$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46e88d86-0093-30f9-a001-03091a4f9c58.roa File: 46e88d86-0093-30f9-a001-03091a4f9c58.roa (raw, json) Hash identifier: CCclx3BhYGyZS+/sJxakd6K24i0efL4OMks3D1Ybbv4= Subject key identifier: 25:01:BB:32:01:64:7D:C3:89:0B:7A:32:82:97:49:89:6B:93:10:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA2378AABB87F73B8535FE200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46e88d86-0093-30f9-a001-03091a4f9c58.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.1.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:8a:ab:b8:7f:73:b8:53:5f:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=aa41fefa-c5bc-4b09-895a-7128ec99a55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:e5:e2:e5:9a:1e:b9:f8:a6:d6:22:21:cb: a9:74:35:df:df:e0:e3:12:36:10:1e:00:76:93:1a: 9f:37:f1:ad:19:bb:00:f8:d3:d4:ef:46:5b:38:2e: 6e:9f:43:ad:94:5f:9a:94:60:c6:7f:ae:c5:bc:80: a7:03:7e:46:89:f0:3a:0f:8a:84:c8:3e:5a:41:d8: b4:71:4b:ab:fd:00:97:90:a3:ba:38:4a:eb:ff:e2: f5:33:2e:66:e4:39:2c:68:26:6f:09:5d:e9:f6:1c: 25:28:f1:a8:4e:af:e2:c6:87:30:dd:4d:86:9a:2f: c2:a1:f7:6c:31:4d:3b:2c:c9:a5:d9:8a:69:e8:6d: 9b:c6:e5:27:62:ec:b1:b5:65:d0:32:b6:df:cd:f5: 22:49:37:19:e1:e0:01:fd:64:a2:d2:a8:09:d3:9c: 23:9b:d1:21:1a:d1:8e:b4:1d:d9:ae:2b:90:64:26: aa:b5:1f:79:76:e0:94:1d:8f:3e:23:5d:c9:f5:1a: e2:ac:62:35:a4:1a:0b:2d:6c:9d:67:c2:8f:07:52: b4:5b:e7:87:79:fc:ff:d4:9b:ce:f6:64:05:54:93: 75:3f:42:4e:bc:a9:c5:28:36:e2:69:46:f3:dd:ff: dd:18:dd:68:1c:6c:87:2e:30:83:af:ba:73:65:b6: 15:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:01:BB:32:01:64:7D:C3:89:0B:7A:32:82:97:49:89:6B:93:10:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46e88d86-0093-30f9-a001-03091a4f9c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:79:fb:b6:17:f5:b1:45:0a:3c:36:c1:53:72:12:eb:f3:b2: 23:73:f3:44:bb:34:fb:ba:c6:cb:6f:0c:50:b0:2a:08:99:a7: 24:75:90:d0:fc:a0:9f:7d:d8:05:be:ff:e7:21:b6:9c:15:de: a8:9f:e2:28:b7:8e:ae:99:df:0f:82:9b:04:f8:de:7a:f5:eb: 78:b0:1f:4f:f7:83:fb:e2:60:e0:06:7c:54:b2:ed:0d:0e:95: c5:2d:57:36:0c:70:fa:8e:2b:75:ca:f1:1b:92:a2:2c:b8:94: f3:d5:73:e7:60:67:e1:41:55:e5:08:06:8c:97:e5:95:d9:49: ed:95:52:b5:72:69:85:60:88:68:2b:fb:ac:ee:aa:ce:94:e7: 48:47:59:96:73:88:1a:8a:0b:08:dd:3e:f4:c0:77:d3:34:fb: c6:32:f7:05:95:e0:de:67:38:88:a6:10:b8:52:ab:d0:67:28: d5:6e:85:19:3d:cd:b6:5b:7f:77:dc:52:54:d4:dc:ab:86:d5: 6a:4f:cd:21:76:c9:dc:d3:3e:cf:c8:aa:f5:11:c8:25:ad:43: 18:64:e0:a5:be:f9:d2:63:cb:4d:16:d1:94:a8:15:c3:e7:e9: 45:82:4b:90:68:28:9b:68:4a:01:af:26:c4:bc:23:c2:51:a4: 94:43:97:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN4qruH9zuFNf4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk YWE0MWZlZmEtYzViYy00YjA5LTg5NWEtNzEyOGVjOTlhNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLzl4uWaHrn4ptYiIcupdDXf3+DjEjYQHgB2 kxqfN/GtGbsA+NPU70ZbOC5un0OtlF+alGDGf67FvICnA35GifA6D4qEyD5aQdi0 cUur/QCXkKO6OErr/+L1My5m5DksaCZvCV3p9hwlKPGoTq/ixocw3U2Gmi/Cofds MU07LMml2Ypp6G2bxuUnYuyxtWXQMrbfzfUiSTcZ4eAB/WSi0qgJ05wjm9EhGtGO tB3ZriuQZCaqtR95duCUHY8+I13J9RrirGI1pBoLLWydZ8KPB1K0W+eHefz/1JvO 9mQFVJN1P0JOvKnFKDbiaUbz3f/dGN1oHGyHLjCDr7pzZbYVsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUBuzIBZH3DiQt6MoKXSYlrkxB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDZlODhkODYtMDA5My0z MGY5LWEwMDEtMDMwOTFhNGY5YzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwHpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA15+7YX9bFFCjw2wVNyEuvzsiNz80S7NPu6xstvDFCwKgiZpyR1kND8 oJ992AW+/+chtpwV3qif4ii3jq6Z3w+CmwT43nr163iwH0/3g/viYOAGfFSy7Q0O lcUtVzYMcPqOK3XK8RuSoiy4lPPVc+dgZ+FBVeUIBoyX5ZXZSe2VUrVyaYVgiGgr +6zuqs6U50hHWZZziBqKCwjdPvTAd9M0+8Yy9wWV4N5nOIimELhSq9BnKNVuhRk9 zbZbf3fcUlTU3KuG1WpPzSF2ydzTPs/IqvURyCWtQxhk4KW++dJjy00W0ZSoFcPn 6UWCS5BoKJtoSgGvJsS8I8JRpJRDl+0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:56:47 2025 by rpki-client