$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa File: 3ca46559-d881-37b1-a497-2d37eac333b4.roa (raw, json) Hash identifier: 7jurgU9GUlWT+Zsf52QbZssohHsu2KeWa1sfHzpg1hM= Subject key identifier: 83:6D:60:68:40:14:A5:95:6D:C8:17:54:F7:B5:88:43:7C:EA:AC:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE4042F48AACC31D58623F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.32.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:42:f4:8a:ac:c3:1d:58:62:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=0e38bccb-32f4-4d35-a82e-8f25d656d2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:c7:06:c3:ee:dd:6e:4a:6c:e4:a1:5a:f5: e0:4f:c7:d2:db:08:d8:92:13:7c:b1:d2:36:a6:83: 0d:a5:4b:62:37:cd:6c:8d:d7:0d:5e:31:cb:4d:52: 56:98:50:20:4b:af:0b:69:ec:2b:23:81:ba:c0:7f: f9:19:32:14:36:aa:8d:d7:d9:5a:57:aa:71:58:50: 9f:a2:61:77:ce:a2:00:8e:1e:ee:a0:aa:98:45:13: 07:42:d4:4f:39:da:52:48:a9:32:1d:d9:29:4e:6e: 5a:92:24:6e:10:3a:05:e4:a6:9a:11:8f:77:d6:7c: 9a:fa:72:6c:c6:9b:06:ff:0b:7c:0a:14:8e:42:ed: 26:f3:f2:5e:76:4a:ff:c7:19:42:37:26:19:09:9d: 3c:46:55:69:1a:6d:35:a3:ff:fb:10:5d:66:8e:dd: ae:10:90:11:45:10:50:b5:4c:2f:c4:2d:ca:7e:2b: bc:e8:c6:b6:fc:5c:18:37:36:fa:38:52:f2:90:84: 67:a3:ec:9f:e9:af:84:51:c5:f3:c5:c4:9b:6d:fd: 4c:b8:b4:8b:c8:3d:bc:d7:1d:ec:8e:50:b2:07:90: 53:c7:a9:f7:03:8a:b0:14:db:ce:c1:28:fb:fd:dc: 04:cd:21:6f:bf:33:b0:e6:f8:92:4d:bb:f0:e4:dd: 8a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6D:60:68:40:14:A5:95:6D:C8:17:54:F7:B5:88:43:7C:EA:AC:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ca46559-d881-37b1-a497-2d37eac333b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:51:5e:af:46:98:a6:a4:d8:8c:96:76:15:30:25:12:f6:fd: 13:92:a7:ff:b0:2a:89:90:e2:ac:e5:00:88:1f:0f:93:f5:b5: 8c:0a:f1:c2:57:ba:01:ac:5b:3f:82:36:95:9e:d3:7b:1e:75: 70:8b:f9:f2:b6:b5:35:15:af:45:18:b4:7a:cf:7d:4d:6d:2e: e9:8d:4f:6b:1c:de:f4:26:63:c0:e1:9e:8b:7e:ed:da:d1:2a: 5c:8b:0d:09:f4:d3:e0:d3:5d:2f:57:b8:8c:c0:bb:f9:9f:14: 6d:da:f9:96:50:a3:d7:8b:a1:29:f5:71:27:90:aa:3b:3d:15: 9c:fb:fa:e6:f9:56:74:7e:9a:6a:44:11:80:83:48:44:73:4f: 86:96:3f:db:9a:2d:e7:8b:53:5c:30:74:26:37:7c:9a:62:e1: 56:f9:4f:b0:bb:2c:4f:ed:dd:c4:50:88:d6:e7:f4:3e:8b:eb: c8:e7:51:93:74:e9:de:71:48:c0:20:c0:3f:35:20:3b:ad:e5: 3d:78:54:99:a6:b3:37:c6:cf:cb:7b:64:6b:48:fd:63:19:e9: f8:69:a4:e7:3a:d4:3c:0b:d5:30:b1:b1:7b:dc:e0:5a:c2:09: 79:91:86:a5:42:1a:8b:d0:4f:a3:f5:07:b1:c5:b2:a8:52:58: f0:4f:c4:f9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEu+QEL0iqzDHVhiP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MGUzOGJjY2ItMzJmNC00ZDM1LWE4MmUtOGYyNWQ2NTZkMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEzHBsPu3W5KbOShWvXgT8fS2wjYkhN8sdI2 poMNpUtiN81sjdcNXjHLTVJWmFAgS68LaewrI4G6wH/5GTIUNqqN19laV6pxWFCf omF3zqIAjh7uoKqYRRMHQtRPOdpSSKkyHdkpTm5akiRuEDoF5KaaEY931nya+nJs xpsG/wt8ChSOQu0m8/Jedkr/xxlCNyYZCZ08RlVpGm01o//7EF1mjt2uEJARRRBQ tUwvxC3Kfiu86Ma2/FwYNzb6OFLykIRno+yf6a+EUcXzxcSbbf1MuLSLyD281x3s jlCyB5BTx6n3A4qwFNvOwSj7/dwEzSFvvzOw5viSTbvw5N2KHQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFINtYGhAFKWVbcgXVPe1iEN86qzRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2NhNDY1NTktZDg4MS0z N2IxLWE0OTctMmQzN2VhYzMzM2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFFyAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAiVFer0aYpqTYjJZ2FTAlEvb9E5Kn/7AqiZDirOUAiB8Pk/W1jArxwle6 AaxbP4I2lZ7Tex51cIv58ra1NRWvRRi0es99TW0u6Y1Paxze9CZjwOGei37t2tEq XIsNCfTT4NNdL1e4jMC7+Z8Ubdr5llCj14uhKfVxJ5CqOz0VnPv65vlWdH6aakQR gINIRHNPhpY/25ot54tTXDB0Jjd8mmLhVvlPsLssT+3dxFCI1uf0PovryOdRk3Tp 3nFIwCDAPzUgO63lPXhUmaazN8bPy3tka0j9Yxnp+Gmk5zrUPAvVMLGxe9zgWsIJ eZGGpUIai9BPo/UHscWyqFJY8E/E+Q== -----END CERTIFICATE-----Generated at Wed Nov 5 04:17:45 2025 by rpki-client