$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9846f86d-7dc2-32e1-a959-ba0aa52683a0.roa File: 9846f86d-7dc2-32e1-a959-ba0aa52683a0.roa (raw, json) Hash identifier: Ylnu2YvuiRNWWwToBySsq7PIYScBVp/GHt+jhJv4wiI= Subject key identifier: B8:77:10:E4:7E:08:A6:48:20:13:ED:71:80:74:65:8E:E2:7F:EA:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E41611C2BBD554C55B9DE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9846f86d-7dc2-32e1-a959-ba0aa52683a0.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.34.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:61:1c:2b:bd:55:4c:55:b9:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=d0e75833-a12a-4cb9-b733-919db8b9b2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:d3:c8:63:c3:97:68:59:04:d3:f5:ee:eb: 08:c9:89:3d:e1:97:3a:5e:a5:95:6a:38:4e:40:d1: b0:07:40:3b:71:6a:a8:11:dd:5c:3d:74:4f:81:ec: 20:bc:e3:ad:ad:fb:d7:12:76:83:62:38:01:68:62: 06:c6:9f:2b:9c:4a:ec:33:7f:cc:68:d8:13:78:c2: ab:9a:09:09:58:68:ec:a2:9e:94:b7:89:5d:ea:77: 21:bc:14:30:2f:bf:86:4d:69:ae:59:58:47:cd:15: 8a:bb:55:a7:93:a1:de:04:ee:6e:7e:2a:c0:90:3d: c4:c7:fe:39:62:26:bd:61:8e:66:1c:7e:07:e7:25: 0b:3b:be:97:0d:4f:18:ff:92:0c:e5:1e:b5:cb:f5: 0f:8c:68:88:04:18:08:b9:c7:0f:0b:01:1b:06:b2: 8a:00:ac:67:cd:48:cd:e3:20:ae:5e:41:3b:c6:72: 48:48:09:78:df:24:9c:dd:f4:59:b8:d4:2a:76:96: 2d:1c:f1:9f:48:83:f5:fb:b5:73:a9:5b:19:71:d7: cb:e6:b8:28:54:0b:5b:10:fd:66:f6:ab:f7:75:70: c2:6b:fa:85:b6:24:5e:f9:17:6e:c2:fd:b4:94:0f: 82:45:53:c3:7e:f4:fe:ae:53:bd:30:e8:3b:b5:fe: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:77:10:E4:7E:08:A6:48:20:13:ED:71:80:74:65:8E:E2:7F:EA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9846f86d-7dc2-32e1-a959-ba0aa52683a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.34.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:54:9f:8a:9c:2e:6f:c9:9a:72:67:90:76:36:77:61:9b:d0: 41:85:19:17:b3:41:ed:3f:1c:a4:bd:d2:b7:fd:8e:55:23:a1: a2:00:2f:b5:c8:7a:c6:6f:01:90:42:af:31:16:14:77:ff:fb: 00:f8:ca:5c:96:67:e2:a7:2b:5c:69:d9:bd:bf:28:3b:17:17: f3:6a:9b:0f:3e:2d:de:52:49:31:8d:cd:f8:7b:7a:37:f6:23: 35:cb:b9:db:14:21:5c:d7:35:fd:de:92:df:39:f9:f5:75:82: e0:c3:ba:45:4e:42:cc:d2:8a:24:96:a8:2f:7a:4c:83:61:3e: 19:38:0d:a3:03:67:67:c1:01:d2:db:ec:90:f9:65:af:bb:55: 05:f7:d7:eb:de:b1:db:aa:24:22:77:82:8e:ac:60:09:2c:33: f5:2d:66:1b:a1:cc:04:74:f7:cb:24:7c:06:ef:56:e0:8c:c7: 24:de:a1:89:49:63:c1:2b:41:3f:28:2c:37:27:23:a6:cd:1a: 9d:19:80:3b:25:d9:0d:bf:af:17:44:bb:8e:0b:c2:da:7e:ab: a5:bc:10:05:f9:93:94:7c:c8:31:a2:7a:67:ea:5c:3a:7c:d7: b2:27:32:a6:48:99:99:e4:0a:0f:7b:c5:ab:b9:f8:8f:11:e4: 79:1e:4a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWEcK71VTFW53oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDBlNzU4MzMtYTEyYS00Y2I5LWI3MzMtOTE5ZGI4YjliMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCzTyGPDl2hZBNP17usIyYk94Zc6XqWVajhO QNGwB0A7cWqoEd1cPXRPgewgvOOtrfvXEnaDYjgBaGIGxp8rnErsM3/MaNgTeMKr mgkJWGjsop6Ut4ld6nchvBQwL7+GTWmuWVhHzRWKu1Wnk6HeBO5ufirAkD3Ex/45 Yia9YY5mHH4H5yULO76XDU8Y/5IM5R61y/UPjGiIBBgIuccPCwEbBrKKAKxnzUjN 4yCuXkE7xnJISAl43ySc3fRZuNQqdpYtHPGfSIP1+7VzqVsZcdfL5rgoVAtbEP1m 9qv3dXDCa/qFtiRe+Rduwv20lA+CRVPDfvT+rlO9MOg7tf5itwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh3EOR+CKZIIBPtcYB0ZY7if+p4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTg0NmY4NmQtN2RjMi0z MmUxLWE5NTktYmEwYWE1MjY4M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyI6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZUn4qcLm/JmnJnkHY2d2Gb0EGFGRezQe0/HKS90rf9jlUjoaIAL7XI esZvAZBCrzEWFHf/+wD4ylyWZ+KnK1xp2b2/KDsXF/Nqmw8+Ld5SSTGNzfh7ejf2 IzXLudsUIVzXNf3ekt85+fV1guDDukVOQszSiiSWqC96TINhPhk4DaMDZ2fBAdLb 7JD5Za+7VQX31+vesduqJCJ3go6sYAksM/UtZhuhzAR098skfAbvVuCMxyTeoYlJ Y8ErQT8oLDcnI6bNGp0ZgDsl2Q2/rxdEu44Lwtp+q6W8EAX5k5R8yDGiemfqXDp8 17InMqZImZnkCg97xau5+I8R5HkeSkE= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:03 2025 by rpki-client