$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa File: 71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa (raw, json) Hash identifier: bD5bbzSr2eGp0JrrXkCbVgEX84cpW1bJleQcZGnmz8o= Subject key identifier: EF:65:27:CB:9D:C2:71:1E:00:FA:80:48:CB:FF:26:57:F1:A2:35:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CFF23315FF3B94DADC300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.1.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ff:23:31:5f:f3:b9:4d:ad:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=52a7bed5-49a4-4d59-bb24-819cb5e12747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:1d:2c:b2:ef:0d:3d:12:e3:e2:40:40:ae: 75:9a:5c:fe:7e:f0:12:7d:ff:33:8d:ae:0f:d9:85: ed:d8:35:8b:3c:59:34:2b:44:74:b3:a2:36:23:52: 89:c5:55:45:5e:8a:bb:37:09:f0:45:c9:e7:04:8a: 31:31:04:17:a2:14:ef:07:a4:31:3d:47:d5:d5:f3: 87:93:c0:7b:7e:5e:8f:d4:c9:bf:d5:e5:27:6e:b1: a3:49:44:79:58:fe:04:2f:93:e9:fe:be:a3:98:23: a7:5b:5c:db:17:d7:a2:e9:ff:f3:51:c6:e3:f7:85: 04:3d:da:f8:41:ca:aa:9d:cb:c7:6d:7c:80:1c:fa: a3:59:2a:bc:7a:ec:dd:fb:92:2d:38:85:c2:90:68: 2c:cd:08:13:aa:95:66:fd:92:9e:b4:1d:a8:0d:3b: f7:26:1b:f0:f6:f8:7f:17:16:09:6a:20:f1:64:ee: 9d:53:7f:94:f5:2d:65:08:1a:e6:77:f5:69:da:47: dc:14:97:46:fc:59:54:a7:de:15:ed:3c:59:12:e2: 86:53:17:1a:af:4f:c4:4a:28:06:c3:22:41:c2:d2: ab:ee:42:73:0a:65:41:ff:19:ea:2b:29:9e:59:4a: 19:e9:b8:f8:f8:cf:9e:ed:38:29:e2:d2:d6:c9:4e: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:65:27:CB:9D:C2:71:1E:00:FA:80:48:CB:FF:26:57:F1:A2:35:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71aa59cf-5f4a-33db-bd17-36b304ac79aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cd:19:58:38:8c:89:de:3c:26:d0:57:68:d4:f8:8a:4f:24: c3:54:5f:4e:c2:b1:d3:08:2a:40:d4:76:fe:03:81:bf:7b:5c: e7:8f:ac:31:4d:4e:66:6c:05:92:9f:0a:97:0b:bd:77:48:f3: a3:8f:5c:c6:02:b9:c7:01:3e:55:fb:46:72:aa:d9:15:ae:2f: ab:71:52:eb:65:10:5d:c2:8c:58:38:6a:a0:c5:01:fc:03:f2: 8a:25:89:93:64:2b:e0:ab:d6:43:f1:9c:46:24:2c:29:88:d0: 87:e1:be:0a:22:23:7c:e1:d4:ef:2d:42:93:1e:09:24:29:dc: 8b:c9:d7:6c:57:d6:27:82:d0:09:a6:0a:7f:2f:f8:65:2e:b4: 61:e8:4c:68:16:9a:d3:c2:79:fa:f8:35:5c:0b:a2:10:29:3f: 8c:8c:c6:28:be:e8:64:1c:87:cd:6b:69:c6:02:79:2e:6e:d8: b2:63:11:e0:4e:58:12:2f:de:3c:f4:cd:5a:11:e3:e3:29:5d: 35:c3:62:7e:e0:40:ae:38:92:1f:0f:77:0b:32:39:57:2e:4f: 3f:75:7f:91:64:56:1b:04:5d:db:09:ce:4e:6c:af:7c:ca:13: 9a:a9:38:2d:31:31:ce:d9:c3:03:74:0c:3d:14:76:37:c4:1c: 88:54:5b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDP8jMV/zuU2twwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NTJhN2JlZDUtNDlhNC00ZDU5LWJiMjQtODE5Y2I1ZTEyNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIwdLLLvDT0S4+JAQK51mlz+fvASff8zja4P 2YXt2DWLPFk0K0R0s6I2I1KJxVVFXoq7NwnwRcnnBIoxMQQXohTvB6QxPUfV1fOH k8B7fl6P1Mm/1eUnbrGjSUR5WP4EL5Pp/r6jmCOnW1zbF9ei6f/zUcbj94UEPdr4 QcqqncvHbXyAHPqjWSq8euzd+5ItOIXCkGgszQgTqpVm/ZKetB2oDTv3Jhvw9vh/ FxYJaiDxZO6dU3+U9S1lCBrmd/Vp2kfcFJdG/FlUp94V7TxZEuKGUxcar0/ESigG wyJBwtKr7kJzCmVB/xnqKymeWUoZ6bj4+M+e7Tgp4tLWyU6mQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9lJ8udwnEeAPqASMv/JlfxojXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzFhYTU5Y2YtNWY0YS0z M2RiLWJkMTctMzZiMzA0YWM3OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFwHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHNGVg4jInePCbQV2jU+IpPJMNUX07CsdMIKkDUdv4Dgb97XOePrDFN TmZsBZKfCpcLvXdI86OPXMYCuccBPlX7RnKq2RWuL6txUutlEF3CjFg4aqDFAfwD 8ooliZNkK+Cr1kPxnEYkLCmI0IfhvgoiI3zh1O8tQpMeCSQp3IvJ12xX1ieC0Amm Cn8v+GUutGHoTGgWmtPCefr4NVwLohApP4yMxii+6GQch81racYCeS5u2LJjEeBO WBIv3jz0zVoR4+MpXTXDYn7gQK44kh8PdwsyOVcuTz91f5FkVhsEXdsJzk5sr3zK E5qpOC0xMc7ZwwN0DD0UdjfEHIhUW4k= -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:32 2025 by rpki-client