$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c96cf6f-113c-364f-bbe6-ec3688445a85.roa File: 9c96cf6f-113c-364f-bbe6-ec3688445a85.roa (raw, json) Hash identifier: kDolZED8cJ049K56lExvLHNQCnA5MJIIjMNQLqGANwQ= Subject key identifier: 67:34:20:C2:99:C4:07:17:41:92:FE:3E:F7:51:3A:D2:B4:BE:BC:93 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C13B9C0FC256707340740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c96cf6f-113c-364f-bbe6-ec3688445a85.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 35994 IP address blocks: 23.38.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:13:b9:c0:fc:25:67:07:34:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=2730a55e-a31b-4051-92aa-92c14de5f30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:b5:44:13:f2:36:55:20:b7:d3:45:84:94: 1f:94:57:33:e9:a2:d4:2c:6d:49:2e:9d:8c:39:4f: 42:b1:41:c6:45:34:73:95:c2:ff:b0:e3:28:b5:47: 94:9f:7e:2f:6e:b0:1f:30:68:fc:d3:db:c9:f8:73: e3:ef:5a:44:a9:75:c8:1e:71:55:be:c4:44:97:93: db:55:36:10:3c:57:ac:70:9f:8c:71:ef:9e:02:88: be:21:25:0c:32:70:10:c4:af:bd:90:c3:6f:d3:c3: 87:dd:02:62:90:c9:3d:51:6f:50:07:da:5b:c4:55: 9e:86:1c:77:39:4f:46:5c:78:50:19:25:52:2b:5f: b8:de:2a:88:c0:30:dd:c8:e9:45:52:d2:84:b9:68: 4c:47:ea:e9:c1:94:dd:fa:9e:0f:97:e1:20:8b:c9: fb:30:7b:8d:17:75:b7:a2:2d:ef:db:eb:88:0b:bf: 16:72:c3:97:91:f1:1d:35:6e:99:56:30:a3:9f:6b: 9f:6a:65:cc:b6:7e:4a:79:4f:06:a0:5b:94:d5:b6: bf:db:9e:d1:14:d5:25:68:c5:d3:d0:ae:8e:e5:ca: 86:ce:4c:95:25:0d:20:00:e5:cb:84:29:9a:07:c8: f7:63:60:57:c6:87:02:7d:2b:a7:70:d7:49:2f:87: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:34:20:C2:99:C4:07:17:41:92:FE:3E:F7:51:3A:D2:B4:BE:BC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c96cf6f-113c-364f-bbe6-ec3688445a85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:11:47:ea:d2:16:1f:d8:54:6a:48:2c:2d:07:8f:44:97:4b: 3b:91:e2:bd:93:1b:23:e2:0e:9f:17:29:60:f8:a9:ef:b7:7a: bc:5e:81:51:f4:5a:5b:7a:a1:d1:2c:0b:ee:4a:14:42:ed:fa: 5e:7f:a3:b6:52:14:38:8a:2a:f5:ad:be:d9:fc:7c:b4:b4:7e: a4:bd:15:aa:32:06:ac:40:b3:a3:07:32:9a:2f:18:81:77:93: 55:b1:44:d6:c9:4e:4c:44:b8:ed:fb:4e:7e:7c:1c:15:db:d4: ea:37:57:b9:35:4c:a9:3a:7b:23:07:0c:bc:cf:6d:26:4d:bb: 5d:19:86:cc:d9:b0:e5:33:fd:0b:83:52:35:1a:fa:db:da:a7: 08:94:7a:af:69:ac:53:a2:1f:07:fc:9e:d8:c2:b1:bb:19:fa: 4c:bb:1f:38:9a:fa:d4:38:30:22:9a:4b:24:11:cd:3e:a3:e5: 20:c4:67:a1:70:db:ec:2e:67:c7:2b:f0:93:6e:6d:0f:10:f4: df:c2:fc:d6:bd:56:e0:79:a8:75:ea:17:bf:ba:79:89:93:92: 88:3d:d6:29:3e:1f:42:40:02:50:8d:b8:92:99:cb:5b:ab:25: 00:ee:9c:0f:42:d3:3b:24:1d:3c:50:9e:0b:6d:c7:f7:0b:4d: f8:f7:c8:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBO5wPwlZwc0B0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MjczMGE1NWUtYTMxYi00MDUxLTkyYWEtOTJjMTRkZTVmMzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKm1RBPyNlUgt9NFhJQflFcz6aLULG1JLp2M OU9CsUHGRTRzlcL/sOMotUeUn34vbrAfMGj809vJ+HPj71pEqXXIHnFVvsREl5Pb VTYQPFescJ+Mce+eAoi+ISUMMnAQxK+9kMNv08OH3QJikMk9UW9QB9pbxFWehhx3 OU9GXHhQGSVSK1+43iqIwDDdyOlFUtKEuWhMR+rpwZTd+p4Pl+Egi8n7MHuNF3W3 oi3v2+uIC78WcsOXkfEdNW6ZVjCjn2ufamXMtn5KeU8GoFuU1ba/257RFNUlaMXT 0K6O5cqGzkyVJQ0gAOXLhCmaB8j3Y2BXxocCfSuncNdJL4epmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc0IMKZxAcXQZL+PvdROtK0vryTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM5NmNmNmYtMTEzYy0z NjRmLWJiZTYtZWMzNjg4NDQ1YTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8RR+rSFh/YVGpILC0Hj0SXSzuR4r2TGyPiDp8XKWD4qe+3erxegVH0 Wlt6odEsC+5KFELt+l5/o7ZSFDiKKvWtvtn8fLS0fqS9FaoyBqxAs6MHMpovGIF3 k1WxRNbJTkxEuO37Tn58HBXb1Oo3V7k1TKk6eyMHDLzPbSZNu10ZhszZsOUz/QuD UjUa+tvapwiUeq9prFOiHwf8ntjCsbsZ+ky7Hzia+tQ4MCKaSyQRzT6j5SDEZ6Fw 2+wuZ8cr8JNubQ8Q9N/C/Na9VuB5qHXqF7+6eYmTkog91ik+H0JAAlCNuJKZy1ur JQDunA9C0zskHTxQngttx/cLTfj3yLU= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:37 2025 by rpki-client