$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56ffa2d0-0ed1-3804-bee7-0061722a2b59.roa File: 56ffa2d0-0ed1-3804-bee7-0061722a2b59.roa (raw, json) Hash identifier: Kf9IruXYaSHkCXLdQ8KEqlzzQIU/tnYlCcOuK5vbVTo= Subject key identifier: 88:1F:34:A0:75:51:43:80:13:24:1C:78:95:AD:A8:C4:43:D8:91:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B047C24BEC74C2B019D4AA840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56ffa2d0-0ed1-3804-bee7-0061722a2b59.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.4.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:24:be:c7:4c:2b:01:9d:4a:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=85eaca3f-c6b8-45d7-9e11-5e93e4b0133f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f9:c1:f4:e0:eb:df:3d:52:dc:1c:11:e7:1f: f9:58:5e:5e:70:00:ec:c9:ee:c5:84:fd:be:4e:d1: 71:48:f9:a0:a2:83:10:6e:ec:62:1a:61:47:5b:5d: 2e:ae:31:a5:4f:4c:9c:c5:2b:1f:fb:9d:1e:2e:32: 59:57:6b:cf:04:7f:3d:9a:fc:1c:e9:ff:15:29:6a: 00:89:67:86:52:40:71:a4:62:a5:4b:39:1c:ba:ed: f3:b8:2e:58:24:6a:06:3e:c7:1b:aa:4d:1c:c8:d2: 82:2c:45:7d:5d:07:e0:0b:ac:17:73:fb:3c:67:71: ce:99:e4:bf:95:46:d2:eb:0e:fc:4a:3b:08:80:0b: c6:1e:af:dd:df:ac:76:d9:f9:9f:93:e5:c8:5b:f2: ea:20:13:3a:42:b5:d6:81:02:d1:12:cd:ff:b0:73: e0:7e:07:7c:ba:c0:cf:ee:2c:c9:14:32:6f:8d:bc: ba:2a:cc:6d:4e:17:34:d9:0f:a6:95:79:cb:46:5a: 2a:ff:15:78:22:cc:f8:24:3b:9f:0d:d8:e0:99:2e: 41:bb:67:5a:5d:9b:ea:2a:c7:d4:32:20:31:f8:d3: 2c:e2:72:42:be:75:79:76:22:12:2d:69:d3:2d:44: c8:99:d7:d3:01:43:b0:ff:12:de:02:e9:2a:ca:3f: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1F:34:A0:75:51:43:80:13:24:1C:78:95:AD:A8:C4:43:D8:91:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56ffa2d0-0ed1-3804-bee7-0061722a2b59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.4.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2a:ab:d0:0e:49:b0:7c:71:24:9c:3f:69:30:a7:33:22:87: b8:79:f5:d7:bd:1e:32:4d:d8:5a:3a:35:31:4f:0a:f2:f3:bf: 22:4a:c2:95:17:b4:87:38:a2:00:47:e8:16:70:17:97:94:e6: 9a:e2:a2:c1:76:ec:c6:76:cd:80:16:7a:a8:71:bb:96:6f:9f: e8:cb:60:d6:8d:5a:df:43:af:35:dd:b3:dc:52:1c:a0:6d:ca: e3:75:7c:dc:2f:40:e5:e5:8e:18:3f:00:23:69:0d:4c:f8:10: 08:a4:51:a9:18:07:71:4b:cd:e2:fb:c8:0a:59:a2:ec:f3:29: 4e:8b:e3:db:a4:72:93:68:06:77:a6:9d:c6:47:f1:e2:99:59: 6d:0b:fc:d2:bf:ca:39:31:a8:3e:c5:15:a7:56:46:48:d2:25: f1:ed:d2:55:8c:7d:ef:db:8f:38:99:12:03:85:3b:d1:12:b1: 4f:07:9f:43:dc:a5:b3:e5:b5:c9:6a:5a:07:c0:06:68:52:dc: a6:41:cd:d7:88:08:d2:bf:e6:fe:a4:63:99:85:20:13:8b:ed: 1b:76:78:1f:5e:bd:f9:b7:87:73:b2:cd:d6:f0:05:2c:bb:72: 31:ac:52:90:25:a9:67:43:09:73:85:d2:1e:43:c0:bf:49:9c: c7:42:f9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfCS+x0wrAZ1KqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ODVlYWNhM2YtYzZiOC00NWQ3LTllMTEtNWU5M2U0YjAxMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfnB9ODr3z1S3BwR5x/5WF5ecADsye7FhP2+ TtFxSPmgooMQbuxiGmFHW10urjGlT0ycxSsf+50eLjJZV2vPBH89mvwc6f8VKWoA iWeGUkBxpGKlSzkcuu3zuC5YJGoGPscbqk0cyNKCLEV9XQfgC6wXc/s8Z3HOmeS/ lUbS6w78SjsIgAvGHq/d36x22fmfk+XIW/LqIBM6QrXWgQLREs3/sHPgfgd8usDP 7izJFDJvjby6KsxtThc02Q+mlXnLRloq/xV4Isz4JDufDdjgmS5Bu2daXZvqKsfU MiAx+NMs4nJCvnV5diISLWnTLUTImdfTAUOw/xLeAukqyj9llQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgfNKB1UUOAEyQceJWtqMRD2JG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTZmZmEyZDAtMGVkMS0z ODA0LWJlZTctMDA2MTcyMmEyYjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgqq9AOSbB8cSScP2kwpzMih7h59de9HjJN2Fo6NTFPCvLzvyJKwpUX tIc4ogBH6BZwF5eU5priosF27MZ2zYAWeqhxu5Zvn+jLYNaNWt9DrzXds9xSHKBt yuN1fNwvQOXljhg/ACNpDUz4EAikUakYB3FLzeL7yApZouzzKU6L49ukcpNoBnem ncZH8eKZWW0L/NK/yjkxqD7FFadWRkjSJfHt0lWMfe/bjziZEgOFO9ESsU8Hn0Pc pbPltclqWgfABmhS3KZBzdeICNK/5v6kY5mFIBOL7Rt2eB9evfm3h3OyzdbwBSy7 cjGsUpAlqWdDCXOF0h5DwL9JnMdC+WI= -----END CERTIFICATE-----Generated at Sat Sep 6 07:27:03 2025 by rpki-client