$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e30db5-9ccd-3dcb-b99b-27d893e3a1b4.roa File: 23e30db5-9ccd-3dcb-b99b-27d893e3a1b4.roa (raw, json) Hash identifier: tM4J0PoOuR7tHbtf3K4i//dml4Gp3AF4+JKLi+477ZE= Subject key identifier: AB:13:D6:90:E9:8D:2E:E6:52:5F:6A:80:96:03:78:0D:8A:3B:96:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19B1242D4FF40A1748880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e30db5-9ccd-3dcb-b99b-27d893e3a1b4.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.37.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9b:12:42:d4:ff:40:a1:74:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=0a88a6ca-a395-4111-85d3-4c485a69c04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f4:f2:83:a6:66:45:00:c4:06:0c:1c:2d:82: 3d:b3:6b:a3:fe:9e:aa:52:b3:bd:18:dc:15:2a:18: bd:3d:02:85:a4:f5:d0:75:20:26:43:f1:9e:f0:ca: 75:54:d5:51:ee:c3:25:7d:ab:d1:58:cf:5d:d2:1e: b6:26:e8:24:96:a2:c5:bd:6f:2e:34:2f:96:5d:3e: ce:40:53:f6:83:79:5e:9b:15:6b:cb:ad:7d:b1:63: 8d:33:5a:e1:c4:1a:38:1e:8b:64:20:3e:b8:da:ff: 06:32:f6:fa:49:da:47:22:1c:21:4d:6e:18:e6:5e: 91:4c:9f:fb:a8:45:92:95:ae:10:1e:0e:c1:e9:3e: 80:fe:76:15:39:fe:0c:b4:e6:1c:66:92:75:0b:8d: d2:4b:0c:c6:1e:4f:6e:40:4c:bd:6f:a6:8b:cf:81: fc:7c:5e:b5:4d:c2:8a:a2:52:e2:b7:fa:da:a1:4a: b8:11:53:cc:8f:05:4f:29:1e:83:1c:67:f1:7d:07: 22:69:62:cb:3c:30:4f:33:10:c0:03:7b:7d:bd:52: cf:96:23:dd:49:b2:fb:a2:ee:e3:8f:1d:8e:e7:49: 45:2f:ff:11:c2:30:f2:03:c6:60:76:be:5b:32:b7: 81:3c:d8:fb:b5:5a:a7:d0:ae:d5:8b:5d:bc:b7:32: 22:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:13:D6:90:E9:8D:2E:E6:52:5F:6A:80:96:03:78:0D:8A:3B:96:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e30db5-9ccd-3dcb-b99b-27d893e3a1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.37.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e5:c7:a9:64:82:d3:3d:b8:cb:f4:11:08:0f:a0:93:84:e3: a1:22:1d:d5:eb:fa:d2:13:9d:1e:d2:97:55:bc:28:ee:fa:d1: ec:58:e8:2b:49:c9:c5:62:84:eb:ad:17:35:b2:ed:d8:cd:24: 58:5f:9f:b2:d1:3f:dc:51:95:67:25:64:1d:b1:4a:e8:1c:2c: a1:2c:7e:e8:f1:9c:e3:7c:9c:9b:8a:a5:67:1e:96:1f:6b:43: e7:6f:2c:ad:48:85:81:c5:f3:b5:d2:a1:94:9f:02:66:00:af: 12:4a:82:99:0d:41:8f:06:36:d4:30:f8:d5:93:7b:46:44:b2: 58:85:f2:b3:5e:ba:d7:14:6e:84:0b:59:2d:4b:42:d8:f6:b4: b2:5b:70:98:35:08:10:77:8b:94:f0:dd:f8:0c:d5:48:ae:2a: c7:9f:02:2f:3b:8d:ca:57:08:13:b9:b4:b2:08:0c:05:0a:7e: c9:1e:36:69:78:04:be:73:03:6a:a8:f1:18:a2:01:e8:38:ad: 55:8a:45:fd:c6:80:bb:63:bb:c1:ee:d1:09:de:f8:79:43:85: 9c:a0:d4:d6:19:f3:2c:a7:cb:1d:1f:28:35:13:df:69:6f:e5: c0:c0:19:18:69:52:58:02:22:cd:41:7f:01:9c:3d:13:6d:0d: 04:b3:48:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZsSQtT/QKF0iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MGE4OGE2Y2EtYTM5NS00MTExLTg1ZDMtNGM0ODVhNjljMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vTyg6ZmRQDEBgwcLYI9s2uj/p6qUrO9GNwV Khi9PQKFpPXQdSAmQ/Ge8Mp1VNVR7sMlfavRWM9d0h62JugklqLFvW8uNC+WXT7O QFP2g3lemxVry619sWONM1rhxBo4HotkID642v8GMvb6SdpHIhwhTW4Y5l6RTJ/7 qEWSla4QHg7B6T6A/nYVOf4MtOYcZpJ1C43SSwzGHk9uQEy9b6aLz4H8fF61TcKK olLit/raoUq4EVPMjwVPKR6DHGfxfQciaWLLPDBPMxDAA3t9vVLPliPdSbL7ou7j jx2O50lFL/8RwjDyA8Zgdr5bMreBPNj7tVqn0K7Vi128tzIi0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsT1pDpjS7mUl9qgJYDeA2KO5ZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjNlMzBkYjUtOWNjZC0z ZGNiLWI5OWItMjdkODkzZTNhMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrlx6lkgtM9uMv0EQgPoJOE46EiHdXr+tITnR7Sl1W8KO760exY6CtJ ycVihOutFzWy7djNJFhfn7LRP9xRlWclZB2xSugcLKEsfujxnON8nJuKpWcelh9r Q+dvLK1IhYHF87XSoZSfAmYArxJKgpkNQY8GNtQw+NWTe0ZEsliF8rNeutcUboQL WS1LQtj2tLJbcJg1CBB3i5Tw3fgM1UiuKsefAi87jcpXCBO5tLIIDAUKfskeNml4 BL5zA2qo8RiiAeg4rVWKRf3GgLtju8Hu0Qne+HlDhZyg1NYZ8yynyx0fKDUT32lv 5cDAGRhpUlgCIs1BfwGcPRNtDQSzSHE= -----END CERTIFICATE-----Generated at Wed Nov 5 18:22:04 2025 by rpki-client