$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c28c8c-0936-30c7-938f-2e45daa4801e.roa File: 56c28c8c-0936-30c7-938f-2e45daa4801e.roa (raw, json) Hash identifier: LcaQf8HT2NgJ8vgbm5kDYBRPdmMbwPHtI3+O9LIq1nE= Subject key identifier: 00:94:5F:71:6B:AA:DA:71:00:91:E5:9A:F1:3A:D5:D1:97:B2:AA:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE404FBCA3B362FB1907A580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c28c8c-0936-30c7-938f-2e45daa4801e.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.50.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4f:bc:a3:b3:62:fb:19:07:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=aabab558-42e6-439d-8853-ea56754b8743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:58:c7:a0:20:ce:43:94:bb:d0:d6:41:55:89: e8:7f:5b:2a:51:f7:7e:b6:86:af:c6:0c:a3:dc:f5: 1c:45:76:be:61:5e:78:c2:1c:16:49:4d:3c:21:6e: de:22:a4:1a:df:5d:02:b2:46:7d:27:3a:b5:c4:ae: dd:23:a2:ad:2d:67:e7:64:3d:bf:e3:29:c0:f2:22: 9f:f9:ef:b8:60:b4:ec:89:86:fd:e8:fd:46:0e:fc: b4:c8:f9:3c:f0:30:e7:0e:63:63:b8:eb:74:a7:79: 81:d1:c4:29:ba:3b:61:57:f9:b6:c0:61:1f:25:af: 15:bb:47:c3:11:32:5b:27:8a:dc:3c:4a:1a:0d:84: 53:81:b4:f6:a1:80:e1:f9:ab:da:4f:72:6e:1c:55: 3e:64:ad:aa:92:34:4f:1f:86:35:35:66:8f:00:fb: d4:d3:9a:c1:ac:8f:48:0a:f7:be:c7:ce:22:f8:d1: fd:0a:7e:4d:69:e1:6f:a3:a3:bc:53:76:8f:6f:a6: 84:90:c1:2f:66:0b:35:04:1c:36:40:48:36:a3:48: 36:4f:c3:66:84:9f:53:f0:69:21:e7:b4:69:30:96: c8:37:32:08:20:2e:8f:31:5e:40:89:57:1a:76:4c: 88:2f:ba:8c:57:1d:58:8f:e4:4c:d7:52:6c:da:6e: 5f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:94:5F:71:6B:AA:DA:71:00:91:E5:9A:F1:3A:D5:D1:97:B2:AA:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56c28c8c-0936-30c7-938f-2e45daa4801e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e1:ca:8c:62:e2:b5:c0:aa:4b:31:04:ad:55:11:35:62:58: 25:82:8a:44:9b:d6:a5:56:34:db:ba:c5:db:ad:83:a1:6c:b8: c0:34:e1:3a:32:53:66:62:14:b2:76:de:f5:e2:a2:86:4f:d5: 7a:96:f9:fd:1a:34:6a:11:1e:4a:43:5e:28:9a:fc:90:91:d6: 3f:c2:0e:45:bf:72:7d:96:29:55:d3:bf:f0:8a:fb:42:06:26: 5b:10:08:39:7d:27:4e:67:c3:24:fb:9b:8c:13:c1:fc:2d:ae: d1:8b:23:51:ee:e9:e7:9c:0a:6e:fa:a4:39:b4:74:47:49:d6: 06:0c:c4:6d:49:f0:4d:f2:e9:99:5a:00:77:23:7b:ca:54:48: 43:2b:98:94:68:a7:68:d4:f6:5d:13:71:e5:a0:f9:7c:5a:db: ba:d6:2b:fd:c8:f5:99:48:64:60:d0:15:7d:cb:8e:e0:6a:4e: 03:98:e3:ea:62:8b:85:96:b6:8b:bd:8e:12:95:48:c7:93:fb: 5f:07:a3:2d:c7:1b:6c:fe:73:f3:82:8a:80:56:fd:8d:cb:22: 69:ff:fb:43:dc:88:e6:a5:5d:b5:2b:13:ee:ac:e8:69:f2:f9: 4e:63:56:ce:38:d8:ea:0a:05:8c:3a:30:dc:fa:ce:f5:cf:e9: 18:87:aa:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QE+8o7Ni+xkHpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YWFiYWI1NTgtNDJlNi00MzlkLTg4NTMtZWE1Njc1NGI4NzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1jHoCDOQ5S70NZBVYnof1sqUfd+toavxgyj 3PUcRXa+YV54whwWSU08IW7eIqQa310CskZ9Jzq1xK7dI6KtLWfnZD2/4ynA8iKf +e+4YLTsiYb96P1GDvy0yPk88DDnDmNjuOt0p3mB0cQpujthV/m2wGEfJa8Vu0fD ETJbJ4rcPEoaDYRTgbT2oYDh+avaT3JuHFU+ZK2qkjRPH4Y1NWaPAPvU05rBrI9I Cve+x84i+NH9Cn5NaeFvo6O8U3aPb6aEkMEvZgs1BBw2QEg2o0g2T8NmhJ9T8Gkh 57RpMJbINzIIIC6PMV5AiVcadkyIL7qMVx1Yj+RM11Js2m5fcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACUX3FrqtpxAJHlmvE61dGXsqqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTZjMjhjOGMtMDkzNi0z MGM3LTkzOGYtMmU0NWRhYTQ4MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHhyoxi4rXAqksxBK1VETViWCWCikSb1qVWNNu6xdutg6FsuMA04Toy U2ZiFLJ23vXiooZP1XqW+f0aNGoRHkpDXiia/JCR1j/CDkW/cn2WKVXTv/CK+0IG JlsQCDl9J05nwyT7m4wTwfwtrtGLI1Hu6eecCm76pDm0dEdJ1gYMxG1J8E3y6Zla AHcje8pUSEMrmJRop2jU9l0TceWg+Xxa27rWK/3I9ZlIZGDQFX3LjuBqTgOY4+pi i4WWtou9jhKVSMeT+18Hoy3HG2z+c/OCioBW/Y3LImn/+0PciOalXbUrE+6s6Gny +U5jVs442OoKBYw6MNz6zvXP6RiHquM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:33:14 2025 by rpki-client