$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e37cd367-d46c-365b-939f-cb0f580ac8fc.roa File: e37cd367-d46c-365b-939f-cb0f580ac8fc.roa (raw, json) Hash identifier: NUPJog1jey3Ae+G7JocYfepgHWuFM4I+Hg+/ivYuOG8= Subject key identifier: 9F:F5:5F:81:7D:AF:0F:53:5F:D4:DD:67:FD:EF:DF:C1:2A:C9:AA:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC711217362D223DBC8DC8700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e37cd367-d46c-365b-939f-cb0f580ac8fc.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.11.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:11:21:73:62:d2:23:db:c8:dc:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=535104ee-43c7-4fd1-ab63-3e9c0a4e68f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:af:38:a5:eb:cc:14:6f:90:fa:d3:78:29:06: 5c:fc:3b:d5:f1:31:fb:3c:38:94:77:0b:fe:3f:b7: c0:67:d6:8f:0a:b6:25:e9:50:60:89:b0:ed:86:a9: 90:96:73:6f:e2:12:5e:06:86:1a:32:39:97:cb:fc: bc:56:9a:ca:7d:a2:09:a2:ca:03:e3:4f:d9:77:3e: 93:df:29:47:82:d3:ad:36:4b:81:4c:83:ed:38:6f: 91:e0:62:0b:c9:fb:88:8f:c2:eb:77:16:60:53:fe: dc:6e:8b:f1:75:e7:b0:f9:83:19:49:c9:fe:9b:44: fb:4c:44:92:29:dc:7a:d8:bd:14:9f:ff:31:99:e6: 6d:47:8f:cf:0c:10:f1:fd:42:d4:7b:e4:4c:ca:68: 8d:d7:78:2f:36:f8:bc:91:30:cd:e9:3b:11:0e:63: 0d:f6:18:d3:8c:42:88:6f:b2:6e:58:e1:00:3d:de: 30:56:5a:97:73:9b:49:0b:f2:99:06:1a:eb:b2:31: 7b:2f:bf:83:72:38:b2:31:f3:f9:34:9d:70:17:9e: 40:e1:b4:3d:08:b0:7b:b8:4c:dc:4e:88:f0:f8:89: 72:04:e3:21:21:e4:82:b9:67:83:a5:3c:ea:a6:0a: 45:e3:3b:6b:82:58:6d:d8:90:07:73:c6:2b:6c:d9: 8e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F5:5F:81:7D:AF:0F:53:5F:D4:DD:67:FD:EF:DF:C1:2A:C9:AA:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e37cd367-d46c-365b-939f-cb0f580ac8fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.11.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:55:ee:7c:80:fc:f3:2c:ce:f1:10:c6:0c:02:da:e5:d4:ed: e5:6c:08:64:a8:28:64:2b:9d:b4:81:fe:fc:86:53:42:98:67: 65:c4:f9:30:66:87:fd:06:93:aa:95:b3:f5:59:80:2e:bf:d4: 42:b6:03:42:1a:d9:a1:92:50:6d:e5:b8:ec:5e:c2:a0:6e:44: 02:46:94:cd:20:0c:23:c3:56:a5:90:1a:76:4f:1d:3d:00:84: 1d:59:b5:f1:9f:3c:e9:0a:ee:05:d2:5d:63:6d:7c:5c:00:a4: 74:b3:08:39:eb:ca:87:d8:b5:f6:a6:0c:04:c3:44:6f:b6:05: 45:aa:bb:e5:57:1c:5f:1c:ca:1f:f3:f7:bd:f3:23:4f:bb:d1: 44:01:20:39:11:ca:3f:20:e3:59:15:31:ed:cb:93:6c:2e:ab: 08:b0:07:43:78:e0:be:0e:c3:75:f0:6e:5e:75:a5:40:42:e3: 20:db:8d:af:ac:df:6a:d2:90:50:3c:33:b5:2b:52:d7:56:c1: 24:06:67:06:aa:7c:30:bf:f1:b3:02:72:99:4e:21:a1:52:71: 37:d3:f6:16:33:69:49:2e:b0:1a:21:96:c7:77:74:aa:1a:46: 30:cf:af:5d:0e:2a:55:1e:16:d5:c9:fe:8b:e0:7b:49:d1:ad: cb:9f:17:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHESFzYtIj28jchwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk NTM1MTA0ZWUtNDNjNy00ZmQxLWFiNjMtM2U5YzBhNGU2OGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a84pevMFG+Q+tN4KQZc/DvV8TH7PDiUdwv+ P7fAZ9aPCrYl6VBgibDthqmQlnNv4hJeBoYaMjmXy/y8VprKfaIJosoD40/Zdz6T 3ylHgtOtNkuBTIPtOG+R4GILyfuIj8LrdxZgU/7cbovxdeew+YMZScn+m0T7TESS Kdx62L0Un/8xmeZtR4/PDBDx/ULUe+RMymiN13gvNvi8kTDN6TsRDmMN9hjTjEKI b7JuWOEAPd4wVlqXc5tJC/KZBhrrsjF7L7+DcjiyMfP5NJ1wF55A4bQ9CLB7uEzc Tojw+IlyBOMhIeSCuWeDpTzqpgpF4ztrglht2JAHc8YrbNmOZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/1X4F9rw9TX9TdZ/3v38EqyarrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTM3Y2QzNjctZDQ2Yy0z NjViLTkzOWYtY2IwZjU4MGFjOGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZV7nyA/PMszvEQxgwC2uXU7eVsCGSoKGQrnbSB/vyGU0KYZ2XE+TBm h/0Gk6qVs/VZgC6/1EK2A0Ia2aGSUG3luOxewqBuRAJGlM0gDCPDVqWQGnZPHT0A hB1ZtfGfPOkK7gXSXWNtfFwApHSzCDnryofYtfamDATDRG+2BUWqu+VXHF8cyh/z 973zI0+70UQBIDkRyj8g41kVMe3Lk2wuqwiwB0N44L4Ow3Xwbl51pUBC4yDbja+s 32rSkFA8M7UrUtdWwSQGZwaqfDC/8bMCcplOIaFScTfT9hYzaUkusBohlsd3dKoa RjDPr10OKlUeFtXJ/ovge0nRrcufF5Q= -----END CERTIFICATE-----Generated at Wed Oct 22 06:49:34 2025 by rpki-client