$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ac9f2a-8512-38dd-aa64-96507c557ba0.roa File: 59ac9f2a-8512-38dd-aa64-96507c557ba0.roa (raw, json) Hash identifier: utrsFQNSOOHAexT9SP8jqwzrLbaqXbFJrvZjNrKikpQ= Subject key identifier: A9:9E:94:0C:6D:5E:07:A9:92:04:B3:16:C0:59:6C:48:7C:AC:B3:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5AEE15F6D57DCBD4CA500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ac9f2a-8512-38dd-aa64-96507c557ba0.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.76.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ae:e1:5f:6d:57:dc:bd:4c:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=bdff3718-4a15-4bf1-a7a6-c8176f2b8f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:b9:8f:db:d7:95:ed:a7:94:6a:73:5b:b2: 29:c4:8f:41:1c:70:8f:b6:fe:4d:13:b5:45:ca:06: db:8c:ea:9a:ac:82:b7:74:97:9b:5a:4f:ac:69:ab: af:28:65:78:d0:32:a6:bb:6d:45:9f:f0:bf:e8:55: 0f:9a:02:51:99:a0:49:91:fb:bb:a4:58:8b:ef:d2: a4:79:d9:7d:af:be:96:e0:a1:66:05:08:17:bc:42: 4d:51:7d:4a:2a:78:aa:68:c7:bf:93:28:1d:7c:ca: 92:a0:f0:f2:6c:fb:88:2e:1c:94:7e:11:fd:0d:3b: ab:9f:b3:0e:cf:98:29:2d:04:f8:11:1b:9b:a5:d5: 93:f4:14:db:7b:e7:8d:30:81:69:a9:88:1e:fc:e5: 39:c2:ea:6a:b9:44:65:32:ce:20:7b:03:ae:d0:d2: 0e:71:99:cd:2b:8e:59:21:d6:08:9f:21:ed:5a:2a: 2a:17:42:ea:2b:82:aa:66:12:41:a9:24:61:97:1c: 79:01:84:94:df:58:3b:f0:68:14:3a:1d:3b:5c:c4: df:86:34:fb:56:26:f7:ad:36:7a:2d:eb:f0:1f:90: 1a:e2:41:73:b3:56:7e:ac:d3:99:ba:69:27:51:62: e9:90:13:17:44:dc:47:a4:16:c4:c9:01:d9:0b:28: 3c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9E:94:0C:6D:5E:07:A9:92:04:B3:16:C0:59:6C:48:7C:AC:B3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59ac9f2a-8512-38dd-aa64-96507c557ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.76.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:30:6f:9e:99:aa:eb:7d:70:f4:e4:64:88:d1:f9:6b:cc:cd: 3a:fe:ac:d2:39:fe:06:12:55:0d:9d:29:ec:b3:52:bb:66:9c: 40:01:a2:de:f9:e9:9f:5c:80:5c:1a:fb:a2:2f:b7:d7:7c:9c: ca:8b:fa:e3:64:06:cf:44:f6:39:cf:d1:69:10:f5:32:9b:78: cb:79:58:a0:92:0f:a4:18:62:aa:fb:72:cc:8d:26:89:cd:e8: d6:88:d8:92:35:90:5b:5d:1d:01:b0:18:6a:f7:23:41:2e:7d: d3:b3:82:14:e7:fd:ab:55:5f:1e:bb:e8:21:6a:8a:9d:c3:93: be:f5:1b:e7:df:76:67:f8:f8:da:1e:ce:72:72:ca:81:b5:dc: bf:de:bf:28:b8:06:ed:64:a1:f6:27:ca:d7:10:0e:5a:e0:88: ab:e5:77:ba:65:04:19:e6:68:0a:a1:ee:2b:be:3b:df:bd:8b: 09:7c:b7:be:bd:5a:6a:6b:25:6d:76:47:7b:ee:f0:7b:67:49: 15:e8:e2:d5:d5:e8:ea:55:75:92:58:4e:3c:df:b3:dc:00:df: b8:06:e2:73:e7:79:5f:49:b1:cd:9a:8d:37:30:86:3d:55:3c: a8:d0:97:3b:2b:d3:11:2f:eb:35:57:3a:e2:2a:fd:91:ee:bc: 21:50:71:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pa7hX21X3L1MpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YmRmZjM3MTgtNGExNS00YmYxLWE3YTYtYzgxNzZmMmI4ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pC5j9vXle2nlGpzW7IpxI9BHHCPtv5NE7VF ygbbjOqarIK3dJebWk+saauvKGV40DKmu21Fn/C/6FUPmgJRmaBJkfu7pFiL79Kk edl9r76W4KFmBQgXvEJNUX1KKniqaMe/kygdfMqSoPDybPuILhyUfhH9DTurn7MO z5gpLQT4ERubpdWT9BTbe+eNMIFpqYge/OU5wupquURlMs4gewOu0NIOcZnNK45Z IdYInyHtWioqF0LqK4KqZhJBqSRhlxx5AYSU31g78GgUOh07XMTfhjT7Vib3rTZ6 LevwH5Aa4kFzs1Z+rNOZumknUWLpkBMXRNxHpBbEyQHZCyg8DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmelAxtXgepkgSzFsBZbEh8rLM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTlhYzlmMmEtODUxMi0z OGRkLWFhNjQtOTY1MDdjNTU3YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0yeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkwb56Zqut9cPTkZIjR+WvMzTr+rNI5/gYSVQ2dKeyzUrtmnEABot75 6Z9cgFwa+6Ivt9d8nMqL+uNkBs9E9jnP0WkQ9TKbeMt5WKCSD6QYYqr7csyNJonN 6NaI2JI1kFtdHQGwGGr3I0EufdOzghTn/atVXx676CFqip3Dk771G+ffdmf4+Noe znJyyoG13L/evyi4Bu1kofYnytcQDlrgiKvld7plBBnmaAqh7iu+O9+9iwl8t769 WmprJW12R3vu8HtnSRXo4tXV6OpVdZJYTjzfs9wA37gG4nPneV9Jsc2ajTcwhj1V PKjQlzsr0xEv6zVXOuIq/ZHuvCFQcYc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:56:58 2025 by rpki-client