$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1d48955-1850-374e-983f-267e49342b03.roa File: a1d48955-1850-374e-983f-267e49342b03.roa (raw, json) Hash identifier: VFfH2r704tSPSxj6h4WKm5R2OKTkhS0oa1qKgFuMkdA= Subject key identifier: 4D:E5:59:2B:D8:D7:ED:A1:53:D2:CA:B6:DB:64:FC:87:D8:40:2B:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A49B54E38C31E3581B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1d48955-1850-374e-983f-267e49342b03.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.36.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a4:9b:54:e3:8c:31:e3:58:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=8716e011-be62-46f1-877d-2b2fd2ebaaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:28:36:1b:68:7c:40:60:5a:35:e6:b5:49: ef:c7:8b:b4:bf:3a:04:37:70:c3:90:70:c6:d1:f2: 3b:3d:a8:2e:fc:ac:0b:0e:df:01:32:68:96:4d:90: 7d:67:fc:0e:e8:1c:40:cf:f4:17:96:ec:6d:26:45: 6f:1b:d8:17:c8:62:90:63:92:3b:01:a1:f1:f2:4d: df:b0:16:84:b6:c5:25:ac:d7:1e:53:65:cf:17:35: 23:cc:68:04:9a:25:5a:db:0d:41:0a:4a:79:11:cb: 7a:49:d5:bf:e1:b2:19:04:62:3f:0f:7d:bf:44:e4: 23:08:b6:b2:b6:6b:c8:87:f1:48:92:36:f5:f4:2b: 59:5b:9d:71:7f:65:92:13:81:3a:19:23:dd:50:b0: e0:a0:7e:be:da:fa:23:ad:30:42:3e:8b:f2:b5:6c: 82:3c:dd:07:62:05:d4:b7:3f:05:e3:93:04:3c:ee: 09:2d:76:87:ec:f2:41:12:41:37:42:d1:03:8a:2b: 20:42:c8:ed:d1:c3:b9:6a:69:9f:a5:e3:d9:b6:a7: 7e:f1:0b:7b:68:bc:03:43:c6:f6:4b:5b:2c:13:69: de:63:73:f4:88:76:dd:06:4d:b1:03:6f:06:78:83: bd:85:38:45:a7:9f:41:d0:08:46:7c:89:34:d2:72: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E5:59:2B:D8:D7:ED:A1:53:D2:CA:B6:DB:64:FC:87:D8:40:2B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a1d48955-1850-374e-983f-267e49342b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:75:f6:7a:18:ea:13:ae:d9:85:d6:63:4d:5f:ac:c3:b5:7b: cd:5a:83:15:7b:e7:54:5b:0e:55:19:b9:56:96:20:1e:f6:79: 25:0a:ff:50:d8:29:03:05:e9:6a:d8:31:37:a1:53:ef:ae:5e: a3:3f:9f:8e:74:8f:9d:41:cc:7f:48:da:18:bd:1b:82:fd:1e: 5a:0d:8f:a1:4f:dc:84:b6:5b:c8:e7:05:d3:d7:2a:7b:20:86: 0d:c1:82:01:2d:81:1c:fa:db:9f:dc:3e:7d:a2:d8:92:89:6f: c7:66:6d:f0:64:b0:d1:16:ab:de:3a:9c:e9:68:16:5b:e3:b0: 3a:f0:25:39:6d:f6:63:be:a8:51:b9:6b:c1:d2:9d:63:9f:f3: 20:67:cb:d4:ef:64:35:6e:19:d1:24:57:59:ac:fa:7a:03:0c: 59:3c:9f:f2:09:7a:a0:64:21:3b:40:3d:39:a6:cb:7f:c9:93: 14:09:1c:6d:3d:d5:16:44:48:a5:df:59:b3:fa:44:b2:2c:b8: 37:01:7f:e8:d3:1b:f9:d3:e3:72:0b:9c:91:eb:3a:ac:1e:09: 16:b3:b7:14:90:15:b1:a7:54:92:c6:15:ad:2b:ae:60:9e:e4: d5:cb:b3:d2:f3:14:4a:82:a6:48:fc:fd:57:f2:23:a8:a5:68: c3:f2:d0:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aSbVOOMMeNYG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODcxNmUwMTEtYmU2Mi00NmYxLTg3N2QtMmIyZmQyZWJhYWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKgoNhtofEBgWjXmtUnvx4u0vzoEN3DDkHDG 0fI7Pagu/KwLDt8BMmiWTZB9Z/wO6BxAz/QXluxtJkVvG9gXyGKQY5I7AaHx8k3f sBaEtsUlrNceU2XPFzUjzGgEmiVa2w1BCkp5Ect6SdW/4bIZBGI/D32/ROQjCLay tmvIh/FIkjb19CtZW51xf2WSE4E6GSPdULDgoH6+2vojrTBCPovytWyCPN0HYgXU tz8F45MEPO4JLXaH7PJBEkE3QtEDiisgQsjt0cO5ammfpePZtqd+8Qt7aLwDQ8b2 S1ssE2neY3P0iHbdBk2xA28GeIO9hThFp59B0AhGfIk00nLp5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3lWSvY1+2hU9LKtttk/IfYQCuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTFkNDg5NTUtMTg1MC0z NzRlLTk4M2YtMjY3ZTQ5MzQyYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp19noY6hOu2YXWY01frMO1e81agxV751RbDlUZuVaWIB72eSUK/1DY KQMF6WrYMTehU++uXqM/n450j51BzH9I2hi9G4L9HloNj6FP3IS2W8jnBdPXKnsg hg3BggEtgRz625/cPn2i2JKJb8dmbfBksNEWq946nOloFlvjsDrwJTlt9mO+qFG5 a8HSnWOf8yBny9TvZDVuGdEkV1ms+noDDFk8n/IJeqBkITtAPTmmy3/JkxQJHG09 1RZESKXfWbP6RLIsuDcBf+jTG/nT43ILnJHrOqweCRaztxSQFbGnVJLGFa0rrmCe 5NXLs9LzFEqCpkj8/VfyI6ilaMPy0K4= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:54 2025 by rpki-client