$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa File: b252baa0-5024-3a19-9a9b-c86ed4790812.roa (raw, json) Hash identifier: GtJuo2263NnQuJGDxH431BOVo7AXrJndhYqkWjUafug= Subject key identifier: 95:D7:42:B7:0B:F8:F0:FB:E1:5D:2C:E2:B0:6F:2D:7F:CD:7C:D8:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B715CEA4EF399A81ED2FEAD00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16625 IP address blocks: 23.58.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ea:4e:f3:99:a8:1e:d2:fe:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=ad2bc102-191d-40ca-970b-114b57630bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:4a:1a:bd:ba:f8:2e:10:27:21:85:91:01: a1:3c:09:14:cf:a8:61:f8:82:a6:f8:6d:18:49:22: 38:1b:59:9a:9a:4f:4a:8d:96:b4:20:27:24:e6:2c: 45:64:f3:ee:17:a8:e9:cc:01:86:0d:a8:c5:a8:5e: 30:b5:62:ed:69:91:cd:89:28:15:72:dd:f6:15:09: 6d:7a:92:08:f3:94:c8:85:01:05:21:6c:bb:8e:86: e1:66:e0:38:96:b9:41:a9:11:d6:89:db:c4:7b:86: 59:d6:8c:86:29:3a:dd:cc:e7:2b:51:ea:41:19:6f: b8:d1:4c:94:0a:18:b1:51:64:1e:a9:e9:e2:f6:ec: d9:48:72:0b:3b:7b:5a:77:79:0c:8a:7a:df:56:cd: e3:e7:47:bb:aa:c2:e4:f0:3c:a5:a9:1c:11:cc:fe: 61:9b:dc:61:68:d5:92:2f:9a:d7:a4:26:9f:46:7f: c2:33:38:1f:b6:23:fd:09:75:f0:49:4f:08:b4:9f: d3:b7:59:40:56:22:39:ee:bb:28:55:24:ad:46:39: cc:e1:d4:62:f9:cf:66:31:dc:07:e2:4f:5c:ad:a4: 22:c3:01:ef:96:fd:58:7b:a9:f1:87:fd:f2:97:a8: c7:08:51:56:de:47:a0:ff:11:37:9c:a7:4c:a8:45: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D7:42:B7:0B:F8:F0:FB:E1:5D:2C:E2:B0:6F:2D:7F:CD:7C:D8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:68:76:85:8b:41:a9:5b:05:64:0b:d6:b0:23:2c:84:92:3a: e6:cb:a7:45:ce:42:b4:7a:1c:90:e8:c1:0d:7e:9b:86:5a:3e: 2e:0f:1c:83:99:b9:89:22:c6:d0:92:ed:86:eb:78:51:34:fd: 29:29:ca:62:41:77:4c:99:39:98:72:89:55:84:90:a2:5f:d4: 16:cf:ac:c5:3a:b8:6b:c1:66:a5:1a:fe:bd:64:e2:6e:62:b9: 4f:bd:4e:10:da:62:3b:12:7d:78:54:81:52:af:df:2c:78:08: 71:d6:dc:15:76:d0:4e:22:d5:65:b1:b7:e1:a4:db:a8:e7:ae: 23:3b:89:c9:20:52:e4:ac:89:9f:5b:35:93:ae:fc:45:a5:c9: 82:b5:89:03:de:38:fe:25:30:12:62:72:11:a1:f9:e9:c2:27: 7e:9a:c0:53:97:f4:74:02:75:06:d0:14:25:77:a9:86:40:6a: 81:ae:d2:14:42:34:9c:44:26:c1:8a:d4:31:4f:7b:85:e8:f4: e2:8a:18:c1:cb:b6:73:5d:e7:8c:19:72:a4:77:5a:70:4c:95: 32:62:fd:55:04:92:23:d2:0e:76:47:7b:14:0e:1a:eb:8c:97: 43:20:08:a7:0c:f8:fb:cb:df:85:f5:99:57:5d:06:05:5e:c0: 0f:08:c4:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXOpO85moHtL+rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YWQyYmMxMDItMTkxZC00MGNhLTk3MGItMTE0YjU3NjMwYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyhKGr26+C4QJyGFkQGhPAkUz6hh+IKm+G0Y SSI4G1mamk9KjZa0ICck5ixFZPPuF6jpzAGGDajFqF4wtWLtaZHNiSgVct32FQlt epII85TIhQEFIWy7jobhZuA4lrlBqRHWidvEe4ZZ1oyGKTrdzOcrUepBGW+40UyU ChixUWQeqeni9uzZSHILO3tad3kMinrfVs3j50e7qsLk8DylqRwRzP5hm9xhaNWS L5rXpCafRn/CMzgftiP9CXXwSU8ItJ/Tt1lAViI57rsoVSStRjnM4dRi+c9mMdwH 4k9craQiwwHvlv1Ye6nxh/3yl6jHCFFW3keg/xE3nKdMqEUr6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXXQrcL+PD74V0s4rBvLX/NfNjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI1MmJhYTAtNTAyNC0z YTE5LTlhOWItYzg2ZWQ0NzkwODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1odoWLQalbBWQL1rAjLISSOubLp0XOQrR6HJDowQ1+m4ZaPi4PHIOZ uYkixtCS7YbreFE0/SkpymJBd0yZOZhyiVWEkKJf1BbPrMU6uGvBZqUa/r1k4m5i uU+9ThDaYjsSfXhUgVKv3yx4CHHW3BV20E4i1WWxt+Gk26jnriM7ickgUuSsiZ9b NZOu/EWlyYK1iQPeOP4lMBJichGh+enCJ36awFOX9HQCdQbQFCV3qYZAaoGu0hRC NJxEJsGK1DFPe4Xo9OKKGMHLtnNd54wZcqR3WnBMlTJi/VUEkiPSDnZHexQOGuuM l0MgCKcM+PvL34X1mVddBgVewA8IxMI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:21:32 2025 by rpki-client