$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ad6f4ee-7924-3c6d-a361-6db6c5fcf8e8.roa File: 3ad6f4ee-7924-3c6d-a361-6db6c5fcf8e8.roa (raw, json) Hash identifier: fCpyjxlQACsQuHHimiDNVk1Y+FznVRnBZE469bJdqi0= Subject key identifier: F3:CC:9F:EF:7F:B8:41:A9:95:AB:1B:E8:7E:C4:FC:D4:D2:EE:BF:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B2CF70E35D194D2351F362300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ad6f4ee-7924-3c6d-a361-6db6c5fcf8e8.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.61.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:0e:35:d1:94:d2:35:1f:36:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=88828b92-4bb1-45b1-b6ad-759fa8b92b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6f:80:66:92:3b:71:87:d2:f2:50:a7:75:c2: 1d:ef:b5:01:61:8d:61:fb:be:76:09:0c:2d:46:84: 4e:a6:41:10:e6:43:37:5e:20:0a:ca:1d:26:af:13: c6:93:e2:93:c1:1b:50:a5:90:b1:ce:4e:1e:05:82: c3:82:6e:ad:26:90:48:00:92:aa:10:9e:34:2e:eb: 63:31:1d:ae:ee:e2:43:c6:64:c1:92:fd:6b:72:ff: 7d:30:98:d6:25:d4:a5:be:b9:09:d2:c6:3c:05:1b: 67:58:41:04:0e:ef:ff:e9:fb:f8:56:1e:76:e4:7b: 9e:87:18:de:63:64:2f:de:fa:1e:73:ac:52:4b:92: f6:66:c2:19:58:3a:d2:03:bd:10:dd:77:e7:ec:c1: 1a:53:20:d2:c3:16:24:50:1f:81:aa:10:f4:87:2f: 03:17:6e:20:cc:15:98:e4:60:df:bb:cd:29:53:9c: b8:9e:1d:78:97:45:54:48:e7:1c:e0:f7:f8:31:38: a5:a4:d6:73:86:78:1a:ca:f2:41:49:90:bc:11:1c: 64:db:ea:56:0d:30:ba:ce:2d:89:3f:87:3a:78:16: be:b2:f9:82:81:b1:f3:57:3a:b0:2f:ed:b9:cb:9f: 0d:54:d0:b5:a2:ad:63:d6:d9:a3:28:83:d1:08:28: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CC:9F:EF:7F:B8:41:A9:95:AB:1B:E8:7E:C4:FC:D4:D2:EE:BF:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ad6f4ee-7924-3c6d-a361-6db6c5fcf8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.61.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fa:ce:8a:e2:21:a3:cb:ef:5e:99:d7:9e:75:2e:25:de:33: 59:62:88:6f:9a:66:8f:33:a1:d4:d3:47:07:f3:5e:f4:bc:6d: d6:1a:03:14:c2:0f:35:c9:73:66:8c:63:bd:68:37:c1:21:b4: 61:53:b8:7b:87:23:8d:a1:16:64:8c:73:bf:66:df:93:2b:42: 4a:73:08:ef:b2:5c:e9:65:07:0e:fb:34:44:64:37:a3:1a:5f: 80:04:12:1f:03:fa:6b:b3:18:43:75:63:0f:7c:86:d0:e9:c7: 3b:3c:b8:fe:c0:6e:43:30:ac:3f:f1:2f:91:10:f3:0a:0b:d8: 1d:c6:e2:f5:8c:36:7f:95:c6:17:50:68:a4:86:ad:16:f7:81: f1:17:3c:50:4e:9b:56:06:6b:1e:fa:2a:ae:35:99:02:b0:c9: 45:56:0e:21:32:1a:f7:9e:a3:1a:2b:18:d4:72:da:47:f1:86: 02:8f:a1:45:62:19:62:2e:26:64:93:cb:05:57:1a:1a:f6:5b: 25:e3:fa:24:c1:70:a1:51:b9:76:85:5b:02:fb:b9:c6:c8:5f: df:e1:d1:8f:c1:dc:ca:71:6a:f8:07:45:34:dc:3d:c1:3a:96: fb:cf:6e:3a:c3:cf:1f:90:94:c1:65:aa:f3:90:ac:85:e8:03: 02:17:c9:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9w410ZTSNR82IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ODg4MjhiOTItNGJiMS00NWIxLWI2YWQtNzU5ZmE4YjkyYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2+AZpI7cYfS8lCndcId77UBYY1h+752CQwt RoROpkEQ5kM3XiAKyh0mrxPGk+KTwRtQpZCxzk4eBYLDgm6tJpBIAJKqEJ40Lutj MR2u7uJDxmTBkv1rcv99MJjWJdSlvrkJ0sY8BRtnWEEEDu//6fv4Vh525Huehxje Y2Qv3voec6xSS5L2ZsIZWDrSA70Q3Xfn7MEaUyDSwxYkUB+BqhD0hy8DF24gzBWY 5GDfu80pU5y4nh14l0VUSOcc4Pf4MTilpNZzhngayvJBSZC8ERxk2+pWDTC6zi2J P4c6eBa+svmCgbHzVzqwL+25y58NVNC1oq1j1tmjKIPRCCjHpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPMn+9/uEGplasb6H7E/NTS7r8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FkNmY0ZWUtNzkyNC0z YzZkLWEzNjEtNmRiNmM1ZmNmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFz0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX6zoriIaPL716Z1551LiXeM1liiG+aZo8zodTTRwfzXvS8bdYaAxTC DzXJc2aMY71oN8EhtGFTuHuHI42hFmSMc79m35MrQkpzCO+yXOllBw77NERkN6Ma X4AEEh8D+muzGEN1Yw98htDpxzs8uP7AbkMwrD/xL5EQ8woL2B3G4vWMNn+VxhdQ aKSGrRb3gfEXPFBOm1YGax76Kq41mQKwyUVWDiEyGveeoxorGNRy2kfxhgKPoUVi GWIuJmSTywVXGhr2WyXj+iTBcKFRuXaFWwL7ucbIX9/h0Y/B3MpxavgHRTTcPcE6 lvvPbjrDzx+QlMFlqvOQrIXoAwIXyR0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:36 2025 by rpki-client