$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdbfccd7-6ebf-36de-8660-a3ca75e39e83.roa File: fdbfccd7-6ebf-36de-8660-a3ca75e39e83.roa (raw, json) Hash identifier: z41rB03L5ZV1xY8u9ak/OduC6VdrmQhhqiaEjGXD9ZA= Subject key identifier: 40:D5:9E:D2:FD:8F:E2:D7:A4:8B:BA:CD:7C:EC:9C:C7:1A:84:5C:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1AB0109147BC78AA58D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdbfccd7-6ebf-36de-8660-a3ca75e39e83.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.40.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:ab:01:09:14:7b:c7:8a:a5:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=8a94f905-26e3-4bf7-a25c-f0cba0385861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:6e:bc:af:0c:25:bf:9e:1e:32:a9:4a:01: f5:23:17:42:e3:1f:aa:85:23:a2:36:55:d1:2c:12: 88:13:a9:d0:89:a3:ae:8e:a7:8d:ba:d0:2b:a2:0c: 45:c0:ae:d6:b2:e7:0a:6f:33:1c:b6:e0:14:22:83: e7:0b:94:9d:d7:69:1f:31:ab:36:eb:da:13:75:5e: be:8f:d9:a5:9a:48:9e:9f:bf:99:e6:71:23:66:62: 82:14:44:73:4f:72:da:90:5e:b6:fe:b9:76:b6:fe: 66:1a:94:91:31:ab:94:7c:ea:d4:80:36:43:cc:ce: 0b:fe:66:3d:f0:b0:a0:71:1d:bd:1e:0d:b3:e5:15: 4a:52:38:be:ca:ff:50:44:6d:91:18:12:ec:13:11: 8a:8b:dd:5a:68:af:e6:bf:00:e1:1b:7f:14:a3:01: b6:b0:a0:2f:19:ef:53:11:3e:27:5f:40:3c:2a:af: 3f:d6:e1:75:e1:ff:95:18:8f:0c:ca:c7:cb:03:4b: ac:70:9e:57:c2:49:b6:36:84:92:ea:b1:ff:b0:7a: ad:10:f3:c2:a5:71:38:9f:65:6b:28:5e:d8:82:76: a6:fc:90:0f:91:e0:2f:7c:77:77:6b:ed:41:09:c5: ba:1e:bb:4e:f3:9e:3e:25:6e:2a:d0:cd:ff:50:6e: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D5:9E:D2:FD:8F:E2:D7:A4:8B:BA:CD:7C:EC:9C:C7:1A:84:5C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fdbfccd7-6ebf-36de-8660-a3ca75e39e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6b:d9:5b:20:98:6e:e8:90:55:c4:e5:38:9d:9d:8a:a2:34: b3:13:36:14:7e:03:b8:3a:42:34:6e:ee:ca:44:07:04:2e:b9: 94:2c:f9:b8:c6:f6:e5:48:1a:1c:19:34:56:52:be:5d:32:73: 9d:11:86:b7:db:55:5d:c1:27:3c:6e:b2:37:8a:64:62:f6:e8: 41:2b:4f:0c:1a:07:04:b9:2f:df:0c:08:ba:06:96:bd:e5:c8: 14:60:74:33:42:ee:a1:6c:df:8a:22:6a:2e:f6:02:e2:2b:4a: 4a:bb:ad:4f:0f:12:71:e1:3f:fe:26:92:a9:11:a6:79:a1:fa: 82:30:b9:9f:74:3b:9a:4f:0b:5a:84:fd:a2:c9:36:cc:5d:86: 04:a2:ff:ec:dd:ff:13:30:47:53:e9:b1:84:71:17:f2:54:fc: 30:1d:cf:25:62:46:63:f5:b2:ca:24:f1:11:a7:c6:e9:6d:07: d7:7a:97:f6:9b:ba:3f:ee:b7:de:36:0e:37:72:12:7a:4f:7f: 44:ac:77:fb:b4:90:5d:1e:f1:e5:5d:13:a0:6b:ff:16:6a:fc: 49:11:c7:f5:84:81:9b:b6:6f:7c:a9:b2:7d:4a:82:d1:59:b1: 64:45:ac:8b:e2:7e:5e:44:98:49:b8:ea:7e:6c:8b:a7:22:ea: 89:02:44:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0asBCRR7x4qljQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OGE5NGY5MDUtMjZlMy00YmY3LWEyNWMtZjBjYmEwMzg1ODYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd1uvK8MJb+eHjKpSgH1IxdC4x+qhSOiNlXR LBKIE6nQiaOujqeNutArogxFwK7WsucKbzMctuAUIoPnC5Sd12kfMas269oTdV6+ j9mlmkien7+Z5nEjZmKCFERzT3LakF62/rl2tv5mGpSRMauUfOrUgDZDzM4L/mY9 8LCgcR29Hg2z5RVKUji+yv9QRG2RGBLsExGKi91aaK/mvwDhG38UowG2sKAvGe9T ET4nX0A8Kq8/1uF14f+VGI8MysfLA0uscJ5Xwkm2NoSS6rH/sHqtEPPCpXE4n2Vr KF7Ygnam/JAPkeAvfHd3a+1BCcW6HrtO854+JW4q0M3/UG7UHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDVntL9j+LXpIu6zXzsnMcahFxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmRiZmNjZDctNmViZi0z NmRlLTg2NjAtYTNjYTc1ZTM5ZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFr2VsgmG7okFXE5TidnYqiNLMTNhR+A7g6QjRu7spEBwQuuZQs+bjG 9uVIGhwZNFZSvl0yc50RhrfbVV3BJzxusjeKZGL26EErTwwaBwS5L98MCLoGlr3l yBRgdDNC7qFs34oiai72AuIrSkq7rU8PEnHhP/4mkqkRpnmh+oIwuZ90O5pPC1qE /aLJNsxdhgSi/+zd/xMwR1PpsYRxF/JU/DAdzyViRmP1ssok8RGnxultB9d6l/ab uj/ut942DjdyEnpPf0Ssd/u0kF0e8eVdE6Br/xZq/EkRx/WEgZu2b3ypsn1KgtFZ sWRFrIvifl5EmEm46n5si6ci6okCROg= -----END CERTIFICATE-----Generated at Mon Oct 20 17:44:34 2025 by rpki-client