$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73b03e76-4f74-339e-9b5a-7ac84b1ead59.roa File: 73b03e76-4f74-339e-9b5a-7ac84b1ead59.roa (raw, json) Hash identifier: MpnePq74fRT56UZhoK2ffxBBH9PDLVi1FBrRR/wOfXo= Subject key identifier: 8A:A2:CB:68:9B:39:59:81:F1:AD:41:C6:76:EB:93:DD:CD:15:DB:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7F525C4FE18245C78D43A200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73b03e76-4f74-339e-9b5a-7ac84b1ead59.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 21342 IP address blocks: 23.40.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5c:4f:e1:82:45:c7:8d:43:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=52b3d0be-a3e2-4690-b8fd-0ef8565268ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:03:10:33:08:85:ac:0b:44:c2:74:98:61: 9a:cd:47:e8:fc:7f:27:56:42:f9:59:1e:12:9e:25: 3e:ff:6b:70:7d:d0:f4:23:62:51:78:79:2b:51:e3: 95:7a:b3:a3:a7:f9:d4:14:74:43:a3:e6:ac:dc:b9: 6e:c6:e8:c8:00:db:f5:06:26:62:c9:ed:d1:f0:5f: 7b:7d:fe:4c:78:39:ef:38:0e:8b:5c:da:b0:79:72: 51:7f:50:42:47:ad:49:60:54:8f:cc:19:8e:93:23: 32:84:15:ff:4f:ab:eb:9e:bc:10:52:94:13:e7:df: 4c:9d:23:fe:f2:85:1f:ac:cf:ac:ab:b6:bc:e6:a4: 22:c2:e2:0a:3b:2d:18:03:65:01:ca:58:61:55:3c: 28:e5:8e:fc:e1:ba:7a:19:33:6c:58:aa:d3:e2:63: ed:6a:99:c0:73:85:c4:d2:fb:dc:a5:0c:ac:29:8c: 8b:d0:e0:1f:1d:c6:bb:4b:6e:1e:f3:61:5a:3e:36: 29:96:ab:1e:a4:1a:51:d3:42:ab:55:e4:bf:3a:1d: 7a:df:3a:da:90:e8:84:2d:0d:68:a0:de:be:e3:88: 7a:36:d1:51:96:c0:b7:ae:62:c3:9e:ab:04:34:6f: f5:b8:d3:7c:b5:22:7a:8b:f9:62:a5:0c:26:75:3a: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A2:CB:68:9B:39:59:81:F1:AD:41:C6:76:EB:93:DD:CD:15:DB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73b03e76-4f74-339e-9b5a-7ac84b1ead59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:cd:36:44:b0:40:e5:46:8a:35:d2:d9:96:42:30:21:64:d1: 0b:88:9d:5d:b0:49:ad:eb:a8:94:19:79:3b:f1:a3:6a:0f:ba: 07:48:6f:45:66:67:2c:7f:17:65:c6:01:3e:ac:0d:71:a7:3d: 38:ae:9f:03:24:58:31:75:27:29:3e:e5:d1:f9:40:ee:a0:1d: 57:23:38:fa:f7:64:b3:7d:dc:06:24:e0:c7:fb:df:70:42:93: e8:d3:55:f8:3d:a1:a1:7c:3c:78:a7:f5:e4:ee:31:55:c1:c3: 5c:0d:0c:e4:0e:43:12:33:cf:43:52:b3:07:78:01:48:36:7b: cc:0f:af:cc:40:29:c6:1f:65:66:ca:6c:4b:31:db:82:cc:70: f7:c5:ee:42:f4:4e:ce:dd:04:9e:59:9f:b4:ee:21:5a:ba:c6: a3:eb:28:08:1b:60:3d:c8:5e:3b:a2:22:21:c0:7a:f9:17:42: 1f:e8:f8:d1:35:ac:2f:98:b9:fb:5c:f1:2e:92:11:ce:93:cf: d8:d6:de:04:30:ad:0c:88:e8:58:4d:68:4f:9c:1b:8e:51:32: b8:ed:53:23:65:63:02:00:83:d9:6b:a9:e0:ab:bd:6f:1b:47: 18:87:75:37:04:7a:68:fd:4e:80:52:27:b1:0e:84:c3:c8:cb: 92:54:04:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UlxP4YJFx41DogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTJiM2QwYmUtYTNlMi00NjkwLWI4ZmQtMGVmODU2NTI2OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmQDEDMIhawLRMJ0mGGazUfo/H8nVkL5WR4S niU+/2twfdD0I2JReHkrUeOVerOjp/nUFHRDo+as3LluxujIANv1BiZiye3R8F97 ff5MeDnvOA6LXNqweXJRf1BCR61JYFSPzBmOkyMyhBX/T6vrnrwQUpQT599MnSP+ 8oUfrM+sq7a85qQiwuIKOy0YA2UBylhhVTwo5Y784bp6GTNsWKrT4mPtapnAc4XE 0vvcpQysKYyL0OAfHca7S24e82FaPjYplqsepBpR00KrVeS/Oh163zrakOiELQ1o oN6+44h6NtFRlsC3rmLDnqsENG/1uNN8tSJ6i/lipQwmdTqmbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqiy2ibOVmB8a1Bxnbrk93NFduSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzNiMDNlNzYtNGY3NC0z MzllLTliNWEtN2FjODRiMWVhZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/NNkSwQOVGijXS2ZZCMCFk0QuInV2wSa3rqJQZeTvxo2oPugdIb0Vm Zyx/F2XGAT6sDXGnPTiunwMkWDF1Jyk+5dH5QO6gHVcjOPr3ZLN93AYk4Mf733BC k+jTVfg9oaF8PHin9eTuMVXBw1wNDOQOQxIzz0NSswd4AUg2e8wPr8xAKcYfZWbK bEsx24LMcPfF7kL0Ts7dBJ5Zn7TuIVq6xqPrKAgbYD3IXjuiIiHAevkXQh/o+NE1 rC+Yuftc8S6SEc6Tz9jW3gQwrQyI6FhNaE+cG45RMrjtUyNlYwIAg9lrqeCrvW8b RxiHdTcEemj9ToBSJ7EOhMPIy5JUBDk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:33:01 2025 by rpki-client