$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d12018-df73-367d-b667-c0a03f4fb220.roa File: 03d12018-df73-367d-b667-c0a03f4fb220.roa (raw, json) Hash identifier: te8p24FtTQzb5/EOSbTI0t9P1WqwMLtkZ+UHQzpSNS0= Subject key identifier: B9:33:40:F7:13:12:26:2A:BC:98:02:C1:1C:C5:5D:3E:EB:2C:38:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D37981F374EABFC8C0200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d12018-df73-367d-b667-c0a03f4fb220.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.64.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:37:98:1f:37:4e:ab:fc:8c:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=42bc6a14-c204-40ad-bcbf-e420c92cac39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:a0:6a:36:f6:27:a5:51:cb:bd:7b:c8:25: 32:51:df:03:f6:3c:de:24:01:8a:41:92:43:86:ac: 79:a5:81:33:7c:f5:f2:f4:eb:07:63:79:16:6c:dd: e4:3c:9d:96:18:b1:87:b0:88:2a:c6:57:19:62:9f: 86:86:f1:30:26:51:47:a5:61:89:95:3e:61:5b:58: 2b:e9:04:a9:aa:06:f0:97:c8:bd:02:f5:97:3d:2b: d6:37:5d:05:60:c5:e8:ce:77:6d:d5:69:94:5c:bc: a0:d8:97:41:d4:d9:03:28:6b:2a:75:9d:35:0c:cd: ae:2a:0b:54:99:80:42:c0:80:04:38:2a:9e:63:97: 3c:04:5c:ca:ab:ac:8f:21:28:fc:6b:1e:19:12:a1: 81:a6:ee:17:fc:c3:dc:a5:5e:6c:b3:ff:57:11:16: 84:a1:19:89:90:ae:75:a8:d0:4e:76:52:0d:dc:41: 54:26:a8:87:9c:1b:39:c2:8c:50:c1:ef:1c:11:80: e1:22:02:d1:a7:11:d3:b9:1d:b3:90:b8:09:21:c5: 27:2f:30:73:c7:da:59:9d:86:e4:c2:43:d8:aa:79: 02:78:26:60:85:b6:d2:40:af:18:de:cf:f1:a0:12: a1:00:f6:62:6a:dc:85:18:6b:fc:6a:43:10:fe:d4: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:33:40:F7:13:12:26:2A:BC:98:02:C1:1C:C5:5D:3E:EB:2C:38:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03d12018-df73-367d-b667-c0a03f4fb220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:88:81:0d:4d:45:b1:42:9f:05:36:7c:74:40:c5:17:37:16: b9:6b:36:53:c6:9a:ad:9d:be:2d:9f:32:b1:fd:23:8c:a3:3d: b6:c7:4f:78:ec:50:7d:4d:56:bb:bb:23:d0:54:2f:86:d4:34: 78:c2:55:ee:ee:a9:cf:c4:4c:32:0f:be:71:3f:87:97:ab:eb: f9:71:b6:96:82:65:d5:fe:d2:5b:62:03:1c:e0:85:00:d8:47: 78:42:3c:72:03:7e:d8:77:d5:0d:b2:c2:28:36:76:9a:d3:27: a6:51:f3:d1:cf:7d:ca:0f:7f:59:1b:b9:0c:f1:ed:e3:34:b1: fe:b8:2f:d9:a5:a3:5b:44:90:4b:64:46:5e:43:b6:55:43:b7: 07:f8:3f:19:02:e4:53:fd:7d:de:0f:83:87:5c:2f:56:40:e7: c9:cc:6d:d3:40:e7:0c:d1:38:ea:44:82:fd:8f:e1:6c:c5:16: 66:aa:08:7c:cd:34:45:0a:b8:d0:dd:4c:80:7a:35:bd:e0:37: b2:ba:7f:9a:fc:a3:cb:c8:ce:b7:99:c8:b0:e3:25:b0:5a:80: 00:bb:0c:2a:19:87:fd:61:87:de:e8:e2:9c:17:c5:bf:39:44: af:f7:c3:dd:97:53:fa:9b:7c:c0:71:e9:21:a9:d3:33:4f:75: 7a:b7:d9:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTeYHzdOq/yMAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NDJiYzZhMTQtYzIwNC00MGFkLWJjYmYtZTQyMGM5MmNhYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzmgajb2J6VRy717yCUyUd8D9jzeJAGKQZJD hqx5pYEzfPXy9OsHY3kWbN3kPJ2WGLGHsIgqxlcZYp+GhvEwJlFHpWGJlT5hW1gr 6QSpqgbwl8i9AvWXPSvWN10FYMXozndt1WmUXLyg2JdB1NkDKGsqdZ01DM2uKgtU mYBCwIAEOCqeY5c8BFzKq6yPISj8ax4ZEqGBpu4X/MPcpV5ss/9XERaEoRmJkK51 qNBOdlIN3EFUJqiHnBs5woxQwe8cEYDhIgLRpxHTuR2zkLgJIcUnLzBzx9pZnYbk wkPYqnkCeCZghbbSQK8Y3s/xoBKhAPZiatyFGGv8akMQ/tSSkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkzQPcTEiYqvJgCwRzFXT7rLDgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDNkMTIwMTgtZGY3My0z NjdkLWI2NjctYzBhMDNmNGZiMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0B3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiIgQ1NRbFCnwU2fHRAxRc3FrlrNlPGmq2dvi2fMrH9I4yjPbbHT3js UH1NVru7I9BUL4bUNHjCVe7uqc/ETDIPvnE/h5er6/lxtpaCZdX+0ltiAxzghQDY R3hCPHIDfth31Q2ywig2dprTJ6ZR89HPfcoPf1kbuQzx7eM0sf64L9mlo1tEkEtk Rl5DtlVDtwf4PxkC5FP9fd4Pg4dcL1ZA58nMbdNA5wzROOpEgv2P4WzFFmaqCHzN NEUKuNDdTIB6Nb3gN7K6f5r8o8vIzreZyLDjJbBagAC7DCoZh/1hh97o4pwXxb85 RK/3w92XU/qbfMBx6SGp0zNPdXq32W0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:57 2025 by rpki-client