$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51483c29-8d3a-3214-bd10-7d26a1192e76.roa File: 51483c29-8d3a-3214-bd10-7d26a1192e76.roa (raw, json) Hash identifier: kMPG+hZ6XGrIhYIFMc14/P8fQy2cgiLas8MxKEYBgb8= Subject key identifier: C3:80:93:74:48:44:11:EC:8B:39:4D:76:07:DA:FD:FA:F5:29:69:B3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B68FCA36123B67F14DCA64C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51483c29-8d3a-3214-bd10-7d26a1192e76.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 6762 IP address blocks: 23.12.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:a3:61:23:b6:7f:14:dc:a6:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=85f0b123-d480-45e9-8223-7c6c08833fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:f6:f7:04:db:fa:60:ea:4e:48:ee:5f:c1: 5b:7a:fe:99:79:33:49:d8:44:d5:4c:95:07:36:75: 17:a2:43:b1:82:0b:75:b4:94:48:97:d5:7d:61:95: d0:31:f0:43:51:04:e9:23:d2:10:17:b1:bf:eb:62: fb:46:f0:11:07:0a:85:83:ea:98:87:a7:ef:0f:ad: e6:ae:f9:eb:48:37:43:b7:6a:b2:4d:36:88:1f:e7: fb:d3:3b:0c:40:0b:88:1f:30:6d:8c:58:3e:a4:60: 02:69:77:a7:38:59:6b:f5:c1:3d:62:1e:b5:52:0d: f9:c8:23:99:67:dd:5b:d8:36:4e:24:99:ea:1e:c0: 50:49:df:bf:20:84:d6:4c:0e:4d:24:96:eb:90:22: a7:d9:d7:b1:05:d2:29:f8:07:2a:09:db:f1:46:10: 76:e4:c0:bb:6e:99:aa:59:82:a4:81:9c:e3:d4:55: 8f:46:e7:97:d4:af:92:7e:a9:70:18:71:30:4b:60: 85:a1:fa:38:f1:93:d3:e0:85:8c:0f:d5:14:0a:2d: 2e:32:8a:dd:40:d9:b6:ee:ed:e2:f4:2c:a3:4e:7f: bf:3c:c0:4c:64:c9:48:88:ba:2a:7b:fd:7a:3f:83: 68:84:42:ff:7c:b2:28:90:83:2f:37:3d:f0:4a:4e: b3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:80:93:74:48:44:11:EC:8B:39:4D:76:07:DA:FD:FA:F5:29:69:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51483c29-8d3a-3214-bd10-7d26a1192e76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.12.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:82:67:92:8f:c6:2d:22:40:c6:95:49:c0:92:24:9c:b4:c1: 15:83:de:2c:95:65:7d:13:7d:f0:50:c6:36:4e:dd:2d:ae:85: 1e:40:aa:ac:d2:84:b3:48:89:64:26:c9:bb:60:b6:be:7e:5d: 5d:4a:c4:d4:9c:66:ba:ab:00:70:c4:38:4d:f1:90:0e:49:24: 9a:51:ac:cb:ec:b9:52:59:bd:d7:04:b2:7b:1e:cc:30:6d:40: 20:c5:21:f9:35:ca:35:36:4c:69:11:40:46:5d:a8:d9:de:04: e5:76:12:fb:6c:36:95:11:ac:60:ea:c6:82:6d:89:c1:de:76: 84:8f:59:7e:c7:f2:08:29:b4:7d:66:55:e0:51:c0:36:6e:37: 4b:5b:43:d7:47:44:d5:45:0a:ad:3f:99:ed:fc:15:a3:de:0f: d3:8b:2e:2f:2c:a7:96:5e:2d:e3:fc:be:58:8a:57:78:58:a8: cf:4a:48:76:c0:2d:9a:02:5b:ef:29:ce:23:63:8e:9f:c3:1d: 26:f0:3a:0b:c6:b5:f8:f7:a7:70:43:16:ee:f4:6b:4b:e6:f5: 80:d7:4c:33:8b:1d:f5:a9:f0:b3:5d:65:0d:a0:2f:22:c4:f1: ac:1e:f3:df:25:fa:70:31:0b:ae:2c:f8:c5:60:49:c3:38:52: 07:3e:6d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/KNhI7Z/FNymTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ODVmMGIxMjMtZDQ4MC00NWU5LTgyMjMtN2M2YzA4ODMzZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNz29wTb+mDqTkjuX8Fbev6ZeTNJ2ETVTJUH NnUXokOxggt1tJRIl9V9YZXQMfBDUQTpI9IQF7G/62L7RvARBwqFg+qYh6fvD63m rvnrSDdDt2qyTTaIH+f70zsMQAuIHzBtjFg+pGACaXenOFlr9cE9Yh61Ug35yCOZ Z91b2DZOJJnqHsBQSd+/IITWTA5NJJbrkCKn2dexBdIp+AcqCdvxRhB25MC7bpmq WYKkgZzj1FWPRueX1K+SfqlwGHEwS2CFofo48ZPT4IWMD9UUCi0uMordQNm27u3i 9CyjTn+/PMBMZMlIiLoqe/16P4NohEL/fLIokIMvNz3wSk6zPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOAk3RIRBHsizlNdgfa/fr1KWmzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTE0ODNjMjktOGQzYS0z MjE0LWJkMTAtN2QyNmExMTkyZTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+CZ5KPxi0iQMaVScCSJJy0wRWD3iyVZX0TffBQxjZO3S2uhR5AqqzS hLNIiWQmybtgtr5+XV1KxNScZrqrAHDEOE3xkA5JJJpRrMvsuVJZvdcEsnsezDBt QCDFIfk1yjU2TGkRQEZdqNneBOV2EvtsNpURrGDqxoJticHedoSPWX7H8ggptH1m VeBRwDZuN0tbQ9dHRNVFCq0/me38FaPeD9OLLi8sp5ZeLeP8vliKV3hYqM9KSHbA LZoCW+8pziNjjp/DHSbwOgvGtfj3p3BDFu70a0vm9YDXTDOLHfWp8LNdZQ2gLyLE 8awe898l+nAxC64s+MVgScM4Ugc+bVE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:31 2025 by rpki-client