$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36ff09df-f5c3-3909-abae-20d5859bea46.roa File: 36ff09df-f5c3-3909-abae-20d5859bea46.roa (raw, json) Hash identifier: YxLRurtWl3RGCzyQXFlWdT/YDssMLnIEr9NY4rMzNow= Subject key identifier: E3:61:ED:6D:F9:45:19:71:2C:D1:1B:4F:78:19:E8:C3:3E:AE:85:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE4057949A9F8E6B564D6400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36ff09df-f5c3-3909-abae-20d5859bea46.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.195.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:57:94:9a:9f:8e:6b:56:4d:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=0ec47f69-3bcd-4501-a061-6726f234f83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:92:72:0d:d1:91:37:89:60:e9:89:42:df:04: 7b:f3:c7:90:0a:83:d8:28:df:15:b7:a1:b3:de:23: 5d:53:9f:16:ba:c5:a0:67:c6:40:c8:35:c0:61:e2: 71:f5:22:b2:d3:23:35:ab:89:6b:e5:74:eb:09:cb: bc:c1:34:45:c9:50:46:6f:78:a0:e5:93:b4:60:cf: d1:7f:15:64:5a:28:84:2d:5d:ce:2c:65:71:96:98: a9:ea:20:c3:4d:ba:c2:71:13:52:ea:93:e5:d4:89: 68:6e:18:98:bf:d8:b9:63:0f:b9:f7:20:f9:b3:d2: b8:01:d3:a1:e9:39:d9:05:d7:9d:44:1b:20:92:d7: dc:d6:fc:e0:e8:36:f0:f4:6a:c7:61:f8:1b:1a:a7: fe:a6:52:47:56:08:7f:46:75:ab:f7:38:65:a7:4e: 44:ca:5b:c4:dc:23:95:89:e2:02:87:1f:14:d0:31: 95:6c:f8:4c:f2:c9:f0:8f:cf:1e:08:a0:0c:59:e2: 28:55:a7:75:8b:b9:29:1a:36:41:f7:ed:b0:b8:d8: 04:dd:8c:f7:26:18:72:32:3d:94:e7:9d:b2:ec:eb: 93:a7:61:c6:6e:83:08:cd:fc:07:31:26:5b:cc:d9: df:0b:74:22:80:64:80:a6:c3:6e:71:93:5d:e1:9f: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:61:ED:6D:F9:45:19:71:2C:D1:1B:4F:78:19:E8:C3:3E:AE:85:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36ff09df-f5c3-3909-abae-20d5859bea46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.195.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b4:28:81:f3:28:16:02:25:7a:05:0e:b5:3b:04:12:11:71: 2c:da:f5:c9:0f:50:ad:ef:98:4e:65:74:f0:b4:61:a5:f5:48: de:19:bd:cc:37:5a:98:5f:b9:8c:fd:69:7d:e7:40:af:7b:f5: 60:b9:cc:aa:18:02:3b:d8:67:da:55:06:a0:e2:f7:5a:3c:2e: c8:57:17:21:dd:7f:84:0d:56:9c:29:ab:a4:25:e7:d5:77:fa: 7f:c5:0c:95:88:73:ca:e5:d4:34:81:4b:be:ca:3a:4b:a0:ad: 5f:28:69:3f:29:a7:7c:e6:9b:20:66:ee:bf:ea:80:a0:b0:42: fc:14:75:fe:b5:73:5a:d0:a0:5e:34:0f:fd:be:f0:5e:8f:47: 14:82:1e:89:00:0a:d3:1f:c6:09:63:fa:4b:95:92:2d:95:dd: 4e:4e:9c:65:be:98:3a:7d:5d:a0:b1:88:f0:b7:5a:ef:c0:ca: 64:e5:7a:13:30:42:4c:f3:2f:54:6a:e7:08:82:60:43:2d:24: d4:a8:c8:20:cb:b5:43:ae:81:9e:35:46:0f:1c:af:4e:8a:75: 96:bb:02:14:59:a0:76:8d:29:6e:29:a2:2c:a2:a4:69:bd:19: 7e:e7:61:07:7c:8e:69:a9:9d:27:75:82:49:df:e3:a2:2f:d4: ab:71:65:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFeUmp+Oa1ZNZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MGVjNDdmNjktM2JjZC00NTAxLWEwNjEtNjcyNmYyMzRmODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pJyDdGRN4lg6YlC3wR788eQCoPYKN8Vt6Gz 3iNdU58WusWgZ8ZAyDXAYeJx9SKy0yM1q4lr5XTrCcu8wTRFyVBGb3ig5ZO0YM/R fxVkWiiELV3OLGVxlpip6iDDTbrCcRNS6pPl1IlobhiYv9i5Yw+59yD5s9K4AdOh 6TnZBdedRBsgktfc1vzg6Dbw9GrHYfgbGqf+plJHVgh/RnWr9zhlp05EylvE3COV ieIChx8U0DGVbPhM8snwj88eCKAMWeIoVad1i7kpGjZB9+2wuNgE3Yz3JhhyMj2U 552y7OuTp2HGboMIzfwHMSZbzNnfC3QigGSApsNucZNd4Z+2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONh7W35RRlxLNEbT3gZ6MM+roVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZmZjA5ZGYtZjVjMy0z OTA5LWFiYWUtMjBkNTg1OWJlYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF8MmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC0KIHzKBYCJXoFDrU7BBIRcSza9ckPUK3vmE5ldPC0YaX1SN4Zvcw3 WphfuYz9aX3nQK979WC5zKoYAjvYZ9pVBqDi91o8LshXFyHdf4QNVpwpq6Ql59V3 +n/FDJWIc8rl1DSBS77KOkugrV8oaT8pp3zmmyBm7r/qgKCwQvwUdf61c1rQoF40 D/2+8F6PRxSCHokACtMfxglj+kuVki2V3U5OnGW+mDp9XaCxiPC3Wu/AymTlehMw QkzzL1Rq5wiCYEMtJNSoyCDLtUOugZ41Rg8cr06KdZa7AhRZoHaNKW4poiyipGm9 GX7nYQd8jmmpnSd1gknf46Iv1KtxZf0= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:45 2025 by rpki-client