$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7885e25-feb1-3a2f-966f-5b007db92f39.roa File: e7885e25-feb1-3a2f-966f-5b007db92f39.roa (raw, json) Hash identifier: cq8KGazQrq9svHHTnpq3lD1xhoMHvMwanQIkQN0TF94= Subject key identifier: EA:8D:E9:5B:88:EA:A5:D5:88:53:A1:F1:A8:CB:9C:58:D8:D9:14:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715CE8B96EE214AEDDF4C400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7885e25-feb1-3a2f-966f-5b007db92f39.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16625 IP address blocks: 23.35.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e8:b9:6e:e2:14:ae:dd:f4:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=06d9865d-2f33-4715-a999-ea0241b72bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9b:a0:dc:19:55:54:69:99:2d:78:84:65:77: 7d:36:21:a3:4c:bf:cf:c7:0a:bc:3a:21:76:98:4c: e8:5e:cf:9a:db:17:b6:85:b8:dd:85:1a:aa:ef:80: ba:c4:67:19:52:63:17:dc:6e:9c:2f:cb:14:f2:b1: 22:85:9f:70:1d:3d:cb:0d:c0:8e:e2:cf:f0:ba:0b: 3c:b7:37:ea:22:cc:68:be:70:61:24:9b:a5:ad:f8: 82:fe:bc:0d:10:71:f8:f5:46:55:f4:c1:15:87:9e: e4:d6:85:a3:8a:21:3d:00:7a:88:1f:dc:d7:15:6a: 39:6f:3f:85:d4:77:0e:73:51:1a:71:7e:11:71:3e: a1:3c:4d:76:84:10:26:68:19:07:26:82:7f:fb:5e: 29:ea:79:0d:50:04:e8:24:6f:9f:91:a8:40:86:e7: 4e:b5:ac:02:79:b6:36:be:1b:ec:d0:37:c7:28:a3: f5:2d:e9:3b:79:6a:79:d6:2a:8f:55:37:67:00:83: 0d:8d:4e:f9:a5:2c:bf:9d:92:59:b6:e5:21:b2:a0: 05:4a:15:b3:98:94:d8:48:82:dd:ca:e3:f1:52:64: 52:c7:2f:7f:00:9a:3c:a0:df:11:e0:1a:5f:3e:69: 71:e0:dc:a7:28:07:48:2e:49:81:50:be:d1:69:50: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8D:E9:5B:88:EA:A5:D5:88:53:A1:F1:A8:CB:9C:58:D8:D9:14:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7885e25-feb1-3a2f-966f-5b007db92f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:55:78:b9:c8:a1:30:39:46:03:ef:b9:8e:2a:87:27:e1:3f: 6a:68:61:3f:7a:76:c8:d7:16:53:59:bd:61:9e:5a:40:12:ad: 4a:45:8e:5f:ad:f3:9e:2d:77:bc:6c:10:39:a4:eb:c9:a3:ed: d0:95:ea:13:4a:47:ba:a5:0e:53:63:a7:c0:20:05:f3:01:41: 3f:01:20:e8:e2:6a:6f:34:9d:2a:2b:be:44:b8:30:0e:99:1c: 5d:4d:13:e8:4b:42:f6:c7:e9:74:14:b0:88:7b:13:d9:7c:90: 1a:fa:c2:36:6b:cf:bc:33:1b:43:56:a3:0c:2a:15:b9:0a:e2: 43:e4:3e:c4:b3:e3:98:27:a7:6e:ec:95:f6:83:d0:f5:aa:ba: e4:b4:fb:e6:98:bf:53:aa:da:e5:dd:43:80:bd:3f:0a:d9:a5: 72:e8:4a:59:93:db:8a:27:e6:7f:b3:40:b9:86:8b:7d:1e:ff: 75:90:c0:d7:f8:0a:cb:36:cc:5b:c6:e9:ce:e5:72:5d:f5:d7: 58:c5:d3:76:96:89:d8:a1:b5:f7:c5:d0:e4:36:16:36:ff:2e: 83:c3:9f:06:9b:bb:63:a5:01:33:50:ad:a5:23:7c:f6:13:01: f2:c0:53:91:c0:bd:13:d4:37:97:0a:ec:1b:05:61:80:d4:23: 00:f4:9f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXOi5buIUrt30xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MDZkOTg2NWQtMmYzMy00NzE1LWE5OTktZWEwMjQxYjcyYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZug3BlVVGmZLXiEZXd9NiGjTL/Pxwq8OiF2 mEzoXs+a2xe2hbjdhRqq74C6xGcZUmMX3G6cL8sU8rEihZ9wHT3LDcCO4s/wugs8 tzfqIsxovnBhJJulrfiC/rwNEHH49UZV9MEVh57k1oWjiiE9AHqIH9zXFWo5bz+F 1HcOc1EacX4RcT6hPE12hBAmaBkHJoJ/+14p6nkNUAToJG+fkahAhudOtawCebY2 vhvs0DfHKKP1Lek7eWp51iqPVTdnAIMNjU75pSy/nZJZtuUhsqAFShWzmJTYSILd yuPxUmRSxy9/AJo8oN8R4BpfPmlx4NynKAdILkmBUL7RaVCnVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqN6VuI6qXViFOh8ajLnFjY2RSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTc4ODVlMjUtZmViMS0z YTJmLTk2NmYtNWIwMDdkYjkyZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNVeLnIoTA5RgPvuY4qhyfhP2poYT96dsjXFlNZvWGeWkASrUpFjl+t 854td7xsEDmk68mj7dCV6hNKR7qlDlNjp8AgBfMBQT8BIOjiam80nSorvkS4MA6Z HF1NE+hLQvbH6XQUsIh7E9l8kBr6wjZrz7wzG0NWowwqFbkK4kPkPsSz45gnp27s lfaD0PWquuS0++aYv1Oq2uXdQ4C9PwrZpXLoSlmT24on5n+zQLmGi30e/3WQwNf4 Css2zFvG6c7lcl3111jF03aWidihtffF0OQ2Fjb/LoPDnwabu2OlATNQraUjfPYT AfLAU5HAvRPUN5cK7BsFYYDUIwD0nyM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:36:13 2025 by rpki-client