$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa File: 3882b44a-ca1e-3221-b251-988c637fe6f9.roa (raw, json) Hash identifier: 1guKm/3y+mw8US5XF4ChL1wP/wbQh0yy/2fjtAVoBlU= Subject key identifier: 3F:29:19:36:FE:3D:18:D3:4F:09:C0:30:EF:3F:55:97:8D:1D:FF:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA932916233835981074B9380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.49.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:91:62:33:83:59:81:07:4b:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=ae4dc23e-e9dd-4376-a398-742b3b9385ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f6:4b:02:27:b2:17:36:b1:7d:5d:52:68:79: 58:0b:56:b4:72:a9:6e:69:b5:34:b7:1f:a3:8b:64: af:38:82:e5:29:3c:55:22:31:04:cb:ef:e1:d9:ee: 58:6c:72:dc:00:3d:19:68:85:e9:41:25:ce:e0:4e: 7b:d4:fe:47:c6:12:66:88:2d:5f:4f:e7:fb:00:4f: 2b:aa:84:a8:76:51:82:3c:0e:37:ae:7e:99:7d:f6: d5:38:b3:cb:7e:ef:8a:13:67:c3:40:ad:1e:b8:96: 68:f7:28:ad:3b:7a:8d:1d:e4:b2:3a:44:86:37:2b: cf:34:0d:03:f5:1c:45:b0:d3:fc:36:74:71:7a:a7: 6e:f2:21:ad:70:fe:7d:c2:3f:27:65:88:37:e4:4b: 93:ed:73:c9:3a:52:8c:ff:e9:a7:7a:3b:4e:e3:b8: ed:9d:ba:bc:45:27:b0:9f:b6:80:03:0f:61:cc:20: 10:6a:55:97:39:c2:1e:c6:f1:8e:a3:43:65:42:cd: 49:8d:70:03:3e:f4:10:ec:8a:97:d0:1f:9d:6b:eb: 09:14:52:1e:c5:52:31:d5:1a:79:75:bf:29:8e:5e: 86:26:c9:d0:29:5a:ea:1f:66:c0:bc:87:fa:ea:df: c8:d6:f2:e3:06:12:2e:fc:f8:14:be:96:60:ae:ba: 6b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:29:19:36:FE:3D:18:D3:4F:09:C0:30:EF:3F:55:97:8D:1D:FF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3882b44a-ca1e-3221-b251-988c637fe6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.49.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:75:eb:06:ab:f0:df:6e:83:fb:8f:e5:8a:57:ea:ab:3e:48: 1c:64:2c:3b:d5:3e:ea:04:46:9d:b1:7f:09:06:15:8b:0b:a3: 1b:f2:93:7a:67:d8:2e:f0:e9:19:c6:52:6b:86:92:c2:27:e3: 91:86:cd:7c:8d:29:bd:7f:4d:63:1e:0c:f3:13:db:2e:62:d7: 00:82:8f:a8:18:9d:e1:b3:d7:f0:ab:2d:ea:40:0d:93:8b:ee: a9:7c:65:47:a3:9b:79:23:e3:20:23:1b:05:ce:24:0d:6b:30: e2:99:dd:0e:bb:63:26:e7:46:03:b1:e5:70:d3:5b:25:c6:e2: 16:52:32:a8:b5:08:e6:be:28:36:b9:9c:b6:ce:c5:14:90:70: 38:17:f5:7b:ce:bd:37:bb:51:c1:37:9d:9e:04:ae:41:73:fe: b3:92:c3:1f:71:2f:fe:f6:e5:31:14:f6:04:79:3c:23:a7:60: 66:0c:59:1f:d4:f2:12:a8:2a:42:3c:27:47:ec:1b:e4:96:65: 18:49:c9:50:62:60:a7:35:7c:93:71:7e:4e:0d:ea:a1:70:1e: 9b:42:ea:4f:18:75:de:7f:1e:66:d3:0e:00:3e:1c:9c:8b:ba: 19:0b:75:75:b4:2d:55:3f:57:fc:11:53:55:54:a1:cd:b7:c0: 61:93:d5:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpFiM4NZgQdLk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YWU0ZGMyM2UtZTlkZC00Mzc2LWEzOTgtNzQyYjNiOTM4NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfZLAieyFzaxfV1SaHlYC1a0cqluabU0tx+j i2SvOILlKTxVIjEEy+/h2e5YbHLcAD0ZaIXpQSXO4E571P5HxhJmiC1fT+f7AE8r qoSodlGCPA43rn6ZffbVOLPLfu+KE2fDQK0euJZo9yitO3qNHeSyOkSGNyvPNA0D 9RxFsNP8NnRxeqdu8iGtcP59wj8nZYg35EuT7XPJOlKM/+mnejtO47jtnbq8RSew n7aAAw9hzCAQalWXOcIexvGOo0NlQs1JjXADPvQQ7IqX0B+da+sJFFIexVIx1Rp5 db8pjl6GJsnQKVrqH2bAvIf66t/I1vLjBhIu/PgUvpZgrrprbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8pGTb+PRjTTwnAMO8/VZeNHf9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzg4MmI0NGEtY2ExZS0z MjIxLWIyNTEtOTg4YzYzN2ZlNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp16war8N9ug/uP5YpX6qs+SBxkLDvVPuoERp2xfwkGFYsLoxvyk3pn 2C7w6RnGUmuGksIn45GGzXyNKb1/TWMeDPMT2y5i1wCCj6gYneGz1/CrLepADZOL 7ql8ZUejm3kj4yAjGwXOJA1rMOKZ3Q67YybnRgOx5XDTWyXG4hZSMqi1COa+KDa5 nLbOxRSQcDgX9XvOvTe7UcE3nZ4ErkFz/rOSwx9xL/725TEU9gR5PCOnYGYMWR/U 8hKoKkI8J0fsG+SWZRhJyVBiYKc1fJNxfk4N6qFwHptC6k8Ydd5/HmbTDgA+HJyL uhkLdXW0LVU/V/wRU1VUoc23wGGT1T0= -----END CERTIFICATE-----Generated at Wed Nov 5 03:45:09 2025 by rpki-client