$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c9febaf-3999-3d20-bea6-6e80eae301f7.roa File: 0c9febaf-3999-3d20-bea6-6e80eae301f7.roa (raw, json) Hash identifier: hYNnkT5Wn2hLTVOSHLL7HSODAzGk+u07nkf9TYlLix4= Subject key identifier: 6E:81:97:94:03:B7:3C:26:82:7C:84:83:F1:81:F2:C4:0B:35:98:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB19275F13BD8679376F0E0F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c9febaf-3999-3d20-bea6-6e80eae301f7.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 35994 IP address blocks: 23.65.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:75:f1:3b:d8:67:93:76:f0:e0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=42bceeaf-9d88-47f0-b7cf-4f6162530504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a8:a7:e6:ef:4d:7e:96:47:09:e1:28:59:22: 42:35:14:93:7a:3f:0c:51:39:9c:62:3f:9c:24:6f: 40:39:e5:37:31:21:9f:a5:c9:96:e4:45:f4:28:f3: cc:00:94:4d:b3:5c:fd:95:10:9e:42:b7:18:f1:05: 10:6d:85:bb:50:10:36:ec:fe:b8:7e:65:c2:49:f8: 2c:6f:7c:63:be:87:c9:c4:ed:00:1e:67:13:e6:bc: 22:1d:8d:08:9c:6a:9e:c4:42:1c:9e:d8:6e:26:c0: c3:b3:f5:3a:21:26:42:cb:4e:fb:b4:88:4e:40:7d: 97:d0:e6:29:46:08:02:0d:7d:87:59:33:aa:f6:b9: 82:88:c0:e7:8d:41:09:ba:ba:0f:20:8c:a3:fc:a2: dd:65:49:0c:be:d7:8c:2a:1a:4a:ad:ba:81:1b:f8: 45:f9:10:8e:61:4a:45:11:33:81:4a:d7:b8:17:53: 5f:9a:2b:03:ee:16:e0:f1:f3:f5:a4:b8:f4:93:c8: 25:af:da:b1:33:b3:b6:48:65:23:dd:1d:93:2a:8a: bc:77:c4:d6:fd:53:3c:1f:6b:2a:41:91:29:8d:f4: ae:b7:0b:96:19:43:14:8b:bc:f3:1f:b4:08:05:7a: f9:b0:4f:d3:6f:8a:0e:cc:11:48:a6:45:9b:1b:48: 51:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:81:97:94:03:B7:3C:26:82:7C:84:83:F1:81:F2:C4:0B:35:98:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c9febaf-3999-3d20-bea6-6e80eae301f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.65.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:eb:9f:25:32:4b:9c:8d:41:86:0e:86:06:4e:c4:eb:71:55: 70:3f:96:12:e1:f3:bc:f5:ff:98:05:ed:26:c2:4c:25:2c:2c: 5d:63:ff:75:af:87:4f:7b:9a:d8:8d:f5:14:d8:6b:e9:48:80: 54:24:92:76:a5:18:63:86:6a:90:00:59:6b:e0:66:af:62:4c: 06:5a:05:75:3c:ce:99:5f:42:d8:11:3e:71:6c:e0:f0:dd:92: 90:61:0d:b1:b0:c4:c4:b8:f9:6d:01:1a:f5:4b:37:21:08:ec: a8:a9:3c:51:20:b4:09:79:d0:79:68:50:31:27:bc:56:d3:c4: ef:6f:e2:54:b6:dd:53:27:cb:a1:88:da:21:92:40:1b:dd:43: 08:a0:af:ca:af:1e:44:09:3d:ad:e5:da:06:fa:36:52:ce:cd: a2:b4:d6:94:f9:0a:f9:cd:78:f0:77:81:77:c5:f3:dc:d2:0c: 45:85:70:01:13:33:04:08:14:c0:96:b4:b7:5d:23:86:95:23: 60:7a:c4:db:c0:70:76:63:6d:8b:7a:bb:4d:8b:ec:f9:4e:dc: f8:34:da:6f:dc:76:86:37:25:18:7c:ea:f4:78:5b:0f:08:a1: d3:c5:a7:fd:5b:15:52:de:bd:0d:12:b7:af:13:d3:9d:04:e2: b9:0b:7c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknXxO9hnk3bw4PAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NDJiY2VlYWYtOWQ4OC00N2YwLWI3Y2YtNGY2MTYyNTMwNTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgain5u9NfpZHCeEoWSJCNRSTej8MUTmcYj+c JG9AOeU3MSGfpcmW5EX0KPPMAJRNs1z9lRCeQrcY8QUQbYW7UBA27P64fmXCSfgs b3xjvofJxO0AHmcT5rwiHY0InGqexEIcnthuJsDDs/U6ISZCy077tIhOQH2X0OYp RggCDX2HWTOq9rmCiMDnjUEJuroPIIyj/KLdZUkMvteMKhpKrbqBG/hF+RCOYUpF ETOBSte4F1NfmisD7hbg8fP1pLj0k8glr9qxM7O2SGUj3R2TKoq8d8TW/VM8H2sq QZEpjfSutwuWGUMUi7zzH7QIBXr5sE/Tb4oOzBFIpkWbG0hRBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6Bl5QDtzwmgnyEg/GB8sQLNZiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM5ZmViYWYtMzk5OS0z ZDIwLWJlYTYtNmU4MGVhZTMwMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0G/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjrnyUyS5yNQYYOhgZOxOtxVXA/lhLh87z1/5gF7SbCTCUsLF1j/3Wv h097mtiN9RTYa+lIgFQkknalGGOGapAAWWvgZq9iTAZaBXU8zplfQtgRPnFs4PDd kpBhDbGwxMS4+W0BGvVLNyEI7KipPFEgtAl50HloUDEnvFbTxO9v4lS23VMny6GI 2iGSQBvdQwigr8qvHkQJPa3l2gb6NlLOzaK01pT5CvnNePB3gXfF89zSDEWFcAET MwQIFMCWtLddI4aVI2B6xNvAcHZjbYt6u02L7PlO3Pg02m/cdoY3JRh86vR4Ww8I odPFp/1bFVLevQ0St68T050E4rkLfN0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:14:44 2025 by rpki-client