$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9765ae52-6651-30a2-b630-4a5a7b80c280.roa File: 9765ae52-6651-30a2-b630-4a5a7b80c280.roa (raw, json) Hash identifier: 268V42rzwcQJ5k3O9pAAbWdFsgyWcqcMijt4BDKH4L4= Subject key identifier: 67:EB:97:33:20:BC:E4:E5:CB:47:BC:85:52:3A:7B:C9:BC:6B:6D:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE46143E0D6ACAD8613E3AC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9765ae52-6651-30a2-b630-4a5a7b80c280.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.14.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:43:e0:d6:ac:ad:86:13:e3:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=2e3c034b-193f-440c-b184-955c27f7cbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:f3:04:7a:a3:d0:97:d2:84:34:4b:5c:0c: 3d:88:ba:c9:fa:ef:0d:79:67:66:08:60:e0:59:88: 3c:63:c4:2c:6c:0b:3f:54:a3:86:03:5c:71:0d:a5: f6:92:a9:0f:a8:a1:12:3d:f3:1b:a7:30:3a:1c:6c: 3a:b9:8e:f6:a4:09:2d:29:1c:fb:95:14:13:40:bc: 99:de:76:47:09:99:ea:1b:4c:ba:03:c6:ae:9e:3a: a8:43:d1:bd:b3:08:bd:8e:c7:cf:82:72:4e:09:f3: c1:05:26:8d:e6:fb:7b:c3:0b:92:73:04:0a:55:9e: b4:d3:05:2b:87:fc:87:21:b1:45:03:db:fe:e9:83: 46:ca:b8:4b:1a:be:af:f2:a0:4a:95:57:2d:be:b8: 71:af:c6:ef:2c:8b:10:4d:c0:0b:7e:91:10:ee:0c: d6:7a:5f:9b:94:96:28:65:f2:e0:90:9a:ac:e4:3c: c9:23:c6:3e:f0:e1:d0:40:04:d2:4f:0d:33:47:a6: ef:9b:b6:0c:4e:24:e2:02:5d:23:48:ef:ca:db:62: ad:b1:26:06:61:75:a8:70:d3:01:a7:4f:82:ec:db: db:dd:54:2a:b7:72:c8:bf:31:8a:42:7e:c8:0d:d3: a8:13:3e:85:f2:8e:17:fa:0e:d8:a6:0d:35:79:fa: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EB:97:33:20:BC:E4:E5:CB:47:BC:85:52:3A:7B:C9:BC:6B:6D:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9765ae52-6651-30a2-b630-4a5a7b80c280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.14.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d6:ec:20:e4:9f:f1:75:d2:a6:a0:00:5b:9a:d7:33:46:88: d9:eb:db:33:15:da:af:6c:28:39:52:f1:f6:0c:eb:d7:e8:d1: 00:dc:1f:c0:3d:ae:e3:c7:c4:28:fb:87:22:f7:dc:d2:38:c5: 9a:11:f1:17:0d:10:35:7a:12:cb:d3:43:94:fe:05:be:16:f1: 06:b7:e4:fa:76:f7:fb:dc:62:92:49:3f:1b:95:22:08:19:f5: a0:44:75:2e:ad:45:0f:6c:05:86:a6:fc:0b:c2:c8:f0:32:d2: c1:9f:a1:2a:8d:bd:02:2d:6b:ba:95:29:ac:13:a1:27:06:c5: f5:ee:5b:ed:a5:6e:39:4a:29:12:4f:27:71:3d:6c:71:00:f9: f2:02:0c:72:a3:68:f5:0d:07:29:14:95:64:74:ee:87:3c:00: ec:f8:81:9d:b7:55:95:77:63:fb:4d:9a:83:5d:dd:6c:8d:f9: 0e:63:8b:e3:ba:47:79:54:59:5c:5f:26:35:d0:b0:8e:20:df: 8c:7c:8f:a1:59:9a:a2:67:79:be:1d:cf:72:e8:a5:ff:9c:ee: 63:1c:3a:df:c2:e2:16:4d:c2:67:93:34:65:9b:6a:c2:c3:e2: 16:93:1b:47:cd:2c:bc:11:74:84:1d:a2:0b:15:d0:fc:6a:1c: db:f9:7f:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUPg1qythhPjrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MmUzYzAzNGItMTkzZi00NDBjLWIxODQtOTU1YzI3ZjdjYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc7zBHqj0JfShDRLXAw9iLrJ+u8NeWdmCGDg WYg8Y8QsbAs/VKOGA1xxDaX2kqkPqKESPfMbpzA6HGw6uY72pAktKRz7lRQTQLyZ 3nZHCZnqG0y6A8aunjqoQ9G9swi9jsfPgnJOCfPBBSaN5vt7wwuScwQKVZ600wUr h/yHIbFFA9v+6YNGyrhLGr6v8qBKlVctvrhxr8bvLIsQTcALfpEQ7gzWel+blJYo ZfLgkJqs5DzJI8Y+8OHQQATSTw0zR6bvm7YMTiTiAl0jSO/K22KtsSYGYXWocNMB p0+C7Nvb3VQqt3LIvzGKQn7IDdOoEz6F8o4X+g7Ypg01efohlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfrlzMgvOTly0e8hVI6e8m8a23hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTc2NWFlNTItNjY1MS0z MGEyLWI2MzAtNGE1YTdiODBjMjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFw6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXW7CDkn/F10qagAFua1zNGiNnr2zMV2q9sKDlS8fYM69fo0QDcH8A9 ruPHxCj7hyL33NI4xZoR8RcNEDV6EsvTQ5T+Bb4W8Qa35Pp29/vcYpJJPxuVIggZ 9aBEdS6tRQ9sBYam/AvCyPAy0sGfoSqNvQIta7qVKawToScGxfXuW+2lbjlKKRJP J3E9bHEA+fICDHKjaPUNBykUlWR07oc8AOz4gZ23VZV3Y/tNmoNd3WyN+Q5ji+O6 R3lUWVxfJjXQsI4g34x8j6FZmqJneb4dz3Lopf+c7mMcOt/C4hZNwmeTNGWbasLD 4haTG0fNLLwRdIQdogsV0PxqHNv5f+E= -----END CERTIFICATE-----Generated at Wed Nov 5 01:14:31 2025 by rpki-client