$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbfb25a6-a96f-3533-ad75-b244d1f162e3.roa File: cbfb25a6-a96f-3533-ad75-b244d1f162e3.roa (raw, json) Hash identifier: 1nbwwwm7c9J/+JzBcmQMciNU0lLQ1pusPmZn4tLnQvA= Subject key identifier: D5:8D:97:B1:04:6C:5E:62:C5:8D:A0:BE:E3:53:66:2E:82:D4:EF:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2A2C4BB1C91ACC07BF7B3E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbfb25a6-a96f-3533-ad75-b244d1f162e3.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 20940 IP address blocks: 23.39.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:4b:b1:c9:1a:cc:07:bf:7b:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=6706d346-396e-4282-bf11-e100f230a94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:07:b1:5e:ef:e0:5e:d3:5d:45:d3:53:64:46: e7:52:b2:3c:50:48:38:11:35:2b:38:fb:95:79:c7: 5e:e2:69:46:f3:f3:9d:c4:df:1a:22:fe:67:f5:ef: ba:4f:2b:0b:49:4e:7d:6a:39:5b:3c:73:ab:a0:02: 86:da:5e:89:9f:5a:cb:c5:6b:4e:06:a8:50:8b:5e: 23:85:c1:6c:d7:5d:f3:7f:52:c0:75:f0:ca:85:e6: fc:9b:ef:d7:37:30:a5:fc:47:51:4b:af:8e:5d:d4: 53:a1:9d:ff:7c:7a:eb:0d:e3:cf:bc:f8:5c:ec:4d: 47:96:f6:3b:49:a3:4f:bc:1c:97:3c:0f:4a:cb:44: f4:23:56:7a:df:a3:9f:23:c4:ee:c2:4f:bd:f4:b4: db:cd:d4:09:69:3e:fa:a5:00:91:ac:79:88:45:fb: 04:36:48:b8:c9:a5:41:bd:25:b4:15:3b:25:cc:57: 92:7c:77:c1:a9:a2:23:89:c1:1d:84:a2:f1:e1:af: e0:01:49:16:cf:ab:6d:b9:66:95:a7:8f:fc:a1:11: 9b:e5:ab:33:f4:f1:36:56:aa:8f:42:58:15:8c:b3: c7:1e:1c:64:4e:5b:92:11:a6:a9:14:ca:8f:eb:1b: c7:f7:b0:c7:8e:74:b9:b7:ee:f2:b6:2e:f4:09:be: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8D:97:B1:04:6C:5E:62:C5:8D:A0:BE:E3:53:66:2E:82:D4:EF:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cbfb25a6-a96f-3533-ad75-b244d1f162e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fd:67:1c:a8:03:21:c9:1d:f1:df:7a:1e:3c:c0:2c:b7:0c: dd:9e:e4:bf:dd:2a:17:50:2e:f3:8b:57:14:05:4e:1d:ba:d1: 58:c7:f4:89:f8:9a:39:5a:82:e3:ed:56:b4:e2:37:bb:20:04: 4e:be:f4:f6:2d:ed:32:f5:83:6c:dd:99:ca:fa:94:c1:3d:44: 54:66:0e:5c:ef:31:76:db:ec:18:9f:7d:d6:4e:20:90:e9:a7: 51:1a:d5:43:83:22:31:de:f8:d2:be:47:05:5d:1e:bf:8c:0e: 7b:e7:01:02:48:39:dc:df:4b:0c:7f:05:9b:c0:51:da:cd:30: 62:60:ac:04:cd:f7:22:33:26:f4:89:55:a8:c7:d7:47:40:a6: 1a:cd:80:a4:42:70:18:06:77:d3:da:04:dd:23:ff:4e:0d:93: 74:5a:83:4c:8d:d5:ba:01:f5:a1:f7:73:d4:93:60:91:b3:7f: 29:84:5d:d7:91:22:13:cf:c8:3f:6a:09:61:31:4a:77:f5:c5: ae:b0:a7:06:9d:18:b4:83:0a:5e:0d:d3:63:78:ad:98:c3:23: da:f4:e1:47:fb:97:ad:ee:a7:b6:8e:36:ab:05:4e:23:be:3c: f3:22:47:7c:ce:d7:c1:e2:f3:03:76:3a:f8:ca:fc:c1:c8:95: 20:f9:32:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLEuxyRrMB797PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NjcwNmQzNDYtMzk2ZS00MjgyLWJmMTEtZTEwMGYyMzBhOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgexXu/gXtNdRdNTZEbnUrI8UEg4ETUrOPuV ecde4mlG8/OdxN8aIv5n9e+6TysLSU59ajlbPHOroAKG2l6Jn1rLxWtOBqhQi14j hcFs113zf1LAdfDKheb8m+/XNzCl/EdRS6+OXdRToZ3/fHrrDePPvPhc7E1HlvY7 SaNPvByXPA9Ky0T0I1Z636OfI8Tuwk+99LTbzdQJaT76pQCRrHmIRfsENki4yaVB vSW0FTslzFeSfHfBqaIjicEdhKLx4a/gAUkWz6ttuWaVp4/8oRGb5asz9PE2VqqP QlgVjLPHHhxkTluSEaapFMqP6xvH97DHjnS5t+7yti70Cb4xtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWNl7EEbF5ixY2gvuNTZi6C1O+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2JmYjI1YTYtYTk2Zi0z NTMzLWFkNzUtYjI0NGQxZjE2MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyevMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH9ZxyoAyHJHfHfeh48wCy3DN2e5L/dKhdQLvOLVxQFTh260VjH9In4 mjlaguPtVrTiN7sgBE6+9PYt7TL1g2zdmcr6lME9RFRmDlzvMXbb7BiffdZOIJDp p1Ea1UODIjHe+NK+RwVdHr+MDnvnAQJIOdzfSwx/BZvAUdrNMGJgrATN9yIzJvSJ VajH10dAphrNgKRCcBgGd9PaBN0j/04Nk3Rag0yN1boB9aH3c9STYJGzfymEXdeR IhPPyD9qCWExSnf1xa6wpwadGLSDCl4N02N4rZjDI9r04Uf7l63up7aONqsFTiO+ PPMiR3zO18Hi8wN2OvjK/MHIlSD5Mls= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:22 2025 by rpki-client