$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa File: 5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa (raw, json) Hash identifier: jCRtDAxHirZ6LAfC/50wISkvdo4UV5fs+YBu+1zum80= Subject key identifier: D8:AC:44:3B:DE:46:D7:FE:4E:B0:4A:84:D1:03:A3:67:71:38:AB:9D Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584B1806E59F80611D3C9CE0DE10 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 23.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e5:9f:80:61:1d:3c:9c:e0:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=bdcc84e4-fddf-493c-991f-f7aa60badca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:fd:87:da:d5:d2:45:1a:07:ce:44:3e:50: 2d:6c:01:01:6f:ba:bd:06:7e:ea:2d:da:53:ea:39: fd:34:6f:6d:5c:1b:ba:23:16:bc:37:9b:8a:50:b2: 1d:84:56:bd:0a:6c:bd:c2:88:72:c9:e9:1b:e1:d1: 73:db:b2:a7:c8:04:47:9d:65:8d:c5:0e:fd:08:7b: 8a:c4:5c:b2:c8:f8:b3:f6:35:41:32:63:7d:3b:09: e4:7a:9e:a4:39:44:38:ad:f9:c1:6b:73:a9:06:28: a7:39:a9:e4:30:99:d1:b5:63:0d:43:58:fc:3f:2f: b8:1e:7a:ea:a1:05:be:10:77:7b:c2:8a:b2:64:6f: 78:b5:e5:66:f8:73:4d:04:b5:39:94:3d:f8:f1:c1: 44:2c:76:22:6f:1f:b6:ee:64:26:d4:c1:b4:8e:6a: 52:a1:4a:cf:48:0f:16:82:df:d3:e6:20:56:d1:2c: b7:9e:9f:de:59:63:9a:15:01:84:42:d8:96:3b:57: 61:1f:ec:bd:2d:6b:ad:ed:3a:ce:87:e7:4f:ee:27: 08:43:9d:e6:0f:21:c0:c9:f9:2a:87:6d:05:25:a1: b4:86:f7:d6:06:0f:7a:13:ca:b6:aa:08:bb:cc:2f: d0:6b:82:fc:15:3b:d5:ac:3a:0d:3a:8e:66:a4:24: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AC:44:3B:DE:46:D7:FE:4E:B0:4A:84:D1:03:A3:67:71:38:AB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/5840fcdc-4a98-3d8b-8f35-ecb3e78e8a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:65:28:35:98:30:f3:0c:4c:03:35:61:3b:f1:fd:26:42:0a: b6:69:67:c1:3b:47:82:90:89:0b:70:de:4f:48:0b:51:70:86: 6e:1e:a5:c9:c4:58:29:d6:78:e6:95:94:6d:c6:b9:5e:01:a8: b1:85:30:95:e6:ae:01:90:37:b4:59:67:78:cc:d1:c5:6a:c4: c1:6f:93:f6:74:0f:74:d3:bb:d8:2e:38:4c:32:09:95:d3:89: 18:60:c9:75:ea:f7:28:97:e6:71:c7:97:0b:2a:68:26:7a:60: ad:e7:85:9a:e3:16:41:ca:ea:5b:20:ba:ed:c8:4c:96:a4:1f: c6:9c:6b:de:22:a5:a5:32:38:7a:60:ca:15:86:67:e3:da:0d: 0c:54:29:e7:dc:4b:06:ea:7d:67:87:0e:1d:b0:ec:f4:31:21: 2a:61:d6:84:0e:0d:b8:43:e2:7b:9c:db:82:91:44:54:0d:c4: 6b:8a:03:e0:34:0e:4e:c7:40:d1:8f:90:30:d3:09:91:c5:f3: 7c:b2:3e:5f:89:41:4a:ad:c7:f1:14:87:c0:47:0f:4c:39:dc: cc:6b:61:d4:b9:36:b6:64:40:3b:36:f5:00:69:1e:d9:51:56: af:2c:f6:06:19:51:b6:6a:e6:fc:58:32:08:27:9e:a5:9d:8f: 9b:95:82:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuWfgGEdPJzg3hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YmRjYzg0ZTQtZmRkZi00OTNjLTk5MWYtZjdhYTYwYmFkY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm79h9rV0kUaB85EPlAtbAEBb7q9Bn7qLdpT 6jn9NG9tXBu6Ixa8N5uKULIdhFa9Cmy9wohyyekb4dFz27KnyARHnWWNxQ79CHuK xFyyyPiz9jVBMmN9Ownkep6kOUQ4rfnBa3OpBiinOankMJnRtWMNQ1j8Py+4Hnrq oQW+EHd7woqyZG94teVm+HNNBLU5lD348cFELHYibx+27mQm1MG0jmpSoUrPSA8W gt/T5iBW0Sy3np/eWWOaFQGEQtiWO1dhH+y9LWut7TrOh+dP7icIQ53mDyHAyfkq h20FJaG0hvfWBg96E8q2qgi7zC/Qa4L8FTvVrDoNOo5mpCQw6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNisRDveRtf+TrBKhNEDo2dxOKudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNTg0MGZjZGMtNGE5OC0z ZDhiLThmMzUtZWNiM2U3OGU4YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNlKDWYMPMMTAM1YTvx/SZCCrZpZ8E7R4KQiQtw3k9IC1Fwhm4epcnE WCnWeOaVlG3GuV4BqLGFMJXmrgGQN7RZZ3jM0cVqxMFvk/Z0D3TTu9guOEwyCZXT iRhgyXXq9yiX5nHHlwsqaCZ6YK3nhZrjFkHK6lsguu3ITJakH8aca94ipaUyOHpg yhWGZ+PaDQxUKefcSwbqfWeHDh2w7PQxISph1oQODbhD4nuc24KRRFQNxGuKA+A0 Dk7HQNGPkDDTCZHF83yyPl+JQUqtx/EUh8BHD0w53MxrYdS5NrZkQDs29QBpHtlR Vq8s9gYZUbZq5vxYMggnnqWdj5uVgm4= -----END CERTIFICATE-----Generated at Thu Sep 18 03:55:56 2025 by rpki-client