$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa File: 90b3c37a-65af-33a6-90d6-b28162089b17.roa (raw, json) Hash identifier: cxEB57miRb95qTYAfNEaCYjJ0IWWbcbn7uMEckhpIH0= Subject key identifier: 11:AF:1E:27:1F:63:BD:B4:56:E6:A8:DF:A0:0C:1B:6F:64:07:61:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6F9AA5CAC2E60E8685180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 24319 IP address blocks: 23.59.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:f9:aa:5c:ac:2e:60:e8:68:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=e661a89d-5ec4-40be-8556-9682b750eaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:5e:7e:7b:7c:14:fd:5c:74:f0:d5:d9:4d: 44:9e:51:b5:1d:59:79:e5:cf:3f:4f:0c:d9:c8:8b: 91:0e:9a:f2:47:b5:5f:9e:d2:98:2b:18:a1:85:49: 86:f5:d5:02:7e:4f:9c:0f:42:50:d0:02:ed:14:2d: 10:45:e3:f8:db:02:ea:52:a8:82:3b:f6:a5:f6:5a: c4:59:a5:c9:f9:5a:8e:6f:21:92:9c:8e:00:10:48: 8a:0d:5d:0f:14:39:85:c6:1d:25:d9:04:d4:85:40: 09:7f:b6:90:5d:0c:66:bb:be:c2:08:af:20:8a:75: fd:fa:cc:9a:84:3b:e0:ff:9f:4d:13:06:65:2d:4f: 72:6e:c7:da:16:3a:07:20:ab:8e:55:9e:92:f7:5b: a2:89:f1:19:bc:f1:77:44:48:15:b8:95:7d:34:f2: d9:6a:14:a8:8f:4c:e6:65:09:68:68:03:9c:93:d7: aa:45:e8:63:55:5e:58:3e:46:e5:f4:47:6a:11:ce: 77:27:04:eb:73:59:06:f4:31:56:d3:76:e5:09:12: c3:af:b5:12:3a:ad:b2:ef:e3:e8:bd:c8:27:25:e2: 5f:ff:a9:22:dc:46:7a:32:9f:29:ed:00:d8:d4:15: ab:a1:ba:77:58:49:69:d3:fb:b6:43:82:2a:07:a9: d0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:1E:27:1F:63:BD:B4:56:E6:A8:DF:A0:0C:1B:6F:64:07:61:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.59.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8d:f0:6a:f6:2d:66:db:80:a5:4b:3b:48:cd:01:9f:fc:47: fd:37:33:af:57:f5:8d:33:5b:7d:0f:94:6b:11:24:14:53:07: f4:4d:b4:b6:4c:69:be:06:8e:81:53:d3:c0:9a:a0:db:54:97: 2b:aa:a5:07:48:c0:dc:64:e7:85:f9:d8:ce:4f:fa:8b:b2:df: d5:4a:32:a8:54:63:1f:8c:70:20:b4:3b:1f:5c:5e:3d:d3:ee: 53:ce:f3:17:f7:a0:51:f7:00:51:5b:81:2f:16:6c:64:63:03: 8c:9e:4b:64:16:b1:73:f0:76:53:af:ce:ab:4f:c0:d7:40:56: 49:81:d0:1f:0b:f7:b8:1b:11:a6:17:ab:cd:fa:f0:e2:d7:fc: 9b:cf:7f:e6:1b:b0:10:f8:d8:7a:34:60:db:b9:a4:84:82:e7: 94:6b:05:54:5e:8c:9b:2c:2d:de:6b:f8:cf:a0:2b:bf:b6:6a: 64:b4:d5:ea:32:02:ef:f0:56:81:00:12:3d:ad:9a:7c:0e:0c: af:67:98:fb:ae:af:39:87:f2:cc:53:5f:00:05:c6:51:33:a5: 5c:30:2a:0d:4e:7c:96:e2:25:af:aa:00:58:44:2d:fc:8b:3c: 93:fc:4d:92:c8:97:6e:39:d9:a9:c2:e7:e9:04:93:23:18:d2: 9d:2f:07:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vmqXKwuYOhoUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTY2MWE4OWQtNWVjNC00MGJlLTg1NTYtOTY4MmI3NTBlYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApalefnt8FP1cdPDV2U1EnlG1HVl55c8/TwzZ yIuRDpryR7VfntKYKxihhUmG9dUCfk+cD0JQ0ALtFC0QReP42wLqUqiCO/al9lrE WaXJ+VqObyGSnI4AEEiKDV0PFDmFxh0l2QTUhUAJf7aQXQxmu77CCK8ginX9+sya hDvg/59NEwZlLU9ybsfaFjoHIKuOVZ6S91uiifEZvPF3REgVuJV9NPLZahSoj0zm ZQloaAOck9eqRehjVV5YPkbl9EdqEc53JwTrc1kG9DFW03blCRLDr7USOq2y7+Po vcgnJeJf/6ki3EZ6Mp8p7QDY1BWrobp3WElp0/u2Q4IqB6nQyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGvHicfY720Vuao36AMG29kB2E1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTBiM2MzN2EtNjVhZi0z M2E2LTkwZDYtYjI4MTYyMDg5YjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6N8Gr2LWbbgKVLO0jNAZ/8R/03M69X9Y0zW30PlGsRJBRTB/RNtLZM ab4GjoFT08CaoNtUlyuqpQdIwNxk54X52M5P+ouy39VKMqhUYx+McCC0Ox9cXj3T 7lPO8xf3oFH3AFFbgS8WbGRjA4yeS2QWsXPwdlOvzqtPwNdAVkmB0B8L97gbEaYX q8368OLX/JvPf+YbsBD42Ho0YNu5pISC55RrBVRejJssLd5r+M+gK7+2amS01eoy Au/wVoEAEj2tmnwODK9nmPuurzmH8sxTXwAFxlEzpVwwKg1OfJbiJa+qAFhELfyL PJP8TZLIl2452anC5+kEkyMY0p0vB8Q= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:15 2025 by rpki-client