$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66d409a4-3b25-316b-bd62-5c00711dd5d4.roa File: 66d409a4-3b25-316b-bd62-5c00711dd5d4.roa (raw, json) Hash identifier: NwIIHrqGIE3aOgQEyyXHbOZ8Hxo27gOjyDoZxgaHWEg= Subject key identifier: 53:EB:F7:BF:67:38:C0:00:65:B8:94:D2:61:E6:56:0C:46:13:73:AB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0E415CFBA76E1AE129354100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66d409a4-3b25-316b-bd62-5c00711dd5d4.roa Signing time: Tue 02 Sep 2025 01:00:32 +0000 ROA not before: Tue 02 Sep 2025 01:00:32 +0000 ROA not after: Mon 01 Dec 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.35.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0e:41:5c:fb:a7:6e:1a:e1:29:35:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 01:00:32 2025 GMT Not After : Dec 1 02:00:32 2025 GMT Subject: CN=a0a9cbb6-04d7-4c63-abb7-d918f43c23d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:3c:20:f8:09:3d:b0:97:8d:e9:8f:b3:72: fb:fd:f1:0a:3f:c1:a1:27:4f:5f:64:37:c8:fb:48: 71:8f:84:22:0f:b1:48:92:dd:9b:44:78:4d:7a:17: 94:f4:2b:0c:13:ed:b8:22:21:45:2f:25:de:c6:c7: 8f:58:aa:08:26:32:3d:b4:75:37:68:0e:cc:e3:3b: 18:b9:a6:fa:a6:9b:85:00:1f:7a:e9:ee:5c:70:f3: 01:8f:71:34:0e:86:27:26:c1:46:c1:0c:37:62:0b: b2:62:1a:ea:94:e0:ea:79:98:90:97:7a:4b:8a:6c: 95:49:a0:73:48:3c:52:49:03:07:83:6b:e2:e7:02: 12:43:c9:16:bb:e9:bc:1b:d3:85:34:6b:ee:59:6e: 8d:c1:1b:7f:b3:5e:35:fc:bc:95:68:73:fc:49:71: 0c:47:d9:68:18:e9:95:f5:11:de:14:89:c6:32:a3: 98:ff:2b:51:b0:f8:1a:e5:7a:62:01:bc:39:38:5e: b5:ae:58:b3:21:f5:b5:d1:17:c4:51:01:29:df:4d: d5:de:ce:2a:a9:d0:ad:94:3c:c2:43:5d:4b:2c:8d: 30:96:ec:80:e8:c7:ba:09:73:32:33:b7:20:d8:7b: 9c:d1:58:51:a0:16:07:d6:f7:ea:6e:bc:00:16:a7: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EB:F7:BF:67:38:C0:00:65:B8:94:D2:61:E6:56:0C:46:13:73:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/66d409a4-3b25-316b-bd62-5c00711dd5d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.35.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3b:a5:49:f2:38:84:57:c2:0a:1d:1a:cb:33:b3:a5:d6:1c: 4c:30:8e:ab:be:60:38:ac:3c:a8:36:89:35:8a:bf:8c:44:62: af:68:9f:80:c0:bb:12:f1:de:b8:bf:2b:f9:93:83:51:54:c4: bf:91:7d:41:91:49:fd:5f:fc:46:5f:59:63:03:2d:5d:57:05: 3b:b2:4a:aa:9f:43:66:8c:74:18:a8:12:b7:a7:28:52:fc:d3: c2:46:94:99:d6:7c:c3:d4:e1:cf:15:cd:d2:15:b7:d9:29:00: ad:9d:fe:a6:7c:f4:16:2f:b8:af:56:9f:90:c5:85:a6:ed:72: 41:5d:e2:e4:c4:18:bd:7b:db:5e:38:e8:29:f1:87:ef:6f:48: f7:7c:e1:36:b0:48:1e:95:f4:1e:a3:a5:21:3a:80:09:ea:04: 0c:37:bc:88:96:1b:24:15:33:2f:84:bb:90:22:2c:80:58:dc: 4a:7b:5d:1d:c2:c9:83:12:f9:a8:f2:69:d9:d3:51:e8:d3:e2: 42:88:c1:08:35:23:4e:f3:d6:dd:fe:40:87:91:f0:4f:a0:60: f0:67:e4:fb:77:0b:02:32:bf:04:1c:36:2b:4b:e5:39:a0:3e: 78:30:af:83:88:92:21:ed:2b:37:51:92:0f:5a:31:e8:24:ee: 15:7c:b6:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQVz7p24a4Sk1QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTBhOWNiYjYtMDRkNy00YzYzLWFiYjctZDkxOGY0M2MyM2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAc8IPgJPbCXjemPs3L7/fEKP8GhJ09fZDfI +0hxj4QiD7FIkt2bRHhNeheU9CsME+24IiFFLyXexsePWKoIJjI9tHU3aA7M4zsY uab6ppuFAB966e5ccPMBj3E0DoYnJsFGwQw3YguyYhrqlODqeZiQl3pLimyVSaBz SDxSSQMHg2vi5wISQ8kWu+m8G9OFNGvuWW6NwRt/s141/LyVaHP8SXEMR9loGOmV 9RHeFInGMqOY/ytRsPga5XpiAbw5OF61rlizIfW10RfEUQEp303V3s4qqdCtlDzC Q11LLI0wluyA6Me6CXMyM7cg2Huc0VhRoBYH1vfqbrwAFqfwDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPr979nOMAAZbiU0mHmVgxGE3OrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjZkNDA5YTQtM2IyNS0z MTZiLWJkNjItNWMwMDcxMWRkNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyO4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE7pUnyOIRXwgodGsszs6XWHEwwjqu+YDisPKg2iTWKv4xEYq9on4DA uxLx3ri/K/mTg1FUxL+RfUGRSf1f/EZfWWMDLV1XBTuySqqfQ2aMdBioErenKFL8 08JGlJnWfMPU4c8VzdIVt9kpAK2d/qZ89BYvuK9Wn5DFhabtckFd4uTEGL172144 6Cnxh+9vSPd84TawSB6V9B6jpSE6gAnqBAw3vIiWGyQVMy+Eu5AiLIBY3Ep7XR3C yYMS+ajyadnTUejT4kKIwQg1I07z1t3+QIeR8E+gYPBn5Pt3CwIyvwQcNitL5Tmg Pngwr4OIkiHtKzdRkg9aMegk7hV8toE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:05:22 2025 by rpki-client