$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c413bd6-3b69-3308-aac6-ace42685e5ff.roa File: 8c413bd6-3b69-3308-aac6-ace42685e5ff.roa (raw, json) Hash identifier: MPtYA4M2qkGtiMkOotD8K44Qcx/i/T3kwegVQKyQ0DA= Subject key identifier: C5:FA:DE:9A:95:FC:36:92:D4:8E:C9:03:61:EC:42:EF:57:65:ED:FC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6F0318216422B1414A5A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c413bd6-3b69-3308-aac6-ace42685e5ff.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.54.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:f0:31:82:16:42:2b:14:14:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=586e6302-cbb3-48c7-be0a-b3e442f92fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:bf:4a:90:21:af:8d:45:53:ac:03:f6:49: 01:ed:8d:c5:48:13:09:0c:be:15:67:22:f8:47:b5: 4b:39:a2:96:4b:ff:33:a4:73:12:c6:b1:a1:d9:44: 37:0f:9b:27:b0:84:ef:5b:1c:ba:d9:e2:ce:09:04: e2:84:b5:31:4e:12:21:cc:95:3b:67:1c:39:ee:86: a1:b6:c5:fb:2a:af:5b:48:be:94:12:7a:b6:29:e4: 3b:3b:d3:08:8c:ac:61:4e:55:27:52:0e:27:16:41: 5c:83:03:4b:bb:08:45:95:45:e4:b9:4d:94:be:68: 59:f8:c3:cc:9f:85:6e:6a:2a:11:0b:70:79:21:6e: 38:a1:57:10:45:89:f8:b2:5f:19:37:66:10:66:55: 4c:c1:80:ee:2b:6e:ad:53:1e:f3:12:3e:2a:11:aa: 78:57:fd:c4:34:03:77:e6:6c:c3:31:33:7d:39:82: fd:a8:0f:42:8c:e5:5b:c2:43:f9:d4:bb:0a:e2:65: 99:a2:ff:47:d8:70:a5:46:13:d0:e5:c5:2d:d7:9b: 26:2c:32:d1:8a:59:99:3b:3f:b5:8b:bb:80:98:30: 98:5d:40:75:1d:a2:6d:7a:d0:f4:30:9d:09:2c:f2: 0e:34:40:13:89:73:75:e4:f2:a8:c5:81:ac:25:89: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FA:DE:9A:95:FC:36:92:D4:8E:C9:03:61:EC:42:EF:57:65:ED:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c413bd6-3b69-3308-aac6-ace42685e5ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:19:e3:32:f5:6b:ac:fb:83:1c:41:9f:ba:56:aa:07:40:7b: bf:54:89:40:08:c0:67:e4:f6:94:5e:0c:bc:d2:8f:a2:f3:ee: 6e:2d:87:55:86:2f:d5:af:5a:5c:8b:c4:57:4c:21:21:3c:9e: ee:ad:45:1f:fc:b6:fa:07:c8:6a:28:14:14:30:72:97:6a:59: 21:0b:25:cc:87:41:9c:10:8c:28:2b:8d:c7:5c:3a:2b:bc:a5: 61:70:8d:ce:38:0e:02:d1:26:92:7b:a5:18:31:45:40:5b:19: bf:08:6a:3c:bb:6e:26:78:59:07:c7:7b:54:47:5c:73:08:c8: e3:cb:cd:c1:3b:6d:5b:d8:62:6c:14:75:1f:8b:d4:9b:ea:76: 5b:e5:d1:98:52:6a:ae:ac:cd:04:2d:2c:4a:b7:94:da:9a:74: af:f8:05:8b:31:4b:e5:bd:fd:a1:fd:22:e6:19:83:4e:37:dc: 1a:10:c9:3c:05:95:91:cd:ac:09:4a:27:93:bc:57:3b:83:0c: 09:46:bf:eb:60:24:22:7e:5c:67:9a:a4:2a:79:8a:e5:38:ea: a9:15:07:83:0d:0a:c7:e6:9a:db:1f:e8:7c:dc:1c:53:17:9d: b9:93:57:2f:3b:4b:2a:62:66:48:e3:0c:02:8b:76:85:04:6a: f5:64:70:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vAxghZCKxQUpaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NTg2ZTYzMDItY2JiMy00OGM3LWJlMGEtYjNlNDQyZjkyZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gq/SpAhr41FU6wD9kkB7Y3FSBMJDL4VZyL4 R7VLOaKWS/8zpHMSxrGh2UQ3D5snsITvWxy62eLOCQTihLUxThIhzJU7Zxw57oah tsX7Kq9bSL6UEnq2KeQ7O9MIjKxhTlUnUg4nFkFcgwNLuwhFlUXkuU2UvmhZ+MPM n4VuaioRC3B5IW44oVcQRYn4sl8ZN2YQZlVMwYDuK26tUx7zEj4qEap4V/3ENAN3 5mzDMTN9OYL9qA9CjOVbwkP51LsK4mWZov9H2HClRhPQ5cUt15smLDLRilmZOz+1 i7uAmDCYXUB1HaJtetD0MJ0JLPIONEATiXN15PKoxYGsJYlKPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX63pqV/DaS1I7JA2HsQu9XZe38MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGM0MTNiZDYtM2I2OS0z MzA4LWFhYzYtYWNlNDI2ODVlNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkZ4zL1a6z7gxxBn7pWqgdAe79UiUAIwGfk9pReDLzSj6Lz7m4th1WG L9WvWlyLxFdMISE8nu6tRR/8tvoHyGooFBQwcpdqWSELJcyHQZwQjCgrjcdcOiu8 pWFwjc44DgLRJpJ7pRgxRUBbGb8Iajy7biZ4WQfHe1RHXHMIyOPLzcE7bVvYYmwU dR+L1Jvqdlvl0ZhSaq6szQQtLEq3lNqadK/4BYsxS+W9/aH9IuYZg0433BoQyTwF lZHNrAlKJ5O8VzuDDAlGv+tgJCJ+XGeapCp5iuU46qkVB4MNCsfmmtsf6HzcHFMX nbmTVy87SypiZkjjDAKLdoUEavVkcOg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:13 2025 by rpki-client