$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63e1dfa-4d4d-3ad5-8193-68673664c79f.roa File: a63e1dfa-4d4d-3ad5-8193-68673664c79f.roa (raw, json) Hash identifier: rZ6tCVnSYDB4+IstFUz7gzZxY7XNG1YZgewUV/yZdLc= Subject key identifier: 53:7D:29:D4:CE:94:3D:FC:2F:F5:D0:17:91:83:89:21:38:F6:9F:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B72C1F098068E358450EF2240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63e1dfa-4d4d-3ad5-8193-68673664c79f.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 16625 IP address blocks: 23.36.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:f0:98:06:8e:35:84:50:ef:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=d598e4d7-f810-4311-b7ec-23e5dd34a9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:a3:b6:40:e8:a7:65:3c:30:88:26:de:f8: 3d:67:5b:f5:44:b9:50:d3:7e:73:27:e4:7f:51:51: c7:1e:b8:76:3f:60:83:cf:89:3b:52:dc:3b:54:b3: 16:cb:52:40:31:6a:c0:1c:56:b2:d5:5c:8d:43:a9: 37:6b:1b:7d:8d:4c:d0:58:13:cf:6f:83:63:65:0f: 47:8c:22:ce:ab:82:b3:6f:ac:ab:ee:50:e3:6d:a7: ae:ef:4b:e9:46:1a:ac:51:18:84:75:0a:bd:f9:19: d5:ef:9b:5f:ac:2c:70:53:3b:19:c6:f1:d3:dd:0c: 30:7b:16:7c:9d:2f:dc:a3:c5:3c:3a:a3:53:4c:46: 20:73:32:75:38:46:ed:85:df:91:80:69:38:75:2e: 35:32:29:ea:ab:e9:ee:d0:e1:25:e3:b9:1e:79:f1: 16:65:52:5a:f1:30:0d:ab:db:2c:52:1b:df:55:5c: d7:b6:c9:ac:0c:75:4d:7d:87:e2:19:af:e5:da:2f: 47:73:e9:8f:5f:fa:52:90:6c:0f:32:c1:4e:d5:f6: ae:6d:1c:c4:78:40:98:3e:5d:e6:d4:e7:e4:5d:61: 59:05:ae:a2:23:c4:c3:1c:dc:8f:fc:27:7e:cf:a4: f9:d8:8b:6a:17:43:c0:f4:78:9e:c0:c8:c5:cd:fc: 23:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7D:29:D4:CE:94:3D:FC:2F:F5:D0:17:91:83:89:21:38:F6:9F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a63e1dfa-4d4d-3ad5-8193-68673664c79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:36:d2:e4:02:1d:69:5e:1a:b2:df:df:f8:39:cc:68:4b:e1: cc:39:30:72:ca:4a:15:61:53:70:cb:f1:d7:70:75:53:48:b7: ad:26:b5:1d:4c:0d:28:88:b6:52:1d:d3:85:78:61:7d:14:f9: 0f:71:0a:31:4e:55:45:88:ae:ca:aa:9a:77:df:64:e2:ab:96: b3:b8:7a:93:dd:fa:9d:35:d9:7a:50:e8:57:b5:08:df:f1:c1: 2f:62:e9:68:ee:e4:9e:72:02:39:68:0b:4b:0e:22:07:2b:29: 9b:74:c8:71:e8:9a:0c:19:ee:89:71:9a:1b:3b:29:0f:8c:6c: 6e:ca:f9:f4:e2:8f:27:4f:a9:08:6d:d2:69:8e:10:4a:6f:83: ee:e6:33:20:35:9a:0f:c9:c8:13:8d:0b:70:a5:e6:ae:6a:39: 10:b0:85:dd:24:10:df:be:91:2c:13:20:86:03:cc:6c:71:6a: 91:bb:9f:84:51:cd:f5:41:cf:ac:19:4a:2f:2c:e0:86:84:55: 43:0d:1f:86:e0:ab:83:d2:cb:99:fe:7b:13:e0:7c:3f:b2:ce: 1f:c1:f9:63:e8:a6:86:b8:d2:1d:89:4e:10:1a:24:ff:fe:18: 9b:21:db:a8:52:e9:03:17:1b:4b:1c:1c:0b:6e:2f:39:55:a4: e6:20:cb:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtywfCYBo41hFDvIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk ZDU5OGU0ZDctZjgxMC00MzExLWI3ZWMtMjNlNWRkMzRhOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDGjtkDop2U8MIgm3vg9Z1v1RLlQ035zJ+R/ UVHHHrh2P2CDz4k7Utw7VLMWy1JAMWrAHFay1VyNQ6k3axt9jUzQWBPPb4NjZQ9H jCLOq4Kzb6yr7lDjbaeu70vpRhqsURiEdQq9+RnV75tfrCxwUzsZxvHT3QwwexZ8 nS/co8U8OqNTTEYgczJ1OEbthd+RgGk4dS41Minqq+nu0OEl47keefEWZVJa8TAN q9ssUhvfVVzXtsmsDHVNfYfiGa/l2i9Hc+mPX/pSkGwPMsFO1faubRzEeECYPl3m 1OfkXWFZBa6iI8TDHNyP/Cd+z6T52ItqF0PA9HiewMjFzfwjjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFN9KdTOlD38L/XQF5GDiSE49p+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTYzZTFkZmEtNGQ0ZC0z YWQ1LTgxOTMtNjg2NzM2NjRjNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU20uQCHWleGrLf3/g5zGhL4cw5MHLKShVhU3DL8ddwdVNIt60mtR1M DSiItlId04V4YX0U+Q9xCjFOVUWIrsqqmnffZOKrlrO4epPd+p012XpQ6Fe1CN/x wS9i6Wju5J5yAjloC0sOIgcrKZt0yHHomgwZ7olxmhs7KQ+MbG7K+fTijydPqQht 0mmOEEpvg+7mMyA1mg/JyBONC3Cl5q5qORCwhd0kEN++kSwTIIYDzGxxapG7n4RR zfVBz6wZSi8s4IaEVUMNH4bgq4PSy5n+exPgfD+yzh/B+WPopoa40h2JThAaJP/+ GJsh26hS6QMXG0scHAtuLzlVpOYgy38= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:53 2025 by rpki-client