$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/990eb305-04d2-3de9-824a-375cda48b219.roa File: 990eb305-04d2-3de9-824a-375cda48b219.roa (raw, json) Hash identifier: Jtuw9+rs+5JD8AIy+Rb8LfQ1e1Aqq8K7fKJmd+QxqWk= Subject key identifier: 7C:1B:6A:CD:33:B5:A6:5C:8D:69:C0:9F:1F:78:F0:6E:46:E5:A6:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C371348E61857A9B9542FCE Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/990eb305-04d2-3de9-824a-375cda48b219.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.43.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:37:13:48:e6:18:57:a9:b9:54:2f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5c40267d-3a0b-4f97-8a04-1f6b3e67a8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:8d:b8:38:6f:b7:ab:12:35:27:7d:79:15: 56:bb:50:3c:33:b5:00:09:b0:0c:f5:b8:d5:5c:ab: 00:2c:f3:b2:e9:d6:82:36:21:54:7e:21:27:f6:50: 71:46:69:1f:b5:7f:b9:21:ae:54:07:6b:c4:a4:1c: 44:80:d2:92:27:7b:67:cb:82:1a:62:fe:3b:43:97: 63:c4:32:e2:a0:a0:a3:27:60:88:d6:80:6e:27:b0: f6:2c:3f:d7:af:48:db:8c:17:f6:b6:8e:98:55:44: ea:7a:43:d9:e8:77:40:bc:80:02:a1:8d:ab:a0:85: 47:1c:f0:8e:4f:ef:ac:a5:e9:f2:5a:3d:11:5e:50: e8:98:a7:31:7b:43:ea:88:f9:71:3e:eb:af:4d:05: 57:d6:4f:9a:5c:7f:3e:fd:af:e9:23:02:65:f6:1b: f5:c2:c2:84:24:1b:cf:b3:04:4a:5a:7b:64:93:95: 77:34:54:34:59:0f:1e:3f:45:10:6f:61:56:ba:fe: 76:34:7c:58:f8:ff:76:2e:f3:6e:e3:9e:ac:98:aa: 18:e9:38:5f:4a:f6:2d:6b:04:52:6f:6e:6e:9b:d4: 9e:b8:ed:b5:5b:d1:a7:a3:3a:99:2a:56:b2:1f:a8: 84:3c:90:45:aa:a0:79:ce:dd:c9:ae:51:12:5d:ce: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:1B:6A:CD:33:B5:A6:5C:8D:69:C0:9F:1F:78:F0:6E:46:E5:A6:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/990eb305-04d2-3de9-824a-375cda48b219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:42:f1:e3:df:0b:7d:ae:f4:bc:f8:c3:2d:75:5c:90:31:c5: 18:1c:05:bd:36:50:ff:40:f9:56:ac:a7:a7:70:51:a3:11:f1: 6e:63:ed:01:6c:6b:51:9f:db:18:1d:e0:53:a9:7c:fb:d5:a1: 25:0c:fc:23:61:02:78:89:fc:ce:82:e5:48:6b:00:78:b4:9e: 34:da:41:ef:7f:32:63:a0:0b:13:03:d4:ec:50:56:eb:48:e1: 68:c7:9d:24:87:80:ce:2c:cf:a1:c6:73:9f:00:a8:ed:31:65: 37:57:be:52:87:c2:6d:14:54:db:fe:fb:62:b4:70:7c:9e:ee: 61:29:2e:82:b5:41:eb:02:56:34:30:a1:69:d3:6b:67:67:e6: f4:05:46:b4:a6:30:fc:3b:dc:c0:bb:1f:d6:0b:cb:d1:0c:47: 7b:5b:79:a7:06:d6:28:16:03:83:3d:8d:90:4a:3c:da:3c:c7: 91:8e:c9:0e:5f:8e:0c:6b:7a:7d:0e:75:83:53:e2:1b:10:45: 0f:65:ae:bf:38:32:b2:68:62:1f:bd:14:b6:02:f4:82:54:35: 73:64:2d:a3:58:99:d2:56:52:b4:51:fc:92:04:c6:d0:e9:ca: 84:87:7e:f6:c7:64:a8:62:5b:2f:0b:ad:d1:e7:3a:f1:d5:13: f6:94:4f:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNxNI5hhXqblUL84wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWM0MDI2N2QtM2EwYi00Zjk3LThhMDQtMWY2YjNlNjdhOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq2NuDhvt6sSNSd9eRVWu1A8M7UACbAM9bjV XKsALPOy6daCNiFUfiEn9lBxRmkftX+5Ia5UB2vEpBxEgNKSJ3tny4IaYv47Q5dj xDLioKCjJ2CI1oBuJ7D2LD/Xr0jbjBf2to6YVUTqekPZ6HdAvIACoY2roIVHHPCO T++spenyWj0RXlDomKcxe0PqiPlxPuuvTQVX1k+aXH8+/a/pIwJl9hv1wsKEJBvP swRKWntkk5V3NFQ0WQ8eP0UQb2FWuv52NHxY+P92LvNu456smKoY6ThfSvYtawRS b25um9SeuO21W9GnozqZKlayH6iEPJBFqqB5zt3JrlESXc5sHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwbas0ztaZcjWnAnx948G5G5aZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTkwZWIzMDUtMDRkMi0z ZGU5LTgyNGEtMzc1Y2RhNDhiMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFys0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdC8ePfC32u9Lz4wy11XJAxxRgcBb02UP9A+Vasp6dwUaMR8W5j7QFs a1Gf2xgd4FOpfPvVoSUM/CNhAniJ/M6C5UhrAHi0njTaQe9/MmOgCxMD1OxQVutI 4WjHnSSHgM4sz6HGc58AqO0xZTdXvlKHwm0UVNv++2K0cHye7mEpLoK1QesCVjQw oWnTa2dn5vQFRrSmMPw73MC7H9YLy9EMR3tbeacG1igWA4M9jZBKPNo8x5GOyQ5f jgxren0OdYNT4hsQRQ9lrr84MrJoYh+9FLYC9IJUNXNkLaNYmdJWUrRR/JIExtDp yoSHfvbHZKhiWy8LrdHnOvHVE/aUT4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:14 2025 by rpki-client