$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa File: ba5d2792-5be8-3b48-878e-d276c8a625d0.roa (raw, json) Hash identifier: 1RigowIpREDEv/NKLy+6AkATuOHk4/gxBqQSuCUpBGM= Subject key identifier: E3:5B:AA:92:AF:0C:83:7E:F8:A3:94:5B:12:B8:FF:9A:06:B5:62:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19A98D3AC4B91CE505A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.37.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9a:98:d3:ac:4b:91:ce:50:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=2edff473-dcf3-49e4-9822-b9f1d7b164e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:2d:28:58:c3:56:b9:b7:cf:13:b2:3d:73: ec:94:9b:88:ac:13:67:1d:0e:a5:33:e3:b3:d9:78: 99:d6:ff:7a:02:cd:3d:44:5c:a3:00:3c:b5:c1:b1: a7:78:98:9f:9d:d5:36:45:71:d7:7c:0c:c5:e2:9e: 30:68:8f:03:17:c0:36:4f:25:8c:14:f7:0e:dc:c9: 65:3f:97:fe:84:c9:cc:64:6a:be:e1:ad:8d:e7:70: 64:eb:3d:fd:10:f2:92:e7:dd:9e:e4:a5:4b:b8:4c: ee:67:64:be:72:d2:b6:83:ec:11:b8:48:23:f9:f3: 99:7e:fd:92:9c:86:f4:55:26:80:48:f1:da:ca:3b: c5:70:60:de:58:38:f9:4b:63:0b:54:29:27:94:8e: 8d:ea:50:0e:a1:9a:45:4a:67:07:ea:f0:2e:8a:c6: fb:3a:17:55:41:e8:12:b1:9e:7c:75:3d:d2:c0:f8: 0c:f9:59:d7:3e:90:c1:13:96:0f:e6:42:a0:69:70: 38:61:5d:7d:6f:4e:07:6d:93:23:5a:d1:12:fe:b8: f7:98:6a:97:db:dc:87:c9:23:81:4d:81:ef:f5:16: 77:e5:73:fa:bb:9c:a4:9e:f1:74:ea:ea:1e:b4:65: c3:5e:0c:33:eb:fb:47:80:2f:96:eb:3e:0c:1c:0f: a0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5B:AA:92:AF:0C:83:7E:F8:A3:94:5B:12:B8:FF:9A:06:B5:62:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba5d2792-5be8-3b48-878e-d276c8a625d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a6:ae:90:7f:01:8f:35:1a:8f:81:4f:0c:78:c9:52:b0:df: 36:e4:26:7e:90:c0:9f:5a:cc:bf:9b:40:41:76:0a:d1:a2:65: 68:b3:8d:04:1c:55:89:e1:d8:d5:e8:49:29:0d:da:4e:98:cc: 8f:64:23:0b:04:78:4f:49:48:d4:0c:59:0c:81:d0:ad:2c:2e: 87:60:7e:47:a1:9b:37:fc:12:8b:c1:60:0c:04:21:35:be:2e: bb:2f:76:81:7d:47:7c:46:cd:59:39:47:96:95:90:b6:d4:40: 94:bc:bf:74:6a:4b:0e:fe:57:75:23:e9:85:df:f7:a0:85:46: 5a:4a:e8:71:b3:54:b1:6f:83:65:c4:0c:15:88:7f:fc:56:ed: b0:3e:b0:00:7e:a1:17:be:16:0b:0d:15:d9:84:8b:85:cc:d5: 56:9b:03:b0:06:00:2e:bc:bf:68:2c:05:f6:d3:ca:60:68:72: 2b:5e:7c:a2:8c:e1:fb:42:6a:3e:32:04:e0:ca:a1:27:92:7b: d9:78:cb:28:5f:05:11:46:5d:25:a4:b5:14:6d:13:e3:66:7c: 00:bd:12:65:69:08:91:ad:20:1b:3f:d8:18:4f:53:ad:d8:db: 27:af:03:51:57:d6:f8:b6:5a:7b:ac:d8:cf:ee:7b:49:aa:d9: 1b:d6:d0:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZqY06xLkc5QWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MmVkZmY0NzMtZGNmMy00OWU0LTk4MjItYjlmMWQ3YjE2NGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzYtKFjDVrm3zxOyPXPslJuIrBNnHQ6lM+Oz 2XiZ1v96As09RFyjADy1wbGneJifndU2RXHXfAzF4p4waI8DF8A2TyWMFPcO3Mll P5f+hMnMZGq+4a2N53Bk6z39EPKS592e5KVLuEzuZ2S+ctK2g+wRuEgj+fOZfv2S nIb0VSaASPHayjvFcGDeWDj5S2MLVCknlI6N6lAOoZpFSmcH6vAuisb7OhdVQegS sZ58dT3SwPgM+VnXPpDBE5YP5kKgaXA4YV19b04HbZMjWtES/rj3mGqX29yHySOB TYHv9RZ35XP6u5yknvF06uoetGXDXgwz6/tHgC+W6z4MHA+gawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONbqpKvDIN++KOUWxK4/5oGtWKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmE1ZDI3OTItNWJlOC0z YjQ4LTg3OGUtZDI3NmM4YTYyNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+mrpB/AY81Go+BTwx4yVKw3zbkJn6QwJ9azL+bQEF2CtGiZWizjQQc VYnh2NXoSSkN2k6YzI9kIwsEeE9JSNQMWQyB0K0sLodgfkehmzf8EovBYAwEITW+ LrsvdoF9R3xGzVk5R5aVkLbUQJS8v3RqSw7+V3Uj6YXf96CFRlpK6HGzVLFvg2XE DBWIf/xW7bA+sAB+oRe+FgsNFdmEi4XM1VabA7AGAC68v2gsBfbTymBocitefKKM 4ftCaj4yBODKoSeSe9l4yyhfBRFGXSWktRRtE+NmfAC9EmVpCJGtIBs/2BhPU63Y 2yevA1FX1vi2Wnus2M/ue0mq2RvW0Ew= -----END CERTIFICATE-----Generated at Mon Oct 20 02:20:58 2025 by rpki-client