$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9c3c045-c93f-388e-90fd-b8b0f5cc6fac.roa File: c9c3c045-c93f-388e-90fd-b8b0f5cc6fac.roa (raw, json) Hash identifier: fnXTmduuob8Nv+hdLJ4Jb/ESCoK/jV3dgFYV7XOow9o= Subject key identifier: 3B:EE:C3:E8:1A:37:B0:A7:D0:0B:61:19:C6:D6:E6:B5:41:8E:DB:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD1992602321EB8055B1090 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9c3c045-c93f-388e-90fd-b8b0f5cc6fac.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.36.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:99:26:02:32:1e:b8:05:5b:10:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=23f3910f-4b5b-4edc-8dc0-9d1ef3a917d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:13:95:a6:00:c7:ad:ae:5e:21:0a:b7:02: ab:55:c0:c1:14:93:df:41:a7:56:f3:5e:43:3a:41: 18:4b:db:d2:a1:1c:87:81:63:ae:6f:9e:3a:74:75: e9:31:ec:44:e1:64:78:b9:03:27:a5:23:25:6e:12: 00:b4:99:df:26:03:93:bf:2f:fe:4b:b6:d2:dc:94: 75:23:00:79:ec:ca:44:81:75:53:57:ae:fe:7a:5b: 61:fc:39:68:ea:08:73:21:66:a9:33:3d:9f:f7:96: 84:53:24:c2:1e:94:9e:d6:7d:24:99:dd:56:ad:3a: 0f:6c:0a:b5:ef:1b:e4:73:82:4b:84:de:3d:28:bd: f8:9b:e4:8c:dd:c4:2e:f8:36:1d:f6:0e:07:a2:ab: e2:79:ae:73:a8:50:4d:7e:4d:c2:12:98:85:3e:95: 3c:55:97:02:52:5b:47:2d:d6:f6:77:39:69:16:ab: d8:58:d8:6e:8a:6d:b0:54:58:4a:44:a8:81:12:bc: 85:b6:46:ac:7a:4b:f9:e8:24:cc:65:46:f8:2d:71: f9:fb:92:77:00:22:b9:7a:92:7d:12:54:78:2b:16: 11:60:10:17:08:10:87:ac:e1:63:af:65:36:a0:1f: 1b:03:f7:10:cd:c1:aa:69:a5:a3:df:d4:87:1d:cc: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EE:C3:E8:1A:37:B0:A7:D0:0B:61:19:C6:D6:E6:B5:41:8E:DB:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9c3c045-c93f-388e-90fd-b8b0f5cc6fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.36.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:36:a1:04:b4:06:61:cd:52:8e:37:f3:9b:a8:b3:fd:90:22: d2:a6:2c:ea:b3:0d:3d:0b:d5:5e:a6:25:00:5f:dc:7c:75:ca: 13:bd:1c:da:37:3b:1f:22:ba:d7:30:6f:d5:e8:ab:70:fd:34: a7:1b:27:8e:53:4a:f4:11:eb:8f:11:5d:13:c0:39:a5:5a:7e: 34:52:d7:2e:17:c6:ed:ac:a5:38:d1:6c:5e:0b:6d:53:18:96: 9b:6d:d5:48:4a:ed:9e:ff:de:df:4a:0b:b1:f1:e2:8c:24:04: ff:e4:55:b0:d1:00:9b:45:bb:1d:5b:33:2d:2e:5a:77:21:b5: 1c:71:38:3b:a4:18:41:f2:04:3b:87:95:30:06:d0:5c:65:3b: 2b:de:3a:3e:e5:d3:8b:32:0c:75:73:e8:a1:61:21:40:45:00: c1:2b:c0:75:1b:51:61:cd:ec:db:28:a2:92:55:65:42:6e:92: 0a:6d:88:53:ac:9c:64:b3:91:3e:a2:25:d3:1f:38:07:18:1b: 30:54:11:c1:80:09:ba:b3:74:b6:11:a4:40:e2:16:29:1f:ff: ef:d1:9f:52:2d:c5:e2:d1:9a:cf:3e:4b:a0:a6:14:74:55:b4: 0a:38:85:59:1c:79:ce:2f:76:b5:27:13:80:ac:c7:e6:cc:1c: 17:ec:e6:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZkmAjIeuAVbEJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MjNmMzkxMGYtNGI1Yi00ZWRjLThkYzAtOWQxZWYzYTkxN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFoTlaYAx62uXiEKtwKrVcDBFJPfQadW815D OkEYS9vSoRyHgWOub546dHXpMexE4WR4uQMnpSMlbhIAtJnfJgOTvy/+S7bS3JR1 IwB57MpEgXVTV67+elth/Dlo6ghzIWapMz2f95aEUyTCHpSe1n0kmd1WrToPbAq1 7xvkc4JLhN49KL34m+SM3cQu+DYd9g4Hoqviea5zqFBNfk3CEpiFPpU8VZcCUltH Ldb2dzlpFqvYWNhuim2wVFhKRKiBEryFtkasekv56CTMZUb4LXH5+5J3ACK5epJ9 ElR4KxYRYBAXCBCHrOFjr2U2oB8bA/cQzcGqaaWj39SHHcxYAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvuw+gaN7Cn0AthGcbW5rVBjtvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzljM2MwNDUtYzkzZi0z ODhlLTkwZmQtYjhiMGY1Y2M2ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs2oQS0BmHNUo4385uos/2QItKmLOqzDT0L1V6mJQBf3Hx1yhO9HNo3 Ox8iutcwb9Xoq3D9NKcbJ45TSvQR648RXRPAOaVafjRS1y4Xxu2spTjRbF4LbVMY lptt1UhK7Z7/3t9KC7Hx4owkBP/kVbDRAJtFux1bMy0uWnchtRxxODukGEHyBDuH lTAG0FxlOyveOj7l04syDHVz6KFhIUBFAMErwHUbUWHN7NsoopJVZUJukgptiFOs nGSzkT6iJdMfOAcYGzBUEcGACbqzdLYRpEDiFikf/+/Rn1ItxeLRms8+S6CmFHRV tAo4hVkcec4vdrUnE4Csx+bMHBfs5l8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:47 2025 by rpki-client