$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c669475e-5886-388b-9ba5-aa7039a4cb15.roa File: c669475e-5886-388b-9ba5-aa7039a4cb15.roa (raw, json) Hash identifier: fZZU0zTD2nr93jQdjne12qwh7JvxAWHhIz8wnbsTRjQ= Subject key identifier: 28:6E:5D:FB:9E:04:2E:26:D5:0A:5E:AF:FB:E0:2B:4F:71:C3:64:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19D986D5F8C451F3B2A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c669475e-5886-388b-9ba5-aa7039a4cb15.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.39.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9d:98:6d:5f:8c:45:1f:3b:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=3b234b46-540d-4292-95d9-56de15169052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:be:22:88:ed:54:5c:af:9a:a7:5b:22:e1:68: 79:59:a7:a5:23:e6:ec:f2:a5:ad:33:0e:65:21:bf: 23:63:8d:89:8a:0b:75:40:f5:51:be:75:d5:08:0f: b8:74:b7:ed:ef:df:d4:eb:a6:cc:4e:65:d7:e9:9a: aa:c3:0f:2a:42:ff:a0:ca:60:32:58:06:b3:79:b0: 2e:e9:81:cb:00:d5:fd:27:4b:89:ab:f0:dd:f3:72: 2b:d2:7b:7b:d5:5b:5a:e7:0b:26:e5:3c:f6:38:47: 6f:30:bc:3e:41:9b:ad:35:0d:88:b5:92:e2:0d:cd: 56:92:19:90:ab:35:fc:20:ba:77:64:0e:ed:bc:9c: 26:a6:57:49:e6:5e:cb:cd:90:bc:e3:0a:db:ef:be: 6b:75:40:98:e3:1c:9f:60:a8:51:fd:84:76:93:02: ce:fe:d5:99:ca:cf:ed:33:e6:1c:d6:ae:eb:e2:9b: 97:ef:eb:00:e0:48:f1:24:b3:94:ae:e2:c5:92:ae: 02:63:fa:16:5e:08:1f:54:a0:6a:15:69:cc:51:8b: f7:7e:5f:f6:46:b5:43:8a:ad:9f:58:94:e6:9d:37: 8f:6b:16:91:89:c3:d4:ea:66:23:2d:9a:cc:71:70: b4:26:dd:17:10:37:91:83:69:51:36:21:2d:c2:ad: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6E:5D:FB:9E:04:2E:26:D5:0A:5E:AF:FB:E0:2B:4F:71:C3:64:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c669475e-5886-388b-9ba5-aa7039a4cb15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5a:91:13:08:93:c9:65:7f:bc:a0:16:d9:b2:6a:c3:b6:c2: fc:f3:75:f1:eb:dc:b2:66:25:72:08:23:67:28:18:c2:1c:0e: 58:90:0b:db:47:b6:aa:e0:98:95:c6:b9:0d:a9:21:de:4b:f3: 9a:ef:8c:6c:eb:fc:82:c9:df:74:5e:e2:a1:40:d6:d1:cb:09: 7e:1d:b1:cd:ed:58:af:0b:28:9b:91:36:58:38:ed:53:3d:ef: 94:55:d2:5d:78:79:35:16:9b:68:1a:b3:8d:54:ac:4a:04:9a: 50:72:0d:bb:a7:07:03:33:0a:4a:a7:8b:da:48:04:f7:22:d1: d7:8c:ad:73:e8:99:88:9c:ae:6c:a3:d0:b5:de:3b:98:1e:a7: a8:79:a3:3f:c0:9e:48:78:ee:cd:bd:8a:aa:40:0d:04:10:02: 4b:a7:a3:95:4f:d9:a5:61:e9:10:3f:9a:72:ba:35:71:7e:77: 85:b4:3a:22:85:e7:61:70:7d:a8:13:5b:74:d2:8e:8e:71:55: 77:94:5a:da:db:d3:87:e3:e5:ad:3f:dc:db:9a:6f:64:33:6c: fd:7d:0e:e2:b5:e5:65:85:aa:d4:2b:b9:ac:c4:88:eb:ac:65: d4:29:51:2d:af:3c:e8:82:23:da:d8:c7:2c:09:95:98:59:f5: 38:e6:dc:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Z2YbV+MRR87KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk M2IyMzRiNDYtNTQwZC00MjkyLTk1ZDktNTZkZTE1MTY5MDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L4iiO1UXK+ap1si4Wh5WaelI+bs8qWtMw5l Ib8jY42Jigt1QPVRvnXVCA+4dLft79/U66bMTmXX6Zqqww8qQv+gymAyWAazebAu 6YHLANX9J0uJq/Dd83Ir0nt71Vta5wsm5Tz2OEdvMLw+QZutNQ2ItZLiDc1WkhmQ qzX8ILp3ZA7tvJwmpldJ5l7LzZC84wrb775rdUCY4xyfYKhR/YR2kwLO/tWZys/t M+Yc1q7r4puX7+sA4EjxJLOUruLFkq4CY/oWXggfVKBqFWnMUYv3fl/2RrVDiq2f WJTmnTePaxaRicPU6mYjLZrMcXC0Jt0XEDeRg2lRNiEtwq2mLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChuXfueBC4m1Qper/vgK09xw2RWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzY2OTQ3NWUtNTg4Ni0z ODhiLTliYTUtYWE3MDM5YTRjYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFycuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChakRMIk8llf7ygFtmyasO2wvzzdfHr3LJmJXIII2coGMIcDliQC9tH tqrgmJXGuQ2pId5L85rvjGzr/ILJ33Re4qFA1tHLCX4dsc3tWK8LKJuRNlg47VM9 75RV0l14eTUWm2gas41UrEoEmlByDbunBwMzCkqni9pIBPci0deMrXPomYicrmyj 0LXeO5gep6h5oz/Ankh47s29iqpADQQQAkuno5VP2aVh6RA/mnK6NXF+d4W0OiKF 52FwfagTW3TSjo5xVXeUWtrb04fj5a0/3Nuab2QzbP19DuK15WWFqtQruazEiOus ZdQpUS2vPOiCI9rYxywJlZhZ9Tjm3CU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:27:36 2025 by rpki-client