$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/281a05eb-cce6-37b7-95b9-23bbed985558.roa File: 281a05eb-cce6-37b7-95b9-23bbed985558.roa (raw, json) Hash identifier: /nfHF4exbK50dz9OF7NyiZcYf5pie9MA0wJTaS+YbbI= Subject key identifier: 17:F3:42:BB:A2:E4:F5:52:A7:28:7D:68:96:0F:4A:BA:2D:11:96:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B0624557FFEFE7F04200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/281a05eb-cce6-37b7-95b9-23bbed985558.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.41.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b0:62:45:57:ff:ef:e7:f0:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=880c9e63-2a95-4dba-838c-71e7fe3d9187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:13:e8:9f:b3:d7:ce:64:a0:65:bb:93:2b: c6:ac:10:9c:d6:2d:e0:e8:6f:46:b0:4e:7a:cd:9e: b6:2e:6f:b7:2c:aa:d0:29:33:6c:e2:8f:af:74:4c: 77:d2:ff:d7:c8:0a:4d:f5:68:91:7a:9a:71:34:4f: f4:c6:d8:46:38:ab:43:67:02:9c:37:3c:7c:a2:30: 4f:cd:c1:a9:68:cb:66:4e:80:c4:61:20:bf:75:65: d0:22:2e:27:0b:4d:55:da:9c:d8:78:23:37:e2:b7: 24:04:6b:b7:2c:0b:3a:21:75:ac:59:84:b7:24:d9: 66:2f:88:96:20:51:43:81:34:8c:46:f9:75:a9:52: f9:e5:39:78:4f:fd:f7:5a:98:26:6a:19:b0:5b:e5: 49:f6:cd:7c:51:ba:85:1e:a2:fd:6d:24:64:a3:df: 4f:3e:e0:94:00:e2:b3:24:52:5a:ea:41:51:59:7c: a3:26:f9:b3:36:e9:a8:63:35:c2:87:32:3b:8a:0b: 07:19:9b:32:9f:ec:31:b9:63:a7:e2:27:97:73:25: f6:68:cc:c0:ea:21:7a:c0:98:5d:f8:95:d6:05:0f: dc:8f:72:c7:3f:ef:9e:23:97:0c:92:a5:69:8a:15: 91:a0:9b:a5:15:35:95:e0:db:6b:c6:2f:ee:86:bc: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F3:42:BB:A2:E4:F5:52:A7:28:7D:68:96:0F:4A:BA:2D:11:96:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/281a05eb-cce6-37b7-95b9-23bbed985558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:72:15:64:87:5f:13:f6:48:11:66:69:ce:59:6e:21:b5:f5: 9e:c8:d6:f7:ec:9e:66:31:dc:ef:89:b1:1d:1a:cf:b1:b8:d3: d0:23:0e:1a:4b:8b:43:5d:9a:5d:8b:22:67:97:08:90:cf:b9: 91:f1:ac:04:3a:90:0c:ef:4b:ad:9b:c4:b7:e5:d2:9d:bd:e7: 68:41:70:3b:76:be:cb:1a:eb:e8:cb:6e:5c:89:01:90:0f:fd: 36:c8:63:7c:32:fc:45:bb:2c:97:b3:0a:42:c5:0e:97:11:e0: 67:0c:70:cb:5c:e9:66:c8:60:67:5e:19:d6:ae:1e:2a:f7:c7: a9:c3:5f:4b:16:96:fe:cd:09:76:45:a1:26:c8:15:06:f7:17: 50:b3:c2:34:0b:ff:97:a2:a3:60:db:2c:c2:ad:dc:65:64:03: 1c:57:8c:42:55:93:b5:44:c8:50:cf:f1:aa:ca:5b:d1:6f:3b: 95:57:d5:df:b4:dc:52:4f:2a:62:7a:11:eb:6a:9d:fc:17:4a: 73:66:28:d8:b1:ef:8a:11:5f:1a:61:3a:c6:0c:53:43:69:b7: ca:b6:ff:ec:f1:70:75:a8:92:19:61:95:00:46:bd:3d:f4:75: 2d:eb:f5:34:7d:bb:99:5b:79:f9:73:fc:c8:7f:cc:e9:9e:87: c4:50:0b:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbBiRVf/7+fwQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ODgwYzllNjMtMmE5NS00ZGJhLTgzOGMtNzFlN2ZlM2Q5MTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwAT6J+z185koGW7kyvGrBCc1i3g6G9GsE56 zZ62Lm+3LKrQKTNs4o+vdEx30v/XyApN9WiReppxNE/0xthGOKtDZwKcNzx8ojBP zcGpaMtmToDEYSC/dWXQIi4nC01V2pzYeCM34rckBGu3LAs6IXWsWYS3JNlmL4iW IFFDgTSMRvl1qVL55Tl4T/33WpgmahmwW+VJ9s18UbqFHqL9bSRko99PPuCUAOKz JFJa6kFRWXyjJvmzNumoYzXChzI7igsHGZsyn+wxuWOn4ieXcyX2aMzA6iF6wJhd +JXWBQ/cj3LHP++eI5cMkqVpihWRoJulFTWV4Ntrxi/uhry6swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfzQrui5PVSpyh9aJYPSrotEZYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjgxYTA1ZWItY2NlNi0z N2I3LTk1YjktMjNiYmVkOTg1NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNyFWSHXxP2SBFmac5ZbiG19Z7I1vfsnmYx3O+JsR0az7G409AjDhpL i0Ndml2LImeXCJDPuZHxrAQ6kAzvS62bxLfl0p2952hBcDt2vssa6+jLblyJAZAP /TbIY3wy/EW7LJezCkLFDpcR4GcMcMtc6WbIYGdeGdauHir3x6nDX0sWlv7NCXZF oSbIFQb3F1CzwjQL/5eio2DbLMKt3GVkAxxXjEJVk7VEyFDP8arKW9FvO5VX1d+0 3FJPKmJ6EetqnfwXSnNmKNix74oRXxphOsYMU0Npt8q2/+zxcHWokhlhlQBGvT30 dS3r9TR9u5lbeflz/Mh/zOmeh8RQC4c= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:22 2025 by rpki-client