$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ebb9091-25d9-3251-8058-bf85b410f236.roa File: 8ebb9091-25d9-3251-8058-bf85b410f236.roa (raw, json) Hash identifier: 5mWBgIA1YAZNCjvl0Rt4KCGcOJhBmN7nyMH9jZqGCCg= Subject key identifier: 4A:37:FF:8F:3E:7F:AC:D0:5C:9F:A8:7B:60:2D:F5:57:55:4F:94:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF7018476E9B1897CE6A400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ebb9091-25d9-3251-8058-bf85b410f236.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.54.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:01:84:76:e9:b1:89:7c:e6:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=a97398c9-1af5-4fb6-b7fe-2125d44e0b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:40:7c:83:68:28:41:cf:30:ec:79:92:4a: 09:c5:1c:1b:f2:06:3e:29:f6:aa:e2:62:d7:a8:f7: 3c:6e:ed:67:c4:15:f4:cb:7c:66:34:f8:c3:c2:c3: 0f:58:77:5e:90:f8:bf:dc:fb:7f:c1:57:cd:c6:14: d3:58:b9:26:bf:18:38:cc:72:d9:aa:b0:7f:ef:a3: dc:56:e6:15:b7:41:c4:5d:cd:6d:8a:a1:1a:36:86: 01:ae:1e:df:49:15:20:c9:8f:03:04:77:12:44:c1: a8:69:5f:f8:5a:8f:19:8a:8b:77:25:64:a5:f1:6a: ab:14:aa:95:50:4c:c0:0a:44:6e:61:08:21:68:13: 5c:44:04:f8:a4:76:f9:26:35:17:0a:16:fa:81:24: cc:9b:c3:93:c5:da:8b:23:bf:a3:6b:34:a5:87:af: ff:e3:90:e5:c8:56:4d:68:34:55:5d:44:3a:11:5a: e5:a2:fb:f6:7a:34:45:a5:66:b9:89:cb:ad:c9:a3: 88:f3:17:b9:3d:fb:dc:7f:20:30:47:3b:23:fa:13: 4f:b3:94:16:3a:43:79:8a:a2:a3:9a:5b:9c:da:fe: 34:b8:ef:24:00:7b:6c:7b:0a:07:21:2b:27:d6:94: 66:c2:a4:7a:1b:db:c2:6e:81:5a:b3:99:90:54:3f: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:37:FF:8F:3E:7F:AC:D0:5C:9F:A8:7B:60:2D:F5:57:55:4F:94:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ebb9091-25d9-3251-8058-bf85b410f236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:51:9c:a5:f9:02:64:23:90:0c:84:95:0e:fa:6f:6b:af:10: 5e:c9:0a:04:9a:e6:ac:04:ba:97:91:56:af:9b:d6:2f:5d:61: 5f:74:c5:74:ee:5e:72:d4:00:f5:bb:c8:65:1e:b8:f7:98:a7: 2c:4a:65:bf:1e:d5:1c:b8:54:b1:10:85:ae:3f:9a:11:2c:8d: d0:0e:f8:b1:f0:f6:e0:6b:3e:79:f5:5a:fd:51:5a:94:05:25: bc:4c:1f:86:9d:db:21:c1:3d:63:25:5d:c5:c7:a8:29:f8:46: 44:41:26:4f:6b:1f:89:54:98:33:57:38:47:4e:56:68:8e:b3: a0:77:fc:c3:48:36:7c:67:25:3f:ce:d9:03:d8:9b:11:82:6f: 47:4e:ed:7d:5d:6a:e6:51:bb:00:96:fd:ad:2c:f5:0e:95:03: 5a:78:e1:1c:d9:26:37:67:7a:bc:24:88:6a:0e:8b:3d:62:7d: dc:03:57:f1:32:53:4e:d8:c4:32:e3:6e:3b:15:b3:bf:8f:ac: e2:b0:fd:44:05:2b:dd:d5:41:61:51:5f:ea:33:fb:41:02:1f: ba:de:76:1f:10:86:fd:8a:89:fd:45:03:88:05:77:65:f3:2b: 93:41:4f:cb:27:8b:1c:bf:2b:f3:8e:fa:6f:2c:c1:08:da:23: 7b:d9:fa:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9wGEdumxiXzmpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YTk3Mzk4YzktMWFmNS00ZmI2LWI3ZmUtMjEyNWQ0NGUwYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx1AfINoKEHPMOx5kkoJxRwb8gY+Kfaq4mLX qPc8bu1nxBX0y3xmNPjDwsMPWHdekPi/3Pt/wVfNxhTTWLkmvxg4zHLZqrB/76Pc VuYVt0HEXc1tiqEaNoYBrh7fSRUgyY8DBHcSRMGoaV/4Wo8Ziot3JWSl8WqrFKqV UEzACkRuYQghaBNcRAT4pHb5JjUXChb6gSTMm8OTxdqLI7+jazSlh6//45DlyFZN aDRVXUQ6EVrlovv2ejRFpWa5icutyaOI8xe5PfvcfyAwRzsj+hNPs5QWOkN5iqKj mluc2v40uO8kAHtsewoHISsn1pRmwqR6G9vCboFas5mQVD/PfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo3/48+f6zQXJ+oe2At9VdVT5QqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGViYjkwOTEtMjVkOS0z MjUxLTgwNTgtYmY4NWI0MTBmMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENRnKX5AmQjkAyElQ76b2uvEF7JCgSa5qwEupeRVq+b1i9dYV90xXTu XnLUAPW7yGUeuPeYpyxKZb8e1Ry4VLEQha4/mhEsjdAO+LHw9uBrPnn1Wv1RWpQF JbxMH4ad2yHBPWMlXcXHqCn4RkRBJk9rH4lUmDNXOEdOVmiOs6B3/MNINnxnJT/O 2QPYmxGCb0dO7X1dauZRuwCW/a0s9Q6VA1p44RzZJjdnerwkiGoOiz1ifdwDV/Ey U07YxDLjbjsVs7+PrOKw/UQFK93VQWFRX+oz+0ECH7redh8Qhv2Kif1FA4gFd2Xz K5NBT8snixy/K/OO+m8swQjaI3vZ+vY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:47 2025 by rpki-client