$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4d8fa3b-6b5a-3036-8f8b-8cfe22a3c6fd.roa File: a4d8fa3b-6b5a-3036-8f8b-8cfe22a3c6fd.roa (raw, json) Hash identifier: qiQFLtkkPRiaAxEfMBunhQLSCpcC5mAIofaaV9TH+Lc= Subject key identifier: F0:1D:DB:D5:9A:08:F6:8B:8F:31:32:8D:C2:21:72:EE:A5:7A:15:A6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C19857AA8B080B9520340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4d8fa3b-6b5a-3036-8f8b-8cfe22a3c6fd.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.39.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:19:85:7a:a8:b0:80:b9:52:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=56607364-dc6d-4dd0-af03-5e84a2b25b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:5d:f2:7a:3d:b5:88:4d:69:e3:ea:0f:f3: bd:da:c7:28:2e:c3:25:02:04:7c:2a:4e:e9:76:8f: a0:eb:59:cf:d8:46:1b:51:4a:ef:ce:cc:b1:79:41: 02:e5:15:74:00:22:5e:58:f5:a3:41:73:88:ac:a1: be:bb:bc:7e:6e:f5:fe:85:23:d0:83:d5:ab:72:9e: 6f:43:b6:b2:3f:53:ae:bb:43:be:ec:30:54:0f:09: ab:96:d5:06:e4:f8:2b:1a:ca:65:6e:ff:bf:08:9e: 3a:c5:fb:5e:92:1a:84:a7:65:f6:66:41:7c:f8:7f: 0e:5d:72:77:26:ab:10:11:da:4a:71:8e:ca:aa:90: b4:b6:5c:ae:95:b1:1c:bf:5c:51:b4:50:f1:34:fa: 51:a4:56:6c:cd:ce:03:7a:36:fc:65:a5:f0:c3:4f: d0:6f:66:c6:b3:f9:c6:a2:a5:d3:97:55:ef:de:6b: 82:6a:4b:ef:81:4f:81:4b:cb:46:81:48:6f:5a:87: 8e:49:bd:f3:f9:17:f0:ec:3d:2b:72:35:94:db:46: 0d:02:72:b0:ac:75:68:d0:50:7d:dc:12:94:0f:68: ab:d2:24:d4:db:42:b1:39:83:53:5b:38:81:8d:02: 7f:15:02:e9:b8:21:9f:ed:49:fc:d5:81:87:40:39: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1D:DB:D5:9A:08:F6:8B:8F:31:32:8D:C2:21:72:EE:A5:7A:15:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4d8fa3b-6b5a-3036-8f8b-8cfe22a3c6fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b7:dc:19:ea:92:af:bd:47:26:55:a8:76:54:c4:49:09:1c: 79:66:cb:0b:92:69:1a:f3:2d:ab:02:a4:7b:3b:77:fa:95:eb: 49:b8:47:60:bd:55:64:4e:6c:67:1a:26:06:be:85:1c:dc:b9: cb:e0:4e:02:a1:14:5d:58:cb:d1:b5:76:a5:c6:18:b3:77:6d: e0:32:9a:b2:05:2a:60:06:94:91:8b:0d:84:f1:6c:a3:a8:af: ee:19:56:90:bb:70:8f:b7:20:b9:7a:40:3e:f7:53:5b:17:a0: 5c:40:b2:59:8b:ad:77:54:32:56:3a:cf:70:0d:8b:e7:31:10: f9:b9:57:1e:84:24:d8:97:f6:a9:f3:9e:c7:f2:1d:96:06:c3: 96:4d:a5:ea:04:de:c8:70:78:c4:56:b7:51:d7:58:1a:a3:8d: c3:53:0b:33:79:6c:f5:2c:fb:64:9a:a2:b8:f3:25:9b:e4:22: dc:64:ab:80:ee:da:cf:c8:d8:18:05:57:68:f0:e6:5a:b6:5e: bb:d4:0b:91:36:64:30:be:eb:f8:68:5a:1a:c4:39:c1:a6:cb: 98:ae:4b:52:a7:e3:12:60:18:04:bf:0a:a8:ef:d6:b2:a2:f5: f8:5e:4e:d6:36:5e:3e:02:c6:46:a4:7f:61:57:b3:2b:7f:e8: 2e:e2:0a:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBmFeqiwgLlSA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NTY2MDczNjQtZGM2ZC00ZGQwLWFmMDMtNWU4NGEyYjI1YjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh39d8no9tYhNaePqD/O92scoLsMlAgR8Kk7p do+g61nP2EYbUUrvzsyxeUEC5RV0ACJeWPWjQXOIrKG+u7x+bvX+hSPQg9Wrcp5v Q7ayP1Ouu0O+7DBUDwmrltUG5PgrGsplbv+/CJ46xftekhqEp2X2ZkF8+H8OXXJ3 JqsQEdpKcY7KqpC0tlyulbEcv1xRtFDxNPpRpFZszc4Dejb8ZaXww0/Qb2bGs/nG oqXTl1Xv3muCakvvgU+BS8tGgUhvWoeOSb3z+Rfw7D0rcjWU20YNAnKwrHVo0FB9 3BKUD2ir0iTU20KxOYNTWziBjQJ/FQLpuCGf7Un81YGHQDlXZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAd29WaCPaLjzEyjcIhcu6lehWmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTRkOGZhM2ItNmI1YS0z MDM2LThmOGItOGNmZTIyYTNjNmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFycQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS33Bnqkq+9RyZVqHZUxEkJHHlmywuSaRrzLasCpHs7d/qV60m4R2C9 VWRObGcaJga+hRzcucvgTgKhFF1Yy9G1dqXGGLN3beAymrIFKmAGlJGLDYTxbKOo r+4ZVpC7cI+3ILl6QD73U1sXoFxAslmLrXdUMlY6z3ANi+cxEPm5Vx6EJNiX9qnz nsfyHZYGw5ZNpeoE3shweMRWt1HXWBqjjcNTCzN5bPUs+2SaorjzJZvkItxkq4Du 2s/I2BgFV2jw5lq2XrvUC5E2ZDC+6/hoWhrEOcGmy5iuS1Kn4xJgGAS/Cqjv1rKi 9fheTtY2Xj4Cxkakf2FXsyt/6C7iClM= -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:46 2025 by rpki-client