$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9820e878-1fee-3070-9dcb-57d3b38225a7.roa File: 9820e878-1fee-3070-9dcb-57d3b38225a7.roa (raw, json) Hash identifier: Xyb9Vq/BUyNfUU1zhg1GtikpVOZnSDCchRZ1pMrjy/8= Subject key identifier: EE:FF:57:58:E9:29:89:05:87:E7:33:63:E2:20:47:58:0A:2B:C9:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715CE9E0E522242479C15A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9820e878-1fee-3070-9dcb-57d3b38225a7.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16625 IP address blocks: 23.44.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:e9:e0:e5:22:24:24:79:c1:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=fe6787c1-5c5b-48cb-8ee5-0a597170a58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:16:7a:c2:78:6a:21:e4:7e:9f:9b:ff:89:53: 7e:8a:d5:d9:96:26:25:27:43:23:9d:3e:67:21:a7: e7:33:2b:a2:54:fc:1e:c6:e7:61:2e:5b:65:e5:bf: be:3c:c2:0a:bd:3f:e2:a6:3f:51:3f:42:0d:7e:53: a0:c1:96:51:f1:d4:3e:1d:7f:0e:c1:8e:22:f2:52: 2f:41:69:d6:15:78:65:ae:31:5c:ae:c6:4f:33:de: f2:c4:e4:90:7e:76:95:d4:4f:74:d9:47:e2:41:6f: 11:02:21:5d:13:c2:85:dd:00:f2:b3:f8:51:25:8b: b0:29:cb:cf:fb:93:2c:11:e7:bf:24:5a:26:45:76: 4e:fd:b4:d4:b1:f8:d0:a2:ea:82:b7:d9:d4:28:90: a7:16:2c:58:63:37:74:72:9b:a7:4e:70:77:82:ea: c0:21:20:69:da:f2:0b:ae:c4:18:29:44:14:24:5f: 65:55:35:77:e9:73:50:2b:ae:be:26:2f:bb:ae:d0: 8c:79:f5:f9:da:93:26:95:44:d8:78:09:71:6f:f0: 58:a5:f7:c4:6f:ef:25:8d:e9:52:f6:f3:02:54:a3: 02:54:74:8a:88:ac:60:69:83:ba:67:25:62:30:05: fe:32:8d:cd:c1:8d:4d:86:52:57:d9:2a:50:55:62: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FF:57:58:E9:29:89:05:87:E7:33:63:E2:20:47:58:0A:2B:C9:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9820e878-1fee-3070-9dcb-57d3b38225a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.44.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:24:a5:21:c1:f8:5c:af:52:f0:4e:3d:f6:a0:6c:a6:ae:82: 60:4b:09:6b:a6:73:bd:79:9d:6f:de:cb:0d:0d:02:29:af:56: 78:fd:77:84:44:86:24:3a:6a:0a:69:28:18:d0:b2:f1:ef:dc: d3:7d:6a:6c:a0:31:c7:9d:f7:c2:67:93:bd:2c:2b:a6:4f:e0: 4f:94:0b:ad:5a:63:96:a6:f0:8d:5c:0f:5e:a3:63:0f:e2:ef: 91:70:4b:b4:14:9b:b8:ca:f5:ed:51:07:25:81:3b:51:3b:16: 38:db:81:b0:55:21:ea:a6:f3:3a:da:e0:04:6a:70:6e:ce:21: 51:85:f3:74:0e:92:54:19:3a:0e:41:99:52:ec:36:f1:19:dc: f1:de:23:c6:0b:e5:bc:23:b5:b5:be:b2:d1:cd:69:3d:52:ad: 45:be:38:da:e6:3f:b8:17:e1:ea:2d:5c:db:f6:6d:36:83:d2: 3d:ba:d0:70:3e:75:92:0b:51:73:ea:f7:7e:ee:3d:95:c6:c8: 74:23:5c:65:ad:6d:66:79:ac:17:47:03:fa:65:3e:1a:34:3e: d7:66:7d:28:8c:78:ee:0d:1a:ba:ff:1a:71:7a:68:56:73:c7: 90:84:d4:b8:98:7a:38:b5:53:ad:cd:64:75:67:62:fd:61:ec: 6f:0a:fd:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXOng5SIkJHnBWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZmU2Nzg3YzEtNWM1Yi00OGNiLThlZTUtMGE1OTcxNzBhNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixZ6wnhqIeR+n5v/iVN+itXZliYlJ0MjnT5n IafnMyuiVPwexudhLltl5b++PMIKvT/ipj9RP0INflOgwZZR8dQ+HX8OwY4i8lIv QWnWFXhlrjFcrsZPM97yxOSQfnaV1E902UfiQW8RAiFdE8KF3QDys/hRJYuwKcvP +5MsEee/JFomRXZO/bTUsfjQouqCt9nUKJCnFixYYzd0cpunTnB3gurAISBp2vIL rsQYKUQUJF9lVTV36XNQK66+Ji+7rtCMefX52pMmlUTYeAlxb/BYpffEb+8ljelS 9vMCVKMCVHSKiKxgaYO6ZyViMAX+Mo3NwY1NhlJX2SpQVWLAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7/V1jpKYkFh+czY+IgR1gKK8lMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTgyMGU4NzgtMWZlZS0z MDcwLTlkY2ItNTdkM2IzODIyNWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFywgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYkpSHB+FyvUvBOPfagbKaugmBLCWumc715nW/eyw0NAimvVnj9d4RE hiQ6agppKBjQsvHv3NN9amygMced98Jnk70sK6ZP4E+UC61aY5am8I1cD16jYw/i 75FwS7QUm7jK9e1RByWBO1E7FjjbgbBVIeqm8zra4ARqcG7OIVGF83QOklQZOg5B mVLsNvEZ3PHeI8YL5bwjtbW+stHNaT1SrUW+ONrmP7gX4eotXNv2bTaD0j260HA+ dZILUXPq937uPZXGyHQjXGWtbWZ5rBdHA/plPho0PtdmfSiMeO4NGrr/GnF6aFZz x5CE1LiYeji1U63NZHVnYv1h7G8K/X0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:44:13 2025 by rpki-client