$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1589d741-f995-3eb0-97b9-aea31377713e.roa File: 1589d741-f995-3eb0-97b9-aea31377713e.roa (raw, json) Hash identifier: QnF4gZ8rEaaPin2e5ML/q5caJpLZRSAP0umhKwq7RQo= Subject key identifier: BC:7D:6B:BA:D2:3D:95:4E:96:B5:B3:96:0B:F0:2F:65:EC:36:7D:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBB759A812E4FCF07D3F24FC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1589d741-f995-3eb0-97b9-aea31377713e.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.53.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:9a:81:2e:4f:cf:07:d3:f2:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=843507cf-230d-490d-8af9-14612790b2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d3:ee:8e:9f:05:c7:f2:04:3d:45:4d:de:58: f3:51:34:d0:88:6a:d8:3f:00:25:6c:1e:80:15:f3: ad:db:6d:c2:e2:c2:aa:d6:ef:f0:36:a0:49:e3:40: c3:47:52:e2:f6:27:5c:0b:d6:36:22:8a:b3:81:02: 44:d8:cf:bf:e7:5e:ba:2a:c1:12:f5:eb:ed:7a:98: d1:f4:fc:81:9d:2e:58:15:b6:a2:8f:c6:c7:1f:d8: 4e:c5:9a:c1:29:17:3a:a0:80:fd:8f:b3:23:e9:f0: 1c:ad:d9:63:17:06:96:0f:96:fc:24:24:18:d8:ba: 7c:3a:fd:d9:d4:eb:76:7d:22:ec:e9:73:c9:c2:cc: 13:21:94:95:8c:90:0d:dd:11:6b:a7:d5:ec:41:a0: fb:0f:db:ba:54:0d:84:dd:30:23:35:9d:07:63:97: a4:ad:38:75:ad:f7:ed:9b:fb:27:e4:8c:ba:cb:17: 6f:c7:a2:66:e4:a0:5b:7d:a7:d1:7e:b6:26:79:36: 9f:ce:25:8e:1f:14:a4:e9:58:96:6d:02:7a:ff:b4: 5f:43:78:a2:42:a6:22:43:ec:65:c7:a1:9a:41:63: 65:87:ef:9f:7d:a0:72:72:21:80:df:27:29:a1:df: 6e:63:a0:ad:f6:37:d1:4a:99:fb:89:51:0c:e5:ef: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7D:6B:BA:D2:3D:95:4E:96:B5:B3:96:0B:F0:2F:65:EC:36:7D:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1589d741-f995-3eb0-97b9-aea31377713e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.53.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:54:53:39:a3:c2:1e:73:28:a9:aa:43:98:0d:0d:d7:96:a6: 26:95:8f:42:e7:ee:2b:c6:a1:b9:1d:df:60:30:43:f5:a1:dc: 2c:65:cc:8b:19:8e:2c:4e:a1:f8:34:c4:a8:6a:c3:b0:ea:22: 8b:53:80:fe:8a:5d:81:f6:23:06:f2:b8:f2:83:7d:c6:19:c0: 06:82:03:b1:5f:51:41:8d:13:4a:32:f3:82:0d:e0:48:5f:8e: 5c:b1:86:84:72:7c:32:75:9b:41:ef:26:0b:4d:1f:13:c9:90: 92:9f:31:2d:66:11:59:de:1b:18:5b:f4:76:13:ff:4a:8a:f5: 0a:c1:4c:04:6f:ee:b9:bb:c9:37:91:c0:9e:22:a7:d6:af:19: af:05:35:7d:3c:3c:57:48:21:13:74:a1:4f:50:a8:56:28:82: f7:cc:d0:68:56:61:1f:ae:42:0e:2b:c0:2f:7a:53:67:55:85: 11:7e:97:51:31:83:7f:c9:bf:74:a0:75:86:2f:36:51:e9:74: 87:aa:d7:99:49:84:63:1d:40:41:95:6d:a7:f5:5b:f4:7e:6e: 5d:d2:35:12:db:ec:a1:b1:e1:01:7a:18:e7:c4:9a:ae:f0:24: d4:9d:d7:e4:d5:0d:91:51:72:fa:ae:e5:f3:83:b5:d6:60:0f: f9:6b:c2:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZqBLk/PB9PyT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ODQzNTA3Y2YtMjMwZC00OTBkLThhZjktMTQ2MTI3OTBiMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitPujp8Fx/IEPUVN3ljzUTTQiGrYPwAlbB6A FfOt223C4sKq1u/wNqBJ40DDR1Li9idcC9Y2IoqzgQJE2M+/5166KsES9evtepjR 9PyBnS5YFbaij8bHH9hOxZrBKRc6oID9j7Mj6fAcrdljFwaWD5b8JCQY2Lp8Ov3Z 1Ot2fSLs6XPJwswTIZSVjJAN3RFrp9XsQaD7D9u6VA2E3TAjNZ0HY5ekrTh1rfft m/sn5Iy6yxdvx6Jm5KBbfafRfrYmeTafziWOHxSk6ViWbQJ6/7RfQ3iiQqYiQ+xl x6GaQWNlh++ffaByciGA3ycpod9uY6Ct9jfRSpn7iVEM5e8NfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx9a7rSPZVOlrWzlgvwL2XsNn0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU4OWQ3NDEtZjk5NS0z ZWIwLTk3YjktYWVhMzEzNzc3MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFzU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1UUzmjwh5zKKmqQ5gNDdeWpiaVj0Ln7ivGobkd32AwQ/Wh3CxlzIsZ jixOofg0xKhqw7DqIotTgP6KXYH2IwbyuPKDfcYZwAaCA7FfUUGNE0oy84IN4Ehf jlyxhoRyfDJ1m0HvJgtNHxPJkJKfMS1mEVneGxhb9HYT/0qK9QrBTARv7rm7yTeR wJ4ip9avGa8FNX08PFdIIRN0oU9QqFYogvfM0GhWYR+uQg4rwC96U2dVhRF+l1Ex g3/Jv3SgdYYvNlHpdIeq15lJhGMdQEGVbaf1W/R+bl3SNRLb7KGx4QF6GOfEmq7w JNSd1+TVDZFRcvqu5fODtdZgD/lrwio= -----END CERTIFICATE-----Generated at Tue Nov 4 22:29:06 2025 by rpki-client