$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/357f5f05-28cf-3164-adb9-c81bc0f8563a.roa File: 357f5f05-28cf-3164-adb9-c81bc0f8563a.roa (raw, json) Hash identifier: FoE8JDwCThnGkIhMleVEtTEDQ6KPs2QcXX/LWxWI8vo= Subject key identifier: A8:2E:C0:7A:C1:16:06:B5:AF:FE:B6:06:9C:6F:6D:29:32:04:81:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF70AB38E7518D770513380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/357f5f05-28cf-3164-adb9-c81bc0f8563a.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.58.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:0a:b3:8e:75:18:d7:70:51:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=a96cd24a-8421-4438-8691-605eac9e31d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:9e:ff:78:76:c6:07:75:cb:48:f3:81:6f: 80:2d:8b:52:ec:e8:92:95:aa:c5:d2:73:20:ba:1d: 16:8d:5f:da:f9:e7:78:bf:2e:e0:28:0c:71:cb:da: ab:12:69:61:f9:c4:cd:1a:68:b6:59:42:ab:5d:fe: f6:8b:97:1a:45:35:58:53:c1:2f:68:71:89:c2:63: c6:9d:85:07:6a:56:57:a3:0c:91:27:e3:97:df:9a: e7:10:04:3c:e6:68:fb:21:95:c4:e8:6a:e5:7b:1f: 98:e0:30:4d:c0:cb:6c:7d:21:ff:cd:45:ed:22:c2: ee:38:68:75:25:4c:8f:e3:4b:8e:84:88:94:fe:40: 60:71:01:ea:55:78:d7:a6:21:fd:02:3f:b8:61:3b: 5e:29:97:4c:28:0d:df:4c:c4:3b:6f:ae:67:64:3c: 2d:ce:79:5a:b7:14:ec:a8:9d:ba:3c:aa:4e:bb:08: 9c:cf:a7:7b:f8:6b:00:7c:3d:59:d2:4d:e5:27:6d: cc:67:30:c6:82:50:2e:86:0c:e2:47:5a:b7:ef:6f: a8:c9:81:d8:3d:00:1f:d5:1c:43:2d:d5:a1:83:10: 7a:07:66:43:a5:0d:fc:93:4c:fb:6f:32:fa:02:dd: bb:22:7f:ae:2d:8b:6d:1d:fe:8d:87:c8:df:80:34: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2E:C0:7A:C1:16:06:B5:AF:FE:B6:06:9C:6F:6D:29:32:04:81:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/357f5f05-28cf-3164-adb9-c81bc0f8563a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d1:7c:ab:24:7c:19:ed:fb:dc:f7:0c:7b:d9:4c:7e:e0:e2: 97:9b:89:20:b0:31:df:18:4c:4d:7c:e7:19:f2:39:21:f1:70: a7:51:08:af:48:76:e9:3c:2e:d8:3d:42:26:e0:fb:e7:d4:c7: b1:cc:f5:98:3a:1e:5c:e3:0c:34:6a:69:9e:90:35:ca:f7:e0: 6d:25:80:55:72:1d:6c:9e:df:63:3b:f9:8d:37:1b:5c:28:29: 05:bc:6c:6f:62:03:d6:17:47:6d:1e:e5:78:83:34:14:45:69: db:25:ad:cf:d0:23:97:be:ce:69:cc:5a:ef:08:37:fb:40:19: 0f:93:ff:94:63:11:cd:7d:f6:e0:c7:1a:21:51:c4:41:e8:d2: 44:1e:0a:19:a4:5a:45:34:28:85:6a:3d:59:c5:de:36:cc:05: af:3c:72:7c:4c:cd:26:04:63:d2:b1:d5:a2:26:01:86:da:eb: 8b:72:c4:1a:a8:0e:b9:03:6f:fc:82:a9:60:93:2c:22:74:d1: 18:de:dc:2c:f5:b5:5a:8a:81:01:38:b9:c1:3f:ca:77:3b:fa: aa:23:c3:72:fc:f6:66:39:aa:03:ac:2c:d2:e6:cc:d1:84:92: 73:9c:8e:52:15:93:6a:ff:e9:6c:2d:cc:e0:b9:09:cd:b9:85: a4:58:9c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9wqzjnUY13BRM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YTk2Y2QyNGEtODQyMS00NDM4LTg2OTEtNjA1ZWFjOWUzMWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbKe/3h2xgd1y0jzgW+ALYtS7OiSlarF0nMg uh0WjV/a+ed4vy7gKAxxy9qrEmlh+cTNGmi2WUKrXf72i5caRTVYU8EvaHGJwmPG nYUHalZXowyRJ+OX35rnEAQ85mj7IZXE6Grlex+Y4DBNwMtsfSH/zUXtIsLuOGh1 JUyP40uOhIiU/kBgcQHqVXjXpiH9Aj+4YTteKZdMKA3fTMQ7b65nZDwtznlatxTs qJ26PKpOuwicz6d7+GsAfD1Z0k3lJ23MZzDGglAuhgziR1q372+oyYHYPQAf1RxD LdWhgxB6B2ZDpQ38k0z7bzL6At27In+uLYttHf6Nh8jfgDTycQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKguwHrBFga1r/62BpxvbSkyBIE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzU3ZjVmMDUtMjhjZi0z MTY0LWFkYjktYzgxYmMwZjg1NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzp/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvRfKskfBnt+9z3DHvZTH7g4pebiSCwMd8YTE185xnyOSHxcKdRCK9I duk8Ltg9Qibg++fUx7HM9Zg6HlzjDDRqaZ6QNcr34G0lgFVyHWye32M7+Y03G1wo KQW8bG9iA9YXR20e5XiDNBRFadslrc/QI5e+zmnMWu8IN/tAGQ+T/5RjEc199uDH GiFRxEHo0kQeChmkWkU0KIVqPVnF3jbMBa88cnxMzSYEY9Kx1aImAYba64tyxBqo DrkDb/yCqWCTLCJ00Rje3Cz1tVqKgQE4ucE/ync7+qojw3L89mY5qgOsLNLmzNGE knOcjlIVk2r/6WwtzOC5Cc25haRYnOQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:18 2025 by rpki-client