$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa File: ba44a588-b907-3aad-b2e5-1cde02465b50.roa (raw, json) Hash identifier: fNLZyY1Qd66DFcwpzoHHh+s+Ag8zXLc6A2bOSuZJMq4= Subject key identifier: E6:30:6A:1E:EC:B0:B5:7E:96:B0:E3:23:51:BE:97:4A:1B:1B:92:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A794FA16241D45568040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.38.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a7:94:fa:16:24:1d:45:56:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=775b65c0-9f3a-49d1-ad7b-706931636a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:75:96:58:b0:77:5f:22:e4:47:18:40:58:0f: 20:04:73:13:a3:4a:30:de:ec:e3:25:61:9e:f7:36: 87:df:b3:12:aa:ba:34:c1:12:fe:0d:10:11:fb:61: 6b:49:5f:08:c0:48:0d:b6:12:ab:53:02:e8:45:28: d7:c6:dd:ec:fc:e9:18:68:b4:2b:75:6f:49:b9:12: 54:9f:cb:8d:8e:92:16:d7:07:bc:eb:99:42:4b:4d: 85:09:ed:2d:eb:59:a7:a0:bd:60:2f:b8:89:8d:62: a0:ba:68:08:8d:47:47:c5:aa:cc:ef:54:ce:7a:9a: b7:e2:d2:7d:8e:0b:92:55:d2:1e:c4:c4:f8:cd:61: 56:de:70:b8:1e:f6:b1:6c:65:4e:90:47:f9:01:a6: a7:9d:76:8f:ef:bb:86:4e:64:50:1d:26:40:91:80: c0:05:93:a7:3a:b9:6b:c4:21:f4:b7:05:62:58:a4: c8:b5:29:52:36:09:c5:85:68:d4:22:3a:8b:a3:05: e8:11:2e:17:15:db:7e:0c:07:89:b1:d6:7e:6f:b5: ae:f8:7c:08:3e:82:a4:ee:14:2f:ea:e5:04:33:05: 45:d3:8d:db:53:54:04:3f:63:36:63:d8:7e:16:ed: 1f:c1:c5:34:a2:e0:2c:db:d4:7d:ca:fd:af:d1:65: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:30:6A:1E:EC:B0:B5:7E:96:B0:E3:23:51:BE:97:4A:1B:1B:92:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a0:ad:5d:fa:84:3b:5b:f2:bf:32:36:77:40:4e:a2:bf:c9: 8c:cd:09:cc:fa:3d:a6:43:83:0a:14:96:04:99:92:1e:4a:ba: 30:d5:99:99:34:61:ce:6f:29:30:c0:3b:0b:e6:da:ba:12:48: ec:7d:f7:e4:e0:16:61:1d:52:10:f3:f9:f4:7b:f6:96:6d:0b: 0f:a1:b8:65:2f:7a:ee:c5:b7:a4:6c:3f:2b:0f:0f:0a:55:8b: 76:76:b6:d7:12:b1:ea:55:f9:01:80:a3:10:bc:d8:75:82:0c: d7:48:0d:ff:8e:8c:af:f3:7f:54:da:35:b5:93:c1:40:1b:b4: 08:82:c9:26:5b:64:07:5d:33:d4:9c:be:e8:04:2a:89:b1:7d: 48:22:a5:3c:de:8b:88:b9:13:07:c3:de:53:f2:ff:6e:0a:94: 86:76:a4:c5:90:2b:ea:7f:9c:bc:53:20:73:7a:12:7a:66:14: fb:ff:c1:20:a5:62:d2:50:26:07:2b:b8:d3:21:0c:4f:a3:77: 24:00:47:a9:6b:8a:2e:7d:00:a2:ce:3f:c3:ee:4e:98:a4:92: de:3a:0e:ac:3c:5f:e6:03:bc:e9:b5:2f:e9:d0:a9:07:14:4f: 07:2a:90:40:e3:49:02:db:35:a2:ab:b2:bd:e3:88:26:e4:cb: 2d:01:83:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aeU+hYkHUVWgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Nzc1YjY1YzAtOWYzYS00OWQxLWFkN2ItNzA2OTMxNjM2YTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3WWWLB3XyLkRxhAWA8gBHMTo0ow3uzjJWGe 9zaH37MSqro0wRL+DRAR+2FrSV8IwEgNthKrUwLoRSjXxt3s/OkYaLQrdW9JuRJU n8uNjpIW1we865lCS02FCe0t61mnoL1gL7iJjWKgumgIjUdHxarM71TOepq34tJ9 jguSVdIexMT4zWFW3nC4HvaxbGVOkEf5AaannXaP77uGTmRQHSZAkYDABZOnOrlr xCH0twViWKTItSlSNgnFhWjUIjqLowXoES4XFdt+DAeJsdZ+b7Wu+HwIPoKk7hQv 6uUEMwVF043bU1QEP2M2Y9h+Fu0fwcU0ouAs29R9yv2v0WX8FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYwah7ssLV+lrDjI1G+l0obG5IVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmE0NGE1ODgtYjkwNy0z YWFkLWIyZTUtMWNkZTAyNDY1YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6grV36hDtb8r8yNndATqK/yYzNCcz6PaZDgwoUlgSZkh5KujDVmZk0 Yc5vKTDAOwvm2roSSOx99+TgFmEdUhDz+fR79pZtCw+huGUveu7Ft6RsPysPDwpV i3Z2ttcSsepV+QGAoxC82HWCDNdIDf+OjK/zf1TaNbWTwUAbtAiCySZbZAddM9Sc vugEKomxfUgipTzei4i5EwfD3lPy/24KlIZ2pMWQK+p/nLxTIHN6EnpmFPv/wSCl YtJQJgcruNMhDE+jdyQAR6lrii59AKLOP8PuTpikkt46Dqw8X+YDvOm1L+nQqQcU TwcqkEDjSQLbNaKrsr3jiCbkyy0Bg9k= -----END CERTIFICATE-----Generated at Mon Oct 20 07:23:25 2025 by rpki-client