$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89ce4ed0-ddf3-30dc-9b58-4590f37431f9.roa File: 89ce4ed0-ddf3-30dc-9b58-4590f37431f9.roa (raw, json) Hash identifier: iwQt2gtJXl/d0eXLSp3ITxLN3plVIgtTf8cszhm779Y= Subject key identifier: 27:64:75:0A:0E:6D:AE:99:A4:04:2F:7A:A3:82:A2:A3:79:8D:C3:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6F8CCA1108C7995F3B280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89ce4ed0-ddf3-30dc-9b58-4590f37431f9.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.58.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:f8:cc:a1:10:8c:79:95:f3:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=96e674d1-7d55-4de8-a2a5-da0ebdf0e2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:49:33:c3:22:a8:b1:77:10:25:60:a9:71:8c: d1:94:26:23:d5:99:04:a8:47:ce:76:ec:ae:b4:4a: 81:05:8f:a2:71:70:63:2f:e4:b8:67:f1:30:54:1c: 5b:54:62:c7:78:ae:03:11:16:3d:e5:00:81:3a:50: 7e:43:ff:dd:67:e1:fa:6e:f2:6d:c8:dd:43:57:d7: ae:1e:88:aa:04:8c:cc:85:0d:3b:16:b4:4c:c0:65: dd:1c:2d:39:f2:53:fe:47:11:91:4a:c8:dd:95:82: e9:c2:5f:7a:2c:82:30:c6:34:29:0e:76:a4:6a:1b: 0d:ab:ec:cc:b9:ce:ee:4e:66:85:a1:0a:10:70:b0: e6:20:39:67:26:2f:c6:33:7e:8d:8b:7b:c2:d6:ad: a0:3f:09:c4:f5:f3:7b:f7:ff:ee:a2:9a:a4:ca:aa: 4d:a4:42:3c:07:c0:58:56:db:b7:5d:29:a9:ee:f8: 05:45:0f:fe:ab:f4:b7:84:12:39:5a:f3:1d:bd:97: 9c:e4:7a:cd:0e:a4:73:99:46:e0:b0:27:7f:4e:21: df:9f:c6:56:41:dd:be:96:93:3d:ec:44:e5:68:9a: 2d:f4:c1:22:e0:86:4d:6d:4a:7d:bb:65:a1:3d:95: db:42:1f:b3:9d:a2:7f:97:db:e6:d8:57:4e:c6:57: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:64:75:0A:0E:6D:AE:99:A4:04:2F:7A:A3:82:A2:A3:79:8D:C3:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89ce4ed0-ddf3-30dc-9b58-4590f37431f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5f:86:b9:de:80:5d:b1:d7:30:59:2b:ee:6c:27:05:11:a1: 17:ad:c8:d9:80:da:ca:8b:e7:e0:52:2c:c6:ab:16:9d:e3:e3: 01:5d:25:ab:76:43:50:67:0c:5f:ca:48:ba:84:32:f0:70:61: a0:37:00:c8:27:3a:89:66:62:61:4a:2d:fe:b6:cf:43:49:6a: 30:0f:37:84:ac:f5:7c:4b:4c:63:03:72:d7:f4:9b:37:84:3c: dc:4b:3e:42:fc:91:a2:99:17:c4:7c:eb:a3:82:fd:48:a5:46: da:eb:9a:e3:72:48:aa:78:b7:ab:d6:03:f6:ef:9d:b7:15:2d: 0f:20:2f:34:51:06:20:86:ed:42:c6:0d:b0:16:47:24:08:cd: 68:ec:73:6b:57:14:89:b2:59:38:c4:cd:d1:4d:71:91:66:bb: 34:aa:85:06:a7:76:33:d1:5c:fe:90:f2:49:c3:85:24:6e:01: 52:c9:4d:54:98:a1:5a:0b:11:fc:36:1c:b5:e4:34:63:8d:0d: 4d:4e:76:e1:6a:44:2d:e3:99:e1:43:91:16:03:5a:34:9d:67: 3f:61:03:c2:e6:7b:68:c2:db:10:d6:a1:16:ba:f5:62:de:34: 73:8e:22:71:e5:9e:cf:46:44:c9:7f:c8:dd:a8:57:a0:38:f8: a0:89:2d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vjMoRCMeZXzsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OTZlNjc0ZDEtN2Q1NS00ZGU4LWEyYTUtZGEwZWJkZjBlMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80kzwyKosXcQJWCpcYzRlCYj1ZkEqEfOduyu tEqBBY+icXBjL+S4Z/EwVBxbVGLHeK4DERY95QCBOlB+Q//dZ+H6bvJtyN1DV9eu HoiqBIzMhQ07FrRMwGXdHC058lP+RxGRSsjdlYLpwl96LIIwxjQpDnakahsNq+zM uc7uTmaFoQoQcLDmIDlnJi/GM36Ni3vC1q2gPwnE9fN79//uopqkyqpNpEI8B8BY Vtu3XSmp7vgFRQ/+q/S3hBI5WvMdvZec5HrNDqRzmUbgsCd/TiHfn8ZWQd2+lpM9 7ETlaJot9MEi4IZNbUp9u2WhPZXbQh+znaJ/l9vm2FdOxlcj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdkdQoOba6ZpAQveqOCoqN5jcMSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODljZTRlZDAtZGRmMy0z MGRjLTliNTgtNDU5MGYzNzQzMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1fhrnegF2x1zBZK+5sJwURoRetyNmA2sqL5+BSLMarFp3j4wFdJat2 Q1BnDF/KSLqEMvBwYaA3AMgnOolmYmFKLf62z0NJajAPN4Ss9XxLTGMDctf0mzeE PNxLPkL8kaKZF8R866OC/UilRtrrmuNySKp4t6vWA/bvnbcVLQ8gLzRRBiCG7ULG DbAWRyQIzWjsc2tXFImyWTjEzdFNcZFmuzSqhQandjPRXP6Q8knDhSRuAVLJTVSY oVoLEfw2HLXkNGONDU1OduFqRC3jmeFDkRYDWjSdZz9hA8Lme2jC2xDWoRa69WLe NHOOInHlns9GRMl/yN2oV6A4+KCJLTo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:42:39 2025 by rpki-client