$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa File: 40a2c4db-ab21-389c-b109-f8529e7aebf1.roa (raw, json) Hash identifier: 5wPlDq0TRNtrZANFct4a3Y1ozM4YArrItfZjurKno5U= Subject key identifier: 00:E6:0D:88:A5:DE:AE:6D:16:2B:47:28:84:32:44:01:BE:9A:0D:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFEE6B83BAC9574A7C63D59C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.53.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b8:3b:ac:95:74:a7:c6:3d:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=c05d9833-f397-4215-9f37-a2c2b92ba21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:82:2a:1b:45:4b:aa:88:67:52:ee:61:af: d5:dc:f7:b6:49:20:55:28:d6:86:65:b0:46:57:3a: 49:b3:d9:fc:d9:e6:3d:ee:3b:a2:5b:cc:2a:54:6f: 13:06:e6:a8:cd:cd:a8:79:d4:68:a0:24:23:17:df: 0e:5b:9c:f1:da:51:91:3d:63:e9:c2:15:74:5c:05: f6:30:53:74:85:d0:e9:f1:bd:ee:ad:e4:3d:75:a1: 26:d5:a7:fc:13:87:a6:3e:79:21:fb:b8:6c:c8:d6: b1:63:f7:6f:b5:69:21:85:c2:b5:0f:bd:0a:73:7b: 62:e9:e1:50:55:38:aa:01:ef:45:9c:36:d0:a0:38: 66:70:1e:7a:99:98:06:dc:59:a2:b8:04:50:47:d9: 63:51:f2:d1:df:e5:6f:5b:cf:1f:82:fc:ba:41:ae: a0:95:01:7f:48:c3:75:4e:e6:d5:c6:06:a8:fe:3b: 70:af:9f:1f:63:cd:20:e6:9c:f1:ab:3f:1a:9c:82: a8:26:db:ec:61:ca:a8:e0:1e:0d:f3:e7:a2:29:d9: 9c:41:46:6c:80:ca:a8:d1:ed:3a:64:26:0d:e8:d3: 24:d5:3f:5a:5a:f6:46:07:82:63:fe:b8:ce:5f:9b: eb:72:bc:a8:bc:27:c9:31:2a:96:98:d2:6f:7d:bf: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E6:0D:88:A5:DE:AE:6D:16:2B:47:28:84:32:44:01:BE:9A:0D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:16:69:9e:bf:8a:99:3e:94:95:aa:99:86:11:55:63:5e:94: 14:d6:de:bc:db:36:e6:7a:ad:17:00:bd:e6:e4:51:0d:f1:b6: aa:09:cb:73:c5:bf:d7:84:1a:ad:1c:7f:66:f4:53:3e:fa:32: 49:ed:d7:db:6b:cc:41:81:f6:c4:50:94:d2:cb:2c:8b:b5:5a: 7b:1b:97:92:ea:93:57:98:41:f3:9f:18:ee:7e:42:14:f0:01: e8:ce:a2:52:61:74:84:35:2c:9e:4b:d6:1d:ce:e9:5b:e2:f0: 69:d7:b6:54:09:0f:85:2a:9a:6f:97:be:38:72:89:f5:9b:68: 06:1f:49:b3:90:6b:2d:33:ac:bf:62:e7:f6:cb:12:3f:5c:66: 99:23:5f:f7:3f:d4:33:61:78:86:5f:c3:3d:da:51:5d:79:66: 2e:92:ba:4a:76:dd:dc:71:5a:87:95:4b:9a:e4:b5:e3:93:df: 2c:87:95:45:39:53:01:e1:05:3b:d5:07:5b:fa:77:00:23:25: 0e:0b:b5:ec:62:0e:2f:fa:0c:a4:cd:dc:28:e8:c1:d3:1e:3e: e7:f1:7a:51:eb:93:f1:80:40:81:37:82:ff:3a:e8:5b:20:13: c3:77:74:c4:f0:4b:04:91:7e:5a:bd:74:74:f1:41:34:d7:ef: a1:38:e7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5rg7rJV0p8Y9WcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk YzA1ZDk4MzMtZjM5Ny00MjE1LTlmMzctYTJjMmI5MmJhMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRWCKhtFS6qIZ1LuYa/V3Pe2SSBVKNaGZbBG VzpJs9n82eY97juiW8wqVG8TBuaozc2oedRooCQjF98OW5zx2lGRPWPpwhV0XAX2 MFN0hdDp8b3ureQ9daEm1af8E4emPnkh+7hsyNaxY/dvtWkhhcK1D70Kc3ti6eFQ VTiqAe9FnDbQoDhmcB56mZgG3FmiuARQR9ljUfLR3+VvW88fgvy6Qa6glQF/SMN1 TubVxgao/jtwr58fY80g5pzxqz8anIKoJtvsYcqo4B4N8+eiKdmcQUZsgMqo0e06 ZCYN6NMk1T9aWvZGB4Jj/rjOX5vrcryovCfJMSqWmNJvfb/r4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADmDYil3q5tFitHKIQyRAG+mg3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDBhMmM0ZGItYWIyMS0z ODljLWIxMDktZjg1MjllN2FlYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzXdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAWaZ6/ipk+lJWqmYYRVWNelBTW3rzbNuZ6rRcAvebkUQ3xtqoJy3PF v9eEGq0cf2b0Uz76Mknt19trzEGB9sRQlNLLLIu1Wnsbl5Lqk1eYQfOfGO5+QhTw AejOolJhdIQ1LJ5L1h3O6Vvi8GnXtlQJD4Uqmm+XvjhyifWbaAYfSbOQay0zrL9i 5/bLEj9cZpkjX/c/1DNheIZfwz3aUV15Zi6Sukp23dxxWoeVS5rkteOT3yyHlUU5 UwHhBTvVB1v6dwAjJQ4LtexiDi/6DKTN3CjowdMePufxelHrk/GAQIE3gv866Fsg E8N3dMTwSwSRflq9dHTxQTTX76E4570= -----END CERTIFICATE-----Generated at Tue Nov 4 23:53:39 2025 by rpki-client