$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7aef86-6b26-3228-88de-bfd52ea6726f.roa File: 8e7aef86-6b26-3228-88de-bfd52ea6726f.roa (raw, json) Hash identifier: GRmhe5uoAqYbKrmf2QDRaz7lXizJ508RBFikTDnv/Z4= Subject key identifier: 71:03:6F:AD:84:DD:67:E0:A5:BD:99:27:80:1D:EF:2D:4F:16:60:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C371325AA937F44284C6540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7aef86-6b26-3228-88de-bfd52ea6726f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.43.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:13:25:aa:93:7f:44:28:4c:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=a6c4ed73-c81c-4499-b6ee-ffde0da6d533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:01:be:10:20:cc:15:9a:69:88:b8:55:5e:de: 68:0f:c3:e3:69:f5:16:04:4c:4a:7a:d0:6f:ff:58: 4a:a2:b3:55:dc:a2:81:4b:c1:d2:fd:99:68:5c:67: 58:3b:b7:12:cf:24:9d:9a:5e:e5:c2:71:84:7a:02: af:9b:51:78:8c:04:63:30:d5:8a:01:f0:9b:8d:05: 10:aa:52:66:44:59:db:36:b0:ef:65:d0:35:df:88: 88:0e:f3:ad:07:6b:e7:7a:4d:ea:ad:7f:85:be:77: 7d:b5:b4:90:aa:93:91:58:98:a1:ea:62:31:70:01: f8:7f:81:5d:94:75:3b:e1:58:78:28:f7:d5:b7:8e: 8c:ac:a1:c3:c5:21:82:66:ed:35:3d:81:8e:0b:84: 16:83:95:ed:33:7b:cc:d2:2a:78:b6:45:c3:8d:21: 2d:6b:7b:37:ce:0a:9e:aa:33:6c:1f:54:70:df:a7: 00:bd:75:76:52:d0:1d:cb:b1:db:e1:32:0a:1e:2e: 7b:7d:6b:ce:aa:ee:d1:db:29:61:ab:84:bd:d0:21: ff:9d:0e:ec:86:8e:6c:68:95:9a:18:82:9a:d6:77: 75:a9:9d:bc:93:df:61:63:50:e6:af:e8:14:61:6b: 53:3f:dd:84:a1:fd:fb:92:62:f7:5e:ad:68:c8:ef: fc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:6F:AD:84:DD:67:E0:A5:BD:99:27:80:1D:EF:2D:4F:16:60:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e7aef86-6b26-3228-88de-bfd52ea6726f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:28:dd:f4:26:09:82:3c:fe:16:72:29:69:72:81:10:a2:6c: 46:b4:58:b0:c3:92:20:53:c8:8a:7b:25:ed:cf:d8:e6:10:14: 3f:c9:af:c3:5e:99:58:1f:00:f1:0c:bd:f0:08:fb:64:76:85: d6:01:59:48:2d:3a:5d:8d:74:c1:94:f5:28:19:a1:bb:09:32: 6c:69:47:cc:ac:11:65:e9:dc:1a:d5:c8:6a:b7:31:a1:0d:28: a3:5d:0b:de:00:ae:58:fc:c9:3f:79:46:6f:76:e3:ea:85:c6: eb:97:e5:3e:df:0e:60:39:ba:58:3e:07:69:8a:0f:8c:c2:07: 96:bc:eb:b6:9d:a8:08:6f:0c:1e:e5:fb:ba:a4:fa:64:2e:39: 59:78:8d:50:bb:d3:08:69:41:b8:06:45:73:ad:b8:75:bf:8a: 19:59:8c:dd:a0:00:1e:09:1e:87:9d:39:de:e3:bf:6d:1a:5d: 6b:05:81:ce:6d:a0:b2:5c:a3:e3:7d:c9:8c:3e:1f:51:23:50: a5:08:93:f8:83:d5:c5:43:f1:29:36:3f:7a:db:be:f9:b5:b2: de:9e:f0:21:9d:95:6a:4f:a0:00:bf:1a:4a:97:d7:21:48:34: 56:bf:0d:f4:5d:64:02:73:10:9c:28:29:6e:aa:0f:52:b5:dc: 4e:c1:90:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxMlqpN/RChMZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTZjNGVkNzMtYzgxYy00NDk5LWI2ZWUtZmZkZTBkYTZkNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwG+ECDMFZppiLhVXt5oD8PjafUWBExKetBv /1hKorNV3KKBS8HS/ZloXGdYO7cSzySdml7lwnGEegKvm1F4jARjMNWKAfCbjQUQ qlJmRFnbNrDvZdA134iIDvOtB2vnek3qrX+Fvnd9tbSQqpORWJih6mIxcAH4f4Fd lHU74Vh4KPfVt46MrKHDxSGCZu01PYGOC4QWg5XtM3vM0ip4tkXDjSEta3s3zgqe qjNsH1Rw36cAvXV2UtAdy7Hb4TIKHi57fWvOqu7R2ylhq4S90CH/nQ7sho5saJWa GIKa1nd1qZ28k99hY1Dmr+gUYWtTP92Eof37kmL3Xq1oyO/8XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEDb62E3Wfgpb2ZJ4Ad7y1PFmCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU3YWVmODYtNmIyNi0z MjI4LTg4ZGUtYmZkNTJlYTY3MjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYo3fQmCYI8/hZyKWlygRCibEa0WLDDkiBTyIp7Je3P2OYQFD/Jr8Ne mVgfAPEMvfAI+2R2hdYBWUgtOl2NdMGU9SgZobsJMmxpR8ysEWXp3BrVyGq3MaEN KKNdC94Arlj8yT95Rm924+qFxuuX5T7fDmA5ulg+B2mKD4zCB5a867adqAhvDB7l +7qk+mQuOVl4jVC70whpQbgGRXOtuHW/ihlZjN2gAB4JHoedOd7jv20aXWsFgc5t oLJco+N9yYw+H1EjUKUIk/iD1cVD8Sk2P3rbvvm1st6e8CGdlWpPoAC/GkqX1yFI NFa/DfRdZAJzEJwoKW6qD1K13E7BkKY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:03:47 2025 by rpki-client