$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86cae031-3513-323c-8607-aa02a24f0db0.roa File: 86cae031-3513-323c-8607-aa02a24f0db0.roa (raw, json) Hash identifier: cna22Wn8/jyQ2I+1gRRRxLNo6lJzSLub4m1IXPY5kvY= Subject key identifier: 56:77:15:5B:FF:65:F5:61:96:6D:E5:CD:75:13:DD:F3:D7:9C:C1:A0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA39D15808BB762EFE0510280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86cae031-3513-323c-8607-aa02a24f0db0.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 173.23.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:15:80:8b:b7:62:ef:e0:51:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=2c6f6aed-748f-47aa-b2cf-7fff5c6c177b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:48:47:c0:d4:cb:dd:c6:e8:66:0c:48:35: 6d:89:fa:28:3b:87:b2:3a:42:67:05:39:ed:54:2f: fb:71:3d:69:dd:83:54:73:4d:4c:30:4b:a6:61:46: ee:5e:5c:88:f8:6c:11:06:05:6a:33:57:52:b0:bf: 1f:db:b9:4c:96:c5:9f:d5:49:40:f8:83:b9:d0:cb: f4:85:19:f1:93:d0:72:6a:25:36:a8:79:63:25:71: 83:d2:47:3f:7e:f3:37:7a:e2:18:0b:83:a9:e5:f2: a1:f4:e6:5e:b5:bc:43:95:34:aa:1f:61:ed:69:0e: 1a:ac:34:0d:90:aa:26:3e:19:c7:c0:72:26:1d:a4: 75:1c:b3:0f:f3:56:65:01:73:e1:59:eb:64:b4:1c: 61:6c:b8:58:1e:cc:6c:0f:54:f4:88:af:e1:06:d9: 1a:47:a5:3a:06:31:15:9c:b1:ec:e4:e1:a3:b2:f0: 77:95:90:5b:fc:cf:53:05:9c:95:17:cf:3a:fb:93: 04:0f:c1:09:d1:08:73:47:ef:19:39:89:a7:07:7e: 7d:b5:bd:dd:c8:f0:f6:de:2e:e4:aa:b6:a5:30:e7: b4:53:5e:df:4c:69:c0:87:12:e4:93:5f:df:85:58: 18:45:a9:28:c3:57:81:4f:98:0a:fe:d9:3e:66:97: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:77:15:5B:FF:65:F5:61:96:6D:E5:CD:75:13:DD:F3:D7:9C:C1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86cae031-3513-323c-8607-aa02a24f0db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a4:6c:0b:06:56:31:0b:78:aa:07:f5:39:f7:24:3d:7e:55: de:57:fa:18:70:92:e1:03:20:63:04:03:17:3c:33:5a:21:98: 60:ec:14:6a:f4:3a:53:cb:e2:14:1e:3b:a4:2a:49:9a:b3:11: 8f:75:de:6e:d6:02:4a:bb:b6:36:d8:bd:87:89:e4:87:41:e2: a6:e9:41:fe:9f:6f:e0:72:82:89:ab:4c:96:b6:07:dc:e9:64: c5:3e:53:a7:4c:12:0c:c6:26:db:cf:ec:98:7a:ce:1f:0f:d0: b0:cc:68:94:f0:6a:84:50:ed:fd:01:c6:fd:bc:7d:0b:41:e5: 9e:b4:f2:5f:b7:03:56:8d:6a:d6:07:ea:69:a5:a6:99:a7:23: ca:47:41:e8:2d:3b:d7:ad:99:6c:a5:a8:90:94:7a:16:0c:b4: 72:6c:e0:5c:ff:d3:98:84:29:09:9d:81:c0:d9:da:f6:a3:30: aa:43:66:5f:32:0f:d9:67:2e:4b:56:6c:b8:a7:fb:a1:36:20: 47:bd:f4:b8:a7:c5:9f:06:b1:95:20:ce:ff:7f:84:95:06:cc: b3:41:0d:1e:96:a3:82:45:87:39:47:56:d6:39:53:e8:9f:b1: 1e:27:a8:66:ae:ed:64:df:1c:97:92:88:02:b0:5b:30:8e:aa: 0b:7f:0e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRWAi7di7+BRAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MmM2ZjZhZWQtNzQ4Zi00N2FhLWIyY2YtN2ZmZjVjNmMxNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir5IR8DUy93G6GYMSDVtifooO4eyOkJnBTnt VC/7cT1p3YNUc01MMEumYUbuXlyI+GwRBgVqM1dSsL8f27lMlsWf1UlA+IO50Mv0 hRnxk9ByaiU2qHljJXGD0kc/fvM3euIYC4Op5fKh9OZetbxDlTSqH2HtaQ4arDQN kKomPhnHwHImHaR1HLMP81ZlAXPhWetktBxhbLhYHsxsD1T0iK/hBtkaR6U6BjEV nLHs5OGjsvB3lZBb/M9TBZyVF886+5MED8EJ0QhzR+8ZOYmnB359tb3dyPD23i7k qralMOe0U17fTGnAhxLkk1/fhVgYRakow1eBT5gK/tk+ZpdffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ3FVv/ZfVhlm3lzXUT3fPXnMGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODZjYWUwMzEtMzUxMy0z MjNjLTg2MDctYWEwMmEyNGYwZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRc8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWkbAsGVjELeKoH9Tn3JD1+Vd5X+hhwkuEDIGMEAxc8M1ohmGDsFGr0 OlPL4hQeO6QqSZqzEY913m7WAkq7tjbYvYeJ5IdB4qbpQf6fb+BygomrTJa2B9zp ZMU+U6dMEgzGJtvP7Jh6zh8P0LDMaJTwaoRQ7f0Bxv28fQtB5Z608l+3A1aNatYH 6mmlppmnI8pHQegtO9etmWylqJCUehYMtHJs4Fz/05iEKQmdgcDZ2vajMKpDZl8y D9lnLktWbLin+6E2IEe99LinxZ8GsZUgzv9/hJUGzLNBDR6Wo4JFhzlHVtY5U+if sR4nqGau7WTfHJeSiAKwWzCOqgt/Dgs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:13:01 2025 by rpki-client