$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2042fd49-2b66-35fe-b3b6-180f6f669ac8.roa File: 2042fd49-2b66-35fe-b3b6-180f6f669ac8.roa (raw, json) Hash identifier: qZ39a2YchLmomKzeUSpDDcrCUDP3UDt9TlTK65JNoOw= Subject key identifier: 1B:18:DD:E2:5C:11:65:C5:C4:BB:EB:87:B8:55:AA:EA:D6:6F:55:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B41A2DE8D38646869AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2042fd49-2b66-35fe-b3b6-180f6f669ac8.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.73.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b4:1a:2d:e8:d3:86:46:86:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=897dc9ba-40a2-4de0-937d-a7b4f84bd3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:87:03:cd:bd:22:0d:bf:e2:32:1b:26:3d: a7:78:38:3a:87:00:a2:0c:6f:c6:40:f9:0e:97:b0: b7:97:ab:a0:1b:b5:a4:16:a8:d0:1b:f7:d8:d0:da: a8:1d:17:6d:1b:b0:b9:c9:9e:5c:8e:2f:be:95:64: ff:8e:27:ed:fb:50:74:e0:0a:eb:fd:b7:63:9a:ce: ad:7c:61:35:d9:43:09:a7:8f:65:62:6e:89:74:d9: b8:af:28:94:1d:55:db:80:32:d5:31:c3:e0:45:b6: 32:c4:43:1b:9a:cc:dc:b9:4b:0b:18:46:15:a2:f7: f8:92:7d:2f:a5:bb:1c:31:15:b2:07:52:56:69:45: bd:79:97:7e:73:4c:4b:3f:2f:1c:4a:a1:bb:58:3f: 42:30:30:c2:34:c0:53:40:cb:01:4f:f7:99:87:fa: 63:89:b7:af:c1:f1:92:25:9a:3b:b1:22:9d:3c:eb: ea:00:bd:50:e4:30:3d:0e:4c:31:c8:b8:ab:75:cb: 8f:8e:cf:e8:a6:d0:2a:95:da:b3:56:b0:98:a6:51: 3a:84:c4:14:ec:e0:9e:be:0e:b8:64:ee:48:79:50: 6c:90:d6:06:77:37:76:3a:e7:b3:d3:80:28:0b:96: 78:9e:8f:11:e8:b1:8c:49:3d:25:14:e1:14:3c:7d: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:18:DD:E2:5C:11:65:C5:C4:BB:EB:87:B8:55:AA:EA:D6:6F:55:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2042fd49-2b66-35fe-b3b6-180f6f669ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.73.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:bf:f3:5e:80:a7:32:d5:0c:a9:0b:6c:24:51:d7:4e:cb:7e: 88:d1:7c:42:20:f1:8e:df:1c:5d:63:95:1c:2b:14:58:61:2d: cb:16:7a:00:b3:67:36:37:de:16:a5:d6:00:ad:75:85:28:ef: 93:43:4b:e2:bb:e0:de:1a:77:5f:61:7a:3a:86:48:17:5b:b3: 52:d0:13:37:af:db:40:53:79:0b:a7:12:d1:c7:9c:66:ff:a9: 1d:a3:6a:d3:3f:7d:bf:37:64:85:62:af:83:bc:e2:a4:ec:dd: 97:ef:0f:32:69:12:c3:6a:f3:77:53:1f:38:40:f2:2a:db:81: b3:fe:59:b5:a3:0d:20:c0:0e:52:31:6c:02:b4:b7:98:3f:f7: b7:10:4a:22:dc:5d:ea:62:e9:1d:14:f1:67:6c:5a:e6:4a:8f: a1:7c:99:26:e3:8c:73:9b:48:43:76:95:cc:99:a5:3b:0b:e6: e0:e4:7b:4b:75:d9:6a:65:81:5b:34:45:b3:33:99:59:b2:b8: 83:a7:3f:a5:f7:25:b9:83:87:49:df:4e:61:bc:e1:55:32:06: 8c:f8:c2:ab:f9:bc:0f:b4:bc:89:25:9d:64:21:e1:4d:eb:e8: 5f:84:75:9e:78:34:be:0b:63:c9:f9:c2:bc:25:b0:85:0b:fd: ec:97:75:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbQaLejThkaGmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ODk3ZGM5YmEtNDBhMi00ZGUwLTkzN2QtYTdiNGY4NGJkM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3uHA829Ig2/4jIbJj2neDg6hwCiDG/GQPkO l7C3l6ugG7WkFqjQG/fY0NqoHRdtG7C5yZ5cji++lWT/jift+1B04Arr/bdjms6t fGE12UMJp49lYm6JdNm4ryiUHVXbgDLVMcPgRbYyxEMbmszcuUsLGEYVovf4kn0v pbscMRWyB1JWaUW9eZd+c0xLPy8cSqG7WD9CMDDCNMBTQMsBT/eZh/pjibevwfGS JZo7sSKdPOvqAL1Q5DA9DkwxyLirdcuPjs/optAqldqzVrCYplE6hMQU7OCevg64 ZO5IeVBskNYGdzd2Ouez04AoC5Z4no8R6LGMST0lFOEUPH1DOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsY3eJcEWXFxLvrh7hVqurWb1WgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA0MmZkNDktMmI2Ni0z NWZlLWIzYjYtMTgwZjZmNjY5YWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG/816ApzLVDKkLbCRR107LfojRfEIg8Y7fHF1jlRwrFFhhLcsWegCz ZzY33hal1gCtdYUo75NDS+K74N4ad19hejqGSBdbs1LQEzev20BTeQunEtHHnGb/ qR2jatM/fb83ZIVir4O84qTs3ZfvDzJpEsNq83dTHzhA8irbgbP+WbWjDSDADlIx bAK0t5g/97cQSiLcXepi6R0U8WdsWuZKj6F8mSbjjHObSEN2lcyZpTsL5uDke0t1 2WplgVs0RbMzmVmyuIOnP6X3JbmDh0nfTmG84VUyBoz4wqv5vA+0vIklnWQh4U3r 6F+EdZ54NL4LY8n5wrwlsIUL/eyXdf4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:33:46 2025 by rpki-client