$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a295be-4977-390b-8555-de77bcef201b.roa File: c1a295be-4977-390b-8555-de77bcef201b.roa (raw, json) Hash identifier: EHWeU2CjacsTC6ePJDKDrE0YBc3/c6jB63oopmz7oSM= Subject key identifier: 9C:3F:C7:5F:8A:35:DC:3D:EE:C7:32:FF:95:B9:93:8E:A0:31:84:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A29033CBDA0696BE3640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a295be-4977-390b-8555-de77bcef201b.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.42.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a2:90:33:cb:da:06:96:be:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=30931d7e-4743-4743-815c-0699417b3c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:0e:a7:1d:c2:51:70:50:b4:e7:ef:8f:c1: 90:a0:73:65:fb:08:3d:e1:da:34:6d:77:6b:55:07: a3:67:fd:dd:2a:14:f1:8d:8f:4d:02:96:dc:79:50: 6a:6f:20:5a:04:db:3d:e3:e2:d1:ce:05:ca:d9:58: da:a2:4d:53:31:aa:69:91:9f:f4:a7:0f:64:75:50: d4:c6:90:cf:d4:fe:ea:a2:d3:e6:69:40:0e:34:47: 8b:c5:8e:50:c6:7e:77:db:dd:7c:8b:37:dc:31:72: 89:8a:1f:f8:60:55:b6:aa:ac:c5:36:e4:f8:40:ff: 4d:a8:01:56:c0:01:ed:ae:03:7e:17:ea:a0:d6:56: 52:3d:95:4a:b8:43:45:01:a3:e3:8a:f6:97:98:a2: 4d:ff:8a:14:69:11:a7:cd:b4:bd:cc:58:42:40:b7: 0e:13:f7:94:52:ab:76:3d:f3:18:63:83:0d:d6:f2: 86:04:70:0b:4a:e0:c9:42:e3:80:fa:7e:a3:69:2c: e4:20:cd:3f:19:70:8c:1e:64:4a:3d:54:d3:33:11: bc:25:b1:93:2d:96:4f:63:29:1a:ce:e5:19:70:b0: 4c:63:41:02:17:d2:20:ae:29:76:97:9c:6c:c8:3b: b1:93:8f:b8:4a:a8:fc:28:88:05:bf:5f:15:da:58: 79:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3F:C7:5F:8A:35:DC:3D:EE:C7:32:FF:95:B9:93:8E:A0:31:84:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1a295be-4977-390b-8555-de77bcef201b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:9d:13:b2:b2:ce:fa:5a:28:11:b2:97:f1:8a:54:b5:b4:0d: 27:8f:cd:cd:d4:61:20:8c:2b:33:5c:17:1b:aa:42:e2:bd:5b: 69:76:85:8e:ca:af:a6:53:8b:b4:73:d1:c3:b4:84:ca:67:3a: 9b:d3:6c:f7:60:d2:37:aa:ac:df:bb:a6:f2:ef:21:a0:8e:7b: 60:66:c0:0f:45:2f:36:75:99:5a:a7:99:fd:15:bb:ab:83:eb: c9:cd:20:03:b9:2f:e2:10:ca:29:20:85:aa:20:67:4a:ae:9e: b0:c5:4c:05:ca:ea:d3:f7:fa:b5:cb:45:53:23:45:3d:0f:3b: 92:e3:a0:67:df:0f:11:94:d8:47:44:45:1b:87:54:4b:bb:d4: a3:22:10:88:c8:7f:5b:f8:33:0b:0b:04:8b:23:b1:65:d1:e7: b8:20:a3:cd:18:09:7b:e4:f8:21:33:d2:31:d2:74:dd:e8:cb: 6e:2e:2b:6d:22:79:da:67:f8:27:e9:fe:80:2e:16:9e:13:53: a8:9c:e6:d3:3b:b1:67:76:35:69:77:0a:2f:50:0a:e4:41:80: 2a:f5:e1:aa:bb:ef:90:a9:af:42:9a:a2:3a:d6:bf:c3:84:b4: 4b:0a:b9:7e:67:46:89:5d:d9:fe:3f:1d:d7:04:72:63:90:e0: 05:39:c3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aKQM8vaBpa+NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MzA5MzFkN2UtNDc0My00NzQzLTgxNWMtMDY5OTQxN2IzYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNwOpx3CUXBQtOfvj8GQoHNl+wg94do0bXdr VQejZ/3dKhTxjY9NApbceVBqbyBaBNs94+LRzgXK2Vjaok1TMappkZ/0pw9kdVDU xpDP1P7qotPmaUAONEeLxY5Qxn532918izfcMXKJih/4YFW2qqzFNuT4QP9NqAFW wAHtrgN+F+qg1lZSPZVKuENFAaPjivaXmKJN/4oUaRGnzbS9zFhCQLcOE/eUUqt2 PfMYY4MN1vKGBHALSuDJQuOA+n6jaSzkIM0/GXCMHmRKPVTTMxG8JbGTLZZPYyka zuUZcLBMY0ECF9Igril2l5xsyDuxk4+4Sqj8KIgFv18V2lh5FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJw/x1+KNdw97scy/5W5k46gMYQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFhMjk1YmUtNDk3Ny0z OTBiLTg1NTUtZGU3N2JjZWYyMDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFypAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+dE7KyzvpaKBGyl/GKVLW0DSePzc3UYSCMKzNcFxuqQuK9W2l2hY7K r6ZTi7Rz0cO0hMpnOpvTbPdg0jeqrN+7pvLvIaCOe2BmwA9FLzZ1mVqnmf0Vu6uD 68nNIAO5L+IQyikghaogZ0qunrDFTAXK6tP3+rXLRVMjRT0PO5LjoGffDxGU2EdE RRuHVEu71KMiEIjIf1v4MwsLBIsjsWXR57ggo80YCXvk+CEz0jHSdN3oy24uK20i edpn+Cfp/oAuFp4TU6ic5tM7sWd2NWl3Ci9QCuRBgCr14aq775Cpr0KaojrWv8OE tEsKuX5nRold2f4/HdcEcmOQ4AU5w3E= -----END CERTIFICATE-----Generated at Mon Oct 20 02:26:51 2025 by rpki-client