$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa File: ec894fa0-ab6c-3824-a764-55b346867980.roa (raw, json) Hash identifier: xYwi2RPG9DvsyJmSG+pUIQZjCf1qYqpDFlBCIGJOuz4= Subject key identifier: C5:FB:BC:09:98:5C:E7:63:25:B6:54:35:C9:04:8F:64:31:94:43:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B233190370C1CE69C4FF03E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.51.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:90:37:0c:1c:e6:9c:4f:f0:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=cf90c40e-b27e-45d1-8462-221ea6a6b361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:5b:ff:6d:e5:5c:23:a3:b8:1d:6e:80:5a: 59:e0:cd:ed:6a:1d:14:73:d8:d4:43:e3:6e:3c:1e: 39:57:eb:fb:61:1e:84:10:73:64:6f:f7:12:00:67: fe:91:ef:f7:bc:3f:0c:f2:d8:24:c2:b4:54:e6:f2: be:e8:9e:47:cb:42:61:a0:60:0e:73:9a:ff:6d:31: f6:85:19:c2:29:2e:d0:5e:57:0a:4e:ab:7f:cf:3c: db:4f:b6:5f:cc:e0:06:83:c6:c9:49:f2:c1:e3:48: b2:a3:6e:c9:65:64:2a:4e:f8:35:55:4b:96:b6:01: 65:93:30:2b:3b:b3:f3:f1:60:0a:1a:97:73:a1:83: 6f:45:0c:4f:51:9a:ef:64:56:6c:f5:07:2c:78:42: 21:2c:44:4e:41:d1:69:f7:60:fe:e5:fa:ad:f2:ec: cc:a6:f0:24:98:46:c8:6f:45:7a:b8:11:48:1a:c4: 9e:e2:12:d2:4f:89:06:69:60:68:5e:02:0f:1f:f6: f8:1b:26:25:80:c8:ed:c2:72:46:0b:61:5e:d4:cc: 50:c0:63:b5:dd:e7:99:a7:7f:d9:09:04:b2:f2:76: af:77:7a:32:80:30:da:55:e6:01:c1:44:53:c9:6b: 6e:8c:c1:18:7a:cf:a2:2b:1e:18:e3:15:d0:1c:6b: 21:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FB:BC:09:98:5C:E7:63:25:B6:54:35:C9:04:8F:64:31:94:43:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec894fa0-ab6c-3824-a764-55b346867980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.51.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:15:97:b3:a1:f6:69:cc:b1:36:c8:6c:ce:b8:de:77:56:b8: 8a:30:0f:7d:9f:84:c7:95:05:a4:d4:eb:ca:d4:af:ba:39:cd: bc:d7:4f:69:18:27:b7:a7:1e:7e:61:67:81:72:de:fd:0d:25: 84:59:8b:f1:c6:2c:97:04:cf:cf:ba:3d:c3:2d:51:69:0d:80: 2e:b5:1f:43:9f:1c:c1:d9:af:b8:6c:e1:b6:f8:d2:ca:15:62: 50:14:38:a8:5d:a9:a3:8d:78:dd:54:37:90:22:c9:17:a2:c6: 09:ba:ae:9b:c1:a4:b7:f9:d4:2d:09:5b:0a:b7:c0:b1:d2:31: 7d:c9:a0:81:fd:1e:96:fc:e8:34:69:b7:01:aa:2b:48:e7:bf: 7a:8b:14:87:12:73:aa:3c:54:68:b0:ae:3d:96:f5:3d:c2:61: e7:b9:d1:64:4e:fb:38:6c:46:bc:e0:90:d6:ea:88:71:42:45: 11:33:cd:a6:e2:e2:2b:ef:4e:b2:26:0e:59:ec:40:ac:2a:99: f7:a5:c4:13:14:78:77:1f:7b:2c:ba:87:ff:a3:25:bd:1d:ac: d9:e7:d5:c4:54:90:38:fe:33:2d:4a:a3:57:29:d4:6d:50:69: 91:3c:24:32:98:80:11:fa:36:df:e5:3c:f4:06:f1:e3:92:aa: 32:07:cd:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMZA3DBzmnE/wPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk Y2Y5MGM0MGUtYjI3ZS00NWQxLTg0NjItMjIxZWE2YTZiMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoNb/23lXCOjuB1ugFpZ4M3tah0Uc9jUQ+Nu PB45V+v7YR6EEHNkb/cSAGf+ke/3vD8M8tgkwrRU5vK+6J5Hy0JhoGAOc5r/bTH2 hRnCKS7QXlcKTqt/zzzbT7ZfzOAGg8bJSfLB40iyo27JZWQqTvg1VUuWtgFlkzAr O7Pz8WAKGpdzoYNvRQxPUZrvZFZs9QcseEIhLEROQdFp92D+5fqt8uzMpvAkmEbI b0V6uBFIGsSe4hLST4kGaWBoXgIPH/b4GyYlgMjtwnJGC2Fe1MxQwGO13eeZp3/Z CQSy8navd3oygDDaVeYBwURTyWtujMEYes+iKx4Y4xXQHGshmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX7vAmYXOdjJbZUNckEj2QxlENAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM4OTRmYTAtYWI2Yy0z ODI0LWE3NjQtNTViMzQ2ODY3OTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAVl7Oh9mnMsTbIbM643ndWuIowD32fhMeVBaTU68rUr7o5zbzXT2kY J7enHn5hZ4Fy3v0NJYRZi/HGLJcEz8+6PcMtUWkNgC61H0OfHMHZr7hs4bb40soV YlAUOKhdqaONeN1UN5AiyReixgm6rpvBpLf51C0JWwq3wLHSMX3JoIH9Hpb86DRp twGqK0jnv3qLFIcSc6o8VGiwrj2W9T3CYee50WRO+zhsRrzgkNbqiHFCRREzzabi 4ivvTrImDlnsQKwqmfelxBMUeHcfeyy6h/+jJb0drNnn1cRUkDj+My1Ko1cp1G1Q aZE8JDKYgBH6Nt/lPPQG8eOSqjIHzQ0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:54 2025 by rpki-client