$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb52f043-fe86-3d0e-9421-f30df9f62929.roa File: cb52f043-fe86-3d0e-9421-f30df9f62929.roa (raw, json) Hash identifier: W8t1YZfTxaVvJsydHsNTKxACEku2ZdRtDievG6PzU/A= Subject key identifier: D6:BD:60:65:7D:D0:12:2F:4B:6D:DB:9E:09:85:09:31:81:92:C5:99 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B23318D9BB7E9282637418400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb52f043-fe86-3d0e-9421-f30df9f62929.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.51.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8d:9b:b7:e9:28:26:37:41:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=953fc114-d690-48c1-b69a-97e39c0a1748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:5d:eb:ed:7b:7e:ba:35:ce:14:86:a9:22: 0f:84:07:ac:95:f1:ff:5c:91:b2:bb:56:34:be:40: 6e:fc:96:c3:84:1f:a6:ea:40:2f:1d:db:37:92:c1: f2:8f:c3:6f:e4:9b:e8:a5:09:94:eb:7e:92:81:37: 47:35:69:11:a5:f9:77:96:f2:ca:7c:23:97:73:b7: 51:c5:2a:76:34:a1:ff:66:8b:5b:1a:36:e9:bd:0d: ab:94:4e:5c:40:ff:ab:28:d4:1e:86:4e:f3:ba:aa: 60:ca:3a:2a:2d:02:72:29:80:9c:a2:a2:fb:b4:fc: 40:06:39:7f:6f:fe:84:9e:e5:c9:60:db:a6:4a:11: eb:fe:bb:c1:5f:cc:52:4f:69:43:7b:93:98:ab:39: e5:88:00:c4:59:09:0a:bf:f8:34:44:91:b4:e8:e7: d8:05:c2:f6:64:51:f5:5e:b3:67:7e:f1:df:c1:7d: 7d:6c:ac:df:5c:a9:70:3f:d7:ed:c2:f1:ab:a8:73: 55:9b:71:f3:05:d9:eb:c4:32:68:c5:c9:af:90:4c: ef:03:a7:43:fb:20:72:69:41:35:07:c5:0e:da:83: d2:03:c6:b9:0e:5f:4e:bb:e5:bd:52:69:13:48:57: c1:33:42:88:26:ec:99:fb:b5:38:4d:5c:12:e1:6f: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BD:60:65:7D:D0:12:2F:4B:6D:DB:9E:09:85:09:31:81:92:C5:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb52f043-fe86-3d0e-9421-f30df9f62929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.51.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:75:d2:7d:48:15:4e:71:44:ce:f3:57:e4:e4:e9:3a:02:0a: ad:33:0e:99:24:67:3a:07:c2:c7:44:c9:8b:2a:a6:40:7a:25: c8:b1:08:c0:42:7f:14:92:9d:0c:98:99:90:fb:dc:ac:e1:8f: 18:e6:e7:7e:d4:2b:de:6e:3a:a2:a6:a3:1c:11:49:07:89:ea: 5b:65:5b:1d:7c:6c:73:0b:a1:86:18:b6:88:67:c6:1e:9c:cf: 7c:ea:8a:89:7f:c8:a7:0d:74:bd:a9:f2:34:f0:55:6d:fc:35: 8f:fd:2c:66:06:fc:b6:72:9f:7d:f0:a6:63:37:08:f3:55:78: e8:c1:49:dc:73:67:df:fa:f9:bb:a5:33:07:79:01:d3:b0:5f: 2a:ce:e9:65:1b:54:f8:27:59:6b:ce:7a:7c:4f:0f:f8:4e:db: f8:dd:62:12:c2:7b:41:a0:a5:5b:9f:86:22:72:17:08:aa:4b: 67:4e:9e:ce:d8:da:b3:c1:f6:b5:c6:e9:c4:78:96:34:07:62: ec:71:0c:3c:75:cf:27:86:d3:97:a3:4d:08:07:27:24:96:3e: 4e:8e:6e:62:02:07:a1:d0:ca:66:58:65:81:08:af:13:0d:f0: f8:55:fe:f5:27:3c:cb:85:e4:f6:ac:e2:97:78:98:82:41:4a: f6:b7:6d:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMY2bt+koJjdBhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OTUzZmMxMTQtZDY5MC00OGMxLWI2OWEtOTdlMzljMGExNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo01d6+17fro1zhSGqSIPhAeslfH/XJGyu1Y0 vkBu/JbDhB+m6kAvHds3ksHyj8Nv5JvopQmU636SgTdHNWkRpfl3lvLKfCOXc7dR xSp2NKH/ZotbGjbpvQ2rlE5cQP+rKNQehk7zuqpgyjoqLQJyKYCcoqL7tPxABjl/ b/6EnuXJYNumShHr/rvBX8xST2lDe5OYqznliADEWQkKv/g0RJG06OfYBcL2ZFH1 XrNnfvHfwX19bKzfXKlwP9ftwvGrqHNVm3HzBdnrxDJoxcmvkEzvA6dD+yByaUE1 B8UO2oPSA8a5Dl9Ou+W9UmkTSFfBM0KIJuyZ+7U4TVwS4W+74QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNa9YGV90BIvS23bngmFCTGBksWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2I1MmYwNDMtZmU4Ni0z ZDBlLTk0MjEtZjMwZGY5ZjYyOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl10n1IFU5xRM7zV+Tk6ToCCq0zDpkkZzoHwsdEyYsqpkB6JcixCMBC fxSSnQyYmZD73Kzhjxjm537UK95uOqKmoxwRSQeJ6ltlWx18bHMLoYYYtohnxh6c z3zqiol/yKcNdL2p8jTwVW38NY/9LGYG/LZyn33wpmM3CPNVeOjBSdxzZ9/6+bul Mwd5AdOwXyrO6WUbVPgnWWvOenxPD/hO2/jdYhLCe0GgpVufhiJyFwiqS2dOns7Y 2rPB9rXG6cR4ljQHYuxxDDx1zyeG05ejTQgHJySWPk6ObmICB6HQymZYZYEIrxMN 8PhV/vUnPMuF5Pas4pd4mIJBSva3bUk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:44:34 2025 by rpki-client