$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1451a0b-c6c1-3387-9270-8e60924c397a.roa File: f1451a0b-c6c1-3387-9270-8e60924c397a.roa (raw, json) Hash identifier: RTz6GsneoTEI5x6Wsphf72vOrIrJ0s/9yg8bu3o5nU8= Subject key identifier: 3B:19:8D:2A:6F:20:7C:2D:CB:56:12:AA:27:CC:8B:EB:C0:10:C7:29 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B16A15C144EC1E81DF3D5ECC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1451a0b-c6c1-3387-9270-8e60924c397a.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.58.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5c:14:4e:c1:e8:1d:f3:d5:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=5ff168e3-aa89-4e62-bc7c-d93e5dde2d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:72:4a:17:bd:fe:78:8a:71:e7:61:1f:24:d3: cb:9b:5b:29:49:8d:ca:1a:43:a0:d8:a3:74:57:e7: a2:60:93:25:4e:a6:90:bf:f3:67:12:7c:8c:2f:15: d9:37:4d:88:37:74:bf:98:67:ed:98:1d:b8:72:3f: 61:8a:bb:6b:53:cc:98:5f:4d:c2:c6:a7:5b:05:5d: 82:7e:31:5e:f8:db:ae:76:1d:95:01:9a:91:be:8d: 5f:46:4a:4b:84:d4:ce:2b:27:38:32:0a:26:99:34: aa:a2:ed:96:12:b4:ad:a5:85:06:e9:96:11:d7:7d: a7:60:6f:3e:37:3f:92:a4:93:5e:cf:73:9a:be:b2: 85:75:db:0e:26:0c:f5:ca:ed:1c:49:32:22:3b:d0: 40:3e:13:34:60:32:0e:7f:6c:47:76:f0:41:ee:0a: 98:92:76:bf:fc:4c:94:78:b7:33:c9:3c:8d:f1:b0: bf:e5:10:e2:ab:28:b6:01:32:19:1d:58:dd:cc:ac: 1b:6f:e5:3f:3e:60:32:59:15:cd:f8:a0:84:b7:2a: 8f:c9:ef:11:8f:e8:9d:eb:77:f1:0a:32:40:b3:f3: fd:09:04:19:5d:19:ac:62:a0:12:4d:cf:a3:fd:44: 4b:cb:a4:b6:92:84:1e:f8:3d:aa:2b:59:92:e7:af: ce:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:19:8D:2A:6F:20:7C:2D:CB:56:12:AA:27:CC:8B:EB:C0:10:C7:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f1451a0b-c6c1-3387-9270-8e60924c397a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6b:1c:5b:49:da:2d:c3:5d:e6:79:7b:20:fe:53:78:60:df: 98:de:ea:37:eb:d0:a2:a6:a4:a0:e1:c2:28:cd:4f:ce:ed:79: 82:c7:b5:78:cb:3c:f8:69:67:72:06:c6:b2:fd:09:a0:11:d0: ed:65:4f:5d:ea:7f:95:8b:d8:6b:9c:77:56:dd:53:ec:da:da: 0a:12:a6:81:f8:94:c3:4b:c4:48:5a:51:a7:62:c9:2d:15:44: b0:f0:28:f7:2a:89:a4:13:fc:38:87:c0:db:09:1c:65:db:1c: c8:73:31:4e:4d:37:66:87:7e:97:9b:e1:94:67:83:a1:99:f4: 4e:74:6a:cf:75:f0:ca:0c:46:68:16:29:26:cd:2e:83:ec:a6: 44:38:84:ca:ed:51:c8:5c:71:42:a2:4a:ee:b4:91:17:d9:bc: 3c:d3:75:2e:0f:cb:3d:1b:a4:15:7f:39:f1:e1:5a:12:e4:91: 86:92:33:ec:18:c8:5d:36:7a:d7:7a:88:0a:6b:2e:0f:58:13: 21:f8:07:86:1c:99:81:18:8d:41:4e:61:53:79:f8:50:0a:de: d0:1f:62:22:e6:ab:e6:05:a3:bd:02:5a:9f:36:c5:d3:61:38: c1:90:68:23:08:4c:2f:18:f9:c5:47:90:9f:c1:73:32:25:a5: f6:24:73:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVwUTsHoHfPV7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk NWZmMTY4ZTMtYWE4OS00ZTYyLWJjN2MtZDkzZTVkZGUyZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinJKF73+eIpx52EfJNPLm1spSY3KGkOg2KN0 V+eiYJMlTqaQv/NnEnyMLxXZN02IN3S/mGftmB24cj9hirtrU8yYX03CxqdbBV2C fjFe+Nuudh2VAZqRvo1fRkpLhNTOKyc4MgommTSqou2WErStpYUG6ZYR132nYG8+ Nz+SpJNez3OavrKFddsOJgz1yu0cSTIiO9BAPhM0YDIOf2xHdvBB7gqYkna//EyU eLczyTyN8bC/5RDiqyi2ATIZHVjdzKwbb+U/PmAyWRXN+KCEtyqPye8Rj+id63fx CjJAs/P9CQQZXRmsYqASTc+j/URLy6S2koQe+D2qK1mS56/ODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsZjSpvIHwty1YSqifMi+vAEMcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjE0NTFhMGItYzZjMS0z Mzg3LTkyNzAtOGU2MDkyNGMzOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzpsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJrHFtJ2i3DXeZ5eyD+U3hg35je6jfr0KKmpKDhwijNT87teYLHtXjL PPhpZ3IGxrL9CaAR0O1lT13qf5WL2Gucd1bdU+za2goSpoH4lMNLxEhaUadiyS0V RLDwKPcqiaQT/DiHwNsJHGXbHMhzMU5NN2aHfpeb4ZRng6GZ9E50as918MoMRmgW KSbNLoPspkQ4hMrtUchccUKiSu60kRfZvDzTdS4Pyz0bpBV/OfHhWhLkkYaSM+wY yF02etd6iAprLg9YEyH4B4YcmYEYjUFOYVN5+FAK3tAfYiLmq+YFo70CWp82xdNh OMGQaCMITC8Y+cVHkJ/BczIlpfYkc8g= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:47 2025 by rpki-client