$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa File: cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa (raw, json) Hash identifier: Li2b5Iz9WR1Kfd7a9J3AG1Nu6SY/sBKQQzaFMq2Bfg4= Subject key identifier: CD:BD:66:04:EE:81:0E:44:2D:29:39:54:5D:23:92:6E:43:FE:5B:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D253AB0D5B1C032D783640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 35994 IP address blocks: 23.77.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:53:ab:0d:5b:1c:03:2d:78:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a7404f8b-d51c-4bcb-9ac4-0dfd9f0df30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:89:6c:f6:23:50:8a:b4:af:d3:26:07:0e:49: 35:cf:b4:38:99:07:d5:a3:98:db:7f:b0:28:9a:a4: d5:29:b6:f4:08:c1:4a:c3:a7:e5:46:24:00:d9:ad: ee:44:ca:eb:08:0a:1d:c5:ea:b4:77:a5:51:98:12: b8:fa:1b:da:d4:79:8b:c6:2e:1e:19:78:ef:75:a8: d8:67:d1:83:c2:10:71:df:eb:ff:6b:5f:e4:b7:00: 50:7e:f9:ed:a3:26:d3:97:42:00:d0:b6:c7:b0:9b: f3:08:1e:c2:bc:7c:19:59:8c:8f:82:dd:25:fe:da: 8d:5f:fe:0f:93:f7:14:7b:e6:a8:7a:99:db:b1:97: 61:93:06:8e:3b:cf:6e:a4:e9:cf:bc:5b:40:37:12: d7:ff:0f:bc:19:a9:89:06:9b:1b:1a:28:73:ed:cb: 10:5a:71:6b:77:73:60:32:a4:14:a4:5b:66:67:85: 46:57:a2:68:88:55:b0:48:22:0e:55:3b:75:c4:97: 55:a8:fa:2e:57:9b:2e:47:e4:41:0b:89:a7:8b:35: 23:e7:fa:77:53:65:f4:cb:39:f1:70:84:2c:73:cd: 0f:42:80:87:4d:c3:df:f6:80:ea:c8:01:7e:5f:7e: 02:bb:59:f1:b0:f9:6f:07:92:f8:55:92:20:f2:10: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BD:66:04:EE:81:0E:44:2D:29:39:54:5D:23:92:6E:43:FE:5B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cc9bf17d-ed0d-393a-81ec-1f7a3b228719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.77.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:57:75:d6:0c:cc:40:2c:2c:91:ea:52:05:81:b2:c4:65:ae: 24:8e:95:dc:69:d3:69:bd:84:eb:cf:a4:12:7e:6b:cc:06:ec: 0e:d8:6c:6f:d8:48:fd:f0:55:06:a2:b9:4c:45:85:9d:d6:7c: 7b:8c:42:61:d0:5c:23:f3:e3:3e:16:a2:fa:e4:7c:ff:51:a1: 92:b9:ec:8c:67:14:93:1b:c4:da:56:df:83:28:73:e8:9e:2f: c0:56:58:f2:27:f3:06:25:c3:bf:89:65:87:a8:4a:2e:b6:5d: d3:f1:21:12:45:5f:ff:05:dd:3e:3d:6c:a9:2e:d6:fe:72:1e: c9:fb:19:b9:55:3a:70:15:07:fa:7c:2f:c5:c2:ee:12:af:75: b0:5d:41:08:7c:42:ce:07:53:a3:c9:57:06:47:8e:01:12:b1: e8:2f:a5:a0:ef:1c:a8:69:70:cb:a6:c0:04:8b:32:34:0d:4c: fa:ff:a4:70:c5:81:3c:0a:8e:ca:d4:2e:f6:54:63:3d:0e:c9: 26:70:3f:51:4e:86:83:34:59:f9:41:69:ad:84:09:ae:8c:4f: e4:d6:ec:2c:f8:7c:05:9b:b0:7b:cc:c7:10:57:ab:e2:8b:1e: 85:8c:32:a2:b9:d9:62:db:97:e7:fa:87:6d:ec:40:3d:c3:9f: f2:79:0f:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lOrDVscAy14NkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTc0MDRmOGItZDUxYy00YmNiLTlhYzQtMGRmZDlmMGRmMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiols9iNQirSv0yYHDkk1z7Q4mQfVo5jbf7Ao mqTVKbb0CMFKw6flRiQA2a3uRMrrCAodxeq0d6VRmBK4+hva1HmLxi4eGXjvdajY Z9GDwhBx3+v/a1/ktwBQfvntoybTl0IA0LbHsJvzCB7CvHwZWYyPgt0l/tqNX/4P k/cUe+aoepnbsZdhkwaOO89upOnPvFtANxLX/w+8GamJBpsbGihz7csQWnFrd3Ng MqQUpFtmZ4VGV6JoiFWwSCIOVTt1xJdVqPouV5suR+RBC4mnizUj5/p3U2X0yznx cIQsc80PQoCHTcPf9oDqyAF+X34Cu1nxsPlvB5L4VZIg8hDyvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM29ZgTugQ5ELSk5VF0jkm5D/lv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2M5YmYxN2QtZWQwZC0z OTNhLTgxZWMtMWY3YTNiMjI4NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF02rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5XddYMzEAsLJHqUgWBssRlriSOldxp02m9hOvPpBJ+a8wG7A7YbG/Y SP3wVQaiuUxFhZ3WfHuMQmHQXCPz4z4WovrkfP9RoZK57IxnFJMbxNpW34Moc+ie L8BWWPIn8wYlw7+JZYeoSi62XdPxIRJFX/8F3T49bKku1v5yHsn7GblVOnAVB/p8 L8XC7hKvdbBdQQh8Qs4HU6PJVwZHjgESsegvpaDvHKhpcMumwASLMjQNTPr/pHDF gTwKjsrULvZUYz0OySZwP1FOhoM0WflBaa2ECa6MT+TW7Cz4fAWbsHvMxxBXq+KL HoWMMqK52WLbl+f6h23sQD3Dn/J5D+0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:34 2025 by rpki-client