$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b7056da-8fc2-3ad5-af01-81cccd0b9064.roa File: 7b7056da-8fc2-3ad5-af01-81cccd0b9064.roa (raw, json) Hash identifier: yM4Np1q12/YDQKJCH3FPH6mAtNffSw8yMHrH8/ddc44= Subject key identifier: 46:FB:66:46:B2:51:1F:31:8E:F5:04:C0:37:D6:4B:4A:65:71:F8:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B249705DF695E47301FA75A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b7056da-8fc2-3ad5-af01-81cccd0b9064.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.53.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:97:05:df:69:5e:47:30:1f:a7:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=8cf3d0c7-d184-45c2-8e68-9b659c3a6f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b2:d5:5f:af:5e:ac:fd:75:76:cb:e3:35:8a: 2a:cb:d6:c4:1e:0d:78:6f:c2:08:a1:40:88:7e:41: 7f:35:aa:3e:a3:45:a4:ff:a3:32:a1:15:bb:3c:2e: b4:34:b3:0c:c3:0a:7f:3e:0d:7f:a1:c1:93:0f:c5: 99:3e:89:b3:0b:62:4c:c2:78:02:94:ad:58:28:67: 10:1c:4a:2d:4f:71:04:f5:1c:5e:3f:7b:51:93:48: 1e:0c:9b:94:19:42:a4:ba:dc:59:d6:fb:01:0a:d7: e2:46:d3:e2:3e:6e:f5:cc:66:63:6f:5c:07:26:42: 0d:59:14:f4:e3:4c:0e:a1:81:54:b6:57:8b:d5:c3: de:33:3d:72:59:b5:0c:4d:43:81:10:60:c4:14:aa: ce:76:9a:78:2d:ad:9e:bd:f2:11:c4:29:d3:7d:57: 70:80:66:79:ff:14:1a:c0:12:75:60:65:bb:de:c8: 94:53:ca:62:84:65:93:49:52:ee:99:f6:6c:c8:9f: a8:35:46:2b:09:5c:3a:76:72:04:e3:7f:ed:c3:6f: aa:67:63:92:26:75:65:29:e1:d8:13:32:45:e0:95: f3:89:7b:27:44:a3:ac:55:fd:c9:26:7b:b4:2b:99: 7c:5f:89:14:2e:ea:fb:22:50:a0:27:de:d0:e0:d7: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:66:46:B2:51:1F:31:8E:F5:04:C0:37:D6:4B:4A:65:71:F8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b7056da-8fc2-3ad5-af01-81cccd0b9064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:55:af:84:89:67:3e:fa:3b:90:15:a3:c0:b8:8a:45:2a:a6: 96:ab:1c:b5:bf:66:d1:f8:5c:6e:af:57:e2:eb:9b:fa:53:52: 9f:73:3f:11:bc:e6:26:43:9d:c7:6b:d6:f9:21:f0:c7:da:a5: 45:f7:28:12:d4:1c:b6:ac:69:fc:7a:d7:61:01:2d:0b:5f:d4: 16:fb:5e:6f:a9:9b:3d:f9:d9:6c:0e:60:63:1c:c6:40:08:be: 91:fa:78:af:5f:63:8d:6b:d5:e4:40:b2:21:42:09:c0:9c:a0: a3:18:85:7b:f5:5a:cc:dd:ff:2b:0c:60:4a:1f:92:b7:c0:a0: ba:5f:2a:2e:e1:e6:72:ec:40:99:ed:eb:bc:a2:6f:24:97:bf: fe:8f:19:e3:76:bd:25:5f:13:54:f9:97:bc:ae:30:4c:6e:f7: 5d:a0:40:56:ab:8f:e3:36:10:83:b1:53:30:b0:33:5f:56:2f: b2:40:4c:78:49:65:21:a0:d5:1a:cb:7a:96:e4:d1:ea:48:a2: bb:a5:89:ba:1b:1d:22:5d:e6:e9:e7:4b:47:63:dd:41:32:a7: 45:24:b8:56:c5:38:e1:08:27:9f:6e:1f:c1:b0:e1:63:09:5d: 59:55:81:6a:7c:ff:b6:70:cd:27:2f:49:ed:fc:d2:6b:7c:b3: c4:4d:60:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklwXfaV5HMB+nWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk OGNmM2QwYzctZDE4NC00NWMyLThlNjgtOWI2NTljM2E2ZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrLVX69erP11dsvjNYoqy9bEHg14b8IIoUCI fkF/Nao+o0Wk/6MyoRW7PC60NLMMwwp/Pg1/ocGTD8WZPomzC2JMwngClK1YKGcQ HEotT3EE9RxeP3tRk0geDJuUGUKkutxZ1vsBCtfiRtPiPm71zGZjb1wHJkINWRT0 40wOoYFUtleL1cPeMz1yWbUMTUOBEGDEFKrOdpp4La2evfIRxCnTfVdwgGZ5/xQa wBJ1YGW73siUU8pihGWTSVLumfZsyJ+oNUYrCVw6dnIE43/tw2+qZ2OSJnVlKeHY EzJF4JXziXsnRKOsVf3JJnu0K5l8X4kULur7IlCgJ97Q4Nc2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb7ZkayUR8xjvUEwDfWS0plcfjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2I3MDU2ZGEtOGZjMi0z YWQ1LWFmMDEtODFjY2NkMGI5MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9Vr4SJZz76O5AVo8C4ikUqpparHLW/ZtH4XG6vV+Lrm/pTUp9zPxG8 5iZDncdr1vkh8MfapUX3KBLUHLasafx612EBLQtf1Bb7Xm+pmz352WwOYGMcxkAI vpH6eK9fY41r1eRAsiFCCcCcoKMYhXv1Wszd/ysMYEofkrfAoLpfKi7h5nLsQJnt 67yibySXv/6PGeN2vSVfE1T5l7yuMExu912gQFarj+M2EIOxUzCwM19WL7JATHhJ ZSGg1RrLepbk0epIorulibobHSJd5unnS0dj3UEyp0UkuFbFOOEIJ59uH8Gw4WMJ XVlVgWp8/7ZwzScvSe380mt8s8RNYDw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:48:47 2025 by rpki-client