$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d0bd47-0124-3e61-b8c1-5ad095de10e3.roa File: 43d0bd47-0124-3e61-b8c1-5ad095de10e3.roa (raw, json) Hash identifier: xs7Zo3Wkp3en8mjzpGD6ENjfTH2aCtbr6NTTRAyTSSI= Subject key identifier: 75:D5:CB:77:75:41:51:42:32:7F:F4:B4:0F:29:A4:BB:16:B9:14:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5AD3D41D4E0CBEFAA7200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d0bd47-0124-3e61-b8c1-5ad095de10e3.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.72.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ad:3d:41:d4:e0:cb:ef:aa:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=70986b0d-ca8e-4615-a2e4-e6379104ed07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:5e:e6:bc:a2:20:71:c9:0f:5f:ea:90:0e: c1:82:f2:0c:3b:e0:53:b9:72:5f:27:23:b3:05:00: e2:ca:b0:5b:2c:c4:13:07:c2:3a:86:f4:91:ff:35: 24:6f:60:47:c9:95:a9:ef:17:3a:a8:3a:a2:d1:a0: 90:aa:1d:cf:9f:df:d9:b8:5a:d0:05:98:a0:85:17: d8:5e:67:f2:92:ce:f9:04:5e:c9:05:48:2c:5e:bc: b6:ff:86:52:cc:4e:db:c4:48:38:78:72:cb:a4:9c: f8:7e:b0:4d:f4:5b:8a:34:f0:f3:ba:91:2f:d6:41: 68:a6:13:83:ad:64:95:73:d5:64:91:20:67:b0:fd: bd:07:8f:31:5e:13:2d:0d:e0:2e:bf:4a:f1:bd:bd: dc:46:59:c8:7c:70:20:b7:ae:f4:33:bb:d5:a4:bc: e8:df:0f:c3:09:3a:dd:f6:c8:11:f6:5c:92:76:05: 30:85:f7:e3:fa:0e:8f:77:15:d8:d2:1f:df:42:2f: ce:73:da:56:7e:80:cd:0c:7b:a5:36:1d:08:83:82: 24:79:34:bc:a1:a7:a8:81:1a:40:3f:2a:4f:59:0e: 96:c5:0d:66:db:f6:79:92:f3:5e:f4:2a:94:64:94: 2a:64:96:bb:00:45:7b:28:e1:ea:cf:92:7c:26:16: 07:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D5:CB:77:75:41:51:42:32:7F:F4:B4:0F:29:A4:BB:16:B9:14:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43d0bd47-0124-3e61-b8c1-5ad095de10e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:31:fd:e3:7a:91:11:a7:dc:19:e0:db:57:20:bb:66:41:74: 16:59:a9:f3:9d:80:a6:4d:89:22:42:d4:30:c3:d7:f8:69:c0: c5:48:27:f5:c2:e7:e7:a5:2e:88:15:cb:b4:9b:52:36:60:a7: 1f:6d:d2:54:55:5c:81:be:ad:e9:3a:99:a2:65:be:b4:da:2d: 05:ca:4f:4d:e8:c8:d0:34:cf:00:4c:92:3c:c8:3c:45:a3:41: f8:5e:b5:e9:d4:50:09:b2:ac:a3:21:71:ee:44:2a:78:bb:99: 48:76:8b:ec:f7:1e:91:43:57:8d:b5:25:89:39:fd:e6:bb:6f: 3d:16:03:42:56:2f:7a:ff:d1:eb:a8:71:c7:94:e0:94:83:b8: 81:b6:dd:df:45:78:59:7c:dc:63:67:20:0f:23:7b:05:bd:eb: 4c:dd:ae:a5:22:8a:f0:f0:71:a8:b5:b8:51:89:42:7e:20:d0: 85:e0:b1:b0:2f:47:34:e9:48:6c:5c:41:0c:39:c8:06:ae:57: 39:3a:df:73:fa:03:9e:77:84:18:bf:3a:2b:e2:9f:4c:ac:de: 40:bb:67:f0:f2:bf:1c:2d:c5:bc:fd:9c:ac:ad:dc:fc:1f:d7: 04:11:f7:ae:0a:16:14:1f:84:49:c4:e0:c2:b2:86:92:5a:36: 1d:8e:19:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pa09QdTgy++qcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NzA5ODZiMGQtY2E4ZS00NjE1LWEyZTQtZTYzNzkxMDRlZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTxe5ryiIHHJD1/qkA7BgvIMO+BTuXJfJyOz BQDiyrBbLMQTB8I6hvSR/zUkb2BHyZWp7xc6qDqi0aCQqh3Pn9/ZuFrQBZighRfY Xmfyks75BF7JBUgsXry2/4ZSzE7bxEg4eHLLpJz4frBN9FuKNPDzupEv1kFophOD rWSVc9VkkSBnsP29B48xXhMtDeAuv0rxvb3cRlnIfHAgt670M7vVpLzo3w/DCTrd 9sgR9lySdgUwhffj+g6PdxXY0h/fQi/Oc9pWfoDNDHulNh0Ig4IkeTS8oaeogRpA PypPWQ6WxQ1m2/Z5kvNe9CqUZJQqZJa7AEV7KOHqz5J8JhYH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXVy3d1QVFCMn/0tA8ppLsWuRQxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDNkMGJkNDctMDEyNC0z ZTYxLWI4YzEtNWFkMDk1ZGUxMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0i4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsx/eN6kRGn3Bng21cgu2ZBdBZZqfOdgKZNiSJC1DDD1/hpwMVIJ/XC 5+elLogVy7SbUjZgpx9t0lRVXIG+rek6maJlvrTaLQXKT03oyNA0zwBMkjzIPEWj QfhetenUUAmyrKMhce5EKni7mUh2i+z3HpFDV421JYk5/ea7bz0WA0JWL3r/0euo cceU4JSDuIG23d9FeFl83GNnIA8jewW960zdrqUiivDwcai1uFGJQn4g0IXgsbAv RzTpSGxcQQw5yAauVzk633P6A553hBi/Oivin0ys3kC7Z/Dyvxwtxbz9nKyt3Pwf 1wQR964KFhQfhEnE4MKyhpJaNh2OGXU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:34 2025 by rpki-client