$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0f17c7-cad6-37a8-ae5f-f8e780f23762.roa File: aa0f17c7-cad6-37a8-ae5f-f8e780f23762.roa (raw, json) Hash identifier: zHwaUwHUIakq6v5alR/pnANJRb071OJl4xXUat5rfXQ= Subject key identifier: EC:56:35:BF:89:14:00:84:33:DC:C8:3E:B5:A7:F2:C1:E3:D0:46:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C151F8920DE4DC23FB000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0f17c7-cad6-37a8-ae5f-f8e780f23762.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 23693 IP address blocks: 23.41.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:15:1f:89:20:de:4d:c2:3f:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=9447070b-7f59-47b8-94f3-bd18ec7e6692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:77:18:13:ae:41:25:59:8d:1e:21:d2:1a:d5: 54:66:2a:cc:95:9f:62:1b:f4:10:8b:5c:38:92:89: 02:ef:6e:d6:15:67:3a:3e:59:54:82:fc:9e:18:73: fa:a8:ab:bb:42:1b:a6:ee:25:50:0d:5f:61:70:67: a1:56:0c:da:63:64:84:a7:d6:82:a9:9f:65:5b:19: d5:3c:6e:e3:72:eb:bd:82:39:68:e5:56:cd:56:76: cb:a2:70:8c:89:61:fa:0a:31:46:90:ed:4e:eb:74: 7f:52:cc:2b:70:03:92:05:09:aa:21:2e:0d:05:12: 35:d8:8f:fc:0f:61:7e:a8:6c:c3:1d:9a:fd:88:4f: 58:06:af:3e:f5:5c:59:26:26:6b:67:31:b5:c1:de: a0:c5:db:17:92:ed:a6:5c:e7:06:22:d5:9b:b7:4e: bf:c4:24:7c:7f:b0:ba:ea:ba:4a:69:3e:cf:a5:a4: ee:b4:5b:1d:d7:89:78:a3:a4:67:2d:00:a9:a3:8d: 07:f0:f0:a1:3d:a4:b7:cd:f7:61:d4:aa:12:71:40: d7:2a:69:89:a3:50:48:23:0c:36:61:ed:12:51:cb: 57:14:f4:0e:04:77:10:cc:e2:62:f7:c4:d3:eb:c5: f3:18:ae:9c:26:eb:34:59:1f:86:03:08:a6:8c:8e: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:35:BF:89:14:00:84:33:DC:C8:3E:B5:A7:F2:C1:E3:D0:46:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0f17c7-cad6-37a8-ae5f-f8e780f23762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:fd:81:05:2f:63:cf:43:10:00:6f:a3:85:e5:af:e2:59:21: 99:5a:83:32:8a:fa:5e:37:60:dc:f2:d8:0e:b5:7a:31:d2:22: e5:60:13:dd:c4:9a:c0:ce:76:94:a1:f4:bb:d9:b3:4a:fb:d1: 6d:41:76:9a:22:60:35:28:ee:94:d8:a4:46:f2:53:f5:27:9f: 53:3d:ae:df:ab:42:ae:01:be:fe:35:3b:c7:5c:59:a1:2a:e8: 5e:e2:73:14:e5:8d:55:b9:e8:4e:27:0a:d5:d9:f0:30:ce:ea: 1f:cb:35:57:b6:13:9d:04:20:2d:1e:0d:3d:fb:23:d3:cf:b9: 3b:c8:04:91:63:fd:1e:3c:22:84:6e:e7:71:d7:8d:8a:08:66: 37:c0:28:33:c8:95:98:ee:9c:fb:4b:39:c9:01:c6:0e:31:24: 1b:36:ac:8e:d7:1f:5f:53:6f:20:05:d2:73:fc:2b:db:1f:f3: 17:e5:39:a5:a6:a9:77:d9:b6:ac:85:cb:e7:68:75:1d:82:84: 13:6d:fa:72:64:32:3a:6e:80:0c:a9:1d:3f:f8:34:e3:a5:97: 69:4e:3b:29:46:31:f6:0d:c6:62:06:c2:ce:80:6e:8a:48:ff: ec:e0:12:1f:06:0a:2b:84:f1:ea:ac:11:df:81:a9:46:c1:13: f9:d7:fd:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBUfiSDeTcI/sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTQ0NzA3MGItN2Y1OS00N2I4LTk0ZjMtYmQxOGVjN2U2NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XcYE65BJVmNHiHSGtVUZirMlZ9iG/QQi1w4 kokC727WFWc6PllUgvyeGHP6qKu7Qhum7iVQDV9hcGehVgzaY2SEp9aCqZ9lWxnV PG7jcuu9gjlo5VbNVnbLonCMiWH6CjFGkO1O63R/UswrcAOSBQmqIS4NBRI12I/8 D2F+qGzDHZr9iE9YBq8+9VxZJiZrZzG1wd6gxdsXku2mXOcGItWbt06/xCR8f7C6 6rpKaT7PpaTutFsd14l4o6RnLQCpo40H8PChPaS3zfdh1KoScUDXKmmJo1BIIww2 Ye0SUctXFPQOBHcQzOJi98TT68XzGK6cJus0WR+GAwimjI4kwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxWNb+JFACEM9zIPrWn8sHj0EZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEwZjE3YzctY2FkNi0z N2E4LWFlNWYtZjhlNzgwZjIzNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFykAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH39gQUvY89DEABvo4Xlr+JZIZlagzKK+l43YNzy2A61ejHSIuVgE93E msDOdpSh9LvZs0r70W1BdpoiYDUo7pTYpEbyU/Unn1M9rt+rQq4Bvv41O8dcWaEq 6F7icxTljVW56E4nCtXZ8DDO6h/LNVe2E50EIC0eDT37I9PPuTvIBJFj/R48IoRu 53HXjYoIZjfAKDPIlZjunPtLOckBxg4xJBs2rI7XH19TbyAF0nP8K9sf8xflOaWm qXfZtqyFy+dodR2ChBNt+nJkMjpugAypHT/4NOOll2lOOylGMfYNxmIGws6AbopI /+zgEh8GCiuE8eqsEd+BqUbBE/nX/ag= -----END CERTIFICATE-----Generated at Tue Oct 21 02:22:00 2025 by rpki-client