$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e77655c9-5dbf-3ccf-890a-1a5be6e9ba23.roa File: e77655c9-5dbf-3ccf-890a-1a5be6e9ba23.roa (raw, json) Hash identifier: eDyRZUi8ImwMFAWV36sGhm+UWUs7LjYPfC1KxNjmF5s= Subject key identifier: 6F:BF:14:DC:FD:25:5F:B2:43:1D:DC:65:67:64:B1:8B:64:0E:81:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFEE6B69E128EFDF543E4EB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e77655c9-5dbf-3ccf-890a-1a5be6e9ba23.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 23.50.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:b6:9e:12:8e:fd:f5:43:e4:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=94fd6ecc-dc66-4703-a219-2f0b6a459ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:27:2f:a2:22:3e:a7:2d:48:9a:2f:9c:31: 08:bc:1a:ac:b0:3f:70:8d:b5:c0:5f:5a:44:08:5c: 21:29:a5:fb:61:c9:a0:8e:84:a2:05:dd:88:61:ca: 16:ee:0d:b9:8c:d3:59:cb:9a:38:95:ab:7a:3c:e2: d7:04:06:fd:56:1e:4b:18:7f:ee:5e:8e:6b:79:89: 0c:22:fa:f7:3b:2b:30:fa:ae:3d:2c:ca:97:4d:96: 14:ac:e2:14:fc:05:7a:11:d0:6d:06:20:78:19:90: d3:23:35:e6:16:27:ed:ac:65:54:43:2d:27:f7:e6: e6:ef:28:96:89:a4:d8:50:75:9c:1f:43:ea:38:8b: 6a:12:e7:d0:bb:a1:56:10:b4:60:af:db:ff:e9:e6: c8:10:e2:d4:42:0c:cd:54:26:cf:39:c1:33:77:0a: 8d:bf:b8:f9:71:f4:3e:f8:02:1a:cb:2a:d2:a4:0c: 7f:bc:9a:03:9e:31:d1:58:df:b9:1a:ef:97:71:00: 36:86:fc:c7:8c:28:f5:db:de:2f:e6:1d:ec:99:06: b4:f4:31:d6:71:48:8b:8e:18:5d:b6:1a:ec:03:04: 9e:39:c7:e8:a3:bd:8a:e6:83:22:67:08:b8:6c:16: c6:3a:b3:c2:80:cb:52:0c:71:6c:15:9c:b3:67:49: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BF:14:DC:FD:25:5F:B2:43:1D:DC:65:67:64:B1:8B:64:0E:81:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e77655c9-5dbf-3ccf-890a-1a5be6e9ba23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.50.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f7:8c:bc:1f:e8:6c:f8:4d:4f:e6:d5:ee:b7:82:97:5e:b0: db:dc:ca:2a:46:0f:65:43:e9:43:7b:da:89:fa:12:3d:c6:34: dd:87:f1:f7:3b:5e:a5:c4:46:e5:db:b6:df:aa:0c:fe:23:cc: 7b:4e:f5:b4:17:aa:e3:9e:5a:aa:a1:fc:49:38:8a:74:10:fd: eb:f5:ba:7b:ef:7a:72:31:cb:52:50:89:10:57:d3:38:00:12: 86:d9:bc:a3:f5:89:dc:7a:4a:1f:18:cb:c7:c7:f2:cc:98:98: 24:3c:ea:e4:0e:ca:7d:ce:84:3c:59:9a:e0:12:98:54:47:db: 3e:64:82:02:8b:1c:d3:18:b8:4f:19:81:b2:97:6b:4c:f6:ca: 98:fe:87:8b:3b:83:b6:78:95:ac:8d:fe:e1:d0:8b:e5:a0:ed: 4d:0e:ee:66:98:0e:11:a5:03:da:c9:8f:4a:d4:16:91:ab:70: 61:01:bf:c9:66:4c:5c:38:2a:b1:75:c0:73:04:9d:67:89:34: 33:d0:0a:c8:e0:60:dc:94:80:22:4c:9a:7c:e4:c6:99:fb:ff: a3:8f:cf:1b:d7:89:84:b7:93:ce:e7:fc:67:48:11:ea:22:37: 92:93:86:ae:6e:02:0a:e1:29:5e:a6:70:0f:c2:77:96:40:d7: f4:b2:50:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5raeEo799UPk6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk OTRmZDZlY2MtZGM2Ni00NzAzLWEyMTktMmYwYjZhNDU5YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUMnL6IiPqctSJovnDEIvBqssD9wjbXAX1pE CFwhKaX7YcmgjoSiBd2IYcoW7g25jNNZy5o4lat6POLXBAb9Vh5LGH/uXo5reYkM Ivr3Oysw+q49LMqXTZYUrOIU/AV6EdBtBiB4GZDTIzXmFiftrGVUQy0n9+bm7yiW iaTYUHWcH0PqOItqEufQu6FWELRgr9v/6ebIEOLUQgzNVCbPOcEzdwqNv7j5cfQ+ +AIayyrSpAx/vJoDnjHRWN+5Gu+XcQA2hvzHjCj1294v5h3smQa09DHWcUiLjhhd thrsAwSeOcfoo72K5oMiZwi4bBbGOrPCgMtSDHFsFZyzZ0lYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+/FNz9JV+yQx3cZWdksYtkDoEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTc3NjU1YzktNWRiZi0z Y2NmLTg5MGEtMWE1YmU2ZTliYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD3jLwf6Gz4TU/m1e63gpdesNvcyipGD2VD6UN72on6Ej3GNN2H8fc7 XqXERuXbtt+qDP4jzHtO9bQXquOeWqqh/Ek4inQQ/ev1unvvenIxy1JQiRBX0zgA EobZvKP1idx6Sh8Yy8fH8syYmCQ86uQOyn3OhDxZmuASmFRH2z5kggKLHNMYuE8Z gbKXa0z2ypj+h4s7g7Z4layN/uHQi+Wg7U0O7maYDhGlA9rJj0rUFpGrcGEBv8lm TFw4KrF1wHMEnWeJNDPQCsjgYNyUgCJMmnzkxpn7/6OPzxvXiYS3k87n/GdIEeoi N5KThq5uAgrhKV6mcA/Cd5ZA1/SyUJw= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:24 2025 by rpki-client