$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa File: a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa (raw, json) Hash identifier: lSbAiytcjaDhcw4m1f5JSefklNpRcb+o8Ob9jmVv6vM= Subject key identifier: 06:97:5B:D0:03:A3:1F:F1:56:C7:E6:D2:4B:37:60:A9:81:08:79:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1996C8661CBBA86C8B980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.36.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:99:6c:86:61:cb:ba:86:c8:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=ab54ee4d-c844-4a50-9553-d9b7319bc174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:13:10:d3:2e:88:a9:b4:cc:5b:cd:59:81:5a: bb:ec:23:31:bd:9f:00:0c:be:0d:9e:40:73:77:c4: cb:a1:e0:01:d6:a7:79:48:b1:ab:41:fc:46:5e:2d: 8c:94:06:5d:27:24:6e:ad:04:1e:d5:b8:e9:aa:b2: 41:27:32:eb:84:ee:1f:4b:77:17:e9:5d:da:64:f5: b7:de:13:7e:c2:e0:51:f5:56:25:0e:42:91:c6:b7: a4:ed:8f:cf:b5:af:d0:cc:9a:8c:9c:b0:f3:ab:a8: 26:32:19:85:5b:dc:7f:ae:7c:32:9c:07:73:71:17: 5a:cd:75:29:a9:22:c0:2d:d5:b6:d0:55:ad:fd:73: 70:e7:06:0a:ca:02:3b:8d:cc:fe:4f:9e:34:63:37: 54:13:89:b8:58:2b:c4:b0:20:2c:c2:27:a9:5b:d9: 14:e8:90:30:bc:68:13:1e:d3:b0:63:cc:73:ed:3b: be:b8:3b:1c:6a:91:b9:a4:0f:39:0d:90:df:5a:c7: 75:75:8e:72:66:f0:d3:13:9a:65:12:98:8e:e4:5c: 44:f1:32:aa:8d:80:6a:d1:08:a2:f5:0f:5d:33:7c: fb:0d:68:8c:db:8f:5b:31:44:3c:97:10:19:5d:bf: 1a:ae:1b:3c:9c:d2:6a:d9:1c:1b:3c:a4:f6:8e:23: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:97:5B:D0:03:A3:1F:F1:56:C7:E6:D2:4B:37:60:A9:81:08:79:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0aa9da2-0229-3e21-ba82-85f9fb3067e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:6e:b3:9d:23:62:91:80:53:6e:ef:65:5b:84:ea:0a:be:08: d9:72:19:e9:89:06:26:28:d1:f8:30:d4:6d:20:91:47:1a:6e: 7f:7c:d5:b1:7c:ab:5d:93:d1:51:6c:cf:f7:6a:eb:f8:0f:06: 66:47:01:04:f3:ca:43:e7:8e:f8:27:90:0b:aa:4e:87:08:35: 62:9e:20:aa:48:15:a3:d5:24:b8:09:78:27:96:86:da:d3:cc: a3:5e:27:a5:c9:5b:ad:c9:29:9f:9b:56:43:35:06:9c:78:d7: 53:b3:fd:93:69:a6:d6:3e:75:34:e9:83:19:e7:08:a0:44:b4: 04:cb:04:26:45:46:7c:66:52:99:0c:24:61:e4:e0:a9:af:00: 48:e9:c6:fd:01:a6:90:38:c0:4c:43:38:09:58:82:4f:62:0f: 88:b2:b9:3f:02:ef:29:aa:3d:40:16:67:1f:3f:52:ac:bb:2c: 4d:39:84:9a:1f:fd:ad:e5:1c:ff:ff:6c:8a:5b:ff:d8:ef:f9: 18:dc:ba:71:f7:7d:b5:88:e2:79:fd:40:63:76:19:fa:87:15: 23:45:cd:9e:bb:51:8d:a2:02:5a:f0:8d:71:34:65:16:f0:16: 71:f6:58:53:55:4e:65:71:33:a0:7a:68:2a:22:f9:cf:06:62: 99:a1:4d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZlshmHLuobIuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YWI1NGVlNGQtYzg0NC00YTUwLTk1NTMtZDliNzMxOWJjMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxMQ0y6IqbTMW81ZgVq77CMxvZ8ADL4NnkBz d8TLoeAB1qd5SLGrQfxGXi2MlAZdJyRurQQe1bjpqrJBJzLrhO4fS3cX6V3aZPW3 3hN+wuBR9VYlDkKRxrek7Y/Pta/QzJqMnLDzq6gmMhmFW9x/rnwynAdzcRdazXUp qSLALdW20FWt/XNw5wYKygI7jcz+T540YzdUE4m4WCvEsCAswiepW9kU6JAwvGgT HtOwY8xz7Tu+uDscapG5pA85DZDfWsd1dY5yZvDTE5plEpiO5FxE8TKqjYBq0Qii 9Q9dM3z7DWiM249bMUQ8lxAZXb8arhs8nNJq2RwbPKT2jiOUCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaXW9ADox/xVsfm0ks3YKmBCHnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTBhYTlkYTItMDIyOS0z ZTIxLWJhODItODVmOWZiMzA2N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxus50jYpGAU27vZVuE6gq+CNlyGemJBiYo0fgw1G0gkUcabn981bF8 q12T0VFsz/dq6/gPBmZHAQTzykPnjvgnkAuqTocINWKeIKpIFaPVJLgJeCeWhtrT zKNeJ6XJW63JKZ+bVkM1Bpx411Oz/ZNpptY+dTTpgxnnCKBEtATLBCZFRnxmUpkM JGHk4KmvAEjpxv0BppA4wExDOAlYgk9iD4iyuT8C7ymqPUAWZx8/Uqy7LE05hJof /a3lHP//bIpb/9jv+RjcunH3fbWI4nn9QGN2GfqHFSNFzZ67UY2iAlrwjXE0ZRbw FnH2WFNVTmVxM6B6aCoi+c8GYpmhTXY= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:38 2025 by rpki-client