$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f80b41c-995c-3f71-9c4d-3aeb867c6238.roa File: 0f80b41c-995c-3f71-9c4d-3aeb867c6238.roa (raw, json) Hash identifier: llVp1r+KrDbc4nZ11jVjB+m5aa0CEJ7GKHrK61TScPw= Subject key identifier: FB:B5:DB:FC:B9:D1:99:7D:27:0D:C9:21:83:F8:82:E8:7B:0C:5D:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE72BB4E5033BA51CE9074280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f80b41c-995c-3f71-9c4d-3aeb867c6238.roa Signing time: Tue 19 Aug 2025 01:00:32 +0000 ROA not before: Tue 19 Aug 2025 01:00:32 +0000 ROA not after: Mon 17 Nov 2025 02:00:32 +0000 asID: 16625 IP address blocks: 23.1.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:2b:b4:e5:03:3b:a5:1c:e9:07:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 01:00:32 2025 GMT Not After : Nov 17 02:00:32 2025 GMT Subject: CN=aa18d9c8-9511-4b52-bc34-8138bde93eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:17:02:2d:c9:30:23:04:14:a6:22:c9:4f: a3:1f:c5:db:ba:96:9a:a1:96:51:e3:0c:e4:b4:f0: 7f:8c:21:aa:af:35:5f:db:2a:82:28:48:2f:00:e2: c8:7a:b3:5a:e6:5d:40:4f:61:00:d3:0c:3c:87:5c: 49:59:7a:75:a2:db:f2:18:bf:a7:1b:60:5c:62:20: 69:1d:a6:44:75:54:73:b7:f5:c6:d1:c8:d3:b0:c1: 7d:a3:fc:78:5d:8a:5a:0c:d7:d9:ff:1b:20:5e:d6: f1:c5:3e:c7:1e:30:ad:c8:f8:9a:32:4f:f9:95:ad: d1:9d:23:22:47:22:7d:a8:7f:9a:24:4a:68:e8:6c: f6:f8:82:bb:eb:8b:78:e0:d6:16:c7:50:d3:c5:59: 4a:4b:7e:e7:97:1f:54:62:27:03:a1:c8:7a:7f:ce: 53:32:29:ff:b8:00:6b:46:40:40:b0:b6:b4:f3:77: 0c:40:07:c5:f9:9b:16:03:d8:04:7e:1d:97:c5:9a: c9:8e:fd:fe:c3:f7:82:9b:3f:e1:cc:6f:5e:9f:f8: ab:91:8b:77:84:0d:24:8c:2e:ca:f7:cd:bb:31:33: 7f:23:3e:ae:1b:9a:d4:1e:a8:86:1d:66:b4:4a:ed: bb:da:b2:bf:bd:03:e9:33:d0:1b:d3:f3:37:42:a3: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B5:DB:FC:B9:D1:99:7D:27:0D:C9:21:83:F8:82:E8:7B:0C:5D:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f80b41c-995c-3f71-9c4d-3aeb867c6238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:da:d6:2b:d6:20:89:f0:27:f6:19:ca:f1:c3:ea:b8:de:a6: 85:02:c4:fe:85:98:6d:21:cb:9e:e3:d6:f2:d6:85:80:e7:a0: 3d:c2:36:98:7a:96:36:a6:5b:7e:ff:44:68:5d:11:38:ae:04: 9d:75:ac:d9:07:a1:a2:e6:c2:f0:3c:80:03:7f:f9:e0:0b:56: d9:47:88:87:03:88:25:19:9a:c0:c8:75:fb:46:60:7f:61:da: f3:c0:23:81:de:4b:b8:1a:2b:af:5f:e2:2f:ec:61:78:8d:f2: cd:d1:3c:22:d0:db:dd:06:ae:45:53:4c:20:7b:38:c1:c6:f6: 1a:a3:fb:cc:e6:37:55:d3:ee:a3:3b:5d:8a:97:30:30:d9:c3: 91:d2:97:95:ca:ee:9c:89:f5:a6:66:3b:74:7c:a4:99:ff:33: ce:63:2c:3e:20:71:30:ab:b1:8d:2e:08:21:49:89:74:89:81: 44:04:53:37:6f:5e:d2:c8:65:fa:04:29:25:a3:af:fe:6a:42: 5c:c0:bb:c7:10:cc:b7:ee:68:8f:61:34:7e:99:87:f8:60:90: 2b:60:b6:fa:61:32:29:f0:a1:06:4f:79:a3:b0:66:97:ec:83: 4d:26:d5:89:d6:ad:aa:92:b1:de:e4:b2:c2:53:e2:29:30:8c: 65:57:a6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnK7TlAzulHOkHQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTAxMDAzMloXDTI1MTExNzAyMDAzMlowLzEtMCsGA1UEAxMk YWExOGQ5YzgtOTUxMS00YjUyLWJjMzQtODEzOGJkZTkzZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMsXAi3JMCMEFKYiyU+jH8XbupaaoZZR4wzk tPB/jCGqrzVf2yqCKEgvAOLIerNa5l1AT2EA0ww8h1xJWXp1otvyGL+nG2BcYiBp HaZEdVRzt/XG0cjTsMF9o/x4XYpaDNfZ/xsgXtbxxT7HHjCtyPiaMk/5la3RnSMi RyJ9qH+aJEpo6Gz2+IK764t44NYWx1DTxVlKS37nlx9UYicDoch6f85TMin/uABr RkBAsLa083cMQAfF+ZsWA9gEfh2XxZrJjv3+w/eCmz/hzG9en/irkYt3hA0kjC7K 9827MTN/Iz6uG5rUHqiGHWa0Su272rK/vQPpM9Ab0/M3QqMaNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPu12/y50Zl9Jw3JIYP4guh7DF2KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY4MGI0MWMtOTk1Yy0z ZjcxLTljNGQtM2FlYjg2N2M2MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTa1ivWIInwJ/YZyvHD6rjepoUCxP6FmG0hy57j1vLWhYDnoD3CNph6 ljamW37/RGhdETiuBJ11rNkHoaLmwvA8gAN/+eALVtlHiIcDiCUZmsDIdftGYH9h 2vPAI4HeS7gaK69f4i/sYXiN8s3RPCLQ290GrkVTTCB7OMHG9hqj+8zmN1XT7qM7 XYqXMDDZw5HSl5XK7pyJ9aZmO3R8pJn/M85jLD4gcTCrsY0uCCFJiXSJgUQEUzdv XtLIZfoEKSWjr/5qQlzAu8cQzLfuaI9hNH6Zh/hgkCtgtvphMinwoQZPeaOwZpfs g00m1YnWraqSsd7kssJT4ikwjGVXpjQ= -----END CERTIFICATE-----Generated at Wed Nov 5 03:00:35 2025 by rpki-client