$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/753ee868-d8c1-3ba9-b60e-042e72005231.roa File: 753ee868-d8c1-3ba9-b60e-042e72005231.roa (raw, json) Hash identifier: bEFlifZth1N4vl6BgixHaGpcgGNxFQ5MFruV8mWHGxc= Subject key identifier: 60:02:74:58:8D:3A:C5:0C:54:89:B9:20:B8:3C:E3:E3:72:B1:9E:DB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6FB8C48C3D61033226D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/753ee868-d8c1-3ba9-b60e-042e72005231.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.59.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:fb:8c:48:c3:d6:10:33:22:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=0f7e9000-e8c6-413d-b402-b2d2ae7b1e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:51:ab:57:f8:d5:e8:8c:9e:43:e5:9a:5e:82: 1b:22:6f:e0:38:43:eb:6c:a9:9c:1e:de:f2:01:f0: 00:d5:de:4b:a9:5d:f2:4d:68:ab:63:b1:ac:2e:31: 20:da:6d:a6:70:10:77:4c:3f:7b:c1:7d:b3:d4:d6: 25:75:d5:b9:1b:a8:1b:37:a5:45:b7:65:73:03:e6: 35:bd:f8:1c:d5:7b:f0:1b:30:e9:d6:52:67:00:fe: 7c:81:77:45:b3:13:2f:fc:61:d7:5b:d2:96:2d:b2: a7:1b:f7:e4:dc:39:ad:4e:6b:e4:10:32:fd:55:00: bc:93:99:95:59:f4:40:15:88:fd:8e:51:56:c6:5c: 77:8d:af:de:a8:c0:80:ec:4b:b5:1a:28:1a:09:9a: ef:91:d2:62:26:8b:c1:0e:b9:ef:d3:2f:d1:41:0a: b2:20:81:c7:5e:05:65:2c:28:26:2a:62:89:fe:05: 5e:db:2c:eb:d7:b3:ea:32:ed:96:8a:b9:84:0e:05: 09:ed:5a:8b:bc:e5:65:13:ec:66:65:b6:1f:04:69: 59:5b:58:45:0d:7b:c8:e2:07:b6:7e:60:f3:3d:25: 26:2a:36:6c:e2:5c:83:8d:62:fb:92:34:d1:c2:95: 39:9e:a6:fd:29:bb:54:74:b8:74:c4:17:d4:c8:b1: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:02:74:58:8D:3A:C5:0C:54:89:B9:20:B8:3C:E3:E3:72:B1:9E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/753ee868-d8c1-3ba9-b60e-042e72005231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9c:52:24:15:de:b5:0e:ce:c7:c5:df:88:d4:2e:9b:5a:90: c4:41:5d:20:db:f9:e7:a3:c1:9c:91:8c:1b:b4:06:42:7e:4c: 3d:f4:f8:3a:d5:3f:d9:cf:6e:42:2e:36:20:a6:03:26:fd:59: e3:db:2c:1e:02:60:52:f4:1a:c4:7c:e1:00:bd:e4:29:6f:01: 89:18:b2:dc:3b:94:0f:77:7a:21:70:d7:95:a5:fc:a6:52:0d: 96:86:7e:7b:3d:87:51:69:e0:d4:15:e5:66:e8:f4:f6:82:e7: e3:0a:8c:a2:de:af:ab:63:5e:e1:bd:31:4d:24:77:f8:20:3b: e1:4c:7d:7e:41:b0:4a:18:b8:ed:a0:62:32:32:14:a3:b9:78: 74:0e:b2:98:68:6a:68:0c:29:71:b3:ca:8a:33:29:ad:8f:4b: ab:bf:3c:78:6f:43:ff:3c:69:d5:55:8d:31:38:9c:62:73:0f: ea:33:27:e1:00:c9:0c:35:15:dc:95:9a:cb:0d:bf:43:94:1f: b1:95:4d:c3:48:41:e3:ff:24:55:f7:92:7d:69:f5:14:e4:05: 76:0f:86:98:eb:3b:47:ac:82:8e:71:c0:18:4b:24:c7:e6:dc: 35:01:8b:09:1c:4f:b3:20:f6:7b:75:ee:76:1b:d2:f4:09:26: 6a:e4:76:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vuMSMPWEDMibQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MGY3ZTkwMDAtZThjNi00MTNkLWI0MDItYjJkMmFlN2IxZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1GrV/jV6IyeQ+WaXoIbIm/gOEPrbKmcHt7y AfAA1d5LqV3yTWirY7GsLjEg2m2mcBB3TD97wX2z1NYlddW5G6gbN6VFt2VzA+Y1 vfgc1XvwGzDp1lJnAP58gXdFsxMv/GHXW9KWLbKnG/fk3DmtTmvkEDL9VQC8k5mV WfRAFYj9jlFWxlx3ja/eqMCA7Eu1GigaCZrvkdJiJovBDrnv0y/RQQqyIIHHXgVl LCgmKmKJ/gVe2yzr17PqMu2WirmEDgUJ7VqLvOVlE+xmZbYfBGlZW1hFDXvI4ge2 fmDzPSUmKjZs4lyDjWL7kjTRwpU5nqb9KbtUdLh0xBfUyLFADwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGACdFiNOsUMVIm5ILg84+NysZ7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzUzZWU4NjgtZDhjMS0z YmE5LWI2MGUtMDQyZTcyMDA1MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAicUiQV3rUOzsfF34jULptakMRBXSDb+eejwZyRjBu0BkJ+TD30+DrV P9nPbkIuNiCmAyb9WePbLB4CYFL0GsR84QC95ClvAYkYstw7lA93eiFw15Wl/KZS DZaGfns9h1Fp4NQV5Wbo9PaC5+MKjKLer6tjXuG9MU0kd/ggO+FMfX5BsEoYuO2g YjIyFKO5eHQOsphoamgMKXGzyoozKa2PS6u/PHhvQ/88adVVjTE4nGJzD+ozJ+EA yQw1FdyVmssNv0OUH7GVTcNIQeP/JFX3kn1p9RTkBXYPhpjrO0esgo5xwBhLJMfm 3DUBiwkcT7Mg9nt17nYb0vQJJmrkdlI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:18:56 2025 by rpki-client