$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923a7839-41c7-3210-89df-098cedbda367.roa File: 923a7839-41c7-3210-89df-098cedbda367.roa (raw, json) Hash identifier: WUSLWLr+XO1Dy+zQ1qOFSzMw8OeF5Xcv3PzKheA2+N8= Subject key identifier: 92:9F:06:E0:07:B4:3D:62:EE:82:73:04:BA:D2:CD:2E:9E:9B:A8:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B23318CF29CDABE5753DA7880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923a7839-41c7-3210-89df-098cedbda367.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.51.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8c:f2:9c:da:be:57:53:da:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=e0bf5c10-c763-4fff-81eb-8c2e80141ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:48:7d:97:82:29:2b:85:39:4b:54:04:7b: 06:f9:30:0e:32:45:f8:57:9e:89:49:ab:80:a4:5d: cc:b3:aa:c0:cd:d2:fd:30:8b:6f:d0:17:1c:ad:8b: 3f:4c:59:43:aa:83:66:71:02:55:b5:57:37:06:9b: ec:63:fe:cc:51:b0:3c:a0:82:33:e6:7e:4f:73:93: a1:38:00:c8:e5:6a:d9:e2:ca:e2:ca:13:b5:27:bb: d5:0b:6a:bf:32:21:7e:1f:07:e0:25:63:d5:00:88: b4:d7:18:f9:1a:5a:d9:2c:6c:9f:8d:55:b8:3e:bb: f1:49:ee:6b:20:70:24:4f:d6:d7:3a:ed:09:b7:59: 5a:40:da:73:1b:9d:81:da:44:cb:f8:3d:11:42:6d: dc:21:0e:35:95:cf:d7:01:b8:f2:a4:3e:b8:53:57: e2:0f:61:fd:93:c7:ed:16:ba:b4:ee:81:1c:68:2c: b7:23:d2:83:76:50:1d:2b:27:5b:c1:d9:2b:5f:57: 0a:fa:80:32:ac:7d:0a:d0:6d:22:f2:a3:8a:44:fd: cb:1c:ae:de:62:7f:1d:42:69:ca:ab:72:2e:18:d2: ab:1c:b2:f7:5c:24:13:46:f3:2e:35:35:4d:c8:44: 77:00:cb:64:c4:51:82:24:32:6d:db:20:12:a8:0c: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9F:06:E0:07:B4:3D:62:EE:82:73:04:BA:D2:CD:2E:9E:9B:A8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/923a7839-41c7-3210-89df-098cedbda367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.51.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:94:11:3b:7b:5e:e5:e9:4a:ef:60:3f:d8:95:60:5f:c5:66: 11:64:82:79:d0:3b:94:e7:a3:27:9a:38:9f:7b:04:eb:3b:80: d5:b5:ff:97:cb:b3:d6:6a:8b:f0:82:aa:c5:20:c3:73:ef:b6: 8a:7f:13:fd:f9:36:04:43:ef:b2:4f:3d:3e:58:b7:75:6d:97: 18:e3:e1:30:c2:e6:16:7b:aa:d2:32:c9:32:cf:3d:e8:5b:3e: 76:62:89:05:2a:90:50:76:70:40:93:64:19:07:4f:94:0f:21: f5:e8:b8:cf:3d:81:ce:3e:9f:c9:ab:9e:c3:99:b5:c2:1e:1f: 51:8b:58:f8:b8:70:8c:0b:91:e6:e4:d2:52:e6:09:e8:de:58: 89:d0:40:19:7f:c8:8f:65:f9:22:e9:9c:63:94:ee:21:58:28: 07:05:bf:63:2b:e6:d4:65:30:6f:4a:c3:61:b6:6b:29:78:3b: b9:7c:1a:f2:de:bd:8d:a5:02:d6:90:d2:fe:08:9d:33:41:38: e1:24:98:43:e1:45:1a:b0:91:5d:0c:eb:f5:5e:70:c0:8a:9e: d9:0f:02:1b:7a:2a:0a:d6:13:56:86:0b:b9:81:89:bd:1c:4b: 8c:aa:5b:53:d3:57:27:25:3d:da:6e:27:3e:48:05:5f:e7:e4: e3:23:31:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYzynNq+V1PaeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZTBiZjVjMTAtYzc2My00ZmZmLTgxZWItOGMyZTgwMTQxZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRdIfZeCKSuFOUtUBHsG+TAOMkX4V56JSauA pF3Ms6rAzdL9MItv0BccrYs/TFlDqoNmcQJVtVc3BpvsY/7MUbA8oIIz5n5Pc5Oh OADI5WrZ4sriyhO1J7vVC2q/MiF+HwfgJWPVAIi01xj5GlrZLGyfjVW4PrvxSe5r IHAkT9bXOu0Jt1laQNpzG52B2kTL+D0RQm3cIQ41lc/XAbjypD64U1fiD2H9k8ft Frq07oEcaCy3I9KDdlAdKydbwdkrX1cK+oAyrH0K0G0i8qOKRP3LHK7eYn8dQmnK q3IuGNKrHLL3XCQTRvMuNTVNyER3AMtkxFGCJDJt2yASqAyFCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKfBuAHtD1i7oJzBLrSzS6em6iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTIzYTc4MzktNDFjNy0z MjEwLTg5ZGYtMDk4Y2VkYmRhMzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGUETt7XuXpSu9gP9iVYF/FZhFkgnnQO5TnoyeaOJ97BOs7gNW1/5fL s9Zqi/CCqsUgw3Pvtop/E/35NgRD77JPPT5Yt3Vtlxjj4TDC5hZ7qtIyyTLPPehb PnZiiQUqkFB2cECTZBkHT5QPIfXouM89gc4+n8mrnsOZtcIeH1GLWPi4cIwLkebk 0lLmCejeWInQQBl/yI9l+SLpnGOU7iFYKAcFv2Mr5tRlMG9Kw2G2ayl4O7l8GvLe vY2lAtaQ0v4InTNBOOEkmEPhRRqwkV0M6/VecMCKntkPAht6KgrWE1aGC7mBib0c S4yqW1PTVyclPdpuJz5IBV/n5OMjMeQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:00 2025 by rpki-client