$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9cab342-c268-3db9-9448-70a18f19ec2c.roa File: b9cab342-c268-3db9-9448-70a18f19ec2c.roa (raw, json) Hash identifier: TEX++nV9YKLAFdM6D49ci24r9cWv4gNhn3l+0LyVR28= Subject key identifier: B3:4B:8F:4F:C9:F1:54:EF:87:63:EB:44:46:A4:A9:E3:20:49:DC:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6F5001BE1148FA66FCB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9cab342-c268-3db9-9448-70a18f19ec2c.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.56.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:f5:00:1b:e1:14:8f:a6:6f:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=e1d57313-a4b3-48da-9d5e-f078866eb658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:05:a4:e8:b0:ed:9e:64:9f:09:22:dd:86: cb:01:d1:ae:98:15:ef:0f:c0:11:d6:66:86:b4:3b: bc:ca:54:bb:bf:6b:87:c1:55:88:89:6c:23:71:07: 6b:bf:30:47:c2:d8:ee:ed:1b:12:98:65:30:09:a7: 64:f3:0d:d8:0d:2d:13:d6:15:69:de:3d:49:d7:dc: 36:c1:1e:92:32:d3:dc:3d:14:f5:1c:c1:9c:f5:48: d8:5f:8b:9b:2d:db:d7:e0:65:fd:09:2b:dc:b1:0b: af:19:40:99:e6:35:f1:de:c3:23:c0:3a:0b:aa:ac: 51:83:68:62:19:82:2b:5e:65:e8:c3:3a:2a:0b:67: 97:52:1b:c5:ce:f1:0f:f0:7d:b0:e7:7d:f8:09:dc: ce:34:c2:c0:91:88:c6:24:d9:07:e0:1f:02:f4:62: 90:02:09:25:5e:f5:bc:ed:eb:95:d5:a3:b9:b9:18: 84:d8:6e:aa:80:d8:22:c5:77:9e:bd:2e:c4:72:7f: d8:70:8e:c5:3b:d9:7e:21:34:f9:fb:47:c3:82:5a: ab:1e:da:2b:7e:75:e0:ef:54:cc:df:b8:60:2d:c4: a6:8a:8a:71:e0:78:c1:b6:67:56:84:2d:86:d4:6e: f5:b0:74:44:de:ce:6f:21:6d:fb:b4:62:b3:d2:21: ff:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:8F:4F:C9:F1:54:EF:87:63:EB:44:46:A4:A9:E3:20:49:DC:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9cab342-c268-3db9-9448-70a18f19ec2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:47:d2:f0:f3:83:a3:4b:3c:95:38:f1:f9:73:2c:bc:3b:ee: a2:a0:e2:3f:07:e2:4a:e5:ee:9a:50:7a:5a:ac:16:c9:e1:c2: 06:30:ac:0c:b7:ee:dc:3e:60:53:c4:d1:9b:4a:73:29:37:90: 6d:34:ec:e2:91:a2:45:89:d7:98:50:96:26:1a:e6:3c:ab:77: 6b:b1:7f:13:15:cb:01:00:8f:b5:fc:90:4a:fd:a6:e9:0c:68: 36:06:79:57:59:52:82:b3:6c:86:ce:9c:f0:38:20:62:2a:a8: 8c:05:83:16:80:6b:ea:0d:3a:b0:31:cf:19:cf:eb:cf:11:61: 9e:b4:6e:77:06:93:74:56:ea:b8:74:48:b2:22:52:38:76:d2: 41:39:1a:eb:a6:a9:89:a6:2a:c0:1d:c4:27:bb:34:31:03:02: 7a:ed:15:23:c1:dc:9b:1c:d5:d3:99:6f:1d:b2:0d:90:d1:0b: b2:cb:32:e0:ee:9d:e0:76:56:31:84:29:ef:2c:47:a5:ae:7e: 88:b4:81:a0:59:0e:dd:84:d3:e1:d2:ec:40:b7:cc:79:f7:a9: da:7c:37:a9:8d:7c:88:6e:4c:06:e4:1e:99:10:01:11:4b:52: b3:1c:d3:06:e4:fd:2c:3c:58:53:f4:a7:b9:a7:e8:ab:73:87: 7c:6d:5e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vUAG+EUj6Zvy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTFkNTczMTMtYTRiMy00OGRhLTlkNWUtZjA3ODg2NmViNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MYFpOiw7Z5knwki3YbLAdGumBXvD8AR1maG tDu8ylS7v2uHwVWIiWwjcQdrvzBHwtju7RsSmGUwCadk8w3YDS0T1hVp3j1J19w2 wR6SMtPcPRT1HMGc9UjYX4ubLdvX4GX9CSvcsQuvGUCZ5jXx3sMjwDoLqqxRg2hi GYIrXmXowzoqC2eXUhvFzvEP8H2w5334CdzONMLAkYjGJNkH4B8C9GKQAgklXvW8 7euV1aO5uRiE2G6qgNgixXeevS7Ecn/YcI7FO9l+ITT5+0fDglqrHtorfnXg71TM 37hgLcSmiopx4HjBtmdWhC2G1G71sHRE3s5vIW37tGKz0iH/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNLj0/J8VTvh2PrREakqeMgSdwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjljYWIzNDItYzI2OC0z ZGI5LTk0NDgtNzBhMThmMTllYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzgFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBH0vDzg6NLPJU48flzLLw77qKg4j8H4krl7ppQelqsFsnhwgYwrAy3 7tw+YFPE0ZtKcyk3kG007OKRokWJ15hQliYa5jyrd2uxfxMVywEAj7X8kEr9pukM aDYGeVdZUoKzbIbOnPA4IGIqqIwFgxaAa+oNOrAxzxnP688RYZ60bncGk3RW6rh0 SLIiUjh20kE5GuumqYmmKsAdxCe7NDEDAnrtFSPB3Jsc1dOZbx2yDZDRC7LLMuDu neB2VjGEKe8sR6Wufoi0gaBZDt2E0+HS7EC3zHn3qdp8N6mNfIhuTAbkHpkQARFL UrMc0wbk/Sw8WFP0p7mn6Ktzh3xtXsg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:04 2025 by rpki-client