$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa File: 3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa (raw, json) Hash identifier: ElBHNQhE7dcaIz/rDeBGFbthsCirk1Q2Y1UL4b93qBw= Subject key identifier: 23:E2:02:61:88:A2:53:95:5D:DC:8F:9B:58:38:6C:62:4F:34:BB:4F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A4FC67481C1774103D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.36.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a4:fc:67:48:1c:17:74:10:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=ff755413-3746-4cd2-bae2-7af8a1a0e2c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:cd:20:eb:4e:cc:65:bf:20:40:1e:cb:a0:30: 54:a0:45:23:20:7b:10:01:ad:81:68:9c:67:2c:06: 6d:db:be:8a:00:2e:8d:d6:ea:6e:45:30:29:ce:a9: 65:a6:92:29:7e:9f:b6:5e:1d:29:12:01:ab:77:30: 3d:f0:ff:2f:9a:0b:81:05:f1:58:84:5d:c1:ca:82: a4:0f:2f:8b:df:b0:cd:e2:67:c7:c3:4a:1d:ba:07: da:4d:f2:91:45:8d:61:50:31:d4:a6:7b:86:5a:f5: 22:1e:2c:e4:31:73:7f:73:d9:b0:67:a1:c2:43:e2: bc:d8:c0:00:15:6a:7d:f3:8e:86:85:9e:d5:28:f2: 49:89:3d:c9:f5:42:c3:c3:61:aa:d8:f0:c3:34:4e: 10:81:4b:c9:76:81:f2:aa:a0:9e:b6:72:d4:2e:8a: 88:12:31:a0:88:73:82:56:73:1c:a3:66:44:22:78: 42:db:68:94:64:e4:26:d3:f1:db:bf:53:7c:dd:91: f7:96:b1:2d:0b:65:53:9b:f7:69:9e:d8:2a:3c:c6: 8d:aa:ae:bf:0e:a1:e8:85:83:4d:4c:30:e8:53:32: 18:7a:33:b3:ff:e4:7c:9c:2d:46:82:0e:e3:f1:3e: b7:59:0d:17:2b:ae:a1:20:d5:38:03:87:ce:c7:60: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E2:02:61:88:A2:53:95:5D:DC:8F:9B:58:38:6C:62:4F:34:BB:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e1:87:a1:c9:65:2b:3d:a7:5c:77:bb:4e:f4:ce:4c:65:41: c0:e2:16:1d:d8:e0:ee:6d:22:36:e5:f8:f0:8e:b2:5b:bb:ca: 27:9a:48:9f:52:03:c7:18:21:b2:3b:1d:a2:71:59:87:d2:fd: 4a:22:31:1b:a4:5f:7c:c7:48:cc:76:6f:aa:c2:cc:f2:1c:93: a9:29:2f:f6:ae:12:60:95:28:99:4a:25:1d:b8:a5:3e:97:e7: 8b:ac:b7:c5:fb:3e:41:de:f3:e2:2a:c2:df:c2:69:61:0e:4f: 60:12:c9:18:95:20:ba:4b:90:a4:61:5c:5f:50:3b:1e:f3:af: e9:d9:1d:22:e2:cc:7f:10:73:89:4b:5e:25:01:37:d1:2b:7a: 77:63:fe:b2:a9:77:0b:1e:8e:c5:11:26:7e:5b:bd:ef:ac:f9: 67:e6:d6:c1:85:c8:6c:af:66:ea:64:92:91:e1:62:ad:e3:0b: 52:85:98:aa:a1:99:aa:a9:e4:a3:60:29:9f:40:50:4d:38:26: 3c:fe:4a:eb:14:6b:f8:95:2d:d8:9a:95:f8:88:4a:7c:7b:95: 26:e0:e4:41:36:77:c7:d1:27:b5:a4:9f:72:f9:4c:30:b3:a9: 14:33:41:fc:d4:9a:00:49:29:ed:46:89:90:9d:d8:59:4a:22: d6:2f:cd:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aT8Z0gcF3QQPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZmY3NTU0MTMtMzc0Ni00Y2QyLWJhZTItN2FmOGExYTBlMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc0g607MZb8gQB7LoDBUoEUjIHsQAa2BaJxn LAZt276KAC6N1upuRTApzqllppIpfp+2Xh0pEgGrdzA98P8vmguBBfFYhF3ByoKk Dy+L37DN4mfHw0odugfaTfKRRY1hUDHUpnuGWvUiHizkMXN/c9mwZ6HCQ+K82MAA FWp9846GhZ7VKPJJiT3J9ULDw2Gq2PDDNE4QgUvJdoHyqqCetnLULoqIEjGgiHOC VnMco2ZEInhC22iUZOQm0/Hbv1N83ZH3lrEtC2VTm/dpntgqPMaNqq6/DqHohYNN TDDoUzIYejOz/+R8nC1Ggg7j8T63WQ0XK66hINU4A4fOx2A8vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPiAmGIolOVXdyPm1g4bGJPNLtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YzODVlYTItN2JmZS0z ZGRhLTk4YzYtZDA0MDk5ZTRhYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyRDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/hh6HJZSs9p1x3u070zkxlQcDiFh3Y4O5tIjbl+PCOslu7yieaSJ9S A8cYIbI7HaJxWYfS/UoiMRukX3zHSMx2b6rCzPIck6kpL/auEmCVKJlKJR24pT6X 54ust8X7PkHe8+Iqwt/CaWEOT2ASyRiVILpLkKRhXF9QOx7zr+nZHSLizH8Qc4lL XiUBN9Erendj/rKpdwsejsURJn5bve+s+Wfm1sGFyGyvZupkkpHhYq3jC1KFmKqh maqp5KNgKZ9AUE04Jjz+SusUa/iVLdialfiISnx7lSbg5EE2d8fRJ7Wkn3L5TDCz qRQzQfzUmgBJKe1GiZCd2FlKItYvzW8= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:46 2025 by rpki-client