$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7e280b7-e14e-3f23-a411-dfcc49f93ddb.roa File: a7e280b7-e14e-3f23-a411-dfcc49f93ddb.roa (raw, json) Hash identifier: rzNdiUK9VLhaDojsPPL9daoaxL5nF3+SAqaU9qBxQpE= Subject key identifier: 2D:73:00:C2:32:8C:97:42:CC:6F:D1:7E:49:7A:C0:61:33:0B:AA:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B48E210E1429925B2206AD280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7e280b7-e14e-3f23-a411-dfcc49f93ddb.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.3.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:10:e1:42:99:25:b2:20:6a:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=4c2a725d-9646-4ee3-984e-38a720820457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:8e:7d:99:56:23:b4:f7:f8:f7:58:58:32: 2f:59:2d:59:07:c4:61:37:f3:48:5c:98:01:bb:2a: b9:e4:b1:74:72:c5:58:a9:38:7c:25:0a:fc:08:13: 09:33:2b:c0:e0:df:7e:50:8b:a1:78:1b:73:fe:a3: 76:3c:6b:de:49:6a:a5:0e:10:0d:11:6c:1b:ec:18: 52:32:5a:64:38:21:b5:8f:b6:8c:c2:e4:69:70:49: 80:40:ee:29:73:1f:82:d7:d2:73:1d:ba:14:20:e1: 3a:87:19:ac:a7:f1:b9:70:c8:1f:d7:99:e0:35:b4: 04:e0:9e:15:00:42:6a:c3:70:fa:46:c6:cb:a6:f9: 7d:1c:99:b1:8a:c0:93:c5:2c:60:07:b3:b2:cd:c2: 9f:d5:f5:50:a9:42:29:07:f7:58:13:f9:3b:26:fe: fb:45:74:e4:5e:2b:03:5d:31:33:1a:f0:0b:16:3c: 81:d8:e0:90:86:e3:cd:e5:5b:d8:5e:66:65:1f:a9: 64:d1:42:a2:46:a8:eb:13:81:51:7b:59:9e:5a:98: e6:ac:7d:bb:d1:63:35:12:6e:68:e5:71:2a:99:aa: 9f:42:c0:ec:e8:46:19:5c:b5:29:1c:2a:86:75:ba: 5e:f1:16:1e:d2:7b:1e:f4:b7:6b:31:f8:b1:99:71: e8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:73:00:C2:32:8C:97:42:CC:6F:D1:7E:49:7A:C0:61:33:0B:AA:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7e280b7-e14e-3f23-a411-dfcc49f93ddb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:3f:de:fa:2e:8b:4e:fa:a8:ae:f1:59:3a:df:53:51:4b:2b: df:ea:1a:54:8f:e5:fb:63:3a:de:1a:2e:bd:21:8f:03:13:93: 45:51:b7:7f:16:ab:73:c8:e9:e5:0e:8b:99:ad:da:a0:b0:32: 46:77:16:0d:e0:40:a6:46:fc:5c:3c:3d:7c:d0:0d:f9:57:fc: 57:a7:23:97:d9:42:ff:bb:4c:22:ec:c9:f0:df:f2:5d:ed:39: ef:c3:7c:c9:e6:04:3c:92:b7:4a:31:1b:08:91:00:6d:ff:1b: 32:c6:43:05:fa:6e:0b:b2:80:a3:f4:e7:40:28:49:b3:8c:1e: a1:04:2a:f4:73:0d:1a:3a:6c:b5:5f:b1:a0:69:74:73:28:65: 15:5a:47:33:55:0b:1b:90:19:34:8b:81:32:f1:fe:7c:b7:f9: f1:80:70:7b:df:f0:1f:0a:ca:bd:e3:d4:3e:fa:36:dd:56:8c: 0e:71:d3:bd:b4:58:0b:98:b4:83:00:af:f5:cd:78:8f:5c:1b: a5:3d:35:ac:71:d3:8e:d3:c6:a6:94:e7:42:71:41:86:56:9b: 5c:5f:69:c1:3b:57:87:3e:08:50:2e:c4:b7:30:38:ee:92:f0: 64:5c:d4:a8:8b:37:7c:70:4d:26:4e:63:97:b0:48:1d:2c:fe: a7:a7:31:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4hDhQpklsiBq0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NGMyYTcyNWQtOTY0Ni00ZWUzLTk4NGUtMzhhNzIwODIwNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfOOfZlWI7T3+PdYWDIvWS1ZB8RhN/NIXJgB uyq55LF0csVYqTh8JQr8CBMJMyvA4N9+UIuheBtz/qN2PGveSWqlDhANEWwb7BhS MlpkOCG1j7aMwuRpcEmAQO4pcx+C19JzHboUIOE6hxmsp/G5cMgf15ngNbQE4J4V AEJqw3D6RsbLpvl9HJmxisCTxSxgB7OyzcKf1fVQqUIpB/dYE/k7Jv77RXTkXisD XTEzGvALFjyB2OCQhuPN5VvYXmZlH6lk0UKiRqjrE4FRe1meWpjmrH270WM1Em5o 5XEqmaqfQsDs6EYZXLUpHCqGdbpe8RYe0nse9LdrMfixmXHoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1zAMIyjJdCzG/Rfkl6wGEzC6qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTdlMjgwYjctZTE0ZS0z ZjIzLWE0MTEtZGZjYzQ5ZjkzZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs/3voui076qK7xWTrfU1FLK9/qGlSP5ftjOt4aLr0hjwMTk0VRt38W q3PI6eUOi5mt2qCwMkZ3Fg3gQKZG/Fw8PXzQDflX/FenI5fZQv+7TCLsyfDf8l3t Oe/DfMnmBDySt0oxGwiRAG3/GzLGQwX6bguygKP050AoSbOMHqEEKvRzDRo6bLVf saBpdHMoZRVaRzNVCxuQGTSLgTLx/ny3+fGAcHvf8B8Kyr3j1D76Nt1WjA5x0720 WAuYtIMAr/XNeI9cG6U9Naxx047TxqaU50JxQYZWm1xfacE7V4c+CFAuxLcwOO6S 8GRc1KiLN3xwTSZOY5ewSB0s/qenMco= -----END CERTIFICATE-----Generated at Tue Nov 4 20:55:28 2025 by rpki-client