$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa File: 3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa (raw, json) Hash identifier: 9xbIWq1uzDK8ZC9d1SvkB0RkUvO6xdDFSahNsytk1dk= Subject key identifier: 39:C3:98:8C:58:12:3C:F9:EA:90:67:DD:4D:92:2B:72:05:A7:F6:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB1927611CC9440F41B66EF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 23.66.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:76:11:cc:94:40:f4:1b:66:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=b3259a9b-ddde-4083-b0b4-7d005d6ff5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:90:d8:82:5e:2e:cd:83:92:72:87:9e:eb:92: 00:4f:cf:1f:c8:b6:49:fa:ce:b2:e8:e1:77:b6:0b: 95:6d:9f:ae:c5:82:fd:87:54:67:69:ed:a3:59:73: 8e:44:0d:12:d6:dd:49:2a:24:ac:cb:4b:d9:ed:25: 94:16:76:6c:8f:e6:12:cf:5c:15:6b:82:ac:d0:5c: 71:8d:35:04:c8:1c:a2:e5:ce:a3:65:e4:4b:2f:00: b2:08:02:ef:dc:11:fe:2f:ef:ef:2b:d2:a9:88:16: f2:ce:26:ce:82:cd:0e:59:d8:97:49:dc:a2:b2:96: 9e:3e:b5:26:7e:1c:b8:b2:16:de:90:29:66:69:64: 60:1e:e2:11:01:b7:7b:0e:ab:6e:7c:40:89:24:d8: cf:77:7b:f5:8c:ea:71:cf:79:02:e8:d5:26:fc:0d: 70:ee:8a:97:f9:64:e5:4a:c2:39:8a:7c:ab:7c:60: de:88:bf:d1:c6:40:2d:22:bb:36:a2:c3:76:87:ea: ff:d3:4f:fc:1c:fb:af:f0:9d:8f:bd:1b:06:9f:aa: 2a:5e:82:54:7f:77:50:3d:e2:34:f5:a0:b3:bd:30: db:c7:60:7d:3c:b8:66:39:32:7d:f0:b5:3f:43:0b: 1a:b4:92:b0:e5:5e:2e:50:eb:4a:60:08:62:ed:1c: 54:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:98:8C:58:12:3C:F9:EA:90:67:DD:4D:92:2B:72:05:A7:F6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a6e7276-f805-32f2-9ae0-877f17e86d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.66.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fb:6b:a7:8c:c4:44:a0:4d:3a:95:1a:58:8d:d1:fd:f0:12: 12:16:e0:7a:4f:9b:ef:61:39:f3:87:d7:fd:07:45:f1:66:b9: 01:de:a2:c7:3e:b3:9b:5b:6a:2d:b1:66:9a:6a:b6:05:a4:e5: 46:4b:ea:b1:b2:fb:64:3f:11:c9:6d:f5:dd:f9:4e:75:37:4a: 3e:70:50:23:c0:60:5e:97:ec:e3:6e:bf:7e:b4:2f:88:89:11: 46:6b:23:53:fc:48:71:60:a1:99:5c:55:44:7b:3d:8f:79:33: 3a:c2:fd:51:be:6a:c5:26:3e:64:12:a3:72:b9:6c:f0:af:14: 85:41:6b:d1:26:24:9d:de:7b:15:9a:f2:9a:6d:2b:9b:ae:a1: a1:8e:4d:7b:cf:a8:8f:72:23:67:16:e0:fa:fc:73:9e:81:09: 66:8a:4e:34:f2:13:16:71:16:55:26:2f:bc:db:4e:97:8f:b2: 11:d2:9c:54:89:12:01:27:d4:eb:23:24:1d:ff:68:39:28:f0: d2:43:c0:5c:63:54:ba:2d:cf:c3:77:53:24:a2:b2:78:61:60: a4:d5:9a:c8:df:a1:f2:f6:9a:6a:e6:88:b9:4a:d1:01:99:ff: e8:4a:ce:d8:af:3f:16:81:6c:c3:d4:c1:02:88:1e:ee:03:ff: 42:41:eb:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknYRzJRA9Btm74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YjMyNTlhOWItZGRkZS00MDgzLWIwYjQtN2QwMDVkNmZmNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpDYgl4uzYOScoee65IAT88fyLZJ+s6y6OF3 tguVbZ+uxYL9h1Rnae2jWXOORA0S1t1JKiSsy0vZ7SWUFnZsj+YSz1wVa4Ks0Fxx jTUEyByi5c6jZeRLLwCyCALv3BH+L+/vK9KpiBbyzibOgs0OWdiXSdyispaePrUm fhy4shbekClmaWRgHuIRAbd7DqtufECJJNjPd3v1jOpxz3kC6NUm/A1w7oqX+WTl SsI5inyrfGDeiL/RxkAtIrs2osN2h+r/00/8HPuv8J2PvRsGn6oqXoJUf3dQPeI0 9aCzvTDbx2B9PLhmOTJ98LU/QwsatJKw5V4uUOtKYAhi7RxUBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnDmIxYEjz56pBn3U2SK3IFp/alMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2E2ZTcyNzYtZjgwNS0z MmYyLTlhZTAtODc3ZjE3ZTg2ZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0KUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH7a6eMxESgTTqVGliN0f3wEhIW4HpPm+9hOfOH1/0HRfFmuQHeosc+ s5tbai2xZppqtgWk5UZL6rGy+2Q/Eclt9d35TnU3Sj5wUCPAYF6X7ONuv360L4iJ EUZrI1P8SHFgoZlcVUR7PY95MzrC/VG+asUmPmQSo3K5bPCvFIVBa9EmJJ3eexWa 8pptK5uuoaGOTXvPqI9yI2cW4Pr8c56BCWaKTjTyExZxFlUmL7zbTpePshHSnFSJ EgEn1OsjJB3/aDko8NJDwFxjVLotz8N3UySisnhhYKTVmsjfofL2mmrmiLlK0QGZ /+hKztivPxaBbMPUwQKIHu4D/0JB67Y= -----END CERTIFICATE-----Generated at Wed Nov 5 00:04:14 2025 by rpki-client