$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d9564ef-50c4-3f49-814e-f46f435ce0c3.roa File: 9d9564ef-50c4-3f49-814e-f46f435ce0c3.roa (raw, json) Hash identifier: OKVcatW07VC4IvIxA3slwP3o7LzVmhu88SvcUW1dWK8= Subject key identifier: F9:67:40:D1:F7:3C:8F:ED:1E:BE:8C:0A:80:A7:2A:A8:47:EE:71:6C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2E5C57BF77AA0EA5C0E060A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d9564ef-50c4-3f49-814e-f46f435ce0c3.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.63.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:57:bf:77:aa:0e:a5:c0:e0:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=6ddcf77e-33e6-4203-a041-54de037af901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:b0:fb:1a:2c:7a:b0:04:ca:be:7e:51:41: e6:51:cc:26:a2:d4:5f:3b:d9:92:69:2c:0b:9e:60: a2:a9:65:9b:93:73:dc:50:34:84:eb:a0:e1:98:f6: cb:4b:30:8e:52:0b:10:0b:8a:3b:af:a8:30:3d:11: 4e:07:ac:1f:8b:9c:7a:c3:47:9d:6c:42:5a:67:5d: 89:a2:e4:8c:b7:18:12:0b:cf:10:97:20:a4:7a:ed: b5:05:0d:f3:a3:ce:33:56:78:5a:74:7f:88:33:d0: 3c:66:ed:7d:f7:26:f2:01:84:14:d3:51:76:75:3f: 21:1d:66:4d:a0:2c:a8:31:ef:85:fd:47:7a:60:63: 88:f8:73:60:fc:d3:e1:5a:93:d1:b8:a1:04:2b:32: fa:ee:99:d7:ea:33:46:51:f3:98:56:11:81:27:ab: a0:10:d0:dd:80:24:3e:ee:d2:1c:bb:65:38:e8:5b: 03:b1:ee:84:74:f9:68:89:27:20:02:23:42:f2:f4: 17:ae:c0:58:e1:32:9c:8c:6b:ea:e2:87:7e:9e:f0: 6b:7b:fe:a2:7e:84:98:27:15:74:22:63:e8:98:30: 5b:e6:48:49:f5:c5:0a:65:15:9b:3e:2a:05:47:e5: f9:5b:f6:aa:59:46:fc:5b:99:75:53:9c:a3:c1:71: c1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:67:40:D1:F7:3C:8F:ED:1E:BE:8C:0A:80:A7:2A:A8:47:EE:71:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d9564ef-50c4-3f49-814e-f46f435ce0c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.63.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3a:cb:27:cf:e3:95:08:c7:21:5e:f8:53:eb:ce:74:76:de: 81:ea:17:f6:32:5d:29:df:c5:bc:00:a2:7d:98:03:d4:00:0b: 48:9d:49:af:8b:e4:9e:f4:eb:78:5b:bc:9d:78:cd:33:55:ca: 8e:23:07:5f:40:ae:41:fb:b7:af:70:f3:cb:f6:01:4e:02:03: d4:62:05:74:d9:8f:6c:24:a5:af:68:da:55:90:d5:f9:63:f6: 2f:bd:85:dc:31:2f:7a:29:1a:32:7d:8e:19:70:f3:d9:ef:71: 64:4c:70:e6:12:e1:72:e6:ce:47:89:35:3d:99:7b:db:99:8e: c8:b5:fe:5b:92:54:f4:8f:bc:93:b6:93:21:db:39:6a:1a:1b: 7c:1e:4e:7d:20:51:d1:83:30:1d:dd:47:fc:f5:70:29:a2:a7: 4e:3e:71:b8:df:d8:49:28:12:ac:f6:9b:b8:32:eb:cf:48:da: 80:0e:39:a0:7e:3a:4d:d0:1d:f8:2c:40:23:19:73:fd:e8:77: 69:ed:57:33:fc:de:e6:ad:a6:16:df:8a:64:87:9d:93:b3:09: 38:2d:83:dc:c4:88:b4:0a:d8:8f:57:bb:a6:86:a6:46:fb:4d: a6:3c:f1:19:50:88:02:34:73:57:a5:2f:67:f1:dc:d0:f6:c9: 69:09:1d:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXFe/d6oOpcDgYKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NmRkY2Y3N2UtMzNlNi00MjAzLWEwNDEtNTRkZTAzN2FmOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt6w+xoserAEyr5+UUHmUcwmotRfO9mSaSwL nmCiqWWbk3PcUDSE66DhmPbLSzCOUgsQC4o7r6gwPRFOB6wfi5x6w0edbEJaZ12J ouSMtxgSC88QlyCkeu21BQ3zo84zVnhadH+IM9A8Zu199ybyAYQU01F2dT8hHWZN oCyoMe+F/Ud6YGOI+HNg/NPhWpPRuKEEKzL67pnX6jNGUfOYVhGBJ6ugENDdgCQ+ 7tIcu2U46FsDse6EdPloiScgAiNC8vQXrsBY4TKcjGvq4od+nvBre/6ifoSYJxV0 ImPomDBb5khJ9cUKZRWbPioFR+X5W/aqWUb8W5l1U5yjwXHB4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlnQNH3PI/tHr6MCoCnKqhH7nFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWQ5NTY0ZWYtNTBjNC0z ZjQ5LTgxNGUtZjQ2ZjQzNWNlMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg6yyfP45UIxyFe+FPrznR23oHqF/YyXSnfxbwAon2YA9QAC0idSa+L 5J7063hbvJ14zTNVyo4jB19ArkH7t69w88v2AU4CA9RiBXTZj2wkpa9o2lWQ1flj 9i+9hdwxL3opGjJ9jhlw89nvcWRMcOYS4XLmzkeJNT2Ze9uZjsi1/luSVPSPvJO2 kyHbOWoaG3weTn0gUdGDMB3dR/z1cCmip04+cbjf2EkoEqz2m7gy689I2oAOOaB+ Ok3QHfgsQCMZc/3od2ntVzP83uatphbfimSHnZOzCTgtg9zEiLQK2I9Xu6aGpkb7 TaY88RlQiAI0c1elL2fx3ND2yWkJHd8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:37:53 2025 by rpki-client