$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5336371f-f82b-32c2-b465-bb2f9faae38f.roa File: 5336371f-f82b-32c2-b465-bb2f9faae38f.roa (raw, json) Hash identifier: KHpUUkLyNDUCPrLwvhz5jUFEhOZyxgZCL2mNc640HL4= Subject key identifier: DA:70:7D:E0:02:4D:5F:28:10:05:70:F8:8E:9C:0A:CF:C3:30:4D:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1F01848D0FE974758BC906A8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5336371f-f82b-32c2-b465-bb2f9faae38f.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.48.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:84:8d:0f:e9:74:75:8b:c9:06:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=33a60229-9b93-4fc9-bbf5-f8925eb4161f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fd:40:41:63:7b:ee:3f:2a:00:fe:27:10:83: 99:c4:7e:09:08:d2:ad:3a:61:44:9a:02:5b:1e:9a: 33:b5:c8:2a:e5:88:d9:67:9c:2d:d7:9a:35:ac:a2: 4b:de:9f:fc:06:c4:9f:0c:05:63:b4:37:38:e0:a4: 4a:d2:a2:c3:31:ca:57:bc:05:17:86:a4:70:35:b3: 23:13:5b:2c:9d:96:ca:03:3b:d7:ec:4c:9c:64:43: ac:81:20:6b:ed:ef:75:65:6f:0f:97:a9:7e:c0:97: cc:c3:2c:79:99:38:d2:8c:6b:e9:e5:7b:2a:38:b3: 92:e4:d5:0b:7e:4c:ce:88:2d:d4:d9:b7:0b:07:fe: 0c:1c:73:16:2c:8a:9e:0b:64:b1:8c:4a:25:8c:95: da:05:8e:fc:00:ec:10:1d:b5:21:78:ea:e7:c3:72: 3b:9f:b0:a2:cf:7d:1f:5f:0e:66:5e:51:c4:30:a4: d4:de:4f:31:dd:1d:16:31:a3:5b:95:c7:c0:f8:17: 90:06:6b:b5:41:0d:1a:9e:12:31:6f:9b:7e:27:45: 77:f2:be:83:d3:60:0b:14:20:c5:aa:0f:56:b9:46: 5e:48:61:63:e3:d2:14:4a:44:26:0b:ca:1a:bd:dc: 28:47:4f:08:ca:38:fd:ea:c0:8b:5f:df:1e:86:da: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:70:7D:E0:02:4D:5F:28:10:05:70:F8:8E:9C:0A:CF:C3:30:4D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5336371f-f82b-32c2-b465-bb2f9faae38f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:83:c8:40:b1:2d:4a:2b:01:a3:91:da:16:18:d9:45:4b:94: a9:b0:22:ac:96:0b:56:28:e1:35:e7:cd:da:39:b5:49:ed:bd: 40:8c:92:1e:bd:e5:b1:4d:fe:c1:b4:53:1c:94:00:d3:ea:fb: c3:56:77:3f:f6:41:af:9c:a3:59:a7:61:8f:6c:c0:34:fd:ce: 93:cd:a3:36:8c:81:c4:7d:c0:e9:ef:94:5e:89:c1:bc:5c:91: 5d:ba:2a:eb:64:b5:85:dd:1b:c2:46:11:4a:14:16:07:83:ad: f5:1e:5d:58:09:66:b5:7c:c2:19:ec:95:1b:54:33:ff:57:68: 71:ea:06:70:f4:bb:d1:2e:e3:ef:59:ce:18:92:a9:1c:78:94: 50:04:54:69:f3:65:79:ce:85:dc:b0:9e:55:76:58:95:13:5f: f6:bb:7d:f4:46:5b:65:83:7a:3f:33:0a:01:44:b6:c5:c8:c8: f4:7a:ac:88:9d:7a:4b:39:e5:2d:1e:5d:34:2d:0b:c4:d2:09: 17:24:92:20:43:73:6e:01:85:48:09:c7:9a:15:3a:b3:84:7e: a9:b1:ae:23:bb:42:a0:ae:e5:de:db:3f:50:73:c2:5e:0d:8a: d0:5d:8e:b2:a2:3c:98:ec:83:6b:bf:73:cc:7e:b6:aa:b7:af: a6:a8:31:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAYSND+l0dYvJBqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MzNhNjAyMjktOWI5My00ZmM5LWJiZjUtZjg5MjVlYjQxNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf1AQWN77j8qAP4nEIOZxH4JCNKtOmFEmgJb Hpoztcgq5YjZZ5wt15o1rKJL3p/8BsSfDAVjtDc44KRK0qLDMcpXvAUXhqRwNbMj E1ssnZbKAzvX7EycZEOsgSBr7e91ZW8Pl6l+wJfMwyx5mTjSjGvp5XsqOLOS5NUL fkzOiC3U2bcLB/4MHHMWLIqeC2SxjEoljJXaBY78AOwQHbUheOrnw3I7n7Ciz30f Xw5mXlHEMKTU3k8x3R0WMaNblcfA+BeQBmu1QQ0anhIxb5t+J0V38r6D02ALFCDF qg9WuUZeSGFj49IUSkQmC8oavdwoR08Iyjj96sCLX98ehtqgrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpwfeACTV8oEAVw+I6cCs/DME08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTMzNjM3MWYtZjgyYi0z MmMyLWI0NjUtYmIyZjlmYWFlMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeDyECxLUorAaOR2hYY2UVLlKmwIqyWC1Yo4TXnzdo5tUntvUCMkh69 5bFN/sG0UxyUANPq+8NWdz/2Qa+co1mnYY9swDT9zpPNozaMgcR9wOnvlF6Jwbxc kV26KutktYXdG8JGEUoUFgeDrfUeXVgJZrV8whnslRtUM/9XaHHqBnD0u9Eu4+9Z zhiSqRx4lFAEVGnzZXnOhdywnlV2WJUTX/a7ffRGW2WDej8zCgFEtsXIyPR6rIid eks55S0eXTQtC8TSCRckkiBDc24BhUgJx5oVOrOEfqmxriO7QqCu5d7bP1Bzwl4N itBdjrKiPJjsg2u/c8x+tqq3r6aoMWY= -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:19 2025 by rpki-client