$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ba76b-d545-36f9-8eea-aa690d2a7f20.roa File: c07ba76b-d545-36f9-8eea-aa690d2a7f20.roa (raw, json) Hash identifier: DwT1E/BmFFpXSd5FBUyCWZjA6V20BgKK9MQ0RzbnYW4= Subject key identifier: 17:65:8A:9E:94:3F:5A:E1:EF:D6:BB:61:E3:00:1E:BB:DB:85:E7:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B434C4C2384A21E8D4E976D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ba76b-d545-36f9-8eea-aa690d2a7f20.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.56.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4c:23:84:a2:1e:8d:4e:97:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=be1964a1-06dc-4459-9b80-c667ec6c0f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:b8:56:e3:e8:a1:9f:8e:2a:aa:b8:14:40: e4:b9:20:14:bb:60:a0:9c:06:a0:46:57:fe:b0:71: 90:b0:42:23:0e:93:a8:19:ec:0f:ae:ea:a2:45:7d: 02:3e:2d:b0:f5:b7:c9:e4:e7:11:bd:d4:66:5c:fd: 09:be:57:a9:ed:8d:86:4d:91:5e:96:a3:52:88:52: 42:d3:0e:09:85:19:6c:aa:61:59:d9:04:60:de:89: 31:31:87:b4:9a:33:0c:a6:0f:83:9e:50:e2:d3:e9: 64:2f:e7:a8:85:0c:c8:92:3d:cf:fe:99:5d:27:92: 16:a6:6d:83:be:f9:23:86:4e:06:cc:a1:06:55:7b: cd:5a:c1:f9:a1:22:d5:ff:f5:d2:ef:06:cb:e0:e3: af:e0:ca:d1:3c:dc:4d:56:a6:53:60:28:39:19:5a: e9:2c:27:6c:bc:16:b2:cf:61:fd:d3:01:81:49:d6: 26:64:e6:85:0e:24:1f:88:f4:e1:7e:e2:74:99:74: 7d:c3:04:eb:3f:b1:38:d2:6d:e6:5e:44:fc:13:f2: 52:3a:22:a4:ed:e8:77:57:57:02:4a:77:d6:11:89: 13:d5:a1:b0:9c:65:f4:f6:e4:99:6f:c1:5f:fd:af: 44:c7:9f:15:02:fd:f8:7b:92:e7:4b:0c:ab:73:27: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:65:8A:9E:94:3F:5A:E1:EF:D6:BB:61:E3:00:1E:BB:DB:85:E7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ba76b-d545-36f9-8eea-aa690d2a7f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:86:2a:46:e8:1e:c6:b6:f0:b3:06:d1:87:cf:87:e2:5f:95: d2:48:05:2b:bc:96:58:2c:a0:25:11:f0:08:61:92:b8:0b:b0: 6b:0b:c4:17:da:eb:d3:9b:41:40:e6:b0:b3:63:b0:19:b6:e2: 25:31:ab:62:ef:72:52:0e:4c:ca:90:ad:a2:9f:2a:9c:c0:98: 81:3f:ed:2a:0b:e4:58:ed:3d:0c:1c:1c:ee:12:e5:d4:e9:93: 98:5a:b3:45:21:78:4e:5b:cb:97:b3:bc:08:28:43:89:c7:1f: be:ce:4d:2e:df:fa:25:54:d3:e9:6e:bf:93:ce:9d:cb:0e:03: 38:4f:8b:99:fe:f4:db:22:b5:dd:38:80:6c:91:ba:5c:b3:b9: d6:48:60:0a:49:2e:2c:1e:66:db:bb:d7:73:86:fa:bb:bd:69: 9f:47:c4:86:35:a3:71:1d:7a:d6:5c:b9:36:1c:ca:38:07:1a: 91:e2:b9:cd:65:af:55:a4:0e:47:7e:59:86:43:40:bb:7a:78: 4f:d2:22:f8:c2:7e:66:d1:12:b1:4a:c0:19:0d:d6:12:3c:19: 29:b2:97:45:59:7d:f8:c9:67:5f:91:87:d1:47:af:75:66:e7: 2c:e8:a2:1b:5a:71:31:61:da:2a:eb:27:45:24:64:f5:7f:a2: 73:54:84:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTEwjhKIejU6XbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YmUxOTY0YTEtMDZkYy00NDU5LTliODAtYzY2N2VjNmMwZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13G4VuPooZ+OKqq4FEDkuSAUu2CgnAagRlf+ sHGQsEIjDpOoGewPruqiRX0CPi2w9bfJ5OcRvdRmXP0Jvlep7Y2GTZFelqNSiFJC 0w4JhRlsqmFZ2QRg3okxMYe0mjMMpg+DnlDi0+lkL+eohQzIkj3P/pldJ5IWpm2D vvkjhk4GzKEGVXvNWsH5oSLV//XS7wbL4OOv4MrRPNxNVqZTYCg5GVrpLCdsvBay z2H90wGBSdYmZOaFDiQfiPThfuJ0mXR9wwTrP7E40m3mXkT8E/JSOiKk7eh3V1cC SnfWEYkT1aGwnGX09uSZb8Ff/a9Ex58VAv34e5LnSwyrcyesbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdlip6UP1rh79a7YeMAHrvbhectMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzA3YmE3NmItZDU0NS0z NmY5LThlZWEtYWE2OTBkMmE3ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzirMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKGKkboHsa28LMG0YfPh+JfldJIBSu8llgsoCUR8AhhkrgLsGsLxBfa 69ObQUDmsLNjsBm24iUxq2LvclIOTMqQraKfKpzAmIE/7SoL5FjtPQwcHO4S5dTp k5has0UheE5by5ezvAgoQ4nHH77OTS7f+iVU0+luv5POncsOAzhPi5n+9Nsitd04 gGyRulyzudZIYApJLiweZtu713OG+ru9aZ9HxIY1o3EdetZcuTYcyjgHGpHiuc1l r1WkDkd+WYZDQLt6eE/SIvjCfmbRErFKwBkN1hI8GSmyl0VZffjJZ1+Rh9FHr3Vm 5yzoohtacTFh2irrJ0UkZPV/onNUhFM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:33 2025 by rpki-client