$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f22d2da-80bd-3e32-ba26-8b342dfdd558.roa File: 5f22d2da-80bd-3e32-ba26-8b342dfdd558.roa (raw, json) Hash identifier: KMN+itU5r0WLrF1F55zMEQJy3TGs7R9piie/CrLzEiM= Subject key identifier: FD:4F:60:A1:0E:A1:D9:1C:67:95:99:26:4B:36:FD:08:43:0C:78:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1AB23B6E1007D138FCD40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f22d2da-80bd-3e32-ba26-8b342dfdd558.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.40.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:ab:23:b6:e1:00:7d:13:8f:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=716f7b0a-2cf9-48f0-be56-e67ad6aeaa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:5e:96:f5:ff:9c:fe:57:b6:59:65:70:49: 03:0f:f8:75:21:e1:bb:74:22:24:ec:d1:27:9c:0c: 4a:17:77:e4:e2:a1:0f:4e:e0:3e:8e:16:a2:d9:c4: 1f:49:fe:43:18:72:6e:a9:a9:96:1f:13:43:37:00: 88:bc:95:78:b0:57:03:dc:01:1c:6c:ec:13:91:23: 58:ba:ba:00:b7:71:c8:98:55:32:24:1f:8d:d2:d0: d2:d4:10:1e:e0:20:81:23:d6:5f:6c:cf:da:09:3d: 1c:17:36:19:ae:07:c4:24:33:b7:15:36:df:63:63: 51:6f:fd:a7:f1:d8:a1:22:d6:29:8e:ba:2b:4c:ff: ab:f5:f3:3c:25:51:f3:3d:ee:ec:2b:14:ee:92:4a: 95:24:d7:ef:0b:0a:c5:21:e4:af:f0:27:35:61:88: aa:9c:b8:a4:41:5d:4b:53:6a:f2:32:7f:57:e5:cc: d7:e5:46:9f:d5:39:56:6b:ed:d6:65:90:9a:0e:54: 07:e2:90:24:af:cf:ed:de:63:a6:88:7b:8f:17:28: 84:f0:57:9e:c0:2f:ca:90:bf:75:38:48:d2:53:82: 39:59:c1:75:da:55:e1:c9:f5:45:0b:5e:ef:24:0b: 9b:c5:73:fc:c6:83:f4:8f:57:ef:90:d8:59:2f:49: 64:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4F:60:A1:0E:A1:D9:1C:67:95:99:26:4B:36:FD:08:43:0C:78:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f22d2da-80bd-3e32-ba26-8b342dfdd558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:66:37:61:f4:13:3a:fa:59:60:99:54:a2:a8:d4:aa:44:6a: cd:ab:08:4e:83:76:0f:5f:88:c8:f5:06:7d:1a:cf:3a:60:c4: 2e:3c:dc:54:be:62:ed:89:ea:ba:cc:19:3c:a3:ed:35:c5:ac: be:ea:15:b7:e5:ca:f9:28:b5:9d:de:5f:77:fa:1f:e9:7a:7a: 21:8d:54:b0:8a:7e:e9:8b:b5:86:66:9d:c8:aa:fa:cc:66:67: f1:3b:59:1b:73:df:b3:55:6e:a1:ff:88:ad:8c:25:8a:c5:c2: 04:e2:10:1e:43:f3:6b:18:a8:7b:17:82:fa:85:a4:85:ab:bf: e8:c3:19:2e:cf:9b:ee:76:a3:2e:1e:55:23:64:15:95:8d:da: 12:1f:55:88:2e:ff:d3:5f:a9:d3:02:15:5c:33:70:02:49:bd: 8c:1e:d9:14:8b:bd:81:a7:72:77:8b:87:38:70:c7:dc:17:47: 59:fb:10:7a:3f:e9:3f:3a:ce:47:b8:49:c7:d4:26:ed:df:68: 21:fe:c7:3f:65:e5:84:d3:2d:10:b7:a4:e2:d6:04:9b:15:0b: 09:35:93:13:69:8c:f6:2a:73:ce:a8:3a:02:8c:aa:7e:a1:d1: e5:00:1c:d7:c1:d9:a0:4e:f9:5a:c4:3f:f6:7c:22:c7:eb:f7: c2:9e:69:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0asjtuEAfROPzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NzE2ZjdiMGEtMmNmOS00OGYwLWJlNTYtZTY3YWQ2YWVhYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw61elvX/nP5XtlllcEkDD/h1IeG7dCIk7NEn nAxKF3fk4qEPTuA+jhai2cQfSf5DGHJuqamWHxNDNwCIvJV4sFcD3AEcbOwTkSNY uroAt3HImFUyJB+N0tDS1BAe4CCBI9ZfbM/aCT0cFzYZrgfEJDO3FTbfY2NRb/2n 8dihItYpjrorTP+r9fM8JVHzPe7sKxTukkqVJNfvCwrFIeSv8Cc1YYiqnLikQV1L U2ryMn9X5czX5Uaf1TlWa+3WZZCaDlQH4pAkr8/t3mOmiHuPFyiE8FeewC/KkL91 OEjSU4I5WcF12lXhyfVFC17vJAubxXP8xoP0j1fvkNhZL0lkeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1PYKEOodkcZ5WZJks2/QhDDHhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYyMmQyZGEtODBiZC0z ZTMyLWJhMjYtOGIzNDJkZmRkNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyhjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9mN2H0Ezr6WWCZVKKo1KpEas2rCE6Ddg9fiMj1Bn0azzpgxC483FS+ Yu2J6rrMGTyj7TXFrL7qFbflyvkotZ3eX3f6H+l6eiGNVLCKfumLtYZmnciq+sxm Z/E7WRtz37NVbqH/iK2MJYrFwgTiEB5D82sYqHsXgvqFpIWrv+jDGS7Pm+52oy4e VSNkFZWN2hIfVYgu/9NfqdMCFVwzcAJJvYwe2RSLvYGncneLhzhwx9wXR1n7EHo/ 6T86zke4ScfUJu3faCH+xz9l5YTTLRC3pOLWBJsVCwk1kxNpjPYqc86oOgKMqn6h 0eUAHNfB2aBO+VrEP/Z8Isfr98KeacI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:21 2025 by rpki-client