$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9040b89b-ada7-3a3a-9ec8-baaba6ee329a.roa File: 9040b89b-ada7-3a3a-9ec8-baaba6ee329a.roa (raw, json) Hash identifier: Qn07PeyFqpZUSExe3DA/0SQwo5GfEi2Wwa4JbSpJ3jI= Subject key identifier: 77:57:4B:8A:5F:38:8C:EF:59:FB:4B:D4:71:E0:2C:DF:3E:91:A9:4A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A29F61A71DF16BA9C740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9040b89b-ada7-3a3a-9ec8-baaba6ee329a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.42.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a2:9f:61:a7:1d:f1:6b:a9:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=d7e0c5d3-fa25-417f-8cbf-1c7f01dac3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6b:e9:d1:2d:c6:d2:00:16:aa:13:11:34:8a: 11:8e:a5:ea:df:dc:83:c0:9f:9d:8b:b7:01:d9:d0: 50:80:7f:f6:a2:7f:ff:3c:26:36:84:7f:12:40:65: 25:f0:73:26:c9:57:1c:c6:1f:d2:85:3c:7d:8f:ff: 1f:40:8f:5f:3d:bd:ca:2c:c8:0d:25:03:07:ae:ff: f6:99:c9:23:7e:32:4f:a3:36:f3:9f:93:3c:f7:ec: f2:7b:28:8a:21:ba:a7:85:77:0b:b4:0d:12:14:e6: 94:89:a0:8b:57:fb:7d:d4:9a:2f:d1:ed:65:f2:56: 69:69:f6:cf:65:18:4b:2f:7a:cf:e6:7a:c4:3d:39: e0:da:d8:d2:b3:fa:f7:ef:b1:87:37:4b:8d:39:62: c8:69:a2:37:b0:17:36:bb:15:46:98:1a:96:c1:58: 97:96:61:cd:c1:10:c1:0e:94:f1:cb:25:90:8e:ff: 62:e9:62:f6:c6:08:f9:1e:34:44:9d:6c:b0:91:b0: 07:ab:f7:e7:d2:48:e2:05:de:0e:0e:1c:ec:89:aa: c8:c3:4b:40:a8:89:e5:9e:66:67:9b:32:05:45:31: 07:3a:54:46:d4:68:7c:3d:f2:21:50:e6:89:cf:19: fa:84:51:20:57:db:23:8a:18:cf:3a:91:5d:8f:ce: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:57:4B:8A:5F:38:8C:EF:59:FB:4B:D4:71:E0:2C:DF:3E:91:A9:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9040b89b-ada7-3a3a-9ec8-baaba6ee329a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:61:6f:31:f9:2f:13:00:4d:59:8f:f2:06:9f:4f:e7:dc:38: a2:e4:d4:7c:b9:1e:d2:d9:40:ad:e2:33:51:28:2b:d9:e2:a6: 43:20:91:16:d1:75:0c:70:d8:01:bf:08:7d:77:f7:45:27:48: 31:74:31:fd:98:09:a5:04:03:98:24:f2:4f:45:94:0a:9f:58: 4f:f0:1c:35:f2:34:12:e2:99:bb:9e:d0:61:69:d8:7d:78:d8: 33:c0:9e:4a:86:0e:2f:2d:d4:a3:a9:7d:08:8c:00:15:ef:f2: f0:4c:ec:01:0b:65:e7:b8:f6:09:aa:5e:cf:e3:cf:d2:3b:97: ce:68:41:8b:5b:f2:48:3f:cd:e1:80:2a:6b:de:1c:80:4a:98: 81:65:91:ef:d3:1b:db:03:10:24:e7:c3:88:f7:c6:72:1a:31: 2d:73:1b:14:53:d1:7d:4b:33:a4:2d:b7:34:11:44:88:78:d1: ca:c2:26:fd:de:1a:f1:80:5b:4c:85:8c:c9:ac:e7:e3:68:21: d2:75:d1:03:a9:97:05:98:dd:5c:12:50:88:6b:5d:ff:e9:28: 44:b1:fb:83:ac:2a:7b:d6:6c:7a:38:69:ad:af:9a:fa:c5:b1: 22:2e:87:81:ce:b6:c7:e0:55:78:fb:b2:7f:ec:7c:9d:0c:10: 40:d5:3a:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aKfYacd8Wupx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDdlMGM1ZDMtZmEyNS00MTdmLThjYmYtMWM3ZjAxZGFjM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWvp0S3G0gAWqhMRNIoRjqXq39yDwJ+di7cB 2dBQgH/2on//PCY2hH8SQGUl8HMmyVccxh/ShTx9j/8fQI9fPb3KLMgNJQMHrv/2 mckjfjJPozbzn5M89+zyeyiKIbqnhXcLtA0SFOaUiaCLV/t91Jov0e1l8lZpafbP ZRhLL3rP5nrEPTng2tjSs/r377GHN0uNOWLIaaI3sBc2uxVGmBqWwViXlmHNwRDB DpTxyyWQjv9i6WL2xgj5HjREnWywkbAHq/fn0kjiBd4ODhzsiarIw0tAqInlnmZn mzIFRTEHOlRG1Gh8PfIhUOaJzxn6hFEgV9sjihjPOpFdj87lHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdXS4pfOIzvWftL1HHgLN8+kalKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTA0MGI4OWItYWRhNy0z YTNhLTllYzgtYmFhYmE2ZWUzMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFypgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1hbzH5LxMATVmP8gafT+fcOKLk1Hy5HtLZQK3iM1EoK9nipkMgkRbR dQxw2AG/CH1390UnSDF0Mf2YCaUEA5gk8k9FlAqfWE/wHDXyNBLimbue0GFp2H14 2DPAnkqGDi8t1KOpfQiMABXv8vBM7AELZee49gmqXs/jz9I7l85oQYtb8kg/zeGA KmveHIBKmIFlke/TG9sDECTnw4j3xnIaMS1zGxRT0X1LM6QttzQRRIh40crCJv3e GvGAW0yFjMms5+NoIdJ10QOplwWY3VwSUIhrXf/pKESx+4OsKnvWbHo4aa2vmvrF sSIuh4HOtsfgVXj7sn/sfJ0MEEDVOno= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:26 2025 by rpki-client