$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0491108-6f77-3b54-af69-7a81e598276c.roa File: a0491108-6f77-3b54-af69-7a81e598276c.roa (raw, json) Hash identifier: NwvB5YtIdRZnlZc+HwZErjserWFOoEBYeU+3nrO+W9s= Subject key identifier: 0A:B8:9A:35:32:20:E3:31:EC:DC:E2:87:A4:64:5B:E8:CF:35:17:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19FE8717FBD506384B480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0491108-6f77-3b54-af69-7a81e598276c.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.40.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9f:e8:71:7f:bd:50:63:84:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=81bc8d8b-b4e3-4043-81ee-f2cb350aed02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:10:84:dd:d5:4b:58:0a:8f:06:11:f6:76:3c: 0b:f9:55:1d:0d:5d:50:65:87:ea:69:94:33:c3:6a: 8d:65:78:3e:2c:9b:00:3e:2a:e5:d2:9e:47:57:8e: 6c:f3:3c:5a:6b:00:35:51:64:5b:bc:81:4d:7a:5a: 1c:af:c6:30:e6:8c:a0:ed:fa:ad:fe:e0:a8:08:b1: bd:4e:db:bb:2a:2b:a2:e3:95:d6:9d:c5:fb:5d:53: 02:0d:b3:54:14:b4:ac:c1:b2:76:72:ff:a6:cf:35: ce:84:44:7d:d1:e8:30:19:99:86:1e:83:aa:16:9a: d0:a8:63:54:d6:4d:ef:7e:ac:a6:53:a4:b3:c1:a1: 96:21:c6:c8:eb:b3:83:58:9f:d6:b1:0d:be:4e:2d: c5:17:61:29:93:a9:39:96:2f:36:c8:c3:89:ae:1c: cd:3d:75:59:66:29:1b:82:e6:03:4a:4c:59:90:1a: a7:e3:d5:8c:b4:b7:1c:f9:11:83:c6:56:00:ea:ea: 13:f7:9e:0c:36:e2:64:a9:b0:dc:44:b9:57:9c:ff: 3b:41:3d:b9:4f:5e:78:17:c6:cf:02:b9:88:d6:7c: 8b:6d:21:b0:42:f6:09:24:37:a8:a9:1b:e2:d0:0e: 55:fb:cc:cd:bb:dc:e3:99:fb:97:62:9f:35:25:36: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B8:9A:35:32:20:E3:31:EC:DC:E2:87:A4:64:5B:E8:CF:35:17:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0491108-6f77-3b54-af69-7a81e598276c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:5a:a6:98:3f:70:8c:30:ba:ae:8b:69:6e:1d:f9:2b:d8:af: 3c:52:4f:d4:2e:13:6d:a0:9c:90:f2:58:33:61:69:d6:e8:c0: 24:0d:2d:15:4e:77:25:82:51:a8:83:6c:7e:8f:5d:40:6f:16: f0:0c:fd:db:51:66:40:ec:75:cd:9e:07:b3:2d:22:63:ac:c9: 21:6e:3e:44:dc:7d:9c:19:05:15:ce:36:f6:b5:cd:a8:98:70: 04:0a:d2:77:22:48:3e:fb:e1:45:d3:e0:0d:ec:28:7b:84:a6: 7e:78:a2:dd:dd:18:fb:be:66:02:0d:00:1b:68:05:dd:41:42: 73:6b:67:10:0d:ff:2c:ea:a3:9b:22:0f:db:d3:3d:08:f6:a4: fb:fd:2d:0e:28:3b:f1:b2:ef:0d:0c:98:fb:ac:7e:4e:80:32: 4c:67:3e:49:ec:1c:e6:62:44:23:99:c2:fc:45:10:9a:0e:f2: 2f:c8:4e:e1:97:73:27:ab:e8:74:44:8e:33:91:16:2c:f4:43: 9c:57:c0:9e:2c:10:8a:95:00:d5:e8:dc:1a:9b:33:f6:4b:8a: 6c:83:76:d3:40:ab:4e:ca:ac:30:69:4e:51:ab:2a:37:93:5e: 70:05:cf:10:88:66:cb:82:8a:46:b5:bc:2b:26:2a:29:f4:18: b4:1e:e3:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Z/ocX+9UGOEtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODFiYzhkOGItYjRlMy00MDQzLTgxZWUtZjJjYjM1MGFlZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhCE3dVLWAqPBhH2djwL+VUdDV1QZYfqaZQz w2qNZXg+LJsAPirl0p5HV45s8zxaawA1UWRbvIFNelocr8Yw5oyg7fqt/uCoCLG9 Ttu7Kiui45XWncX7XVMCDbNUFLSswbJ2cv+mzzXOhER90egwGZmGHoOqFprQqGNU 1k3vfqymU6SzwaGWIcbI67ODWJ/WsQ2+Ti3FF2Epk6k5li82yMOJrhzNPXVZZikb guYDSkxZkBqn49WMtLcc+RGDxlYA6uoT954MNuJkqbDcRLlXnP87QT25T154F8bP ArmI1nyLbSGwQvYJJDeoqRvi0A5V+8zNu9zjmfuXYp81JTYQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAq4mjUyIOMx7Nzih6RkW+jPNRcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTA0OTExMDgtNmY3Ny0z YjU0LWFmNjktN2E4MWU1OTgyNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5appg/cIwwuq6LaW4d+SvYrzxST9QuE22gnJDyWDNhadbowCQNLRVO dyWCUaiDbH6PXUBvFvAM/dtRZkDsdc2eB7MtImOsySFuPkTcfZwZBRXONva1zaiY cAQK0nciSD774UXT4A3sKHuEpn54ot3dGPu+ZgINABtoBd1BQnNrZxAN/yzqo5si D9vTPQj2pPv9LQ4oO/Gy7w0MmPusfk6AMkxnPknsHOZiRCOZwvxFEJoO8i/ITuGX cyer6HREjjORFiz0Q5xXwJ4sEIqVANXo3BqbM/ZLimyDdtNAq07KrDBpTlGrKjeT XnAFzxCIZsuCika1vCsmKin0GLQe4/4= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:19 2025 by rpki-client