$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2959c63a-5bae-3efb-9e66-26291ee15d04.roa File: 2959c63a-5bae-3efb-9e66-26291ee15d04.roa (raw, json) Hash identifier: Ynot3HkuB+X/2N0+nfGTwkw9hs8liH6Zj6mKK42lm4E= Subject key identifier: BC:DB:03:EF:2C:D4:9D:A1:91:41:54:C5:F5:62:24:7F:07:F3:69:B8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19D7C3BE80B842A8C1550 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2959c63a-5bae-3efb-9e66-26291ee15d04.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.39.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9d:7c:3b:e8:0b:84:2a:8c:15:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=7736238a-f36d-46f2-9705-c97b41d9fe94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:c5:63:e9:ad:4a:73:f1:82:f6:07:09:26: c7:b9:9f:79:f5:9d:23:56:41:55:5f:a0:82:17:9f: 41:36:5f:9b:cf:3c:ac:4a:b7:e6:0c:2f:76:d6:03: bf:2d:2d:8b:81:7e:92:df:2a:eb:0c:37:5d:8a:52: 99:8c:dd:ec:d1:8d:69:78:5c:2a:4c:d1:63:b7:7a: b7:7d:dc:35:1e:7a:48:ba:e5:85:4c:31:a3:fb:3a: 64:e2:39:38:13:ed:1a:4f:99:cd:75:87:4f:5c:4b: 70:df:80:77:8c:6f:62:0c:27:63:c8:58:1b:c8:81: 76:24:ad:6f:a9:09:f4:56:2f:50:13:11:3e:65:25: 03:23:3e:59:1e:0c:57:dd:3a:2f:e9:4b:89:69:9e: c9:e7:ac:9b:9a:de:54:63:83:27:fe:fa:41:21:dc: 75:62:59:5c:60:f5:96:ff:b2:9d:c6:a0:b8:47:d6: 8b:cf:e2:b8:67:bf:31:09:d0:9f:19:60:59:03:f7: 8f:94:4b:3d:a9:5b:7c:19:64:8f:46:08:ae:bc:2f: 20:be:29:cd:cd:cf:09:82:ee:88:ad:2a:63:fd:9b: 69:bc:d6:0c:2f:f0:96:a5:5f:81:a8:1f:4c:f3:be: 6c:98:6a:44:73:49:6a:1f:09:21:3c:e1:39:ec:ce: a5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:03:EF:2C:D4:9D:A1:91:41:54:C5:F5:62:24:7F:07:F3:69:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2959c63a-5bae-3efb-9e66-26291ee15d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:ab:d3:27:df:6d:e2:8a:3d:73:c5:17:39:df:33:69:f3:b1: f9:92:2c:02:0c:f1:81:f4:07:83:6e:08:2e:3e:ca:3c:fb:76: cd:72:55:40:be:59:51:d9:46:e8:32:24:09:7c:62:fe:36:2c: b3:26:fe:8a:3f:0d:93:13:af:a7:1a:d7:9e:3d:fc:5a:46:73: a7:aa:31:ec:15:76:be:7e:82:64:95:34:ab:09:1f:9a:0b:e6: e8:56:88:7c:ba:78:1d:cd:5d:9d:60:86:e4:78:f6:e0:85:b3: 71:e6:85:11:0b:09:60:d6:c5:ec:cd:05:bd:a5:33:95:aa:a4: 2d:5b:ad:e2:96:dd:f3:24:d4:5e:cd:cc:6e:1c:d4:5a:70:e6: 8e:78:b4:95:d2:4f:48:c7:10:7c:90:89:6a:cf:b7:4b:75:59: de:9b:77:2a:24:cf:ba:df:17:46:6f:bc:f9:a9:95:29:f5:71: cb:4b:d5:76:16:ad:51:be:58:db:0d:c0:c5:e2:e2:cd:7b:e0: f1:9e:94:1c:b6:fa:5e:59:fc:5a:4e:76:31:c9:af:30:c2:ff: fe:8b:ad:e1:ac:e8:1b:5f:6b:90:8f:57:8b:7c:5f:10:91:bd: 58:10:8e:29:3d:c8:87:02:b0:62:36:4f:97:75:3c:d1:85:6e: 64:8d:9c:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Z18O+gLhCqMFVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NzczNjIzOGEtZjM2ZC00NmYyLTk3MDUtYzk3YjQxZDlmZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4bFY+mtSnPxgvYHCSbHuZ959Z0jVkFVX6CC F59BNl+bzzysSrfmDC921gO/LS2LgX6S3yrrDDddilKZjN3s0Y1peFwqTNFjt3q3 fdw1HnpIuuWFTDGj+zpk4jk4E+0aT5nNdYdPXEtw34B3jG9iDCdjyFgbyIF2JK1v qQn0Vi9QExE+ZSUDIz5ZHgxX3Tov6UuJaZ7J56ybmt5UY4Mn/vpBIdx1YllcYPWW /7KdxqC4R9aLz+K4Z78xCdCfGWBZA/ePlEs9qVt8GWSPRgiuvC8gvinNzc8Jgu6I rSpj/ZtpvNYML/CWpV+BqB9M875smGpEc0lqHwkhPOE57M6lLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzbA+8s1J2hkUFUxfViJH8H82m4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjk1OWM2M2EtNWJhZS0z ZWZiLTllNjYtMjYyOTFlZTE1ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFycgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFur0yffbeKKPXPFFznfM2nzsfmSLAIM8YH0B4NuCC4+yjz7ds1yVUC+ WVHZRugyJAl8Yv42LLMm/oo/DZMTr6ca1549/FpGc6eqMewVdr5+gmSVNKsJH5oL 5uhWiHy6eB3NXZ1ghuR49uCFs3HmhRELCWDWxezNBb2lM5WqpC1breKW3fMk1F7N zG4c1Fpw5o54tJXST0jHEHyQiWrPt0t1Wd6bdyokz7rfF0ZvvPmplSn1cctL1XYW rVG+WNsNwMXi4s174PGelBy2+l5Z/FpOdjHJrzDC//6LreGs6Btfa5CPV4t8XxCR vVgQjik9yIcCsGI2T5d1PNGFbmSNnJY= -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:30 2025 by rpki-client