXr4i1uGsEo4XZwc= Subject key identifier: EC:1E:0B:E4:35:4B:38:55:69:9D:AF:90:4C:88:78:9D:76:46:0D:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1AA8D92ED404A8578C900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67d1142a-9846-3835-b647-f3126b8c0b83.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.40.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:aa:8d:92:ed:40:4a:85:78:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=e266a230-7f93-4a7d-8676-f4fe514c3c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:6f:5d:56:3f:f8:fb:01:c2:46:eb:b4:7e: 65:57:91:61:3c:13:20:eb:fc:42:d4:af:fe:95:8c: 20:ff:11:9e:c7:46:64:be:0c:74:c9:6c:b0:48:8e: 97:ef:2d:d4:3f:9c:5d:9a:d7:b5:c4:a4:47:22:d0: a1:55:5d:b8:b3:11:86:50:69:be:06:11:f4:09:25: 53:4d:e6:5c:dd:46:1f:fe:84:af:c4:cd:79:73:8c: ac:4d:08:26:eb:0a:39:1a:00:bd:75:40:c5:94:89: 7c:aa:8b:c7:70:cd:b4:42:cd:88:13:88:8b:98:c3: f4:0f:5b:7f:e5:69:33:28:2c:c6:05:74:4b:8a:dc: d2:b4:b8:47:a6:e5:5d:dd:22:4e:22:bb:b0:ce:87: d3:04:24:10:0e:79:3e:74:0c:20:93:3d:e0:d5:3f: e1:aa:c6:9c:e3:d3:24:6b:b5:ee:99:d4:70:f5:e9: 3f:ba:66:31:40:93:4d:1b:ea:f9:85:68:8e:0d:f0: ec:9d:d1:c7:49:0e:2d:3c:33:35:db:68:7b:59:86: 26:61:36:9e:f5:6c:e1:3c:50:0f:7d:78:33:83:52: 02:42:87:34:5c:41:97:5d:d8:8a:cf:1a:45:8b:5d: 2a:05:b3:5e:c6:bc:5b:81:f4:ac:32:83:0f:fa:ff: 9d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1E:0B:E4:35:4B:38:55:69:9D:AF:90:4C:88:78:9D:76:46:0D:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67d1142a-9846-3835-b647-f3126b8c0b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5d:13:24:fc:f9:32:00:ea:58:48:e4:14:bc:df:43:c2:e5: 19:21:88:4c:3e:41:01:41:cc:97:20:32:f4:ba:ae:1c:7a:43: c6:52:20:73:67:08:5c:b1:03:73:1b:04:ad:ac:ba:0d:a6:52: dd:7d:f9:19:d0:ca:ad:10:b1:c4:ad:55:a5:8c:07:7b:36:b2: 6e:b3:17:d1:f7:7f:56:72:27:7b:3a:da:c5:65:24:25:fd:de: 4d:50:b6:b5:f4:67:45:e0:61:dd:b9:32:b8:a8:98:d4:2b:2a: 58:c1:83:b6:a0:47:8d:ae:57:82:51:b5:69:56:98:d6:cb:77: f5:09:26:78:2c:93:e4:92:f7:9b:f8:21:9d:65:0d:6f:13:5e: d6:64:0c:01:29:6c:a1:e0:aa:eb:c1:eb:c8:44:7e:83:f7:50: ee:95:25:91:e1:c9:19:79:09:88:fc:ac:02:2e:2b:67:fa:ba: f8:99:8e:0b:93:7c:dd:a8:75:b0:c1:25:5a:86:52:9c:dd:9d: c5:16:7e:93:7c:ba:49:6c:14:9f:f7:31:f6:cf:28:08:3b:f6: e5:ec:3a:04:58:a3:54:2b:6e:a0:da:63:fb:c6:3e:50:36:53: da:3d:db:91:35:ff:2d:75:a8:84:0b:b2:30:37:5f:20:f2:91: 38:86:0b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aqNku1ASoV4yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTI2NmEyMzAtN2Y5My00YTdkLTg2NzYtZjRmZTUxNGMzYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApctvXVY/+PsBwkbrtH5lV5FhPBMg6/xC1K/+ lYwg/xGex0Zkvgx0yWywSI6X7y3UP5xdmte1xKRHItChVV24sxGGUGm+BhH0CSVT TeZc3UYf/oSvxM15c4ysTQgm6wo5GgC9dUDFlIl8qovHcM20Qs2IE4iLmMP0D1t/ 5WkzKCzGBXRLitzStLhHpuVd3SJOIruwzofTBCQQDnk+dAwgkz3g1T/hqsac49Mk a7XumdRw9ek/umYxQJNNG+r5hWiODfDsndHHSQ4tPDM122h7WYYmYTae9WzhPFAP fXgzg1ICQoc0XEGXXdiKzxpFi10qBbNexrxbgfSsMoMP+v+dFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOweC+Q1SzhVaZ2vkEyIeJ12Rg3oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjdkMTE0MmEtOTg0Ni0z ODM1LWI2NDctZjMxMjZiOGMwYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFygYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEldEyT8+TIA6lhI5BS830PC5RkhiEw+QQFBzJcgMvS6rhx6Q8ZSIHNn CFyxA3MbBK2sug2mUt19+RnQyq0QscStVaWMB3s2sm6zF9H3f1ZyJ3s62sVlJCX9 3k1QtrX0Z0XgYd25MriomNQrKljBg7agR42uV4JRtWlWmNbLd/UJJngsk+SS95v4 IZ1lDW8TXtZkDAEpbKHgquvB68hEfoP3UO6VJZHhyRl5CYj8rAIuK2f6uviZjguT fN2odbDBJVqGUpzdncUWfpN8uklsFJ/3MfbPKAg79uXsOgRYo1QrbqDaY/vGPlA2 U9o925E1/y11qIQLsjA3XyDykTiGC98= -----END CERTIFICATE-----Generated at Mon Oct 20 05:28:45 2025 by rpki-client