$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50558663-e613-3f81-a2b1-c18a1e41be4b.roa File: 50558663-e613-3f81-a2b1-c18a1e41be4b.roa (raw, json) Hash identifier: S7Hk5W8P+YCFcH9JmsLh+ElIT/ZLZh9Ol6Sl9YIP6NU= Subject key identifier: D2:D0:74:84:5F:69:3A:13:7C:9E:A5:74:4B:58:00:BC:B0:78:5B:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C19727E97E794B96FFEE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50558663-e613-3f81-a2b1-c18a1e41be4b.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.38.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:19:72:7e:97:e7:94:b9:6f:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=506a1a48-e7b2-4b46-8bee-b771a43c3327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9f:80:4c:9e:c4:5d:05:b8:8b:3d:29:10:cc: 95:8e:4a:8a:02:c5:57:b0:f8:e4:83:68:3f:b4:e3: b0:71:26:c1:62:55:34:c7:03:d7:37:71:bc:e5:ed: 7e:7e:da:0d:9d:c0:65:36:ba:2b:a4:65:b0:07:5e: c2:66:83:cf:bc:4a:ab:b6:2c:91:93:36:ce:89:99: 56:fa:e2:41:b1:87:6c:0f:33:96:93:8a:03:b5:71: ac:04:7d:f1:00:36:10:4b:57:e3:23:0f:9b:39:fe: eb:f3:02:fa:d0:2c:ee:e1:4c:1b:46:6e:44:e0:0a: ce:87:c1:d8:ef:3c:d4:71:bc:f6:8f:df:5b:fc:18: fa:70:4b:a8:ea:1c:3d:d8:6f:92:20:7e:ec:20:56: cf:fb:70:4f:3d:24:28:01:d0:23:34:03:c5:de:d8: 9f:e6:ec:84:f0:0b:71:5f:e1:1c:ec:e2:f9:fc:37: b3:66:58:25:5e:35:6d:95:e1:19:85:61:80:80:c4: 81:2e:d4:18:86:2c:da:f0:47:e3:09:d6:c3:c6:36: cc:99:a2:42:51:d1:24:b4:73:bd:3f:14:d1:b8:6c: 11:7a:3f:1a:05:7e:d8:72:33:b3:2a:2b:6d:39:27: 22:ac:67:9b:84:1c:1c:d5:d7:35:61:60:22:e5:1e: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D0:74:84:5F:69:3A:13:7C:9E:A5:74:4B:58:00:BC:B0:78:5B:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/50558663-e613-3f81-a2b1-c18a1e41be4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.38.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e3:d9:fc:6b:57:e8:42:38:84:87:c5:83:e0:7d:49:4a:ac: 21:f1:01:d0:12:d5:f1:c4:3c:bb:ec:3d:24:95:9e:ef:42:48: 72:44:1f:55:3c:d6:fc:02:f5:14:f3:79:ac:41:2a:90:16:d4: ea:ce:fe:19:d5:49:6e:18:a9:16:cc:fa:b7:1f:78:de:28:fd: 20:35:c6:44:53:be:85:f4:6d:03:1d:fe:84:8c:98:11:c7:50: 72:3a:b7:43:31:fa:14:c7:74:4e:a9:0b:5d:80:63:17:fb:f9: a6:89:99:81:4e:6c:5b:45:ff:1c:95:bd:c7:42:ec:fc:4d:d3: 55:0d:98:ed:05:cb:e4:f3:6b:02:bc:dd:d4:eb:ef:20:fe:4b: 20:a2:07:34:07:1e:15:c0:ba:70:09:b2:3b:7c:84:c2:a5:7b: d1:ed:77:db:5e:80:31:58:70:0b:63:d8:2f:06:66:6e:a5:38: 00:9e:24:0d:ce:a4:08:76:9b:65:ee:bd:03:23:ac:7a:9a:06: 36:54:f7:0b:28:18:7c:05:a2:5a:de:b9:b8:3c:80:b5:b4:00: 7a:18:b4:5d:89:20:f0:1b:d0:86:fe:4a:cc:4c:fd:16:45:a7: 5b:97:a5:39:66:80:e9:a6:91:26:22:6b:95:82:c5:44:f5:09: 6f:5e:dd:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBlyfpfnlLlv/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk NTA2YTFhNDgtZTdiMi00YjQ2LThiZWUtYjc3MWE0M2MzMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5+ATJ7EXQW4iz0pEMyVjkqKAsVXsPjkg2g/ tOOwcSbBYlU0xwPXN3G85e1+ftoNncBlNrorpGWwB17CZoPPvEqrtiyRkzbOiZlW +uJBsYdsDzOWk4oDtXGsBH3xADYQS1fjIw+bOf7r8wL60Czu4UwbRm5E4ArOh8HY 7zzUcbz2j99b/Bj6cEuo6hw92G+SIH7sIFbP+3BPPSQoAdAjNAPF3tif5uyE8Atx X+Ec7OL5/DezZlglXjVtleEZhWGAgMSBLtQYhiza8EfjCdbDxjbMmaJCUdEktHO9 PxTRuGwRej8aBX7YcjOzKittOScirGebhBwc1dc1YWAi5R4G8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLQdIRfaToTfJ6ldEtYALyweFtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTA1NTg2NjMtZTYxMy0z ZjgxLWEyYjEtYzE4YTFlNDFiZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnj2fxrV+hCOISHxYPgfUlKrCHxAdAS1fHEPLvsPSSVnu9CSHJEH1U8 1vwC9RTzeaxBKpAW1OrO/hnVSW4YqRbM+rcfeN4o/SA1xkRTvoX0bQMd/oSMmBHH UHI6t0Mx+hTHdE6pC12AYxf7+aaJmYFObFtF/xyVvcdC7PxN01UNmO0Fy+TzawK8 3dTr7yD+SyCiBzQHHhXAunAJsjt8hMKle9Htd9tegDFYcAtj2C8GZm6lOACeJA3O pAh2m2XuvQMjrHqaBjZU9wsoGHwFolreubg8gLW0AHoYtF2JIPAb0Ib+SsxM/RZF p1uXpTlmgOmmkSYia5WCxUT1CW9e3bA= -----END CERTIFICATE-----Generated at Sat Sep 6 05:18:00 2025 by rpki-client