$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d66846e4-265e-394b-a856-4363361380be.roa File: d66846e4-265e-394b-a856-4363361380be.roa (raw, json) Hash identifier: 6iXeMt3sZbDhbJYnK36S8iDcaHvJL5QBWUp+CvHfM5k= Subject key identifier: 62:F4:2B:C8:97:31:58:D4:D5:94:B6:9E:E5:AB:B5:F7:D5:C2:5E:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2496DAC129BE86FA923A6D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d66846e4-265e-394b-a856-4363361380be.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 32787 IP address blocks: 23.38.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:da:c1:29:be:86:fa:92:3a:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=47071bc7-9e63-4650-ad8f-31175b8858d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4d:05:83:c6:86:52:f5:da:3b:b5:53:d2:97: d3:ec:f8:ad:be:10:3d:b5:f1:a1:0a:cd:21:25:b9: c1:75:35:78:bf:23:02:6f:f3:e7:0b:6e:de:a6:1c: ad:a4:3a:a3:12:cd:3d:95:02:0e:54:9c:3c:85:02: 87:ee:1b:af:52:94:3c:d3:db:f2:ab:61:c7:66:90: 94:dc:c3:fa:c1:2c:fa:5f:d5:58:08:e1:b2:f6:40: 9e:29:9d:d1:c2:93:0c:a6:fc:e7:c3:ee:85:59:83: b9:b5:35:63:9f:b5:ef:9d:11:c0:14:cc:3b:e0:d9: 3f:68:2a:e7:41:82:df:2c:b2:fa:b4:92:96:df:c6: d2:06:03:f2:1b:0a:ec:42:78:63:0f:b3:ab:81:75: 96:b3:ed:f6:26:18:62:30:d3:eb:ee:3f:77:00:35: 65:cd:af:ae:51:f9:2f:0c:2c:0d:93:15:e1:ea:43: 46:44:1a:a5:c7:e9:3c:9c:58:59:0d:2e:2a:5d:2c: 38:73:8c:76:28:6f:9b:4b:a1:4e:9c:84:24:94:dc: dd:04:42:85:5a:eb:38:47:57:4a:0b:0d:cf:aa:e4: b3:81:01:8b:55:ea:18:d9:27:68:5e:88:83:1d:6f: 76:87:bb:5b:7e:63:bb:59:fb:cf:4d:85:0c:36:96: fa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F4:2B:C8:97:31:58:D4:D5:94:B6:9E:E5:AB:B5:F7:D5:C2:5E:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d66846e4-265e-394b-a856-4363361380be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e2:e7:a6:81:79:b3:1b:65:bd:28:d9:e2:e8:c7:df:18:ef: 3b:66:6e:c9:ab:94:55:3d:c0:22:0b:99:4d:28:70:17:d7:a4: f9:ca:19:8e:1b:5c:62:aa:bd:6a:0f:21:36:55:8f:2e:be:0c: e2:09:a9:7a:53:0f:2a:e1:76:bd:34:c0:36:89:b6:68:af:00: 50:5d:21:db:fd:5d:d1:23:c1:59:18:32:88:c2:d9:2f:95:98: f0:8b:9c:ad:06:12:f1:a2:41:0b:30:f3:34:fd:41:7a:81:21: fa:20:15:52:e1:f0:41:6a:93:c1:04:9e:93:50:e6:a1:cd:71: b8:c3:ea:76:80:94:f1:d6:19:56:9f:2d:b8:1f:4d:ec:b2:b2: be:0e:dc:10:16:84:63:57:ed:df:1a:f8:db:e5:10:c4:79:04: ce:ea:7b:7b:7d:48:ea:c3:5d:00:cc:f0:ca:29:53:19:f8:71: b9:08:d7:ee:9d:c7:37:72:3e:cf:8e:17:c9:0e:4a:54:3a:5f: f7:3a:75:be:bb:26:61:1b:ab:6c:27:4a:4d:b9:3f:58:18:2f: cb:db:f8:39:f6:f1:57:a6:d2:7c:07:04:30:ee:d2:76:75:cf: 04:64:4d:50:a0:2f:d5:95:ff:a8:73:13:6f:f4:af:d0:ba:2c: 36:ac:24:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltrBKb6G+pI6bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NDcwNzFiYzctOWU2My00NjUwLWFkOGYtMzExNzViODg1OGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA400Fg8aGUvXaO7VT0pfT7PitvhA9tfGhCs0h JbnBdTV4vyMCb/PnC27ephytpDqjEs09lQIOVJw8hQKH7huvUpQ809vyq2HHZpCU 3MP6wSz6X9VYCOGy9kCeKZ3RwpMMpvznw+6FWYO5tTVjn7XvnRHAFMw74Nk/aCrn QYLfLLL6tJKW38bSBgPyGwrsQnhjD7OrgXWWs+32JhhiMNPr7j93ADVlza+uUfkv DCwNkxXh6kNGRBqlx+k8nFhZDS4qXSw4c4x2KG+bS6FOnIQklNzdBEKFWus4R1dK Cw3PquSzgQGLVeoY2SdoXoiDHW92h7tbfmO7WfvPTYUMNpb62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL0K8iXMVjU1ZS2nuWrtffVwl62MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY2ODQ2ZTQtMjY1ZS0z OTRiLWE4NTYtNDM2MzM2MTM4MGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFybwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILi56aBebMbZb0o2eLox98Y7ztmbsmrlFU9wCILmU0ocBfXpPnKGY4b XGKqvWoPITZVjy6+DOIJqXpTDyrhdr00wDaJtmivAFBdIdv9XdEjwVkYMojC2S+V mPCLnK0GEvGiQQsw8zT9QXqBIfogFVLh8EFqk8EEnpNQ5qHNcbjD6naAlPHWGVaf LbgfTeyysr4O3BAWhGNX7d8a+NvlEMR5BM7qe3t9SOrDXQDM8MopUxn4cbkI1+6d xzdyPs+OF8kOSlQ6X/c6db67JmEbq2wnSk25P1gYL8vb+Dn28Vem0nwHBDDu0nZ1 zwRkTVCgL9WV/6hzE2/0r9C6LDasJLY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:32:32 2025 by rpki-client