$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1c1a2c6-4898-343a-9acb-5370aba38bbc.roa File: e1c1a2c6-4898-343a-9acb-5370aba38bbc.roa (raw, json) Hash identifier: o7lmY6qIIrHUj6hza39eg8LWFESA+ohES8XgbtpuAic= Subject key identifier: 37:99:3F:58:95:0E:33:26:73:2D:71:52:46:98:AA:E6:04:E9:B0:EA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A7018ABFB9E651A659C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1c1a2c6-4898-343a-9acb-5370aba38bbc.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.37.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a7:01:8a:bf:b9:e6:51:a6:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=8a7b6b3e-097d-4754-98d0-d735c1f58a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:91:e0:b6:43:49:cc:85:9d:f4:97:2d:90: e2:b5:54:40:b3:9c:e5:ee:59:4d:0c:8d:ba:ef:2d: c2:c4:68:2b:20:68:6d:01:71:1b:ba:ac:b0:a8:a2: a6:92:05:2b:da:45:51:5b:e5:7d:3c:0c:7f:0c:93: 05:54:58:f4:9d:e2:7d:dd:78:33:e3:0d:5a:29:c5: c0:14:08:ed:f4:17:c8:14:2b:02:17:b3:d0:59:54: ef:8d:4e:e2:c3:e2:b6:a0:92:da:98:4d:08:e2:e3: a5:4e:68:db:84:0f:4b:da:04:a2:31:d3:77:c5:dc: d7:91:24:89:a5:28:08:76:67:a8:da:9c:0a:0c:56: 7c:92:cc:08:21:02:eb:f5:52:dd:66:09:d0:f4:8d: 98:40:5f:6f:b5:93:39:ea:92:8d:87:48:8d:bb:99: ad:cc:25:b5:38:65:34:f3:ce:24:8d:a8:ba:62:0f: 40:17:16:17:da:3c:7e:26:0d:13:d5:c1:31:8a:72: f6:61:22:2e:2d:47:09:1a:ac:37:34:8b:08:45:33: 1a:9a:55:d3:f1:32:0c:9b:4d:6a:56:41:26:67:c0: 4d:36:4c:4c:18:e4:9c:18:51:e4:af:cf:b4:a5:fb: f6:d1:bf:03:79:31:45:ee:91:87:1f:24:90:3f:9e: d1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:99:3F:58:95:0E:33:26:73:2D:71:52:46:98:AA:E6:04:E9:B0:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e1c1a2c6-4898-343a-9acb-5370aba38bbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e4:c2:27:8d:78:9a:f6:6b:c1:16:11:2e:af:1f:82:77:63: 7a:26:27:5a:56:ac:93:27:01:7b:73:6c:93:86:0b:85:ef:72: 8e:57:c6:35:ad:01:83:35:28:95:da:99:97:d5:3e:04:85:01: 9f:9c:cc:c6:eb:35:8b:c1:92:84:c9:93:59:36:67:0d:62:93: 73:4e:2e:95:e6:9c:ae:9a:a4:15:de:96:b8:fd:11:82:66:56: 19:6e:d7:55:ed:a9:4f:8d:9c:85:51:47:0c:99:c3:ac:ba:b1: d9:b8:29:4e:87:9a:c6:59:e7:0f:38:1c:6e:75:d7:67:9a:6e: 58:04:60:ca:c2:02:71:89:a1:5b:45:87:32:0d:74:ed:b3:e4: dc:e3:7b:b3:07:64:18:42:72:73:03:8a:2b:fc:f6:ac:ba:73: 9a:13:a1:5d:08:67:2c:4d:70:e5:c9:f3:2d:81:c3:7c:f5:e8: c7:be:69:6f:d8:cd:ba:df:5e:7e:ca:71:42:4d:4f:e7:cb:3d: d2:8b:97:72:77:80:a7:67:49:8e:80:21:7d:55:35:34:ff:c5: 73:61:d9:37:37:b8:21:db:58:ef:75:f8:9e:f1:42:cd:72:a7: 4d:14:bd:17:d3:13:c5:2f:41:ee:70:6c:c6:10:61:7a:b4:e1: c6:71:13:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0acBir+55lGmWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OGE3YjZiM2UtMDk3ZC00NzU0LTk4ZDAtZDczNWMxZjU4YTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfqR4LZDScyFnfSXLZDitVRAs5zl7llNDI26 7y3CxGgrIGhtAXEbuqywqKKmkgUr2kVRW+V9PAx/DJMFVFj0neJ93Xgz4w1aKcXA FAjt9BfIFCsCF7PQWVTvjU7iw+K2oJLamE0I4uOlTmjbhA9L2gSiMdN3xdzXkSSJ pSgIdmeo2pwKDFZ8kswIIQLr9VLdZgnQ9I2YQF9vtZM56pKNh0iNu5mtzCW1OGU0 884kjai6Yg9AFxYX2jx+Jg0T1cExinL2YSIuLUcJGqw3NIsIRTMamlXT8TIMm01q VkEmZ8BNNkxMGOScGFHkr8+0pfv20b8DeTFF7pGHHySQP57RAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeZP1iVDjMmcy1xUkaYquYE6bDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTFjMWEyYzYtNDg5OC0z NDNhLTlhY2ItNTM3MGFiYTM4YmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDkwieNeJr2a8EWES6vH4J3Y3omJ1pWrJMnAXtzbJOGC4Xvco5XxjWt AYM1KJXamZfVPgSFAZ+czMbrNYvBkoTJk1k2Zw1ik3NOLpXmnK6apBXelrj9EYJm Vhlu11XtqU+NnIVRRwyZw6y6sdm4KU6HmsZZ5w84HG5112eablgEYMrCAnGJoVtF hzINdO2z5Nzje7MHZBhCcnMDiiv89qy6c5oToV0IZyxNcOXJ8y2Bw3z16Me+aW/Y zbrfXn7KcUJNT+fLPdKLl3J3gKdnSY6AIX1VNTT/xXNh2Tc3uCHbWO91+J7xQs1y p00UvRfTE8UvQe5wbMYQYXq04cZxE6c= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:59 2025 by rpki-client