$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa File: 4a2b1697-d2b6-3d03-8292-78ca6df47474.roa (raw, json) Hash identifier: R9E3oVqIQfPNpZD34AvUcBoXZjCXb8/61HtqnxTDBtU= Subject key identifier: 35:C4:A9:56:59:F9:37:08:25:0E:1E:18:3D:08:87:91:E8:09:9B:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE46140E01FCE547C83EF4E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.3.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:40:e0:1f:ce:54:7c:83:ef:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=6b479659-7c23-4b44-8fe2-81fb466ce6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:d6:72:93:23:94:ae:c4:6a:ab:19:d4:67: 1f:07:b3:d5:cf:a8:bc:42:f5:90:6f:91:a6:96:2f: 4f:79:8c:6c:66:52:84:9d:b5:3c:93:82:39:2f:0f: e8:be:34:33:0f:36:b0:71:55:16:b3:2f:43:72:eb: d8:01:4b:3c:06:51:ce:ff:ce:88:40:cb:ae:eb:69: 48:03:78:d6:9b:79:e5:58:8f:4e:d0:14:54:34:26: 8c:95:15:45:f9:67:f5:aa:f6:b5:3f:43:92:cf:a6: 41:57:1b:1c:60:31:e6:6b:cf:8b:7d:93:b9:a8:8e: 98:02:69:cd:ec:e8:cd:ab:42:be:a1:14:79:4d:8e: f6:42:06:a0:25:92:23:46:12:4a:bf:8f:62:ea:13: 45:bb:8c:96:4c:d0:09:5f:d8:5a:0b:cf:68:fe:0c: c0:83:41:bd:8d:47:55:ef:55:c8:0e:39:22:23:71: bb:ad:e1:75:5b:6b:ee:12:a5:63:6e:ad:f1:48:b8: 02:7d:11:33:6d:7e:cb:90:c4:ad:7b:10:48:03:f6: 70:94:f0:b2:aa:fc:86:59:d2:2c:b2:20:f8:06:04: 76:0b:68:dc:68:d7:40:40:39:ef:5d:b8:ba:51:7b: 29:fc:34:a8:2a:e9:cc:c6:06:2e:89:4e:df:86:21: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C4:A9:56:59:F9:37:08:25:0E:1E:18:3D:08:87:91:E8:09:9B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2b1697-d2b6-3d03-8292-78ca6df47474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:98:dd:7d:3b:84:35:68:a5:2e:66:6c:4c:40:b9:5c:b5:e8: c3:84:8e:39:77:ec:b8:a0:18:11:72:d0:4f:28:75:c6:47:18: ae:4c:c2:ae:02:e3:7c:fb:11:8d:46:f7:db:08:f6:c0:88:b2: b4:62:03:c2:68:8c:8d:7b:75:27:7d:2e:58:fc:3e:39:f4:21: 50:0d:0b:07:5e:b1:a6:60:64:87:86:25:87:20:f4:7c:5e:43: f6:e5:d5:d7:e8:07:6c:f1:77:b5:8e:eb:fb:c1:2d:90:4e:37: a3:e3:aa:82:aa:d7:2f:1e:5a:6b:f6:81:8f:b8:94:e4:dc:d0: 4a:9a:ad:b9:0d:2a:55:fc:ba:e2:2d:a7:5e:45:43:6d:fb:76: d5:f4:b8:c0:d7:db:48:96:2d:af:0e:30:80:44:c5:2f:44:f6: 0a:4a:ea:5d:91:36:48:aa:2b:e4:b0:22:71:a5:2c:e3:0a:8b: ed:c0:07:b5:53:49:20:a4:de:d0:06:2c:5e:6a:1f:af:1f:35: fb:34:65:4d:68:46:ca:d2:9e:b6:fa:75:2b:a3:18:61:83:10: 51:75:30:72:0a:f4:44:da:08:40:63:33:70:6a:0a:a2:52:c5: d3:3d:59:9b:78:1f:e2:52:b3:b9:80:2c:bd:b5:96:8c:43:66: 3f:43:19:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUDgH85UfIPvTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NmI0Nzk2NTktN2MyMy00YjQ0LThmZTItODFmYjQ2NmNlNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1zWcpMjlK7EaqsZ1GcfB7PVz6i8QvWQb5Gm li9PeYxsZlKEnbU8k4I5Lw/ovjQzDzawcVUWsy9DcuvYAUs8BlHO/86IQMuu62lI A3jWm3nlWI9O0BRUNCaMlRVF+Wf1qva1P0OSz6ZBVxscYDHma8+LfZO5qI6YAmnN 7OjNq0K+oRR5TY72QgagJZIjRhJKv49i6hNFu4yWTNAJX9haC89o/gzAg0G9jUdV 71XIDjkiI3G7reF1W2vuEqVjbq3xSLgCfREzbX7LkMStexBIA/ZwlPCyqvyGWdIs siD4BgR2C2jcaNdAQDnvXbi6UXsp/DSoKunMxgYuiU7fhiE+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXEqVZZ+TcIJQ4eGD0Ih5HoCZvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGEyYjE2OTctZDJiNi0z ZDAzLTgyOTItNzhjYTZkZjQ3NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwNjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKY3X07hDVopS5mbExAuVy16MOEjjl37LigGBFy0E8odcZHGK5Mwq4C 43z7EY1G99sI9sCIsrRiA8JojI17dSd9Llj8Pjn0IVANCwdesaZgZIeGJYcg9Hxe Q/bl1dfoB2zxd7WO6/vBLZBON6PjqoKq1y8eWmv2gY+4lOTc0EqarbkNKlX8uuIt p15FQ237dtX0uMDX20iWLa8OMIBExS9E9gpK6l2RNkiqK+SwInGlLOMKi+3AB7VT SSCk3tAGLF5qH68fNfs0ZU1oRsrSnrb6dSujGGGDEFF1MHIK9ETaCEBjM3BqCqJS xdM9WZt4H+JSs7mALL21loxDZj9DGRo= -----END CERTIFICATE-----Generated at Wed Oct 22 07:18:17 2025 by rpki-client