$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e41193fe-3c80-38de-8036-33e171733292.roa File: e41193fe-3c80-38de-8036-33e171733292.roa (raw, json) Hash identifier: somhgAf04OM8vrFsoUf4SzFSpMFAU4/AenmijkabMXE= Subject key identifier: 72:93:5A:81:A4:99:D6:03:16:B4:0C:96:B3:DB:C9:7A:48:80:D8:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3556DFDA4B220F14BC782000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e41193fe-3c80-38de-8036-33e171733292.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.1.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:df:da:4b:22:0f:14:bc:78:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=50bd4cd4-2d48-4ed0-8f48-c47ebe51862b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:91:78:8c:89:e5:b7:54:38:ec:49:dc:88: e0:21:ac:9d:2d:24:8e:9a:59:73:ea:6f:8c:18:c0: bc:ab:43:e2:57:02:5b:28:60:2d:10:96:7a:56:74: 03:26:66:4c:f6:9a:ab:3d:ce:42:ce:44:4e:7c:4c: 29:02:a5:1b:70:ff:36:70:93:82:c7:d1:22:81:98: d8:41:55:63:c8:5d:07:00:47:c6:4f:fc:94:02:c4: 5d:5d:21:01:b8:66:6e:01:73:91:9c:b0:9c:51:d3: 75:cc:c3:c0:fd:d1:ed:48:75:1f:08:e5:a9:7a:3b: 44:58:22:c2:7f:bd:4a:1b:47:d8:7c:8e:5a:b9:61: 24:25:82:af:ae:90:73:73:26:bf:6a:83:e9:28:44: ff:5d:a7:76:44:e6:93:54:1e:86:a3:91:7f:9e:d0: 03:40:8c:00:cf:52:61:47:48:41:e1:7b:cd:91:ae: 09:c6:3a:a5:59:47:66:58:e4:1f:4a:dc:6d:aa:bc: ed:a3:e6:bb:7a:a4:c4:4e:bd:d7:17:68:d3:e7:98: 5f:e4:9b:4f:1a:1b:cc:cb:bf:b8:c7:79:50:01:c1: 5f:ec:b1:a6:f5:2b:29:cf:a6:46:28:c9:3f:d1:39: cb:37:e0:1d:79:d4:76:da:9a:e4:fe:d0:4d:73:a2: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:93:5A:81:A4:99:D6:03:16:B4:0C:96:B3:DB:C9:7A:48:80:D8:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e41193fe-3c80-38de-8036-33e171733292.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1d:5f:d5:13:15:98:30:cc:12:5d:39:e6:fd:f7:59:01:92: 12:72:a2:b2:ea:98:6c:04:57:43:f8:1f:df:94:c6:31:be:46: cb:0c:b1:3b:d2:b8:7b:0a:db:3e:80:42:3e:c8:a9:ec:b2:ef: 94:3c:cb:7b:1c:6a:7c:1b:15:9b:61:cd:48:c9:82:6f:a9:3f: 31:db:60:e5:00:7a:06:7b:b8:27:e1:e6:66:e5:4a:3a:c9:65: db:49:e1:3b:0f:2f:ea:03:35:2f:3d:eb:da:97:33:1c:6b:57: c2:43:63:d2:b2:58:e6:98:7f:e9:f6:f5:b7:a1:07:35:f2:3a: 1f:c1:a2:43:61:d8:ba:b5:1f:9f:25:bd:06:b9:85:52:6a:8b: a9:60:9c:3d:38:3b:56:fd:aa:b8:e0:24:a0:6c:7d:ea:70:e7: 84:c4:e5:07:8d:c5:d7:4e:af:a3:99:13:bc:e8:85:39:e4:c1: 0b:d4:0f:aa:81:5b:12:df:ac:79:31:af:2d:cd:4f:07:38:1e: b1:76:8f:32:e6:07:3f:e9:ad:6d:f7:f8:bb:7e:4f:8a:62:03: 12:af:77:52:ec:76:00:83:64:69:46:f5:d1:ca:cf:14:f7:d6: 91:5b:c9:b3:b7:ed:7d:db:bd:9e:a4:b7:13:e4:2d:cc:9c:2d: d0:22:36:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1Vt/aSyIPFLx4IAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk NTBiZDRjZDQtMmQ0OC00ZWQwLThmNDgtYzQ3ZWJlNTE4NjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7OReIyJ5bdUOOxJ3IjgIaydLSSOmllz6m+M GMC8q0PiVwJbKGAtEJZ6VnQDJmZM9pqrPc5CzkROfEwpAqUbcP82cJOCx9EigZjY QVVjyF0HAEfGT/yUAsRdXSEBuGZuAXORnLCcUdN1zMPA/dHtSHUfCOWpejtEWCLC f71KG0fYfI5auWEkJYKvrpBzcya/aoPpKET/Xad2ROaTVB6Go5F/ntADQIwAz1Jh R0hB4XvNka4JxjqlWUdmWOQfStxtqrzto+a7eqTETr3XF2jT55hf5JtPGhvMy7+4 x3lQAcFf7LGm9Sspz6ZGKMk/0TnLN+AdedR22prk/tBNc6I4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKTWoGkmdYDFrQMlrPbyXpIgNgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQxMTkzZmUtM2M4MC0z OGRlLTgwMzYtMzNlMTcxNzMzMjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsdX9UTFZgwzBJdOeb991kBkhJyorLqmGwEV0P4H9+UxjG+RssMsTvS uHsK2z6AQj7Iqeyy75Q8y3scanwbFZthzUjJgm+pPzHbYOUAegZ7uCfh5mblSjrJ ZdtJ4TsPL+oDNS8969qXMxxrV8JDY9KyWOaYf+n29behBzXyOh/BokNh2Lq1H58l vQa5hVJqi6lgnD04O1b9qrjgJKBsfepw54TE5QeNxddOr6OZE7zohTnkwQvUD6qB WxLfrHkxry3NTwc4HrF2jzLmBz/prW33+Lt+T4piAxKvd1LsdgCDZGlG9dHKzxT3 1pFbybO37X3bvZ6ktxPkLcycLdAiNjc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:03:47 2025 by rpki-client