$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/963715ef-e68d-3ee4-82b8-ab02305283d1.roa File: 963715ef-e68d-3ee4-82b8-ab02305283d1.roa (raw, json) Hash identifier: fcqZRSE9WRNiIuPQLT0hR9rm/KiTm0jHIbIPtNhlUio= Subject key identifier: 2A:8F:F2:2D:F2:94:7D:DE:61:E1:DB:D2:B6:74:4B:67:BA:86:5B:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6F8E0AC4569EB82A1E840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/963715ef-e68d-3ee4-82b8-ab02305283d1.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.58.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:f8:e0:ac:45:69:eb:82:a1:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=705a6076-da78-4510-89fe-ce91e62d82f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2d:29:06:11:66:06:54:2c:e2:b4:92:ec:b8: 36:ca:cf:b8:04:02:a2:f5:00:5a:d9:d7:19:fb:c4: b2:ec:85:91:df:a0:ba:0a:d5:d6:9f:77:a3:18:3a: 25:3b:85:01:82:e0:9b:37:19:48:51:16:f5:f9:b5: bc:88:80:9f:ba:31:97:e6:95:ae:f3:72:a2:b5:61: 03:ed:33:ff:22:19:e4:5b:24:68:52:4b:9f:64:25: eb:e6:f9:3f:f8:79:af:a3:11:d2:8e:33:38:7f:8c: cb:7e:76:37:6a:e7:21:f9:db:f0:2e:df:3e:50:27: a5:17:6d:6e:ea:e7:2c:ec:0a:6d:b1:49:3e:43:d4: 32:c6:f8:c8:1b:4c:67:a5:22:a0:a0:97:17:1b:da: 60:48:dd:4e:4c:bd:e3:84:61:8c:54:0d:48:8b:04: 4a:0d:44:de:5a:2a:54:4d:1d:f2:d5:f7:d8:ea:c2: 9b:08:28:36:bb:a0:28:78:3f:4f:02:98:78:c2:5d: df:2c:03:94:e9:97:db:17:b3:20:7c:ba:59:75:53: 31:f1:2e:a8:31:65:97:db:9a:e9:d8:e8:2f:d2:12: c6:6d:41:a3:70:b2:22:4b:aa:ce:ed:25:f7:7c:82: bc:e2:9b:a8:65:68:d1:cf:f8:fd:54:ad:03:b9:6b: 49:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8F:F2:2D:F2:94:7D:DE:61:E1:DB:D2:B6:74:4B:67:BA:86:5B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/963715ef-e68d-3ee4-82b8-ab02305283d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f1:b5:fe:4a:7a:ef:e6:82:ca:e5:81:f6:c4:8c:1a:20:5a: 15:3a:e8:b8:79:f2:88:07:ef:0c:68:13:40:c8:fb:ca:e2:64: f3:18:4c:48:1c:76:93:cf:c0:3e:56:58:8b:93:79:42:48:e3: 56:12:3d:b7:ff:0b:c5:c1:56:d9:f5:30:93:3d:ee:c1:1b:63: 19:f7:e7:f6:cb:5c:87:e1:ad:b4:de:ae:29:28:51:80:9f:aa: 7b:01:da:7a:15:17:63:2a:e6:e0:81:7a:97:56:b3:f1:a9:84: 2a:7e:7f:e6:a7:06:0f:ca:4e:06:7a:29:7e:36:e8:ce:2a:fe: 38:bc:5b:3e:b0:e7:48:3c:fb:ce:fa:db:23:3b:dc:f0:49:4b: 4a:30:e0:d3:b0:3a:bb:b7:e6:5f:65:fa:ba:d3:84:95:4d:25: 1c:ed:9d:9d:86:46:bb:78:79:3b:84:2f:7e:d7:4b:9a:6e:84: ab:c5:a8:ca:b4:8d:42:2f:d1:e3:ef:cd:54:82:4b:fd:a6:7c: 66:08:47:c2:c0:d6:5d:35:bb:e3:3c:76:5d:f3:e6:46:68:c8: e2:23:fa:75:fa:21:60:36:68:b8:4a:a5:24:ee:39:c2:a2:31: 9a:17:ac:58:ac:97:ae:7e:fd:9e:6e:c2:f3:14:c7:85:64:23: ec:29:a5:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vjgrEVp64Kh6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NzA1YTYwNzYtZGE3OC00NTEwLTg5ZmUtY2U5MWU2MmQ4MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y0pBhFmBlQs4rSS7Lg2ys+4BAKi9QBa2dcZ +8Sy7IWR36C6CtXWn3ejGDolO4UBguCbNxlIURb1+bW8iICfujGX5pWu83KitWED 7TP/IhnkWyRoUkufZCXr5vk/+HmvoxHSjjM4f4zLfnY3auch+dvwLt8+UCelF21u 6ucs7AptsUk+Q9QyxvjIG0xnpSKgoJcXG9pgSN1OTL3jhGGMVA1IiwRKDUTeWipU TR3y1ffY6sKbCCg2u6AoeD9PAph4wl3fLAOU6ZfbF7MgfLpZdVMx8S6oMWWX25rp 2Ogv0hLGbUGjcLIiS6rO7SX3fIK84puoZWjRz/j9VK0DuWtJAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqP8i3ylH3eYeHb0rZ0S2e6hlt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTYzNzE1ZWYtZTY4ZC0z ZWU0LTgyYjgtYWIwMjMwNTI4M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbxtf5Keu/mgsrlgfbEjBogWhU66Lh58ogH7wxoE0DI+8riZPMYTEgc dpPPwD5WWIuTeUJI41YSPbf/C8XBVtn1MJM97sEbYxn35/bLXIfhrbTerikoUYCf qnsB2noVF2Mq5uCBepdWs/GphCp+f+anBg/KTgZ6KX426M4q/ji8Wz6w50g8+876 2yM73PBJS0ow4NOwOru35l9l+rrThJVNJRztnZ2GRrt4eTuEL37XS5puhKvFqMq0 jUIv0ePvzVSCS/2mfGYIR8LA1l01u+M8dl3z5kZoyOIj+nX6IWA2aLhKpSTuOcKi MZoXrFisl65+/Z5uwvMUx4VkI+wppZ0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:54:49 2025 by rpki-client