$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa File: d5ace393-802f-3ffb-a49c-237f78a65c04.roa (raw, json) Hash identifier: sOo+z/TEMd/pH0/FQvgOhBOpqRe1J4Uaq0JDGxkbpgM= Subject key identifier: 4C:FC:5A:37:38:F5:42:94:89:96:52:65:F5:7A:E3:00:B8:47:66:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A3088ACBF5CF1A375700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.42.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a3:08:8a:cb:f5:cf:1a:37:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=80d61d14-7ca4-4211-8a81-871ec6a6f339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:c7:5d:fa:1d:0a:95:51:a8:2d:7c:8a:fe: a0:72:ca:90:82:eb:9b:64:c2:d4:bb:e0:c0:91:ad: c3:1f:a7:d7:43:52:1f:8d:b3:06:d6:09:49:48:40: 05:fa:02:7d:40:65:77:70:74:c2:f3:d6:dc:82:cf: 1a:96:a4:75:ed:75:74:64:4f:b9:24:b3:34:22:83: 25:b3:65:60:21:fe:92:19:1e:69:eb:17:26:db:55: 91:b8:e3:54:dd:36:27:62:05:d5:79:6c:28:f0:dd: e2:a8:85:30:94:b4:d3:d7:43:04:41:fc:d1:8d:25: 34:8f:9f:12:2c:a1:c5:39:9a:09:96:46:5f:e3:1c: 22:07:1b:02:71:fe:0a:1b:8f:1e:f8:83:4c:d6:4e: 26:77:da:11:d3:dc:ca:f8:a0:0e:bb:7b:f3:99:e0: 25:c9:35:fe:80:87:29:5c:2e:bc:ac:e9:51:ba:48: a5:85:ef:de:b5:f0:b0:fa:b6:fc:22:9f:53:d8:c6: bf:9b:79:7e:c7:3d:cc:44:8d:04:15:b2:ff:87:a5: 10:7c:1d:97:b2:02:ba:2f:a1:16:ab:b1:de:be:38: 8e:d5:06:c2:78:ec:a7:8e:92:bc:a1:87:8d:99:a9: f4:cc:10:b4:1d:35:59:7f:c1:81:36:c1:b8:f1:5a: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FC:5A:37:38:F5:42:94:89:96:52:65:F5:7A:E3:00:B8:47:66:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5ace393-802f-3ffb-a49c-237f78a65c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:7f:78:2e:44:94:30:d7:7c:22:fe:0d:83:4a:1f:33:b0:fd: ff:9b:3e:28:b0:1f:b2:42:cf:7e:f4:53:91:7c:e8:22:23:7b: 7c:89:f4:20:7d:88:c7:f6:e5:56:a1:fe:9d:1e:28:44:f0:34: d6:1e:3c:0d:f3:f7:22:7e:04:66:5d:f3:7b:af:a9:6a:6e:4f: 20:08:52:4a:4a:51:92:d9:5e:1e:9e:a8:a2:fb:1a:5f:bd:af: 2b:92:15:8e:29:d6:12:2a:95:3d:5c:9a:ac:9e:e3:d1:14:3d: 42:4a:79:d8:5e:0f:bb:b0:63:df:3d:30:46:9e:67:53:53:a1: 2a:80:a5:d2:e0:9f:d8:b0:ad:14:ef:a0:c1:38:42:46:74:37: 71:c7:2d:85:08:96:be:b3:fe:89:19:36:32:b2:fb:d3:81:dd: a2:3c:d2:ae:88:d0:c3:5e:89:b4:5c:32:04:90:33:8d:c9:ec: 76:69:46:70:c1:7f:c2:68:15:bb:e5:ab:6e:d1:6d:ad:72:cc: 9c:d2:53:e9:ae:f9:ec:1f:93:1b:a5:99:e6:90:d4:f2:52:c2: d1:61:80:80:b6:61:14:a9:7c:10:d8:a8:ef:bb:23:54:cf:e2: bb:8a:d1:a0:e8:a2:ee:c6:2e:07:05:b2:17:e1:31:ab:01:c2: 3b:12:63:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aMIisv1zxo3VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODBkNjFkMTQtN2NhNC00MjExLThhODEtODcxZWM2YTZmMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVPHXfodCpVRqC18iv6gcsqQguubZMLUu+DA ka3DH6fXQ1IfjbMG1glJSEAF+gJ9QGV3cHTC89bcgs8alqR17XV0ZE+5JLM0IoMl s2VgIf6SGR5p6xcm21WRuONU3TYnYgXVeWwo8N3iqIUwlLTT10MEQfzRjSU0j58S LKHFOZoJlkZf4xwiBxsCcf4KG48e+INM1k4md9oR09zK+KAOu3vzmeAlyTX+gIcp XC68rOlRukilhe/etfCw+rb8Ip9T2Ma/m3l+xz3MRI0EFbL/h6UQfB2XsgK6L6EW q7HevjiO1QbCeOynjpK8oYeNman0zBC0HTVZf8GBNsG48Vqo3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz8Wjc49UKUiZZSZfV64wC4R2bVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDVhY2UzOTMtODAyZi0z ZmZiLWE0OWMtMjM3Zjc4YTY1YzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF/eC5ElDDXfCL+DYNKHzOw/f+bPiiwH7JCz370U5F86CIje3yJ9CB9 iMf25Vah/p0eKETwNNYePA3z9yJ+BGZd83uvqWpuTyAIUkpKUZLZXh6eqKL7Gl+9 ryuSFY4p1hIqlT1cmqye49EUPUJKedheD7uwY989MEaeZ1NToSqApdLgn9iwrRTv oME4QkZ0N3HHLYUIlr6z/okZNjKy+9OB3aI80q6I0MNeibRcMgSQM43J7HZpRnDB f8JoFbvlq27Rba1yzJzSU+mu+ewfkxulmeaQ1PJSwtFhgIC2YRSpfBDYqO+7I1TP 4ruK0aDoou7GLgcFshfhMasBwjsSY4g= -----END CERTIFICATE-----Generated at Mon Oct 20 07:21:15 2025 by rpki-client