$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9be81b1b-eaa8-3bd6-8ec3-f9102ee70b82.roa File: 9be81b1b-eaa8-3bd6-8ec3-f9102ee70b82.roa (raw, json) Hash identifier: 17WR1h44tfnJF4VLm3+djEh7BZC+PLiRbcixcfQBROY= Subject key identifier: 20:B1:66:F4:45:40:5C:C8:A0:95:D3:91:82:71:B8:65:65:1F:D9:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1F017F34D61AD6733958A380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9be81b1b-eaa8-3bd6-8ec3-f9102ee70b82.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.48.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:7f:34:d6:1a:d6:73:39:58:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=3a6bd5e8-f0ea-4948-a38c-9a741a677084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:a4:a2:36:31:c2:76:a6:07:2b:04:a4:32: 50:ab:71:85:e2:01:7f:ce:e3:4c:62:60:7c:81:73: a1:86:91:89:94:3b:c4:ce:a0:7f:9f:2b:a8:8f:e1: 0e:62:22:b9:47:d2:ee:07:df:13:0c:13:19:04:8e: 1c:1f:a4:f1:a0:ab:b3:90:04:d5:35:5f:0e:cc:97: 98:a8:02:61:54:d2:f4:e3:53:71:bf:6f:1b:32:64: 4d:94:09:4b:b4:eb:4c:8d:49:79:ea:24:ce:b8:1e: c6:3e:ab:c3:3f:a2:73:f6:a5:d0:50:f4:af:12:01: 47:95:be:54:e8:66:0d:e5:4a:87:9d:e8:49:30:0c: df:77:99:5f:75:5d:58:ca:01:07:84:7a:18:c5:e6: ac:d3:dc:f4:01:26:88:79:f7:13:5c:19:10:ac:1a: 6d:25:36:04:d6:ac:f2:71:4e:f5:d2:2a:d4:74:cd: 3f:9d:42:24:70:d1:72:be:bd:9e:4f:1c:ae:ea:2c: aa:60:bd:a1:b3:cd:ca:c7:d0:c4:ee:d4:a4:8c:d7: 76:cc:a6:fe:36:9c:06:bd:d9:d2:fb:50:de:7c:88: a7:0f:8d:b6:c6:a7:da:4e:09:53:b2:f4:80:5d:53: e8:83:62:c6:aa:08:73:ef:cf:0e:79:0c:b5:e1:21: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B1:66:F4:45:40:5C:C8:A0:95:D3:91:82:71:B8:65:65:1F:D9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9be81b1b-eaa8-3bd6-8ec3-f9102ee70b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:68:05:fa:c4:1a:bf:73:2a:5e:cd:19:41:df:f4:ec:fb:bc: c7:d6:fb:7d:66:af:07:f5:5d:0a:ae:1a:5b:05:2c:f3:aa:82: 83:03:e4:a1:e6:30:ba:23:0a:af:29:fe:84:31:a4:c4:48:d4: 30:a3:b9:49:c9:fe:44:6f:2a:98:05:28:a8:b3:e8:0e:ec:f5: 75:ab:95:4f:be:55:6b:cc:5e:44:7f:f3:0a:13:dd:19:df:86: 1b:e3:a4:97:7d:8a:45:89:6d:ca:d2:c5:79:a0:a3:5b:4e:1b: 73:ba:82:2b:9e:4d:af:d6:e5:8b:5c:65:a5:d4:a2:19:fe:33: ad:9e:ab:24:88:af:3c:82:bc:0b:86:bc:67:e2:0c:a0:62:3c: 89:5e:37:d7:a4:c2:03:78:d1:93:7e:9d:3c:ca:dd:e9:e9:86: b3:a1:92:bc:b0:60:0b:93:92:b6:fe:5d:ed:ca:b0:9e:51:19: de:03:5a:06:2b:c1:6f:0b:f4:85:05:24:60:e6:75:3b:5d:b2: 13:72:02:b3:b7:0c:b7:c6:6b:6f:fc:bc:20:65:82:d0:86:68: 5e:ad:8e:f2:fc:1e:71:6c:d1:34:5f:17:23:31:e7:ca:3c:51: d2:eb:45:e4:ea:8b:4e:6b:d7:0e:8c:83:f4:32:65:57:0e:a4: 73:24:04:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAX801hrWczlYo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk M2E2YmQ1ZTgtZjBlYS00OTQ4LWEzOGMtOWE3NDFhNjc3MDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQGkojYxwnamBysEpDJQq3GF4gF/zuNMYmB8 gXOhhpGJlDvEzqB/nyuoj+EOYiK5R9LuB98TDBMZBI4cH6TxoKuzkATVNV8OzJeY qAJhVNL041Nxv28bMmRNlAlLtOtMjUl56iTOuB7GPqvDP6Jz9qXQUPSvEgFHlb5U 6GYN5UqHnehJMAzfd5lfdV1YygEHhHoYxeas09z0ASaIefcTXBkQrBptJTYE1qzy cU710irUdM0/nUIkcNFyvr2eTxyu6iyqYL2hs83Kx9DE7tSkjNd2zKb+NpwGvdnS +1DefIinD422xqfaTglTsvSAXVPog2LGqghz788OeQy14SFy/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCxZvRFQFzIoJXTkYJxuGVlH9l2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWJlODFiMWItZWFhOC0z YmQ2LThlYzMtZjkxMDJlZTcwYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzAlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRoBfrEGr9zKl7NGUHf9Oz7vMfW+31mrwf1XQquGlsFLPOqgoMD5KHm MLojCq8p/oQxpMRI1DCjuUnJ/kRvKpgFKKiz6A7s9XWrlU++VWvMXkR/8woT3Rnf hhvjpJd9ikWJbcrSxXmgo1tOG3O6giueTa/W5YtcZaXUohn+M62eqySIrzyCvAuG vGfiDKBiPIleN9ekwgN40ZN+nTzK3enphrOhkrywYAuTkrb+Xe3KsJ5RGd4DWgYr wW8L9IUFJGDmdTtdshNyArO3DLfGa2/8vCBlgtCGaF6tjvL8HnFs0TRfFyMx58o8 UdLrReTqi05r1w6Mg/QyZVcOpHMkBNo= -----END CERTIFICATE-----Generated at Mon Oct 20 02:36:42 2025 by rpki-client