$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac15f70-7c2b-355d-8385-fa1e9e40d95c.roa File: 0ac15f70-7c2b-355d-8385-fa1e9e40d95c.roa (raw, json) Hash identifier: kkKKS+hKrtzqmHdt/wl1vgs2rAbuywU3sY4vCneplpY= Subject key identifier: EA:12:30:F4:B5:68:6E:7A:E1:7C:4D:5B:AD:F0:DF:F2:E8:5D:4D:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A225F3FD3D3EAD174680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac15f70-7c2b-355d-8385-fa1e9e40d95c.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.41.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a2:25:f3:fd:3d:3e:ad:17:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=eb1450ad-efdb-4b15-8afe-9f2e6b44aa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bf:42:7d:ec:87:58:91:b3:e0:a5:06:c8:7c: 52:15:63:c3:b7:78:5d:5b:32:81:62:dc:86:b7:cf: af:70:57:5e:de:ac:7f:de:4d:5d:4e:fb:28:b9:39: ba:a2:a9:28:e8:ed:d3:1e:b6:cb:93:27:19:bd:15: 84:9f:c9:51:c7:a7:5d:34:38:3a:64:f0:c1:1d:23: c1:a3:0d:d2:a0:33:7f:d3:c4:12:c4:ff:33:00:6c: cf:60:66:91:e3:55:fa:23:a0:cc:10:24:99:41:54: d5:24:9c:c7:97:76:4c:7c:6e:5e:fb:0a:5b:e9:ba: 28:ac:dc:46:3f:82:08:0a:73:dd:54:18:b4:f3:5c: e0:d5:38:f8:c3:cc:61:2c:cf:83:dd:4a:c6:71:e9: 0c:e9:ce:09:cd:a4:20:6d:7d:4d:c7:09:62:ce:3c: f2:65:25:d2:6c:65:60:20:9e:df:1f:ba:2f:c1:87: e2:89:dc:92:bc:8b:10:b6:66:d9:59:6c:bd:7c:30: 75:17:ad:06:f4:cb:1c:65:ea:fe:18:6d:81:df:a1: 8b:6d:d7:d4:17:44:2c:c0:bf:0e:5d:37:16:5b:be: 6d:8c:92:77:1f:95:b3:f7:69:6c:22:ff:56:bb:fa: 7e:a4:fe:d9:95:e9:ee:b3:f7:26:ef:08:bb:e8:ff: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:12:30:F4:B5:68:6E:7A:E1:7C:4D:5B:AD:F0:DF:F2:E8:5D:4D:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ac15f70-7c2b-355d-8385-fa1e9e40d95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e5:fc:5d:81:6f:a4:41:35:49:af:c6:b8:b3:99:00:34:47: 62:56:dd:7e:9b:e0:90:cd:6f:56:ca:8e:52:d3:33:b0:35:d7: e8:e8:b0:6c:5c:1f:6e:e7:19:9a:13:1a:96:94:e7:cc:86:5c: ca:bd:98:10:04:0a:3d:fe:cf:8b:75:eb:8b:04:58:05:90:4b: 25:36:47:09:1f:b6:43:f9:19:c2:d8:c6:26:e4:ae:b4:70:7f: 5d:40:34:ad:9f:7d:5b:fc:29:1b:68:f1:b6:4f:62:fd:d2:a0: 12:6a:c0:f4:c6:ec:7a:33:d6:04:64:d4:f0:86:fe:73:bc:bc: 7f:1d:12:df:36:18:ad:01:ac:2c:6d:cd:bf:66:6c:b7:b8:e4: 15:19:0d:74:f1:a8:e1:88:bc:ad:5a:6f:aa:77:04:4b:bb:5c: a7:0c:e6:59:ce:ec:b6:be:d4:cc:ba:4f:a7:a2:9c:df:db:ef: 4e:f6:d7:a1:40:58:12:ad:19:03:6b:b6:23:f6:cc:6e:56:ed: c3:ad:2e:49:62:8e:69:b2:3f:04:47:00:c6:0e:72:15:c5:6c: 2f:ab:2e:79:1e:a0:5b:15:40:c0:2b:27:0e:59:a2:a8:cb:e1: 31:9c:4c:16:13:ef:df:21:be:e3:29:72:67:a1:0d:86:e8:6a: b0:c8:02:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aIl8/09Pq0XRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZWIxNDUwYWQtZWZkYi00YjE1LThhZmUtOWYyZTZiNDRhYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL9CfeyHWJGz4KUGyHxSFWPDt3hdWzKBYtyG t8+vcFde3qx/3k1dTvsouTm6oqko6O3THrbLkycZvRWEn8lRx6ddNDg6ZPDBHSPB ow3SoDN/08QSxP8zAGzPYGaR41X6I6DMECSZQVTVJJzHl3ZMfG5e+wpb6boorNxG P4IICnPdVBi081zg1Tj4w8xhLM+D3UrGcekM6c4JzaQgbX1NxwlizjzyZSXSbGVg IJ7fH7ovwYfiidySvIsQtmbZWWy9fDB1F60G9MscZer+GG2B36GLbdfUF0QswL8O XTcWW75tjJJ3H5Wz92lsIv9Wu/p+pP7Zlenus/cm7wi76P9mkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoSMPS1aG564XxNW63w3/LoXU1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFjMTVmNzAtN2MyYi0z NTVkLTgzODUtZmExZTllNDBkOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPl/F2Bb6RBNUmvxrizmQA0R2JW3X6b4JDNb1bKjlLTM7A11+josGxc H27nGZoTGpaU58yGXMq9mBAECj3+z4t164sEWAWQSyU2RwkftkP5GcLYxibkrrRw f11ANK2ffVv8KRto8bZPYv3SoBJqwPTG7Hoz1gRk1PCG/nO8vH8dEt82GK0BrCxt zb9mbLe45BUZDXTxqOGIvK1ab6p3BEu7XKcM5lnO7La+1My6T6einN/b707216FA WBKtGQNrtiP2zG5W7cOtLklijmmyPwRHAMYOchXFbC+rLnkeoFsVQMArJw5ZoqjL 4TGcTBYT798hvuMpcmehDYboarDIAoA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:10 2025 by rpki-client