$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59cdc641-730a-3dcc-a169-100405e881ce.roa File: 59cdc641-730a-3dcc-a169-100405e881ce.roa (raw, json) Hash identifier: OGgbyMSX1SPiG/SQ1DRflDvdW2P4Z2NmJ4dczCNPEX4= Subject key identifier: 56:57:4B:21:00:9E:E0:7F:F7:96:03:23:E7:3D:BB:0C:43:1F:84:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B74807AE08E18BB606DCFD580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59cdc641-730a-3dcc-a169-100405e881ce.roa Signing time: Wed 08 Oct 2025 16:00:20 +0000 ROA not before: Wed 08 Oct 2025 16:00:20 +0000 ROA not after: Tue 06 Jan 2026 17:00:20 +0000 asID: 16625 IP address blocks: 23.7.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:80:7a:e0:8e:18:bb:60:6d:cf:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 8 16:00:20 2025 GMT Not After : Jan 6 17:00:20 2026 GMT Subject: CN=94fa828e-458e-49d7-b08c-9e4f5c09ccb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a9:c7:b3:2b:bd:af:54:d0:0a:86:c1:00:8c: e8:fb:34:97:06:de:db:ee:17:5d:93:47:88:b3:f5: a5:dc:09:92:5b:4a:5a:d6:6c:34:6d:c9:45:91:a8: 34:f9:5a:69:ca:c9:d6:cd:c7:16:00:01:85:db:cc: da:a2:ef:6f:53:77:f3:25:d5:bf:80:4f:88:2e:45: 45:5d:e5:0d:eb:e3:ed:8b:d5:82:8f:d7:7f:e2:29: 10:bb:76:ea:d0:37:79:c4:2d:6e:c4:20:fd:b8:fb: b7:34:c7:26:41:53:1e:e2:ca:9d:13:47:20:bd:f0: d3:fb:07:3c:ef:28:8f:a2:66:05:70:c6:76:cb:44: 16:b6:2b:ea:dd:c9:b5:5e:f3:79:b1:3f:51:23:51: 00:d6:ee:1f:b3:05:f4:ae:2a:d6:c2:de:33:a4:38: 15:8b:aa:f6:d1:c1:43:58:76:96:1a:f4:7d:f8:e6: af:79:2f:0e:5e:fe:0c:2a:fa:a6:e0:dd:3f:20:6d: 05:77:ea:9f:56:80:d0:48:a5:2f:f4:2e:0d:ef:ea: 43:af:47:b2:95:8d:b4:80:f8:10:7f:0f:31:db:d0: 10:36:75:05:83:9f:e2:4b:ec:d8:d8:b2:5a:2e:86: 50:76:11:f7:75:fa:7c:3a:53:05:e0:c4:73:27:c6: 1c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:57:4B:21:00:9E:E0:7F:F7:96:03:23:E7:3D:BB:0C:43:1F:84:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59cdc641-730a-3dcc-a169-100405e881ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.7.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4a:2b:b1:04:d3:e8:cf:f9:a2:ce:ce:42:81:9a:d5:9c:fe: 59:74:28:9f:cc:78:a0:83:94:53:8c:a8:ad:37:60:c1:da:f9: 66:eb:a4:9e:a4:4e:7f:bf:4e:93:84:aa:ac:f0:0c:7b:90:c7: 9e:79:5b:bd:25:a7:dd:a7:a1:d0:29:90:36:29:da:bb:8c:b7: 4a:d2:d4:ce:f7:8d:d0:f9:b1:17:7b:47:56:6a:cc:06:fa:75: 8c:6a:ef:01:c5:0e:04:e1:2e:35:b4:b5:f9:cf:08:db:6e:3c: b2:22:23:50:4d:db:88:26:7e:2d:02:84:a9:5d:ec:09:f1:2f: 18:67:7b:83:c3:cd:ee:1a:ed:0e:0e:04:35:a2:2b:b6:c6:f2: 58:f8:75:b4:63:6f:94:f8:78:b4:01:c5:f5:39:0d:24:04:9b: dd:a3:c6:40:a3:de:89:74:e3:fa:21:e9:7e:40:e2:23:9c:07: 64:1c:34:22:5b:65:8e:6b:26:22:78:05:e6:8c:83:16:d2:76: 0b:1c:24:70:a9:dd:e9:b8:ed:d5:03:0f:bb:f4:7e:55:01:04: 6b:65:76:06:ca:a5:66:57:b5:eb:2b:62:a7:ef:05:d5:2c:9d: 74:56:f2:92:c2:fc:10:4a:fb:7f:6e:4d:c7:07:7f:ee:48:45: 5e:48:70:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0gHrgjhi7YG3P1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwODE2MDAyMFoXDTI2MDEwNjE3MDAyMFowLzEtMCsGA1UEAxMk OTRmYTgyOGUtNDU4ZS00OWQ3LWIwOGMtOWU0ZjVjMDljY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6nHsyu9r1TQCobBAIzo+zSXBt7b7hddk0eI s/Wl3AmSW0pa1mw0bclFkag0+VppysnWzccWAAGF28zaou9vU3fzJdW/gE+ILkVF XeUN6+Pti9WCj9d/4ikQu3bq0Dd5xC1uxCD9uPu3NMcmQVMe4sqdE0cgvfDT+wc8 7yiPomYFcMZ2y0QWtivq3cm1XvN5sT9RI1EA1u4fswX0rirWwt4zpDgVi6r20cFD WHaWGvR9+OaveS8OXv4MKvqm4N0/IG0Fd+qfVoDQSKUv9C4N7+pDr0eylY20gPgQ fw8x29AQNnUFg5/iS+zY2LJaLoZQdhH3dfp8OlMF4MRzJ8YcXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZXSyEAnuB/95YDI+c9uwxDH4QFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTljZGM2NDEtNzMwYS0z ZGNjLWExNjktMTAwNDA1ZTg4MWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1KK7EE0+jP+aLOzkKBmtWc/ll0KJ/MeKCDlFOMqK03YMHa+WbrpJ6k Tn+/TpOEqqzwDHuQx555W70lp92nodApkDYp2ruMt0rS1M73jdD5sRd7R1ZqzAb6 dYxq7wHFDgThLjW0tfnPCNtuPLIiI1BN24gmfi0ChKld7AnxLxhne4PDze4a7Q4O BDWiK7bG8lj4dbRjb5T4eLQBxfU5DSQEm92jxkCj3ol04/oh6X5A4iOcB2QcNCJb ZY5rJiJ4BeaMgxbSdgscJHCp3em47dUDD7v0flUBBGtldgbKpWZXtesrYqfvBdUs nXRW8pLC/BBK+39uTccHf+5IRV5IcMs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:13 2025 by rpki-client