$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba010ff-0a7f-326f-97d5-21e5c928f2db.roa File: fba010ff-0a7f-326f-97d5-21e5c928f2db.roa (raw, json) Hash identifier: NukU9qJ/fxAn3W+kUHufq8yAeAAYJiMkFyuOsDxlrRU= Subject key identifier: C5:32:61:AF:23:BF:68:E7:36:C3:04:0E:EF:9C:E1:B7:30:AD:9D:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B23318C1C776108D5E1EFA2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba010ff-0a7f-326f-97d5-21e5c928f2db.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.50.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:8c:1c:77:61:08:d5:e1:ef:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=8c0109b8-4c89-4146-8b29-00ffd20b03ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:68:f5:2d:6f:67:2d:6b:c0:18:e0:90:36: ab:3a:1d:d7:eb:fe:07:31:b4:76:f4:e1:36:66:ba: 64:e4:ec:b6:6f:7a:96:3f:11:dd:97:f9:9f:df:15: 24:04:ab:b1:52:d8:05:d3:a7:2b:89:70:c4:b7:e0: 21:7f:38:e1:f6:bc:07:d5:f2:2d:91:0f:a1:c5:14: ec:96:b5:ac:30:74:de:9d:aa:25:92:c5:b8:14:58: 70:a6:8b:f3:6f:cd:11:7b:5f:ce:28:8b:74:21:51: 1b:5f:5d:59:12:d8:0d:13:d7:9d:d0:a4:2c:df:f9: cf:e7:4b:15:e8:21:c7:36:fc:98:11:8e:70:91:12: 1f:60:2e:f6:c9:4d:1d:cb:12:01:57:b7:87:24:c4: ee:34:51:3e:d9:1e:15:40:0c:0a:87:1d:00:ba:f9: aa:3b:2b:50:cb:ff:ed:26:e8:0c:ce:72:9c:58:ab: 29:0b:80:d0:f1:51:cc:8d:3a:b1:54:9d:bc:41:dc: 3e:c8:63:34:80:66:67:20:81:fc:e1:95:a4:7e:d1: 57:f5:ab:c5:96:57:6e:83:72:82:81:50:48:34:5f: 9e:b1:31:26:c5:38:e0:62:a6:6a:a3:e0:a2:69:00: 0f:fe:cc:fa:aa:7c:74:fe:2a:92:c4:e6:69:13:89: 2c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:61:AF:23:BF:68:E7:36:C3:04:0E:EF:9C:E1:B7:30:AD:9D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba010ff-0a7f-326f-97d5-21e5c928f2db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:0b:e5:ae:f4:37:d0:c1:f3:61:24:81:f0:e2:09:c3:6f:2c: 8b:0c:2f:a4:ba:e2:f3:c3:9d:1e:5d:d5:0c:0b:fa:09:9d:c1: ff:13:fb:b8:25:d1:de:6d:df:f3:66:f4:0c:d1:f9:84:81:db: 24:0b:cf:8e:cf:34:6c:77:a3:35:b3:ee:7b:fc:6a:0d:c6:fb: c5:e4:00:60:9f:95:9d:b8:8c:7b:2a:55:9e:af:1c:5f:a6:53: 2e:df:b6:6d:1e:0f:84:c3:fe:f4:d5:69:64:08:6f:99:5f:32: 09:08:10:61:62:84:d0:c8:5f:29:af:41:b8:5b:61:db:35:8e: 14:69:a8:d2:ce:7e:61:25:cc:4c:04:1f:86:32:79:56:30:d5: c3:57:0b:df:3e:1a:82:f8:40:aa:d2:cc:b8:24:3f:21:f0:f5: 51:b1:1a:ac:ac:7a:74:66:ac:4d:c6:aa:13:e5:ca:5a:b1:b8: 07:c5:8f:97:03:8a:66:ee:50:dc:61:6c:28:c2:e1:4d:39:ff: 62:08:da:27:90:3f:91:ac:f6:79:60:58:4b:8f:1c:a9:87:2f: e3:36:b0:54:47:4d:99:0e:6d:f2:7b:f1:4b:f9:0a:81:97:2a: 70:ce:6b:2b:88:2a:f8:55:1d:cb:97:cc:0f:2d:31:72:00:bb: 2a:9c:43:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYwcd2EI1eHvosAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk OGMwMTA5YjgtNGM4OS00MTQ2LThiMjktMDBmZmQyMGIwM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7xo9S1vZy1rwBjgkDarOh3X6/4HMbR29OE2 Zrpk5Oy2b3qWPxHdl/mf3xUkBKuxUtgF06criXDEt+Ahfzjh9rwH1fItkQ+hxRTs lrWsMHTenaolksW4FFhwpovzb80Re1/OKIt0IVEbX11ZEtgNE9ed0KQs3/nP50sV 6CHHNvyYEY5wkRIfYC72yU0dyxIBV7eHJMTuNFE+2R4VQAwKhx0AuvmqOytQy//t JugMznKcWKspC4DQ8VHMjTqxVJ28Qdw+yGM0gGZnIIH84ZWkftFX9avFlldug3KC gVBINF+esTEmxTjgYqZqo+CiaQAP/sz6qnx0/iqSxOZpE4ksYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUyYa8jv2jnNsMEDu+c4bcwrZ2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmJhMDEwZmYtMGE3Zi0z MjZmLTk3ZDUtMjFlNWM5MjhmMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzKEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIL5a70N9DB82EkgfDiCcNvLIsML6S64vPDnR5d1QwL+gmdwf8T+7gl 0d5t3/Nm9AzR+YSB2yQLz47PNGx3ozWz7nv8ag3G+8XkAGCflZ24jHsqVZ6vHF+m Uy7ftm0eD4TD/vTVaWQIb5lfMgkIEGFihNDIXymvQbhbYds1jhRpqNLOfmElzEwE H4YyeVYw1cNXC98+GoL4QKrSzLgkPyHw9VGxGqysenRmrE3GqhPlylqxuAfFj5cD imbuUNxhbCjC4U05/2II2ieQP5Gs9nlgWEuPHKmHL+M2sFRHTZkObfJ78Uv5CoGX KnDOayuIKvhVHcuXzA8tMXIAuyqcQ+k= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:38 2025 by rpki-client