$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86e21e1c-ed1a-3ea0-8a46-786ce2c5da47.roa File: 86e21e1c-ed1a-3ea0-8a46-786ce2c5da47.roa (raw, json) Hash identifier: ePDI37UpJ+wU2KippcTjY1gvpOZtiNfjHWlMwTZbC40= Subject key identifier: E9:77:C2:D5:8B:9E:12:60:AE:AA:E7:BC:84:A2:35:F9:94:E8:0A:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B23318F1F5294D8DACE56B880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86e21e1c-ed1a-3ea0-8a46-786ce2c5da47.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 9498 IP address blocks: 23.50.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8f:1f:52:94:d8:da:ce:56:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=b313ed64-609a-4329-8635-894e9025a759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:12:a3:73:dc:a3:e5:41:d6:7a:9d:cd:dd:af: 04:c1:7d:43:d5:96:37:67:03:6d:68:ee:29:2d:c3: 58:50:3c:ac:19:62:2d:32:82:6d:83:fa:23:ce:e6: c7:12:08:cb:95:80:f9:be:36:fc:9f:97:64:59:0f: 44:5a:6b:98:31:ac:f0:c3:a6:2f:54:e4:47:ca:88: 68:d4:df:52:94:dd:1a:84:d0:84:16:e5:1a:37:b7: cf:7c:fe:c4:a9:be:0b:a1:1e:49:68:9b:d4:eb:4d: a7:0d:9d:e4:5e:cc:9a:75:e4:06:0c:67:cc:99:cb: 34:7d:41:3a:8b:69:4f:37:4d:41:e0:86:6c:84:7a: e8:23:8e:5e:fb:12:23:a4:40:ad:34:3f:bf:9d:ec: e2:ee:91:6b:c9:8e:3d:8a:c2:36:25:42:0e:5b:5b: 59:e5:eb:0f:1f:c5:03:b9:53:9b:60:05:d5:10:b5: cd:e4:c0:e5:c5:47:d1:cb:3c:a6:33:4d:0e:85:c3: d8:a2:66:14:8b:28:43:9e:e0:72:ec:98:68:cc:4d: c3:53:af:94:8e:ab:c9:c9:63:1e:41:62:f2:e1:d1: 39:42:c7:ff:2c:5c:b6:ce:c4:85:22:a9:0b:48:64: c9:93:5b:09:29:13:97:f5:d1:9f:4d:cf:82:53:c0: 67:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:77:C2:D5:8B:9E:12:60:AE:AA:E7:BC:84:A2:35:F9:94:E8:0A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86e21e1c-ed1a-3ea0-8a46-786ce2c5da47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d0:5e:dd:a7:ad:46:5f:35:87:e4:d3:dd:a0:00:dc:8f:2b: f3:32:71:3e:19:e7:65:be:7a:88:7b:28:67:9e:67:18:77:1d: 7d:07:2d:a4:2b:63:6c:34:53:1f:79:bb:62:08:e8:8e:40:4b: 27:f2:ef:f1:0e:28:9b:d7:2c:46:3c:a7:73:2f:eb:36:e3:11: eb:58:90:6f:4e:17:bb:01:53:93:cd:bc:56:28:3d:8f:3e:fc: 20:cb:3f:69:97:45:5f:15:dd:f2:59:e7:e2:18:f0:9c:76:b3: 00:5e:cc:ba:df:3a:96:25:1f:b3:e3:17:66:d0:1f:41:00:28: f6:05:2c:5c:db:51:3a:45:fd:9e:95:eb:7d:f5:7c:ad:0e:9b: 70:30:dd:f7:44:62:9e:f6:88:66:43:4a:92:7e:15:f5:f5:54: 32:b8:b5:79:13:9d:21:06:5f:df:60:54:f5:62:0f:71:a5:27: 73:d7:9f:26:e6:ca:bd:b3:fd:41:95:2e:05:84:bc:e2:60:1a: 01:4e:fe:db:85:cb:9e:4f:bc:dd:45:e9:f2:7e:cf:1c:28:87: 44:d6:ec:f2:eb:20:df:23:80:9f:50:f1:6f:8c:b1:23:e3:c3: dc:85:32:98:63:62:97:fd:3f:8f:73:72:a9:2d:18:0b:a2:9c: cc:63:78:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMY8fUpTY2s5WuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YjMxM2VkNjQtNjA5YS00MzI5LTg2MzUtODk0ZTkwMjVhNzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxKjc9yj5UHWep3N3a8EwX1D1ZY3ZwNtaO4p LcNYUDysGWItMoJtg/ojzubHEgjLlYD5vjb8n5dkWQ9EWmuYMazww6YvVORHyoho 1N9SlN0ahNCEFuUaN7fPfP7Eqb4LoR5JaJvU602nDZ3kXsyadeQGDGfMmcs0fUE6 i2lPN01B4IZshHroI45e+xIjpECtND+/nezi7pFryY49isI2JUIOW1tZ5esPH8UD uVObYAXVELXN5MDlxUfRyzymM00OhcPYomYUiyhDnuBy7JhozE3DU6+UjqvJyWMe QWLy4dE5Qsf/LFy2zsSFIqkLSGTJk1sJKROX9dGfTc+CU8Bn6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl3wtWLnhJgrqrnvISiNfmU6Ar+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZlMjFlMWMtZWQxYS0z ZWEwLThhNDYtNzg2Y2UyYzVkYTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDQXt2nrUZfNYfk092gANyPK/MycT4Z52W+eoh7KGeeZxh3HX0HLaQr Y2w0Ux95u2II6I5ASyfy7/EOKJvXLEY8p3Mv6zbjEetYkG9OF7sBU5PNvFYoPY8+ /CDLP2mXRV8V3fJZ5+IY8Jx2swBezLrfOpYlH7PjF2bQH0EAKPYFLFzbUTpF/Z6V 6331fK0Om3Aw3fdEYp72iGZDSpJ+FfX1VDK4tXkTnSEGX99gVPViD3GlJ3PXnybm yr2z/UGVLgWEvOJgGgFO/tuFy55PvN1F6fJ+zxwoh0TW7PLrIN8jgJ9Q8W+MsSPj w9yFMphjYpf9P49zcqktGAuinMxjeAc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:57 2025 by rpki-client