$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd394ec8-8f5e-3714-b337-3f5489eee42d.roa File: cd394ec8-8f5e-3714-b337-3f5489eee42d.roa (raw, json) Hash identifier: TZTmQl87QwxSk2q1FuaDoHklxgCtRDo2PR6KEvYM/v0= Subject key identifier: 84:84:1D:81:EE:C2:C3:9C:99:E6:82:9D:A5:8C:1B:B1:8A:05:5D:21 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C1BDAE4CA59DB5C92A780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd394ec8-8f5e-3714-b337-3f5489eee42d.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.43.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1b:da:e4:ca:59:db:5c:92:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=f1e32a7a-a182-42b2-9e82-aa981786eb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:46:56:fb:94:67:c7:08:86:e6:55:42:84:1d: e2:09:05:c1:32:0f:39:c3:bc:14:54:a4:17:45:15: 64:5d:4a:d6:9a:db:bb:42:d6:15:c2:1b:2d:12:ac: db:75:d2:77:e9:e5:bc:b9:7e:12:56:dc:41:ed:fd: c5:a9:d4:2a:51:7c:a3:9d:7c:a6:9c:08:4b:15:b6: 67:03:8a:b4:ff:3e:24:52:b9:0c:2b:cf:3d:ca:f2: da:7f:4b:47:7a:b7:f8:72:58:0b:a8:26:29:eb:e5: 7c:52:c8:26:93:ad:b9:dd:0c:5f:cf:62:c5:43:d5: 06:71:68:f5:45:22:32:8b:e5:ea:b0:e0:a7:b6:8a: 99:02:d4:fd:69:c8:9b:ef:af:9c:8f:58:41:4b:4b: bf:23:01:ff:55:83:5e:a2:99:b6:a2:c0:e1:4d:38: 0e:58:29:0c:c7:39:6f:ad:99:55:04:f4:e6:1c:c5: 87:83:66:ad:b1:64:dc:74:29:30:a7:aa:ed:69:44: cd:d5:39:cd:08:3f:43:1c:ab:0f:c8:88:5a:c3:8c: 53:50:62:db:1d:8b:39:4f:f1:f5:a3:c9:50:ff:6e: 82:4c:ce:32:11:65:b1:94:95:b2:14:23:fd:e6:4e: a0:10:be:f4:58:35:23:8f:93:39:6b:36:5b:ce:48: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:84:1D:81:EE:C2:C3:9C:99:E6:82:9D:A5:8C:1B:B1:8A:05:5D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd394ec8-8f5e-3714-b337-3f5489eee42d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9d:8a:f9:a4:f5:44:9e:ac:f6:ba:c1:07:25:58:b0:ce:d4: 50:51:4e:31:0c:77:5f:84:f6:a2:4d:a7:5f:b7:eb:d4:c1:d0: 8f:12:3f:e5:41:1d:ad:da:8c:41:46:2a:5a:0a:49:cf:50:7b: a1:0c:6c:ff:81:10:1c:27:52:fc:42:c9:90:44:f9:5f:a8:fc: d9:e7:de:28:bf:27:c8:b6:24:96:3d:5d:0b:cc:37:c3:e9:4f: 6f:d4:90:89:6f:10:64:e2:ea:1d:09:43:54:74:09:f9:34:f1: 8a:ee:27:44:43:29:88:bb:4d:21:bf:1a:47:56:aa:70:c7:1c: 87:1c:57:85:1e:df:7b:63:fb:c4:95:e1:e6:df:5c:40:1a:c3: 35:f2:c2:93:60:cb:a6:39:af:5f:da:85:c1:ee:5b:d8:eb:e9: fd:d2:08:bc:04:ea:11:a0:23:20:d7:ac:2a:08:b9:e5:67:b4: 45:ab:71:a2:5b:53:b2:4d:bd:29:69:c1:02:bb:d6:9a:c6:e0: 02:c7:05:95:44:64:44:f3:4b:11:20:e0:89:b3:74:b5:8a:a8: 49:fe:3d:36:ff:45:c1:e6:8b:b2:2e:34:f6:c5:41:c3:7d:70: 2d:a0:0f:d9:67:2d:cf:fe:ca:93:7b:39:72:7d:f3:7f:89:b5: 41:de:cf:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBva5MpZ21ySp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjFlMzJhN2EtYTE4Mi00MmIyLTllODItYWE5ODE3ODZlYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEZW+5RnxwiG5lVChB3iCQXBMg85w7wUVKQX RRVkXUrWmtu7QtYVwhstEqzbddJ36eW8uX4SVtxB7f3FqdQqUXyjnXymnAhLFbZn A4q0/z4kUrkMK889yvLaf0tHerf4clgLqCYp6+V8Usgmk6253Qxfz2LFQ9UGcWj1 RSIyi+XqsOCntoqZAtT9acib76+cj1hBS0u/IwH/VYNeopm2osDhTTgOWCkMxzlv rZlVBPTmHMWHg2atsWTcdCkwp6rtaUTN1TnNCD9DHKsPyIhaw4xTUGLbHYs5T/H1 o8lQ/26CTM4yEWWxlJWyFCP95k6gEL70WDUjj5M5azZbzkhg5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISEHYHuwsOcmeaCnaWMG7GKBV0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2QzOTRlYzgtOGY1ZS0z NzE0LWIzMzctM2Y1NDg5ZWVlNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFytgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqdivmk9USerPa6wQclWLDO1FBRTjEMd1+E9qJNp1+369TB0I8SP+VB Ha3ajEFGKloKSc9Qe6EMbP+BEBwnUvxCyZBE+V+o/Nnn3ii/J8i2JJY9XQvMN8Pp T2/UkIlvEGTi6h0JQ1R0Cfk08YruJ0RDKYi7TSG/GkdWqnDHHIccV4Ue33tj+8SV 4ebfXEAawzXywpNgy6Y5r1/ahcHuW9jr6f3SCLwE6hGgIyDXrCoIueVntEWrcaJb U7JNvSlpwQK71prG4ALHBZVEZETzSxEg4ImzdLWKqEn+PTb/RcHmi7IuNPbFQcN9 cC2gD9lnLc/+ypN7OXJ983+JtUHez5w= -----END CERTIFICATE-----Generated at Mon Oct 20 02:32:26 2025 by rpki-client