$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0b7e886-ca3c-3177-a552-8a4e53c1034c.roa File: b0b7e886-ca3c-3177-a552-8a4e53c1034c.roa (raw, json) Hash identifier: 7btgACiJb4XxyV2eWdh3XpIYQ+LZ6tI+X7t85/WWZMo= Subject key identifier: 8A:39:5F:D4:CE:5E:59:0F:0D:43:B0:69:C9:09:2B:F9:14:D7:34:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B24970427C27DBFB084612AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0b7e886-ca3c-3177-a552-8a4e53c1034c.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.52.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:97:04:27:c2:7d:bf:b0:84:61:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=663096ca-c4e9-4590-aa9c-6643cb9e5f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:57:2e:e1:c1:9b:1c:80:69:1f:c6:d7:50: 2f:7b:12:6c:62:c4:bc:e2:a7:60:8d:ad:78:8e:c2: df:ec:73:14:1e:ec:45:e6:c4:2f:90:db:eb:85:ae: 5e:3a:bb:33:26:46:f4:72:ad:ba:17:02:ce:c7:ba: e3:f5:3e:11:81:7e:e7:71:82:93:9a:9e:24:65:23: e8:f4:46:53:00:7c:a8:ec:83:51:71:d4:db:0f:b9: e1:7a:b3:78:83:85:76:f0:3b:af:e4:8d:aa:ad:4f: 42:c7:71:7d:65:bb:b4:76:b2:ed:1c:5c:09:14:ee: 39:d0:23:70:f3:b3:8e:ff:54:cb:1b:35:d7:ac:ca: 68:e9:87:00:6a:a0:b8:38:29:c8:b9:ed:d9:1e:f8: 04:b3:20:35:6d:fa:73:e8:5d:3c:46:bd:1c:78:fc: 83:ff:d9:84:61:40:e5:0c:b8:e7:27:4a:2c:3e:95: 7d:a3:88:7f:18:54:da:17:f6:d9:e9:64:60:c1:ff: 1c:70:39:63:b0:21:71:d1:89:6f:b9:09:2e:2c:9b: fb:f4:84:c9:58:ca:86:ea:f9:1e:80:a4:d8:71:a1: c1:93:fd:88:21:ce:e3:47:09:69:bf:21:ed:18:3a: 8f:d8:a3:a2:85:9c:24:c7:0f:65:cb:ac:3c:62:7f: 67:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:39:5F:D4:CE:5E:59:0F:0D:43:B0:69:C9:09:2B:F9:14:D7:34:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0b7e886-ca3c-3177-a552-8a4e53c1034c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.52.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e2:b1:e1:03:b6:0f:50:ca:c8:af:50:11:17:bc:d9:bb:e0: 4d:db:f3:e0:a5:3c:57:47:65:f5:21:87:fc:8f:3f:39:29:85: fe:7a:cc:a9:6e:29:01:58:8a:ce:f6:4a:42:aa:1f:88:0e:ba: 2c:da:fe:50:26:f8:b8:19:01:d1:ef:82:10:9d:75:56:3b:a6: 2e:9f:8a:27:e5:97:60:e6:7c:c9:c5:4b:26:a2:37:75:af:5a: 8a:2d:f2:a2:59:c2:f7:74:11:05:6e:7e:40:e2:16:44:23:b4: 98:6b:6a:49:ff:fe:55:35:de:4d:85:8c:14:80:51:f2:49:9d: f3:4c:99:a3:dd:cd:e4:cc:61:65:6c:48:d3:bd:95:6f:92:03: f8:d1:7a:3c:ef:dd:c3:ab:c1:dd:e7:f6:69:98:6a:13:10:e9: 00:b4:ad:d2:41:f0:10:d5:87:0c:f4:33:2a:6c:00:9c:2c:4c: 5d:fe:f7:ad:67:99:ae:3b:ae:c7:00:57:2d:dd:49:0d:d9:92: ef:0e:a2:41:8e:55:95:9e:00:88:f4:30:cf:23:49:eb:39:6d: 0c:42:e6:4f:22:77:d8:d9:58:56:51:74:54:09:5c:19:4e:f4: a1:dd:15:8c:6d:42:1f:12:a0:b7:b8:38:35:b7:ea:0a:4b:1e: b0:71:fd:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklwQnwn2/sIRhKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NjYzMDk2Y2EtYzRlOS00NTkwLWFhOWMtNjY0M2NiOWU1ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPFXLuHBmxyAaR/G11AvexJsYsS84qdgja14 jsLf7HMUHuxF5sQvkNvrha5eOrszJkb0cq26FwLOx7rj9T4RgX7ncYKTmp4kZSPo 9EZTAHyo7INRcdTbD7nherN4g4V28Duv5I2qrU9Cx3F9Zbu0drLtHFwJFO450CNw 87OO/1TLGzXXrMpo6YcAaqC4OCnIue3ZHvgEsyA1bfpz6F08Rr0cePyD/9mEYUDl DLjnJ0osPpV9o4h/GFTaF/bZ6WRgwf8ccDljsCFx0YlvuQkuLJv79ITJWMqG6vke gKTYcaHBk/2IIc7jRwlpvyHtGDqP2KOihZwkxw9ly6w8Yn9nXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo5X9TOXlkPDUOwackJK/kU1zSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBiN2U4ODYtY2EzYy0z MTc3LWE1NTItOGE0ZTUzYzEwMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFzSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7iseEDtg9QysivUBEXvNm74E3b8+ClPFdHZfUhh/yPPzkphf56zKlu KQFYis72SkKqH4gOuiza/lAm+LgZAdHvghCddVY7pi6fiifll2DmfMnFSyaiN3Wv Woot8qJZwvd0EQVufkDiFkQjtJhrakn//lU13k2FjBSAUfJJnfNMmaPdzeTMYWVs SNO9lW+SA/jRejzv3cOrwd3n9mmYahMQ6QC0rdJB8BDVhwz0MypsAJwsTF3+961n ma47rscAVy3dSQ3Zku8OokGOVZWeAIj0MM8jSes5bQxC5k8id9jZWFZRdFQJXBlO 9KHdFYxtQh8SoLe4ODW36gpLHrBx/eo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:19:13 2025 by rpki-client