$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1edc903b-6e38-3971-a7f3-c6df5cd53729.roa File: 1edc903b-6e38-3971-a7f3-c6df5cd53729.roa (raw, json) Hash identifier: K+pac1u2NKZMru94ROFj120p7kfy1kq+imJZVNmgnVU= Subject key identifier: EE:64:A7:9A:84:F4:79:F2:42:BD:25:5F:D4:C8:EC:6A:5C:11:2C:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB192765587C83C5DB0541520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1edc903b-6e38-3971-a7f3-c6df5cd53729.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.66.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:76:55:87:c8:3c:5d:b0:54:15:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=379164c3-ae3e-4fc4-95b8-cbb5c5117291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:96:b0:c0:d8:0a:8f:e9:10:2c:34:bc:99: e5:61:46:f8:36:4e:f3:e6:4a:71:ba:fe:75:7d:ba: 33:3e:3c:a1:b0:ef:44:b3:8f:08:29:45:ee:eb:d1: 2e:79:13:b3:3c:e3:66:a0:75:4c:b1:78:b7:21:a3: c7:54:07:01:8e:32:80:9c:00:6b:a7:d7:2c:35:94: 24:8e:e8:2c:ba:b6:31:be:b1:ff:a6:96:57:30:4b: ce:19:54:85:e4:d6:1b:e1:67:f0:98:92:cd:c5:e4: c9:d1:27:2b:7d:7d:a9:5d:2f:0a:1c:60:61:3b:de: 10:11:c3:73:c9:91:56:ba:9a:1c:20:e7:42:b8:ac: 67:7a:97:64:b0:cf:25:12:2f:cc:87:d0:16:61:82: 5e:3f:9a:99:7b:b2:15:34:3a:55:e3:ea:3e:c3:3c: ce:a7:f0:70:58:85:c9:5a:d6:7a:26:5e:96:45:d4: bb:50:d8:53:51:ca:c6:7b:98:c2:0d:f8:01:90:34: 2b:56:5f:51:de:f0:50:a3:d0:a4:42:fb:cb:51:8f: 2a:69:75:b7:18:6d:c3:ff:a9:c7:89:05:54:90:61: 55:53:82:6f:c4:7f:30:ac:2d:59:7e:9b:f5:8f:33: 87:76:e4:5c:6f:ab:90:1a:bf:63:e7:51:a4:58:29: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:64:A7:9A:84:F4:79:F2:42:BD:25:5F:D4:C8:EC:6A:5C:11:2C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1edc903b-6e38-3971-a7f3-c6df5cd53729.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d1:f6:57:fe:4c:30:95:25:f1:a4:92:f1:71:84:e3:e6:0e: d1:e0:24:ce:20:2e:6c:b7:76:16:71:c9:48:73:38:d4:62:08: 26:98:49:7f:32:47:b6:ba:ac:2d:59:b4:63:5d:c6:1d:10:1c: 5c:50:61:56:01:df:d5:b2:0f:dc:f0:2d:0a:50:23:17:17:8a: 63:7f:e4:4d:12:58:47:7a:06:25:9e:04:2a:50:29:2a:97:43: c5:1c:3f:76:50:a5:f1:c5:ca:8d:ae:d7:c7:c5:de:90:9c:e0: 49:51:5c:fa:ba:fe:18:e5:29:24:30:af:f5:31:b2:f2:53:63: e4:19:35:7c:79:2b:a6:b1:33:fa:79:33:19:b2:e6:26:e0:d1: 71:46:f0:f1:8d:4c:b6:47:64:df:36:f1:e8:1c:3e:54:ed:34: d9:e9:f0:28:a9:6b:ba:36:96:db:26:6f:12:f1:e5:62:26:11: c6:28:79:31:32:83:69:52:7d:d1:5d:9e:74:f8:dd:64:03:4c: 0f:dd:22:e3:60:e8:f5:16:21:d1:09:41:f4:07:66:4e:b8:9a: 0f:44:31:ab:1c:99:03:af:71:ff:a9:23:c3:f4:0f:d6:98:b3: af:fb:6c:25:f2:45:b0:aa:7c:cb:f7:ed:52:59:c7:1b:51:81: 29:4c:25:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknZVh8g8XbBUFSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk Mzc5MTY0YzMtYWUzZS00ZmM0LTk1YjgtY2JiNWM1MTE3MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL6WsMDYCo/pECw0vJnlYUb4Nk7z5kpxuv51 fbozPjyhsO9Es48IKUXu69EueROzPONmoHVMsXi3IaPHVAcBjjKAnABrp9csNZQk jugsurYxvrH/ppZXMEvOGVSF5NYb4WfwmJLNxeTJ0ScrfX2pXS8KHGBhO94QEcNz yZFWupocIOdCuKxnepdksM8lEi/Mh9AWYYJeP5qZe7IVNDpV4+o+wzzOp/BwWIXJ WtZ6Jl6WRdS7UNhTUcrGe5jCDfgBkDQrVl9R3vBQo9CkQvvLUY8qaXW3GG3D/6nH iQVUkGFVU4JvxH8wrC1Zfpv1jzOHduRcb6uQGr9j51GkWCk0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5kp5qE9HnyQr0lX9TI7GpcESygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVkYzkwM2ItNmUzOC0z OTcxLWE3ZjMtYzZkZjVjZDUzNzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF0IsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjR9lf+TDCVJfGkkvFxhOPmDtHgJM4gLmy3dhZxyUhzONRiCCaYSX8y R7a6rC1ZtGNdxh0QHFxQYVYB39WyD9zwLQpQIxcXimN/5E0SWEd6BiWeBCpQKSqX Q8UcP3ZQpfHFyo2u18fF3pCc4ElRXPq6/hjlKSQwr/UxsvJTY+QZNXx5K6axM/p5 Mxmy5ibg0XFG8PGNTLZHZN828egcPlTtNNnp8Cipa7o2ltsmbxLx5WImEcYoeTEy g2lSfdFdnnT43WQDTA/dIuNg6PUWIdEJQfQHZk64mg9EMascmQOvcf+pI8P0D9aY s6/7bCXyRbCqfMv37VJZxxtRgSlMJbU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:41:05 2025 by rpki-client