$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3131973-62d3-3f12-9801-271ad4e4d188.roa File: b3131973-62d3-3f12-9801-271ad4e4d188.roa (raw, json) Hash identifier: NeJKsuNdXLBKbhHYRYe1T9GP4JPAsfMfr5LZ8mgT6lk= Subject key identifier: 4F:BE:FA:5F:DB:DE:21:85:3E:01:23:1A:94:85:88:AE:24:23:D3:D9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF707747C7D7C5F91323980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3131973-62d3-3f12-9801-271ad4e4d188.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.56.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:07:74:7c:7d:7c:5f:91:32:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=cbbec650-5129-4195-8d62-6b3459dbce23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:1f:d3:8e:21:ce:a7:37:3d:8a:40:f1:7a: b2:16:c0:f0:53:f0:73:13:7f:95:64:e7:6d:c3:81: fd:bf:58:4c:f8:bb:53:fd:b9:f2:31:a6:dc:6f:91: 85:9a:18:d4:2c:5b:16:22:98:1f:51:0f:24:08:b2: 28:68:84:2e:38:af:11:90:fa:37:30:e1:de:85:3b: 01:3e:f7:f6:d2:f8:84:a4:c2:10:15:84:cf:25:c6: 46:bd:16:69:7a:bd:14:d6:cd:3b:a2:2d:78:cc:4c: 89:e4:93:a3:c8:a4:e6:e3:85:37:23:fe:d3:fc:8b: 02:1e:47:35:bc:a5:59:02:b9:13:af:8c:60:b7:cc: 0e:cd:81:2a:d9:55:2c:af:7a:df:8c:64:65:5a:77: fd:e7:5c:d3:45:10:3f:a4:0a:6c:d1:37:e0:b9:45: 63:12:33:bf:23:ef:38:df:27:c6:72:06:e5:b8:7a: e0:15:b4:67:06:9c:c6:c6:bc:a9:f2:8f:5d:0b:f3: 72:8a:c1:0d:e1:2e:49:6f:2c:d8:57:ad:27:18:32: b6:3e:7a:4d:cb:96:c6:0c:cf:2c:ef:8d:f4:02:d3: b7:4d:28:46:7c:e0:a4:05:ac:58:fb:aa:b7:41:54: e3:d5:b9:1c:a7:12:8e:be:b7:64:3c:7c:75:48:57: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BE:FA:5F:DB:DE:21:85:3E:01:23:1A:94:85:88:AE:24:23:D3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3131973-62d3-3f12-9801-271ad4e4d188.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.56.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7b:bd:8c:3c:2a:d9:4d:ec:84:1c:bc:22:ca:1a:78:69:a3: fd:4e:b9:3f:e4:e2:36:89:16:5e:72:a3:65:ef:72:5d:74:8e: d0:58:93:3e:33:58:06:69:ef:3b:97:95:33:db:30:06:d8:83: 17:48:cb:45:d2:9e:e4:74:68:1e:93:ad:5e:05:69:87:f0:8a: 28:40:3f:4c:a8:24:70:a1:65:39:2a:ff:27:cc:14:97:61:db: 67:e2:25:d7:f9:6b:fe:0a:67:ca:04:c6:8a:57:bf:35:b2:f5: ba:23:14:c1:6f:35:10:18:5b:49:35:e8:22:7d:a8:7f:56:4c: 8e:3f:16:f2:a6:88:6f:73:06:21:cb:ee:36:86:40:b1:33:0d: d7:4f:01:c8:84:de:20:0e:6d:7f:f1:26:56:c7:6e:7c:1a:96: 4d:e6:7d:2a:b5:5a:5f:d4:6a:50:2b:12:ee:95:3b:9e:ef:f2: 39:80:30:ee:87:42:c8:1f:8e:30:3e:5e:1f:3e:fb:44:6a:3a: 04:61:f1:6a:59:a9:18:72:66:d6:7e:2e:7b:67:23:7b:7c:85: 21:e4:03:b3:bb:4b:35:a8:52:91:8a:d4:04:ed:4d:67:45:6d: 5a:03:a5:cf:f8:70:5f:c4:27:5b:5b:1c:be:0c:50:b4:92:14: 3c:c2:15:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9wd0fH18X5EyOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2JiZWM2NTAtNTEyOS00MTk1LThkNjItNmIzNDU5ZGJjZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobAf044hzqc3PYpA8XqyFsDwU/BzE3+VZOdt w4H9v1hM+LtT/bnyMabcb5GFmhjULFsWIpgfUQ8kCLIoaIQuOK8RkPo3MOHehTsB Pvf20viEpMIQFYTPJcZGvRZper0U1s07oi14zEyJ5JOjyKTm44U3I/7T/IsCHkc1 vKVZArkTr4xgt8wOzYEq2VUsr3rfjGRlWnf951zTRRA/pAps0TfguUVjEjO/I+84 3yfGcgbluHrgFbRnBpzGxryp8o9dC/NyisEN4S5JbyzYV60nGDK2PnpNy5bGDM8s 7430AtO3TShGfOCkBaxY+6q3QVTj1bkcpxKOvrdkPHx1SFeoiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+++l/b3iGFPgEjGpSFiK4kI9PZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjMxMzE5NzMtNjJkMy0z ZjEyLTk4MDEtMjcxYWQ0ZTRkMTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFziPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER7vYw8KtlN7IQcvCLKGnhpo/1OuT/k4jaJFl5yo2Xvcl10jtBYkz4z WAZp7zuXlTPbMAbYgxdIy0XSnuR0aB6TrV4FaYfwiihAP0yoJHChZTkq/yfMFJdh 22fiJdf5a/4KZ8oExopXvzWy9bojFMFvNRAYW0k16CJ9qH9WTI4/FvKmiG9zBiHL 7jaGQLEzDddPAciE3iAObX/xJlbHbnwalk3mfSq1Wl/UalArEu6VO57v8jmAMO6H QsgfjjA+Xh8++0RqOgRh8WpZqRhyZtZ+LntnI3t8hSHkA7O7SzWoUpGK1ATtTWdF bVoDpc/4cF/EJ1tbHL4MULSSFDzCFf0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:03 2025 by rpki-client