$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa File: 94e2a028-632a-3273-9867-915d42097f64.roa (raw, json) Hash identifier: 4XLGBK6MqCsMzMXJ3ZYpN+s6UJmH8lHApktktG5Lbfk= Subject key identifier: E5:5F:11:B7:CC:1A:84:99:CE:51:92:F5:51:07:FB:50:CA:42:C8:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1AC46D6E5EF66219E0C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.40.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:ac:46:d6:e5:ef:66:21:9e:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=28994ec5-36ba-42f4-849a-db3dc34fc631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:36:8e:f9:69:db:fc:61:6c:5d:ae:7c:0e: 43:0c:92:ab:64:48:72:2c:35:6d:99:c4:51:82:fc: 27:f2:bd:c7:cc:7d:29:48:ea:e4:19:ac:85:cc:93: 01:5f:88:14:90:46:e1:9c:98:d3:0b:7b:a7:0f:e6: a8:2b:70:dc:4b:87:3b:0e:69:f9:17:97:17:42:95: c1:c3:da:47:56:2f:0f:10:6a:1e:a5:93:c0:0a:d2: 5b:8b:56:e8:f0:96:86:16:89:bb:06:b7:fa:b7:ec: 93:ef:29:91:88:fd:22:08:57:19:16:17:1e:9a:dc: fc:3d:1b:d4:c5:f0:d4:b2:51:69:1a:06:3d:fb:e9: ad:3b:3d:28:8d:31:30:ed:e6:c7:22:b2:c7:75:7d: 74:8e:3d:71:a2:bd:1b:37:e6:a6:ff:1f:29:c3:ed: 29:ba:a0:b1:be:c2:36:b5:33:89:08:3e:20:7a:72: c0:2e:8d:48:85:b0:88:24:3d:7f:20:d5:36:83:77: b1:44:70:0d:32:10:a6:ba:4d:80:2b:0f:e0:b7:bc: 33:b8:8c:53:fb:23:2c:18:dd:a2:e3:48:fd:58:db: 62:d4:40:29:c0:a7:bb:72:f5:3f:28:18:ca:43:8d: 12:c5:6a:d6:45:5c:a0:89:49:3d:39:be:f4:3b:0a: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:5F:11:B7:CC:1A:84:99:CE:51:92:F5:51:07:FB:50:CA:42:C8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94e2a028-632a-3273-9867-915d42097f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a2:9d:80:6f:8a:9d:33:98:41:39:86:69:ad:a0:ac:c6:72: 62:cb:d0:2a:34:58:70:3e:bb:c4:56:bf:47:ed:38:4e:62:6d: eb:c1:e0:16:a6:30:fe:95:86:5c:31:2b:a7:97:77:4d:35:04: e0:2e:38:57:68:55:42:cc:62:00:3d:fd:c5:75:68:ef:1e:47: 81:ec:ab:9f:03:6a:6d:8d:4f:db:85:65:c0:53:6c:d4:2c:07: 03:3f:f1:da:89:1c:7d:70:89:9d:de:ad:c6:81:27:26:18:81: cb:26:85:0d:cc:bc:a3:65:b5:6e:df:c4:f2:54:8f:58:4b:8f: 9c:c7:fa:52:3d:35:43:13:c9:bc:c0:29:c0:51:4c:99:4a:4e: 49:11:40:74:0d:98:4c:3d:d4:6c:da:bc:c6:9c:40:65:10:7a: c4:b0:f6:6e:e5:04:0e:0e:ef:af:4e:13:14:45:a3:6c:99:82: 67:6b:b4:4e:f6:c2:06:5e:e7:c2:eb:0a:82:d8:e6:6e:ef:06: 52:6a:d7:c5:af:e1:d9:c9:d5:ef:1b:ab:f2:18:b4:d7:de:08: b9:10:d7:95:96:db:3e:88:66:12:c2:4e:83:1f:f5:d2:5b:4c: 26:93:0f:ad:6b:a8:a5:29:84:db:10:15:40:c7:4e:0c:e3:e1: 77:ee:9b:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0axG1uXvZiGeDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Mjg5OTRlYzUtMzZiYS00MmY0LTg0OWEtZGIzZGMzNGZjNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl82jvlp2/xhbF2ufA5DDJKrZEhyLDVtmcRR gvwn8r3HzH0pSOrkGayFzJMBX4gUkEbhnJjTC3unD+aoK3DcS4c7Dmn5F5cXQpXB w9pHVi8PEGoepZPACtJbi1bo8JaGFom7Brf6t+yT7ymRiP0iCFcZFhcemtz8PRvU xfDUslFpGgY9++mtOz0ojTEw7ebHIrLHdX10jj1xor0bN+am/x8pw+0puqCxvsI2 tTOJCD4genLALo1IhbCIJD1/INU2g3exRHANMhCmuk2AKw/gt7wzuIxT+yMsGN2i 40j9WNti1EApwKe7cvU/KBjKQ40SxWrWRVygiUk9Ob70OwokxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVfEbfMGoSZzlGS9VEH+1DKQsjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTRlMmEwMjgtNjMyYS0z MjczLTk4NjctOTE1ZDQyMDk3ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyjwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyinYBvip0zmEE5hmmtoKzGcmLL0Co0WHA+u8RWv0ftOE5ibevB4Bam MP6VhlwxK6eXd001BOAuOFdoVULMYgA9/cV1aO8eR4Hsq58Dam2NT9uFZcBTbNQs BwM/8dqJHH1wiZ3ercaBJyYYgcsmhQ3MvKNltW7fxPJUj1hLj5zH+lI9NUMTybzA KcBRTJlKTkkRQHQNmEw91GzavMacQGUQesSw9m7lBA4O769OExRFo2yZgmdrtE72 wgZe58LrCoLY5m7vBlJq18Wv4dnJ1e8bq/IYtNfeCLkQ15WW2z6IZhLCToMf9dJb TCaTD61rqKUphNsQFUDHTgzj4Xfum7k= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:25 2025 by rpki-client