$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa File: 3a975f7c-99d3-354f-b910-9bdd31a55729.roa (raw, json) Hash identifier: kudjywnjvCuTFR+b52I1LC/9KnFgReJxyHwhUz7Rfcg= Subject key identifier: 83:A6:6B:5C:7D:CB:CB:2B:8F:25:E5:72:01:CE:72:67:D1:79:E5:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715D0A36C87603FE0D1ECB40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16625 IP address blocks: 23.42.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5d:0a:36:c8:76:03:fe:0d:1e:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=157e6f24-5b98-4627-86ee-a93bb5e0c6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d7:5d:6f:18:d3:c2:68:dc:d8:0f:e6:07:e7: 81:aa:82:89:2c:95:ba:43:c4:7d:bd:f1:33:ba:c6: 28:2e:41:aa:4b:d3:dc:a7:30:3e:f8:cc:42:f1:e5: ad:8e:76:9b:f7:54:75:b9:62:57:45:52:29:f2:e6: fd:32:22:30:0b:54:94:ca:d8:64:59:7d:6a:16:54: 6b:d3:0a:d1:39:aa:66:f2:a5:de:4c:2b:05:b2:a3: aa:40:a8:4c:f7:7c:86:44:dd:f4:91:e1:6f:bb:73: 8d:7c:c8:06:bb:47:1f:c7:17:77:cb:9d:4b:94:85: 85:f0:0b:59:ff:3c:88:97:c8:f4:e9:46:45:34:fe: 63:9a:2e:d7:a8:2a:c5:35:0e:cd:88:1a:4a:80:cc: 32:4b:51:41:09:37:92:6a:7c:c3:38:b4:f8:29:fb: b0:2a:ca:8e:a1:5c:08:b6:c7:90:06:1e:eb:c8:2a: 00:15:7d:07:67:b3:18:6d:0d:e8:5f:7b:0e:4e:a0: e7:c0:9c:95:49:47:fe:52:df:d0:73:28:ed:27:02: e0:39:5e:aa:46:c1:29:52:55:f2:97:2e:38:3e:a8: 16:f8:bb:aa:fc:4f:89:69:97:af:62:3d:26:6c:d8: bc:00:52:cb:07:f0:cb:c3:3e:20:0e:e4:eb:bb:a0: 19:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A6:6B:5C:7D:CB:CB:2B:8F:25:E5:72:01:CE:72:67:D1:79:E5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:cd:b0:4d:4e:bc:0c:3a:78:fd:40:2a:57:e5:73:16:fc:14: 11:e3:7d:13:fe:4f:63:96:cd:de:60:a0:e6:7a:d2:05:32:b7: 98:a3:c5:02:2b:d4:78:5c:91:29:21:f4:ae:18:c2:2a:23:dd: a4:de:0c:68:85:5f:fc:a2:f1:5c:e0:c9:f9:af:69:ee:66:83: 2c:31:7a:91:18:9a:75:9f:7e:ff:3c:0e:aa:8d:01:2e:21:84: b8:51:48:a2:b3:97:03:06:a2:2e:a0:83:52:fe:ca:77:45:9c: 17:20:b8:02:3f:a8:eb:73:26:93:9f:63:5c:f4:58:52:46:4c: 17:94:4d:7d:c4:47:d6:b1:e2:91:7b:1f:f2:ed:be:73:65:a2: 58:b7:cd:84:6f:f7:1b:a4:82:19:72:5f:44:df:95:bb:3a:dd: 3a:37:f8:d5:18:95:7c:5a:05:e7:ef:dd:7a:dc:a0:9b:b8:a1: 84:2e:8d:89:73:f5:e1:a6:1a:d9:af:e6:2d:9b:8b:eb:4f:81: c2:58:18:90:f5:24:a6:a4:7a:32:4e:68:e0:8c:7e:5d:e7:fa: 58:2f:e7:8e:af:bc:62:5c:4d:52:e2:31:70:a7:07:c7:c0:e2: 7a:b7:05:44:76:fc:cb:43:18:26:ba:71:d7:4b:45:44:d7:8e: 36:81:fc:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXQo2yHYD/g0ey0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk MTU3ZTZmMjQtNWI5OC00NjI3LTg2ZWUtYTkzYmI1ZTBjNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NddbxjTwmjc2A/mB+eBqoKJLJW6Q8R9vfEz usYoLkGqS9PcpzA++MxC8eWtjnab91R1uWJXRVIp8ub9MiIwC1SUythkWX1qFlRr 0wrROapm8qXeTCsFsqOqQKhM93yGRN30keFvu3ONfMgGu0cfxxd3y51LlIWF8AtZ /zyIl8j06UZFNP5jmi7XqCrFNQ7NiBpKgMwyS1FBCTeSanzDOLT4KfuwKsqOoVwI tseQBh7ryCoAFX0HZ7MYbQ3oX3sOTqDnwJyVSUf+Ut/QcyjtJwLgOV6qRsEpUlXy ly44PqgW+Luq/E+JaZevYj0mbNi8AFLLB/DLwz4gDuTru6AZrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOma1x9y8srjyXlcgHOcmfReeUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E5NzVmN2MtOTlkMy0z NTRmLWI5MTAtOWJkZDMxYTU1NzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETNsE1OvAw6eP1AKlflcxb8FBHjfRP+T2OWzd5goOZ60gUyt5ijxQIr 1HhckSkh9K4Ywioj3aTeDGiFX/yi8Vzgyfmvae5mgywxepEYmnWffv88DqqNAS4h hLhRSKKzlwMGoi6gg1L+yndFnBcguAI/qOtzJpOfY1z0WFJGTBeUTX3ER9ax4pF7 H/LtvnNloli3zYRv9xukghlyX0Tflbs63To3+NUYlXxaBefv3XrcoJu4oYQujYlz 9eGmGtmv5i2bi+tPgcJYGJD1JKakejJOaOCMfl3n+lgv546vvGJcTVLiMXCnB8fA 4nq3BUR2/MtDGCa6cddLRUTXjjaB/HI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:01 2025 by rpki-client