$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7cb9fa4-961b-353f-9441-dcf13999b263.roa File: e7cb9fa4-961b-353f-9441-dcf13999b263.roa (raw, json) Hash identifier: YnQvevpmO2jlzxrq7dfGpqC+bljsr+kIP5NZ0q/0X2I= Subject key identifier: 39:54:D4:53:AD:0B:5E:64:9A:19:92:49:D8:38:FC:8D:AB:81:43:9A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1ABA0EDC127EBDB42BC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7cb9fa4-961b-353f-9441-dcf13999b263.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.40.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:ab:a0:ed:c1:27:eb:db:42:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=4a9e7ac1-d097-4eb6-9b6c-0b89970733ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:07:82:96:d8:52:90:23:b4:f2:27:e6:54:c1: d2:f6:8c:8b:11:48:e1:79:ee:d3:07:f7:26:51:db: c4:22:7b:6e:38:78:56:ce:b1:fe:f8:06:c8:20:1d: f2:3e:c9:ec:a7:d1:5e:ad:8b:78:0e:d4:3c:58:b6: 54:d1:a9:4a:41:be:78:5a:6b:1b:88:24:d3:a6:f6: ee:68:d2:ab:91:68:dc:39:83:e3:ac:40:04:e4:61: 9a:ed:cd:6a:91:ca:e8:0d:b8:21:8d:16:5d:44:eb: 4e:0f:ab:72:e6:eb:22:0d:ab:16:f7:a6:a1:83:65: 16:2c:2c:0e:88:a7:55:18:ee:74:06:14:8a:41:c3: b3:6d:92:38:3a:d8:89:c0:43:cd:2e:81:bc:b9:9b: 5b:aa:a4:48:4e:24:fe:40:6c:79:c1:17:86:f0:4a: df:ca:f7:63:94:37:d9:56:23:e7:6b:c2:6e:87:43: b2:2b:34:0e:e6:0a:a6:63:e7:38:b1:15:f9:00:28: ed:62:f6:e0:64:cf:b4:ee:82:29:5d:0b:48:60:ab: 11:4c:12:5b:68:c3:d6:c6:e9:3e:b6:b5:cd:65:56: 2f:f7:6a:17:4d:6a:90:8d:39:c0:63:62:16:65:78: 26:d0:17:40:68:6b:50:9f:98:92:ee:00:4d:1e:64: 96:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:54:D4:53:AD:0B:5E:64:9A:19:92:49:D8:38:FC:8D:AB:81:43:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7cb9fa4-961b-353f-9441-dcf13999b263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c8:4a:22:47:ce:e1:74:f1:95:cb:5e:de:af:be:c3:cb:60: e5:9b:d7:aa:73:0e:b1:d7:96:9d:eb:44:22:02:83:8b:d8:99: 39:5c:9f:18:10:91:93:5a:ed:9d:d0:8c:3d:28:5d:15:ae:d9: 9a:ae:3c:d8:12:2f:1f:e9:8d:09:9d:ed:89:cd:63:08:6d:5b: fe:5b:8e:52:54:3f:d6:1d:9b:59:e8:45:a5:37:72:8f:10:97: 73:ea:57:06:45:01:a2:5d:0f:e5:2c:f6:05:89:a9:22:f3:97: 31:08:ee:4a:5d:43:69:e1:9f:0b:11:15:d2:9f:65:35:9c:c8: 2d:22:a2:6b:3a:f9:ca:90:08:9f:bd:1c:d2:0d:39:f1:51:60: 47:5b:2b:aa:db:02:1a:3f:18:24:95:ca:c6:10:1b:d0:84:f8: 0d:03:5b:7b:4b:e3:6c:ca:a7:23:11:9e:7d:53:32:c6:e4:a0: fd:04:1b:36:5d:69:b3:32:cf:92:70:66:7f:1d:79:04:fd:60: 2b:1d:7a:2d:2d:8c:5a:18:9c:33:f0:46:45:be:f2:6b:0c:d6: ad:55:ed:84:0e:de:c6:ca:b9:fd:59:48:c7:8d:f4:64:54:84: fe:17:a1:55:dd:86:12:8f:5f:d1:cc:c5:9c:66:21:4b:95:8b: b3:2d:e6:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aug7cEn69tCvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NGE5ZTdhYzEtZDA5Ny00ZWI2LTliNmMtMGI4OTk3MDczM2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQeClthSkCO08ifmVMHS9oyLEUjhee7TB/cm UdvEIntuOHhWzrH++AbIIB3yPsnsp9FerYt4DtQ8WLZU0alKQb54WmsbiCTTpvbu aNKrkWjcOYPjrEAE5GGa7c1qkcroDbghjRZdROtOD6ty5usiDasW96ahg2UWLCwO iKdVGO50BhSKQcOzbZI4OtiJwEPNLoG8uZtbqqRITiT+QGx5wReG8ErfyvdjlDfZ ViPna8Juh0OyKzQO5gqmY+c4sRX5ACjtYvbgZM+07oIpXQtIYKsRTBJbaMPWxuk+ trXNZVYv92oXTWqQjTnAY2IWZXgm0BdAaGtQn5iS7gBNHmSWvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlU1FOtC15kmhmSSdg4/I2rgUOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTdjYjlmYTQtOTYxYi0z NTNmLTk0NDEtZGNmMTM5OTliMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjISiJHzuF08ZXLXt6vvsPLYOWb16pzDrHXlp3rRCICg4vYmTlcnxgQ kZNa7Z3QjD0oXRWu2ZquPNgSLx/pjQmd7YnNYwhtW/5bjlJUP9Ydm1noRaU3co8Q l3PqVwZFAaJdD+Us9gWJqSLzlzEI7kpdQ2nhnwsRFdKfZTWcyC0ioms6+cqQCJ+9 HNINOfFRYEdbK6rbAho/GCSVysYQG9CE+A0DW3tL42zKpyMRnn1TMsbkoP0EGzZd abMyz5JwZn8deQT9YCsdei0tjFoYnDPwRkW+8msM1q1V7YQO3sbKuf1ZSMeN9GRU hP4XoVXdhhKPX9HMxZxmIUuVi7Mt5gs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:21:14 2025 by rpki-client