$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8010ea4-42e4-3614-8fde-6267f61a8817.roa File: c8010ea4-42e4-3614-8fde-6267f61a8817.roa (raw, json) Hash identifier: 9eKR6g5z2ThBopaW0KIBEM6k+F63aFjcP0DrPca6y2A= Subject key identifier: 1C:C2:32:DB:02:D0:49:A5:C1:E3:AB:E8:23:5B:93:E7:8E:83:86:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3DBA2553D1C35FF3B5B05240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8010ea4-42e4-3614-8fde-6267f61a8817.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.3.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:25:53:d1:c3:5f:f3:b5:b0:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d7fabfc9-2aed-4294-8454-8b6768c68d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:46:0f:ff:84:d1:f0:67:e9:9c:fc:3d:f9: 02:37:e0:ae:45:b0:a3:e9:5b:79:fd:9b:97:00:78: 14:cd:3c:99:49:39:e7:50:79:3d:5a:7a:0d:a4:df: cb:b4:b1:26:54:63:93:7d:9a:4b:fa:b1:e9:17:ae: 0b:5c:4d:f1:43:1b:24:47:96:16:46:72:04:b9:11: 25:33:67:24:1e:93:0c:60:f5:3d:34:e8:db:c6:ca: e2:e7:d2:bd:b2:be:c6:f1:96:a8:6e:72:a8:6c:3a: 55:39:04:e1:6e:8b:9f:b8:47:77:25:f6:41:24:77: f3:62:31:a8:3c:23:89:e1:55:3d:f7:2e:21:72:93: ff:a3:85:8c:8b:08:7e:5d:58:ce:2b:04:d5:84:1b: 81:1d:71:61:0a:5c:9d:2c:91:03:cc:86:5c:e1:6a: 0e:56:68:91:07:85:89:22:28:94:44:f5:a6:79:5b: 4c:69:83:45:d9:3d:d0:14:65:7d:09:e1:82:f4:f3: 3c:f6:ae:db:6a:07:04:0b:fa:45:ea:af:77:2a:37: 6a:be:2f:20:f3:07:f2:40:c1:ed:e8:98:08:02:3e: 8f:e9:b7:13:7f:68:af:d4:49:be:1e:55:4b:b5:73: ea:96:cc:38:1c:56:8a:72:4c:fb:87:e1:1b:35:07: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C2:32:DB:02:D0:49:A5:C1:E3:AB:E8:23:5B:93:E7:8E:83:86:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8010ea4-42e4-3614-8fde-6267f61a8817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e7:a0:73:f9:96:7d:f0:5d:17:2c:fe:ae:b2:b3:4d:b1:57: 2d:55:b5:6a:52:9f:5a:72:92:7e:4c:73:53:52:2d:91:6d:b6: c8:fe:4f:02:3c:14:0d:bf:52:4b:2e:3c:66:87:b9:5a:95:92: e8:62:ab:f3:15:a2:cc:ea:77:5e:44:d1:dc:be:52:f7:e5:70: 71:35:cd:2c:20:77:57:0f:fc:18:e1:05:1a:29:0e:ea:42:e9: 89:22:65:ac:1b:4c:d1:6f:cc:8d:7c:07:2b:2a:51:51:7a:d1: 71:14:be:29:f3:3a:78:89:75:f1:2d:fa:20:ca:15:6f:74:ad: a9:ff:f1:68:82:49:c2:e8:b9:3b:0b:07:06:cf:97:be:2f:da: a0:97:e2:e4:e0:a5:cf:9e:f5:ca:f5:e1:7a:d5:ec:cb:63:d5: d5:1c:7f:d8:b5:03:fc:84:23:6f:a2:00:2c:6d:ec:32:46:c6: f0:1c:ea:20:bb:c9:57:50:42:97:ef:0f:d7:9e:71:c3:ad:6d: a7:65:51:c6:3e:7f:35:ae:1f:0c:90:89:30:20:95:72:7b:22: 26:63:da:bf:63:4f:a4:60:47:c4:6e:a3:1e:99:34:e9:33:97: 1b:50:b2:e4:68:bb:60:37:fa:15:94:fc:8f:f4:d1:68:be:2a: 4d:d9:f5:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uiVT0cNf87WwUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDdmYWJmYzktMmFlZC00Mjk0LTg0NTQtOGI2NzY4YzY4ZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsitGD/+E0fBn6Zz8PfkCN+CuRbCj6Vt5/ZuX AHgUzTyZSTnnUHk9WnoNpN/LtLEmVGOTfZpL+rHpF64LXE3xQxskR5YWRnIEuREl M2ckHpMMYPU9NOjbxsri59K9sr7G8ZaobnKobDpVOQThboufuEd3JfZBJHfzYjGo PCOJ4VU99y4hcpP/o4WMiwh+XVjOKwTVhBuBHXFhClydLJEDzIZc4WoOVmiRB4WJ IiiURPWmeVtMaYNF2T3QFGV9CeGC9PM89q7bagcEC/pF6q93Kjdqvi8g8wfyQMHt 6JgIAj6P6bcTf2iv1Em+HlVLtXPqlsw4HFaKckz7h+EbNQdAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzCMtsC0EmlweOr6CNbk+eOg4a1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzgwMTBlYTQtNDJlNC0z NjE0LThmZGUtNjI2N2Y2MWE4ODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHnoHP5ln3wXRcs/q6ys02xVy1VtWpSn1pykn5Mc1NSLZFttsj+TwI8 FA2/UksuPGaHuVqVkuhiq/MVoszqd15E0dy+UvflcHE1zSwgd1cP/BjhBRopDupC 6YkiZawbTNFvzI18BysqUVF60XEUvinzOniJdfEt+iDKFW90ran/8WiCScLouTsL BwbPl74v2qCX4uTgpc+e9cr14XrV7Mtj1dUcf9i1A/yEI2+iACxt7DJGxvAc6iC7 yVdQQpfvD9eeccOtbadlUcY+fzWuHwyQiTAglXJ7IiZj2r9jT6RgR8Ruox6ZNOkz lxtQsuRou2A3+hWU/I/00Wi+Kk3Z9R0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:04 2025 by rpki-client