$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9485f010-9019-3c61-8f74-3639046d4052.roa File: 9485f010-9019-3c61-8f74-3639046d4052.roa (raw, json) Hash identifier: nx4q04KCIXRz4AxWewD4VtEAo1HdPil5hLyKUeCmXcg= Subject key identifier: 0A:B9:38:40:CB:D2:9F:F9:39:68:B3:AB:24:CA:8C:97:09:75:72:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6EFEFE81EEA4F85C96B10 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9485f010-9019-3c61-8f74-3639046d4052.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.54.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:ef:ef:e8:1e:ea:4f:85:c9:6b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=49c47fdd-7395-40b2-91f1-1ad8f43b13c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:42:60:f2:55:e4:36:09:e9:0f:29:42:14:ff: c8:83:ee:cd:89:03:d1:71:17:8d:8b:76:c8:e3:5b: f3:8e:52:0d:61:d1:ae:81:0f:e9:84:c2:5b:36:4f: 8b:07:8e:56:0f:2b:c8:bf:99:7d:bf:be:3c:db:51: 90:42:59:18:c0:12:43:dc:10:a3:5e:7b:0a:00:0d: d1:89:91:c7:b4:1d:4e:44:89:bf:ac:af:ec:9b:2c: 72:7b:57:7f:ed:92:13:a1:13:76:93:1e:1e:9d:ef: ae:f0:2e:81:e1:74:02:8a:d6:10:3d:8c:0b:e1:e7: 04:e7:e0:cb:bf:97:ad:44:a4:5a:b2:51:bc:fc:c9: 9e:5b:23:58:b8:b4:5c:6b:f6:bd:86:9d:2e:c0:5f: 59:ab:46:47:5f:8a:f8:5d:60:58:b8:9d:fa:84:3a: 57:f1:ff:26:57:82:f0:68:5a:05:56:d0:29:d6:d7: e7:c3:df:e8:df:3f:66:fb:b3:a5:fa:6d:93:ac:0d: 74:5a:b7:4c:99:fb:9b:4e:dd:1a:ad:a5:46:f7:e7: 39:9d:02:62:c7:80:e3:96:08:c5:0d:3e:a9:87:ac: 50:87:25:1a:6a:9c:74:5e:15:06:45:f5:89:d6:73: b0:73:cd:d8:07:63:de:e4:3a:9f:6d:9e:ae:b9:81: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:38:40:CB:D2:9F:F9:39:68:B3:AB:24:CA:8C:97:09:75:72:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9485f010-9019-3c61-8f74-3639046d4052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.54.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:41:7f:fd:bb:6c:40:b8:50:fc:49:29:2c:00:f4:1e:da:ca: f5:be:63:56:f9:03:35:a4:40:b4:3e:eb:01:75:d9:3f:4a:01: e0:40:9b:98:4a:c8:48:99:e4:38:66:cc:c3:68:60:97:cd:4d: ed:d0:52:5f:b9:a5:37:5a:18:de:4f:10:3a:cb:87:5c:48:68: 19:fc:b8:43:72:d0:ef:83:dd:5e:41:4e:3c:6b:9d:ca:75:3e: 29:f7:d5:e7:36:18:df:65:ce:88:2e:3a:f3:d7:90:6b:d0:a1: 60:f7:2e:10:95:78:37:9e:e0:81:3a:4d:1b:b6:0d:9b:2a:66: 64:0f:83:3b:b4:1d:dd:83:f7:d4:d7:87:17:ba:dc:7a:92:a2: c1:2e:30:7b:36:3c:c8:c5:de:e2:77:8a:4c:04:04:89:b5:54: 88:95:ad:6e:3b:22:f7:88:ef:42:f6:68:0e:43:e2:49:53:54: d0:8c:2f:c2:a5:fb:0d:90:e9:25:83:5e:02:92:bf:55:bf:35: 37:58:33:30:b6:e3:e2:44:21:df:a4:35:aa:7b:c6:24:cc:5f: 4e:35:b8:b5:fd:8d:fc:6a:db:7a:81:7c:02:7d:81:6e:83:88: af:04:df:31:eb:5d:9d:11:47:ec:50:11:c3:2d:d9:62:a2:80: c0:6c:25:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9u/v6B7qT4XJaxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NDljNDdmZGQtNzM5NS00MGIyLTkxZjEtMWFkOGY0M2IxM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUJg8lXkNgnpDylCFP/Ig+7NiQPRcReNi3bI 41vzjlINYdGugQ/phMJbNk+LB45WDyvIv5l9v74821GQQlkYwBJD3BCjXnsKAA3R iZHHtB1ORIm/rK/smyxye1d/7ZIToRN2kx4ene+u8C6B4XQCitYQPYwL4ecE5+DL v5etRKRaslG8/MmeWyNYuLRca/a9hp0uwF9Zq0ZHX4r4XWBYuJ36hDpX8f8mV4Lw aFoFVtAp1tfnw9/o3z9m+7Ol+m2TrA10WrdMmfubTt0araVG9+c5nQJix4DjlgjF DT6ph6xQhyUaapx0XhUGRfWJ1nOwc83YB2Pe5DqfbZ6uuYEvKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAq5OEDL0p/5OWizqyTKjJcJdXJpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQ4NWYwMTAtOTAxOS0z YzYxLThmNzQtMzYzOTA0NmQ0MDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5Bf/27bEC4UPxJKSwA9B7ayvW+Y1b5AzWkQLQ+6wF12T9KAeBAm5hK yEiZ5DhmzMNoYJfNTe3QUl+5pTdaGN5PEDrLh1xIaBn8uENy0O+D3V5BTjxrncp1 Pin31ec2GN9lzoguOvPXkGvQoWD3LhCVeDee4IE6TRu2DZsqZmQPgzu0Hd2D99TX hxe63HqSosEuMHs2PMjF3uJ3ikwEBIm1VIiVrW47IveI70L2aA5D4klTVNCML8Kl +w2Q6SWDXgKSv1W/NTdYMzC24+JEId+kNap7xiTMX041uLX9jfxq23qBfAJ9gW6D iK8E3zHrXZ0RR+xQEcMt2WKigMBsJTw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:22 2025 by rpki-client