$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f4d7db-0507-39ae-a84c-64b62f44be21.roa File: a9f4d7db-0507-39ae-a84c-64b62f44be21.roa (raw, json) Hash identifier: B5us+7JzOAKKnOW8O207DVTb49Ibzr9QeZ6Jm9sAdIs= Subject key identifier: 68:2C:00:19:F4:4C:F9:42:81:0C:B7:04:DD:A5:0F:34:A9:FF:88:EE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF6FCD6F7EB2693561AE600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f4d7db-0507-39ae-a84c-64b62f44be21.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 35994 IP address blocks: 23.60.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:fc:d6:f7:eb:26:93:56:1a:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=4615d497-a82e-4d12-b7d1-a56c61786fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:f2:fa:88:c3:ee:fe:bf:f1:9d:b4:ec:35: 73:d4:b8:64:fc:2f:32:54:ba:45:18:56:e5:bb:7d: a8:d3:93:78:51:b4:3d:c1:2f:57:23:31:f4:a8:95: 37:b4:91:84:aa:e7:8a:bf:17:27:a4:f1:07:3b:48: 86:cc:40:9f:93:26:e7:6a:f6:4a:77:90:46:6e:a1: 13:b3:1f:40:cd:2e:99:3e:53:ad:ae:be:6e:1e:4b: 88:95:ab:2e:37:7e:a0:dc:5c:ba:bf:a3:d1:1c:19: 2b:19:6f:fd:f9:a8:24:65:81:63:2d:fd:71:e7:74: 1d:a0:7d:cb:22:fb:68:62:3a:e9:0c:91:d9:2c:c3: d6:6f:c9:9f:71:98:f7:9d:fa:72:7f:6b:4b:9a:12: 04:95:2e:e7:24:d4:80:b9:f6:9b:74:13:5e:70:37: b4:8d:d4:a0:a3:87:ac:5d:92:c9:61:37:6b:12:0e: 14:56:92:4f:7c:bb:f0:92:2b:13:86:62:83:c6:fa: 9d:ac:3b:d6:aa:4f:65:77:91:b6:37:2d:e6:34:5a: f0:06:cd:3c:dc:4d:e7:8e:3f:a3:2c:2c:bf:ff:d3: 76:62:53:ba:54:3e:b6:1e:82:44:ad:5a:e8:46:72: d6:14:64:79:e6:1a:9d:5d:60:fa:29:13:a8:50:96: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2C:00:19:F4:4C:F9:42:81:0C:B7:04:DD:A5:0F:34:A9:FF:88:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a9f4d7db-0507-39ae-a84c-64b62f44be21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a5:ab:99:70:c9:f9:ea:6e:5d:16:95:57:c0:56:83:61:fd: 9a:97:07:50:53:7f:5f:08:7e:24:46:10:b0:40:5d:fa:4d:95: 35:18:15:a4:95:f0:a3:51:f9:94:2e:56:34:9c:2c:28:38:0e: b6:d7:99:d1:04:1e:bf:2f:d8:1b:a1:88:41:77:cc:05:8f:12: 49:ee:ce:71:f0:3e:08:bf:46:49:48:56:71:e3:3a:db:98:7e: 7a:95:37:a2:5b:f9:fa:68:bf:33:0c:b1:b3:47:c6:56:ab:ed: 12:64:63:ca:b2:25:f8:3c:d6:9c:29:75:bb:a0:5e:c4:96:e1: cc:d5:a1:fa:41:db:0c:91:09:74:e1:c7:58:17:d0:9b:77:d4: 30:30:91:12:ed:e8:29:e5:c5:aa:56:b5:2e:94:5e:fb:a5:0e: 09:18:fb:7d:3b:73:2f:0d:52:f6:16:6b:78:e2:2f:8c:d3:85: 0d:d9:69:0b:ac:40:92:3d:3b:56:96:20:6e:d2:9c:8a:ad:8f: d2:d5:6c:da:bc:4e:b2:6a:3e:bc:4d:0f:b0:a4:70:15:dd:00: 3e:dc:72:09:d8:44:c2:85:2a:29:5c:5a:1b:d1:cd:33:ed:08: 3d:ed:ce:2e:12:ed:42:b7:1b:fd:11:b2:64:0d:40:ca:71:21: da:14:41:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9vzW9+smk1Ya5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NDYxNWQ0OTctYTgyZS00ZDEyLWI3ZDEtYTU2YzYxNzg2ZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bvy+ojD7v6/8Z207DVz1Lhk/C8yVLpFGFbl u32o05N4UbQ9wS9XIzH0qJU3tJGEqueKvxcnpPEHO0iGzECfkybnavZKd5BGbqET sx9AzS6ZPlOtrr5uHkuIlasuN36g3Fy6v6PRHBkrGW/9+agkZYFjLf1x53QdoH3L IvtoYjrpDJHZLMPWb8mfcZj3nfpyf2tLmhIElS7nJNSAufabdBNecDe0jdSgo4es XZLJYTdrEg4UVpJPfLvwkisThmKDxvqdrDvWqk9ld5G2Ny3mNFrwBs083E3njj+j LCy//9N2YlO6VD62HoJErVroRnLWFGR55hqdXWD6KROoUJbmCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgsABn0TPlCgQy3BN2lDzSp/4juMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTlmNGQ3ZGItMDUwNy0z OWFlLWE4NGMtNjRiNjJmNDRiZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzxiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSlq5lwyfnqbl0WlVfAVoNh/ZqXB1BTf18IfiRGELBAXfpNlTUYFaSV 8KNR+ZQuVjScLCg4DrbXmdEEHr8v2BuhiEF3zAWPEknuznHwPgi/RklIVnHjOtuY fnqVN6Jb+fpovzMMsbNHxlar7RJkY8qyJfg81pwpdbugXsSW4czVofpB2wyRCXTh x1gX0Jt31DAwkRLt6CnlxapWtS6UXvulDgkY+307cy8NUvYWa3jiL4zThQ3ZaQus QJI9O1aWIG7SnIqtj9LVbNq8TrJqPrxND7CkcBXdAD7ccgnYRMKFKilcWhvRzTPt CD3tzi4S7UK3G/0RsmQNQMpxIdoUQco= -----END CERTIFICATE-----Generated at Wed Nov 5 03:34:50 2025 by rpki-client