$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e794da-20db-3a5d-ab4d-9a7e4c6db1f9.roa File: 61e794da-20db-3a5d-ab4d-9a7e4c6db1f9.roa (raw, json) Hash identifier: OxZeXuHowsQHiq+JBNbiOL1TbFam2efEelrLFz3aiic= Subject key identifier: 65:1C:DC:7F:FA:58:EE:63:00:16:D9:B0:10:CE:46:7F:54:C0:8F:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1A1764EA50602237A0740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e794da-20db-3a5d-ab4d-9a7e4c6db1f9.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 35994 IP address blocks: 23.41.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:a1:76:4e:a5:06:02:23:7a:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=2775fc6f-0f2e-436b-929b-eb9658f37ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:14:32:4e:43:db:03:ea:18:7a:61:75:a9: 9f:7c:b6:2e:a7:1c:e8:fc:70:58:b7:d2:92:40:ab: 2a:fd:0d:21:d4:24:5b:d0:bc:35:53:11:39:8f:3d: 35:cd:90:ad:a2:87:f3:ec:8e:d2:de:f2:75:fb:92: a2:f5:bb:9e:6d:df:64:ca:57:51:d0:2f:96:01:dd: 3d:80:33:bf:8a:7e:05:8a:e7:48:cb:12:0a:ba:5c: d5:71:3f:66:52:0f:3e:f8:14:a4:8b:a6:27:c3:66: be:9a:09:60:be:8b:c4:d1:66:81:47:81:76:e1:8e: 40:41:00:d8:f9:89:11:66:6f:88:f6:94:bb:37:4c: 61:3e:14:90:35:ca:13:1a:2f:0e:b2:b5:53:69:02: 28:02:e1:90:ab:11:1e:21:da:a9:b4:9e:13:54:10: 52:af:0a:29:49:e3:8b:45:76:2b:f1:f8:9c:25:4b: e7:9c:d5:0c:3d:05:b7:f0:9a:24:91:8a:23:fa:e7: 91:e8:b2:a5:37:7a:73:63:3b:19:fb:b2:a4:db:59: 4e:c6:55:38:d3:8a:22:b3:38:c9:7f:b9:db:6b:50: e5:ad:d9:c6:cb:f3:8d:3e:db:0e:20:b6:a9:b6:ff: b2:74:a7:7c:9d:e9:60:69:d7:19:4a:36:bb:ce:5e: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:DC:7F:FA:58:EE:63:00:16:D9:B0:10:CE:46:7F:54:C0:8F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e794da-20db-3a5d-ab4d-9a7e4c6db1f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:91:dd:a5:cc:43:a9:ac:7b:60:7d:20:f4:0e:3c:d9:f7:6f: 1e:66:51:3e:c3:aa:73:d8:90:5a:c2:93:6d:d7:7a:d9:97:f7: e4:91:33:d5:c7:5d:9a:b9:df:e3:de:b6:01:35:38:b2:b1:86: c5:4a:3c:c7:ab:fc:59:46:0c:a4:21:8f:4d:38:49:55:4d:af: 3e:8f:9e:b7:dd:8c:bb:1c:97:5c:ee:05:95:e6:93:b3:b6:bf: 36:8d:30:e4:15:d9:3b:f3:22:f4:cb:54:57:3a:7f:5c:ed:b4: 67:05:49:51:8e:b8:23:11:28:5a:d1:2a:95:b6:60:4c:77:95: b7:eb:30:eb:64:25:dd:25:cc:62:df:a0:70:15:2d:cc:26:cb: 9f:d8:e2:70:b7:c5:d7:ed:a1:36:b7:8d:1e:70:64:d8:fd:2b: d3:8c:cd:33:1b:d1:22:f6:4f:9b:91:98:fb:c3:49:4d:96:7c: 6c:65:12:d1:c7:51:72:e4:43:3c:8d:7d:a0:5c:0b:77:ad:02: bb:fd:6e:c1:95:fc:8a:02:3f:0b:32:0c:d8:2e:fe:e4:a5:88: e1:27:56:58:26:6f:54:37:9e:4e:ea:a2:42:93:f8:f2:87:3a: 6e:39:6d:b5:a7:29:fe:f7:31:a7:1e:99:c1:05:97:ec:1a:9b: 7a:5c:c8:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0aF2TqUGAiN6B0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Mjc3NWZjNmYtMGYyZS00MzZiLTkyOWItZWI5NjU4ZjM3ZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2IUMk5D2wPqGHphdamffLYupxzo/HBYt9KS QKsq/Q0h1CRb0Lw1UxE5jz01zZCtoofz7I7S3vJ1+5Ki9buebd9kyldR0C+WAd09 gDO/in4FiudIyxIKulzVcT9mUg8++BSki6Ynw2a+mglgvovE0WaBR4F24Y5AQQDY +YkRZm+I9pS7N0xhPhSQNcoTGi8OsrVTaQIoAuGQqxEeIdqptJ4TVBBSrwopSeOL RXYr8ficJUvnnNUMPQW38JokkYoj+ueR6LKlN3pzYzsZ+7Kk21lOxlU404oiszjJ f7nba1DlrdnGy/ONPtsOILaptv+ydKd8nelgadcZSja7zl5gJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUc3H/6WO5jABbZsBDORn9UwI8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjFlNzk0ZGEtMjBkYi0z YTVkLWFiNGQtOWE3ZTRjNmRiMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFymkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuR3aXMQ6mse2B9IPQOPNn3bx5mUT7DqnPYkFrCk23XetmX9+SRM9XH XZq53+PetgE1OLKxhsVKPMer/FlGDKQhj004SVVNrz6PnrfdjLscl1zuBZXmk7O2 vzaNMOQV2TvzIvTLVFc6f1zttGcFSVGOuCMRKFrRKpW2YEx3lbfrMOtkJd0lzGLf oHAVLcwmy5/Y4nC3xdftoTa3jR5wZNj9K9OMzTMb0SL2T5uRmPvDSU2WfGxlEtHH UXLkQzyNfaBcC3etArv9bsGV/IoCPwsyDNgu/uSliOEnVlgmb1Q3nk7qokKT+PKH Om45bbWnKf73MacemcEFl+wam3pcyKM= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:04 2025 by rpki-client