$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c36d6db-d576-34da-8a80-a1cda15a3c66.roa File: 8c36d6db-d576-34da-8a80-a1cda15a3c66.roa (raw, json) Hash identifier: AYw8IlcMF3w+6t1nT9s54ujjDlV+38pSNZAxbd+acE0= Subject key identifier: A3:F8:86:E4:6D:ED:A1:43:81:5E:21:C1:B6:54:42:47:CB:3F:F9:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19E6218D913A74C9C5200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c36d6db-d576-34da-8a80-a1cda15a3c66.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.39.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9e:62:18:d9:13:a7:4c:9c:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=08f06f52-e400-4bd2-9ae6-145dabcb26c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:af:eb:de:2c:82:93:57:9b:53:96:65:68: e4:65:fe:39:fb:a8:8a:15:9d:87:e3:83:fc:36:8d: 30:51:24:de:cc:54:e0:7b:bf:ab:9f:e5:a2:f8:70: aa:b5:e3:23:d5:fd:24:08:8e:2e:50:7c:52:4c:78: cc:e0:3c:69:d8:fe:08:0e:3b:a0:cf:a4:70:f4:29: 20:78:af:c9:57:0f:68:71:d4:1c:a0:d3:2f:04:10: 5e:59:72:f1:5d:c0:f7:1f:56:6c:03:83:0a:1a:9a: e3:ff:15:39:54:4c:ec:82:09:dd:b3:c8:e1:be:f9: 05:30:47:6f:87:7f:21:8d:1e:26:85:01:7a:6c:ae: e1:3a:1c:3d:37:07:30:19:dd:a5:b0:a4:37:33:f6: 6b:e7:1b:b5:2b:aa:97:a0:b6:dd:b0:b4:ad:c1:ec: 53:1b:e0:b7:1e:51:45:b0:b6:00:61:e0:0a:c0:36: 79:8f:d4:c1:80:8b:b5:60:a2:6d:14:f3:25:c4:7a: d8:f2:84:94:89:24:eb:45:41:8d:e1:ca:2a:05:6f: ab:ee:ad:25:21:ea:fc:ee:fd:42:c6:4b:35:b7:85: ec:e2:3d:31:cc:95:ab:12:25:d7:7a:80:f9:65:67: 64:b4:85:99:20:57:80:f2:3d:dc:a5:39:33:18:33: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F8:86:E4:6D:ED:A1:43:81:5E:21:C1:B6:54:42:47:CB:3F:F9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c36d6db-d576-34da-8a80-a1cda15a3c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:fc:aa:de:b4:04:7c:88:32:56:2a:0f:0d:ce:36:68:2c:44: a1:c8:0a:c7:8b:86:bb:3f:59:60:f7:be:3a:84:8c:b3:e5:55: 1a:47:87:06:bb:f3:d2:16:cb:ae:bd:06:98:cc:73:5e:ec:99: 56:3c:80:74:72:b8:3a:a6:2b:a4:28:67:49:ea:a5:fd:b0:b4: f2:c7:a7:9c:1e:a4:e9:1f:00:d9:ee:4d:8a:89:d5:84:38:34: 04:36:96:3b:c3:7c:e0:30:27:ed:af:fc:52:8a:16:80:46:fd: 41:04:08:e0:fb:83:dc:b6:43:11:19:3c:52:2e:ff:de:fd:10: fa:6b:34:0d:33:b5:3b:55:dd:ed:c7:60:c5:77:0e:14:0e:3c: f0:ce:f6:b8:23:a5:36:9f:77:ac:f5:37:a5:e7:2e:50:21:cd: 96:23:72:d5:7f:5a:11:9e:21:48:3c:38:97:ba:61:ad:ad:28: 03:19:4d:11:14:31:97:67:59:c3:c1:da:83:f1:50:58:26:73: 05:bf:74:af:52:3a:87:67:e9:30:31:7e:f0:fd:dd:3f:37:f1: e9:72:26:f6:10:a2:18:bd:0f:37:b6:f0:a2:ba:e1:f6:38:0f: 76:2d:3c:34:49:7d:38:af:b4:01:d1:14:7b:55:6f:b0:94:86: 34:7f:38:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Z5iGNkTp0ycUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MDhmMDZmNTItZTQwMC00YmQyLTlhZTYtMTQ1ZGFiY2IyNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosev694sgpNXm1OWZWjkZf45+6iKFZ2H44P8 No0wUSTezFTge7+rn+Wi+HCqteMj1f0kCI4uUHxSTHjM4Dxp2P4IDjugz6Rw9Ckg eK/JVw9ocdQcoNMvBBBeWXLxXcD3H1ZsA4MKGprj/xU5VEzsggnds8jhvvkFMEdv h38hjR4mhQF6bK7hOhw9NwcwGd2lsKQ3M/Zr5xu1K6qXoLbdsLStwexTG+C3HlFF sLYAYeAKwDZ5j9TBgIu1YKJtFPMlxHrY8oSUiSTrRUGN4coqBW+r7q0lIer87v1C xks1t4Xs4j0xzJWrEiXXeoD5ZWdktIWZIFeA8j3cpTkzGDPDJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKP4huRt7aFDgV4hwbZUQkfLP/klMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMzNmQ2ZGItZDU3Ni0z NGRhLThhODAtYTFjZGExNWEzYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj8qt60BHyIMlYqDw3ONmgsRKHICseLhrs/WWD3vjqEjLPlVRpHhwa7 89IWy669BpjMc17smVY8gHRyuDqmK6QoZ0nqpf2wtPLHp5wepOkfANnuTYqJ1YQ4 NAQ2ljvDfOAwJ+2v/FKKFoBG/UEECOD7g9y2QxEZPFIu/979EPprNA0ztTtV3e3H YMV3DhQOPPDO9rgjpTafd6z1N6XnLlAhzZYjctV/WhGeIUg8OJe6Ya2tKAMZTREU MZdnWcPB2oPxUFgmcwW/dK9SOodn6TAxfvD93T838elyJvYQohi9Dze28KK64fY4 D3YtPDRJfTivtAHRFHtVb7CUhjR/OEw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:57:12 2025 by rpki-client