$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa File: cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa (raw, json) Hash identifier: vR0VNzjOO/ukf9bsFEBtTpDfm8UjwCdzo6DSZByDWVI= Subject key identifier: 84:8C:C8:D6:5E:F1:48:6D:B4:74:BC:9C:2F:22:96:11:67:11:41:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A0B55A99876D8A01AC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.40.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a0:b5:5a:99:87:6d:8a:01:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=3e626ad9-bba5-4c60-a431-b6f858d11dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:82:40:c7:8d:2e:f3:f7:9b:73:06:2e:65: b0:64:79:d2:03:c9:50:97:3f:d4:ca:4b:03:d2:4d: 54:e7:e6:fc:61:70:ad:d4:0e:4c:8d:76:c9:07:e6: 4d:c7:4a:15:f3:9c:60:8c:b2:c4:fb:bd:57:95:b2: 80:67:64:06:1b:8c:4c:5d:ad:1b:42:89:48:7e:f1: 86:da:36:c3:35:05:4b:92:f2:51:0a:7f:55:6e:de: 60:95:21:04:63:0e:f9:c9:c2:a3:72:c2:a3:d6:48: 77:93:5b:5d:96:4e:e4:ce:6f:49:1e:28:fe:a5:f0: 1f:79:2c:06:76:c1:7d:8b:2d:ad:4b:3e:da:09:4b: 6b:e0:eb:0e:4a:58:b0:12:38:b3:e3:a7:37:18:f6: b6:d1:9e:42:18:2f:2e:9c:eb:6a:c9:2a:f5:56:72: 18:85:92:c4:1d:d3:d5:f8:d0:1a:a5:04:f2:36:89: 1d:de:3b:3f:b8:1c:6e:15:ec:35:8c:dd:03:57:ed: 0d:87:6a:b4:58:e1:be:cb:54:e5:41:a2:d6:0a:ca: ec:ec:b1:ad:df:ea:f2:6f:9a:cc:15:b7:c1:e2:a3: 8e:04:f9:44:7d:be:bf:03:b5:0d:5e:a2:6d:7a:5a: cb:43:e6:05:32:ab:47:fb:2c:38:db:96:1f:d0:47: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8C:C8:D6:5E:F1:48:6D:B4:74:BC:9C:2F:22:96:11:67:11:41:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdf15d60-0b5a-3141-8327-10fb3211fe7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e7:f7:66:9a:2f:e0:33:03:58:66:4d:35:40:2e:de:f2:59: 21:6b:d7:66:9a:88:bd:20:46:c4:cf:2a:e8:c8:a7:87:f1:ca: 18:c8:d2:a6:3f:5c:b1:d6:c5:01:bb:67:b7:26:31:7a:4f:2b: 4f:9d:e4:a7:f5:95:29:5b:91:52:12:65:e8:9d:ac:5c:5e:02: 1f:f0:a6:9f:7c:7c:37:eb:40:a5:1c:64:a3:95:cb:55:8a:36: c4:41:71:c7:76:fa:0e:9a:53:65:51:bd:32:3b:00:a3:54:e9: 62:11:bf:40:c2:19:ac:15:67:f9:5d:a9:4e:89:62:99:bf:25: e3:b0:af:1a:c8:99:83:b3:09:57:a6:e7:4d:ae:da:5d:1d:e9: f3:02:43:db:cd:df:f3:02:13:52:5d:b2:eb:4a:c8:f5:62:a5: 06:00:61:9c:89:d9:24:d2:c8:6c:b5:54:a7:a7:eb:a0:58:ae: dd:07:24:d6:87:f4:c2:c6:80:87:33:c4:33:c6:54:b1:8b:7f: 5b:dc:87:e7:25:5e:33:8c:39:0b:c8:6e:f3:38:eb:a4:a6:46: 77:41:84:48:b6:07:21:e3:df:12:6b:48:5f:a6:b2:9d:f3:21: f7:53:68:00:14:91:77:48:7b:13:b4:20:96:30:8d:c6:23:e4: 4a:f3:51:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aC1WpmHbYoBrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk M2U2MjZhZDktYmJhNS00YzYwLWE0MzEtYjZmODU4ZDExZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+mCQMeNLvP3m3MGLmWwZHnSA8lQlz/UyksD 0k1U5+b8YXCt1A5MjXbJB+ZNx0oV85xgjLLE+71XlbKAZ2QGG4xMXa0bQolIfvGG 2jbDNQVLkvJRCn9Vbt5glSEEYw75ycKjcsKj1kh3k1tdlk7kzm9JHij+pfAfeSwG dsF9iy2tSz7aCUtr4OsOSliwEjiz46c3GPa20Z5CGC8unOtqySr1VnIYhZLEHdPV +NAapQTyNokd3js/uBxuFew1jN0DV+0Nh2q0WOG+y1TlQaLWCsrs7LGt3+ryb5rM FbfB4qOOBPlEfb6/A7UNXqJtelrLQ+YFMqtH+yw425Yf0Ee+zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISMyNZe8UhttHS8nC8ilhFnEUHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RmMTVkNjAtMGI1YS0z MTQxLTgzMjctMTBmYjMyMTFmZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPn92aaL+AzA1hmTTVALt7yWSFr12aaiL0gRsTPKujIp4fxyhjI0qY/ XLHWxQG7Z7cmMXpPK0+d5Kf1lSlbkVISZeidrFxeAh/wpp98fDfrQKUcZKOVy1WK NsRBccd2+g6aU2VRvTI7AKNU6WIRv0DCGawVZ/ldqU6JYpm/JeOwrxrImYOzCVem 502u2l0d6fMCQ9vN3/MCE1JdsutKyPVipQYAYZyJ2STSyGy1VKen66BYrt0HJNaH 9MLGgIczxDPGVLGLf1vch+clXjOMOQvIbvM466SmRndBhEi2ByHj3xJrSF+msp3z IfdTaAAUkXdIexO0IJYwjcYj5ErzUS8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:36 2025 by rpki-client