$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa File: 8d658794-56d7-3b38-8373-803b9414aa8b.roa (raw, json) Hash identifier: /AnIBLiTvFecqgyc1UAxEctcD9+IGiJsS9iweEyi04Q= Subject key identifier: 53:91:C3:FA:06:FC:32:96:2B:43:61:1C:59:D1:9E:11:4A:8F:FA:B8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BB88D12BB4F1C4E8B71621880 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 20473 IP address blocks: 8.9.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:12:bb:4f:1c:4e:8b:71:62:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=b1a9253b-67ea-4688-92f7-c8429540ba4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:ef:aa:ba:c3:cb:cf:84:c9:d5:47:82:db: b2:4a:cd:64:f5:09:ed:0d:53:fa:e8:67:4f:43:d8: dd:b2:b6:be:6e:dd:31:cc:7f:03:1d:a1:91:1e:ca: 5d:49:58:76:05:96:b4:ee:a4:59:90:18:10:91:ff: ff:21:f9:82:79:25:dc:13:40:fd:05:c3:35:9f:d9: cf:96:23:51:4e:4e:4e:e1:03:67:80:53:a6:99:6c: b9:96:e5:4a:43:59:17:8f:c3:3b:09:f4:11:84:02: 7f:83:45:92:c4:59:77:1e:a8:12:d0:4b:fd:79:f9: 17:c0:ec:e2:2f:c8:08:a0:36:42:fd:ac:53:da:9f: 43:78:7a:26:30:48:b9:57:10:77:e3:27:5a:34:5d: 36:94:ce:e4:fb:01:40:c4:7d:82:95:59:6c:5b:5d: 7c:93:12:42:b1:ee:11:ed:42:18:65:24:88:2e:7c: b0:da:f0:da:b5:11:cd:08:65:48:40:78:77:37:25: 7b:08:d5:56:4b:66:45:d2:26:35:f5:f3:86:b5:18: b3:c6:c4:32:ef:85:2e:d7:fa:50:c9:d8:d4:e3:19: 86:35:80:71:66:a1:e8:91:66:4c:40:b1:01:13:f9: 7d:f7:35:53:02:3f:f8:61:25:51:25:a3:58:7d:ab: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:91:C3:FA:06:FC:32:96:2B:43:61:1C:59:D1:9E:11:4A:8F:FA:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.9.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:d6:37:63:55:23:ae:a5:b0:10:c2:68:44:16:48:ac:5a:fa: 0a:e5:df:8f:56:a1:f5:70:52:9d:48:54:ec:00:11:d0:8f:79: ac:c9:0d:63:94:4c:df:47:bd:cd:63:ea:97:b3:5c:02:3c:d3: c6:a5:bb:6b:91:67:35:a0:7a:e3:92:ec:1f:28:51:d6:ac:e7: f2:ed:30:d6:59:83:24:cc:c9:f9:cb:93:eb:58:f2:0f:29:68: 60:ac:61:64:38:d5:8a:31:2f:a0:d8:43:48:81:8f:e1:9b:aa: c8:93:fc:99:24:0b:25:52:a4:ac:2c:16:6a:36:72:65:9d:87: 87:86:53:aa:2c:4e:c0:b1:0f:1e:65:9b:d2:53:7d:46:22:34: 3b:47:b9:a6:fc:61:36:60:f9:57:ed:3a:71:65:7e:bc:90:9d: 4d:61:95:c6:f6:a0:c1:88:6d:fa:d6:5f:c0:59:2a:51:ef:52: 93:7d:4e:4b:f3:1d:13:20:17:64:a6:b7:40:2d:ff:f8:70:c5: 3c:67:2b:66:84:2c:c0:d1:5d:77:fe:d0:3a:bf:ed:69:ef:11: 0c:d5:91:4f:3d:8f:02:ad:ea:db:c0:29:99:a3:81:2d:ee:b6: 14:ec:c8:43:68:79:36:cc:9b:f5:7a:c1:65:8e:03:a2:61:bf: 2f:da:00:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRK7TxxOi3FiGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjFhOTI1M2ItNjdlYS00Njg4LTkyZjctYzg0Mjk1NDBiYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt/vqrrDy8+EydVHgtuySs1k9QntDVP66GdP Q9jdsra+bt0xzH8DHaGRHspdSVh2BZa07qRZkBgQkf//IfmCeSXcE0D9BcM1n9nP liNRTk5O4QNngFOmmWy5luVKQ1kXj8M7CfQRhAJ/g0WSxFl3HqgS0Ev9efkXwOzi L8gIoDZC/axT2p9DeHomMEi5VxB34ydaNF02lM7k+wFAxH2ClVlsW118kxJCse4R 7UIYZSSILnyw2vDatRHNCGVIQHh3NyV7CNVWS2ZF0iY19fOGtRizxsQy74Uu1/pQ ydjU4xmGNYBxZqHokWZMQLEBE/l99zVTAj/4YSVRJaNYfaufJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFORw/oG/DKWK0NhHFnRnhFKj/q4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOGQ2NTg3OTQtNTZkNy0z YjM4LTgzNzMtODAzYjk0MTRhYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHWN2NVI66lsBDCaEQWSKxa+grl349WofVwUp1IVOwAEdCPeazJDWOU TN9Hvc1j6pezXAI808alu2uRZzWgeuOS7B8oUdas5/LtMNZZgyTMyfnLk+tY8g8p aGCsYWQ41YoxL6DYQ0iBj+GbqsiT/JkkCyVSpKwsFmo2cmWdh4eGU6osTsCxDx5l m9JTfUYiNDtHuab8YTZg+VftOnFlfryQnU1hlcb2oMGIbfrWX8BZKlHvUpN9Tkvz HRMgF2Smt0At//hwxTxnK2aELMDRXXf+0Dq/7WnvEQzVkU89jwKt6tvAKZmjgS3u thTsyENoeTbMm/V6wWWOA6Jhvy/aALA= -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:10 2025 by rpki-client