$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac8a2b57-c791-3476-993e-39ff9f5fd909.roa File: ac8a2b57-c791-3476-993e-39ff9f5fd909.roa (raw, json) Hash identifier: ZPnkct2zduHfGzxKh1FrUZjSoXt0LxiQaxX5/wq533E= Subject key identifier: 24:A9:31:66:8A:C8:B0:BF:DA:59:83:1B:3F:FE:3C:1A:D6:4E:CD:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1AE257EE7913E16F74880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac8a2b57-c791-3476-993e-39ff9f5fd909.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.42.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:ae:25:7e:e7:91:3e:16:f7:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=cac10fa1-143e-439e-8a20-6e7e08488c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:32:90:57:c1:5b:e8:42:9d:1c:95:05:87: 42:89:58:69:61:d6:b9:71:14:a1:ae:30:74:54:07: 9c:73:08:b9:63:5c:24:34:1e:cb:2f:8e:26:92:2a: ae:d8:a0:43:0d:1a:cf:d0:e8:82:0e:49:81:50:f6: fb:ae:ed:de:35:ad:cc:ee:2b:18:f5:72:f2:3e:f8: 7c:4f:b7:47:98:d1:1d:8a:45:eb:e0:1f:fc:34:61: 68:7b:a2:fb:e5:38:ae:f3:ab:53:b4:d4:21:5a:58: 1d:6b:49:31:d9:8f:b1:24:8b:5e:e7:c5:e0:36:05: 35:19:2f:da:68:0e:a9:6b:a7:05:0e:70:7c:95:af: a2:07:d2:ff:b3:fc:59:d6:39:ac:d1:fb:56:03:a3: 34:54:ff:be:78:88:86:69:ac:1a:d6:28:96:be:ea: d5:54:8f:bd:c2:89:30:4e:ce:d4:fa:6b:b9:7c:6a: 92:46:26:66:e5:35:3a:2b:d0:ea:73:d3:aa:63:7a: 69:e1:e1:00:68:49:c5:e1:7b:d8:32:da:39:0c:8a: 16:e1:b7:a4:31:6c:c9:f4:3e:1a:0f:18:bf:78:7d: 24:ac:9e:76:8c:c4:f2:f1:bd:9d:b2:05:86:91:ac: 22:a9:4c:16:f7:d2:d2:f2:b2:b9:c9:51:32:2a:0c: 3f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A9:31:66:8A:C8:B0:BF:DA:59:83:1B:3F:FE:3C:1A:D6:4E:CD:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac8a2b57-c791-3476-993e-39ff9f5fd909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:63:9a:86:a0:b8:b6:e9:70:86:20:b6:df:18:be:1a:73:1a: 1a:81:f8:5e:15:1e:70:ab:dc:b0:c6:71:e6:63:a0:7f:1f:1e: 69:55:1c:17:62:e0:c1:da:df:9d:a1:94:e8:92:17:82:a5:9b: 04:20:3d:f4:a5:7a:e1:c5:a2:c9:0c:3f:65:78:ef:62:9a:f9: 07:4e:81:8f:4d:55:b5:88:de:35:71:12:cf:49:55:00:58:b4: f9:45:35:fc:5c:b1:cb:c0:8a:84:ca:a6:8c:e5:83:a9:ac:bd: ae:f6:c7:2d:d7:5c:9a:28:9a:c0:8e:7e:2f:1a:33:b8:8d:93: 19:62:92:be:92:33:6d:85:db:e9:0a:ad:a8:03:f6:02:55:ed: 8b:39:4f:7b:44:64:08:f0:7c:bc:ed:55:03:79:d7:aa:dd:ff: 34:7b:67:9e:fe:68:33:51:c6:d0:e8:c8:8c:b8:31:88:46:22: 6d:b4:6a:c3:86:65:72:d0:5d:ee:c8:33:4a:b3:eb:a0:93:7e: 30:e7:e4:17:17:83:e9:b5:29:39:86:23:5c:f1:1c:26:4e:0a: 52:3a:ba:36:92:22:28:c3:06:e5:34:57:6d:e2:7b:07:33:1f: 16:f4:93:aa:ee:78:8d:e1:28:be:4c:65:23:81:10:d6:0d:0b: 8e:4e:2d:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0a4lfueRPhb3SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk Y2FjMTBmYTEtMTQzZS00MzllLThhMjAtNmU3ZTA4NDg4YzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+wykFfBW+hCnRyVBYdCiVhpYda5cRShrjB0 VAeccwi5Y1wkNB7LL44mkiqu2KBDDRrP0OiCDkmBUPb7ru3eNa3M7isY9XLyPvh8 T7dHmNEdikXr4B/8NGFoe6L75Tiu86tTtNQhWlgda0kx2Y+xJIte58XgNgU1GS/a aA6pa6cFDnB8la+iB9L/s/xZ1jms0ftWA6M0VP++eIiGaawa1iiWvurVVI+9wokw Ts7U+mu5fGqSRiZm5TU6K9Dqc9OqY3pp4eEAaEnF4XvYMto5DIoW4bekMWzJ9D4a Dxi/eH0krJ52jMTy8b2dsgWGkawiqUwW99LS8rK5yVEyKgw/WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSpMWaKyLC/2lmDGz/+PBrWTs2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWM4YTJiNTctYzc5MS0z NDc2LTk5M2UtMzlmZjlmNWZkOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFypQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdjmoaguLbpcIYgtt8YvhpzGhqB+F4VHnCr3LDGceZjoH8fHmlVHBdi 4MHa352hlOiSF4KlmwQgPfSleuHFoskMP2V472Ka+QdOgY9NVbWI3jVxEs9JVQBY tPlFNfxcscvAioTKpozlg6msva72xy3XXJoomsCOfi8aM7iNkxlikr6SM22F2+kK ragD9gJV7Ys5T3tEZAjwfLztVQN516rd/zR7Z57+aDNRxtDoyIy4MYhGIm20asOG ZXLQXe7IM0qz66CTfjDn5BcXg+m1KTmGI1zxHCZOClI6ujaSIijDBuU0V23iewcz Hxb0k6rueI3hKL5MZSOBENYNC45OLW8= -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:30 2025 by rpki-client