$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/670e0a30-0288-370e-8235-6a708d83e8fe.roa File: 670e0a30-0288-370e-8235-6a708d83e8fe.roa (raw, json) Hash identifier: J9jgFxjbXA7TfocJ6bzcj1aLILQ0HBbNwy1tbcXgUL0= Subject key identifier: C3:D6:F6:63:3B:D9:7E:0E:FE:99:9E:31:BC:95:31:8F:47:E4:BE:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C157BB6A0803B91D70800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/670e0a30-0288-370e-8235-6a708d83e8fe.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.42.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:15:7b:b6:a0:80:3b:91:d7:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=1d79f9ab-1103-47aa-8002-495d50c886c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:02:8c:e4:38:e7:5d:cf:93:15:95:4c:b2:08: 7d:20:eb:80:ba:df:93:8e:92:c0:4a:31:74:e3:de: 28:6d:64:20:bc:1c:02:ba:9e:ea:b5:bf:b0:96:e5: 92:04:4d:69:c9:65:e5:a4:2c:4e:16:91:36:94:45: 30:2f:09:4c:75:ec:4d:85:81:b8:63:0c:b0:ac:31: 53:60:d3:b2:a0:1c:3d:df:b8:ce:4d:68:8e:08:96: af:67:22:35:36:23:cf:15:c4:e4:f2:54:c5:51:44: b0:d6:f5:03:b1:70:79:6a:5b:e2:7a:24:2e:59:a1: 97:c8:3e:c3:df:d2:57:b8:0a:27:ce:da:1a:38:95: f5:b0:c4:82:b6:a2:11:4b:9b:18:35:7f:5e:67:6b: 28:cf:ca:01:a1:70:ff:b7:a7:0e:20:1c:d9:19:0d: 08:38:fb:44:aa:e3:78:de:3d:db:79:e4:ee:c2:dc: 11:79:b5:cd:ac:47:45:76:02:ad:db:26:0e:95:0f: 75:2c:a7:a3:06:a5:4b:0d:09:3b:77:9a:11:a7:8f: a4:4d:57:ae:24:68:53:a6:ba:85:8f:0d:ca:89:e2: bc:92:e6:bf:1f:17:80:30:34:cd:fd:29:57:57:f4: a7:40:b2:fd:47:90:15:b1:37:51:c3:f0:27:45:b2: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D6:F6:63:3B:D9:7E:0E:FE:99:9E:31:BC:95:31:8F:47:E4:BE:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/670e0a30-0288-370e-8235-6a708d83e8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.42.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:0a:cc:0f:53:7f:58:3a:08:64:40:57:ed:22:62:11:47:8e: a3:b6:5f:84:59:a5:f7:c0:df:0d:23:31:62:a8:54:a4:74:4c: 84:2f:96:36:5d:9c:f4:87:4f:c7:54:76:e1:a1:30:1a:63:49: dd:52:4b:23:02:1e:6a:b2:37:33:b9:91:d4:b6:81:73:26:be: 24:cb:52:f5:ca:c9:5b:43:2b:1f:45:70:e5:91:db:f5:85:25: ef:ec:af:f0:11:32:4b:29:c7:b6:18:c5:d7:ef:31:0b:0b:52: c7:40:37:0d:fd:7f:3f:a7:ab:d1:3d:4e:30:22:b0:ed:5c:5a: e3:62:5a:1d:02:f7:8d:81:14:41:3d:7d:68:34:7a:42:b0:0d: 67:3e:eb:a0:3d:ba:fd:14:a3:02:fa:34:02:74:78:ed:32:ed: a6:3b:19:ae:0a:b7:00:9e:12:6a:52:e4:17:65:c1:f4:7c:32: c6:20:00:d3:f1:d2:52:80:d2:5c:48:64:39:4e:32:d7:45:75: 55:90:b0:ae:63:f7:65:dc:d4:d0:0e:85:7c:f6:d0:eb:74:ca: 80:a1:5b:f9:f2:bf:33:3b:2c:18:e6:68:3e:b7:c5:e4:1b:13: a9:9d:80:40:04:3c:c1:10:41:e1:cd:b3:9e:14:2d:74:c0:f0: d3:0e:17:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBV7tqCAO5HXCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MWQ3OWY5YWItMTEwMy00N2FhLTgwMDItNDk1ZDUwYzg4NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AKM5DjnXc+TFZVMsgh9IOuAut+TjpLASjF0 494obWQgvBwCup7qtb+wluWSBE1pyWXlpCxOFpE2lEUwLwlMdexNhYG4YwywrDFT YNOyoBw937jOTWiOCJavZyI1NiPPFcTk8lTFUUSw1vUDsXB5alvieiQuWaGXyD7D 39JXuAonztoaOJX1sMSCtqIRS5sYNX9eZ2soz8oBoXD/t6cOIBzZGQ0IOPtEquN4 3j3beeTuwtwRebXNrEdFdgKt2yYOlQ91LKejBqVLDQk7d5oRp4+kTVeuJGhTprqF jw3KieK8kua/HxeAMDTN/SlXV/SnQLL9R5AVsTdRw/AnRbLtoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPW9mM72X4O/pmeMbyVMY9H5L5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjcwZTBhMzAtMDI4OC0z NzBlLTgyMzUtNmE3MDhkODNlOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFyoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgKzA9Tf1g6CGRAV+0iYhFHjqO2X4RZpffA3w0jMWKoVKR0TIQvljZd nPSHT8dUduGhMBpjSd1SSyMCHmqyNzO5kdS2gXMmviTLUvXKyVtDKx9FcOWR2/WF Je/sr/ARMkspx7YYxdfvMQsLUsdANw39fz+nq9E9TjAisO1cWuNiWh0C942BFEE9 fWg0ekKwDWc+66A9uv0UowL6NAJ0eO0y7aY7Ga4KtwCeEmpS5BdlwfR8MsYgANPx 0lKA0lxIZDlOMtdFdVWQsK5j92Xc1NAOhXz20Ot0yoChW/nyvzM7LBjmaD63xeQb E6mdgEAEPMEQQeHNs54ULXTA8NMOF58= -----END CERTIFICATE-----Generated at Sat Sep 6 07:30:45 2025 by rpki-client