$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa File: 53e5c72a-194b-3ae3-b890-b640b286e4d9.roa (raw, json) Hash identifier: 5XbvLS02AoXt83p5zEJHD+tHnEPCTnoQPMCn+OL9fbI= Subject key identifier: 01:65:62:D1:C2:56:01:32:7E:34:26:59:EE:50:F1:95:DA:98:ED:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D25462478A38F962903300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 35994 IP address blocks: 23.32.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:54:62:47:8a:38:f9:62:90:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a3976530-abd1-457f-970a-283943a52df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:c7:72:62:91:3d:84:cc:c1:a2:d1:b7:80: f6:36:37:b8:8b:cb:f5:b0:7c:67:a8:af:5f:64:50: 84:11:ed:45:3b:c6:97:a4:f7:80:07:9e:0e:f2:15: af:2d:1a:c5:fa:a1:4f:8a:a1:97:09:01:3c:a2:3b: 2a:0b:c3:4d:25:35:8c:f8:04:63:67:60:a2:e1:3c: e2:1c:9d:4e:71:e4:33:c8:2b:6e:61:f1:7d:59:a1: a4:52:b9:cd:9e:8f:80:fc:b1:4c:09:05:bf:4d:ba: ab:22:fc:e8:c7:65:66:1a:d4:9d:c5:60:4e:e5:09: 3c:10:9c:46:6a:0c:6d:f8:e4:25:3f:cd:f7:1b:b8: 08:dc:53:56:b8:1d:47:28:3b:4f:8c:0f:2d:7d:11: 67:23:2a:79:ab:3f:fa:b0:55:27:f8:92:fc:b7:a4: 0c:fb:cf:ac:43:2c:8c:42:3f:90:4b:a6:2c:55:7d: b7:7d:4c:be:7e:7e:8b:73:62:5e:61:de:9f:f5:f7: 3d:3f:ae:e9:d0:c6:b7:07:62:de:c2:6d:e3:d5:3c: d8:76:c9:70:14:c4:aa:f1:0d:36:ea:b2:50:23:48: ed:be:b8:b5:97:1c:cb:6e:d7:32:5d:25:66:bc:11: eb:8b:58:51:0d:17:4b:71:dc:75:7b:48:00:a8:81: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:65:62:D1:C2:56:01:32:7E:34:26:59:EE:50:F1:95:DA:98:ED:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:60:ac:9f:d8:35:51:6d:c5:bf:fc:72:cc:02:0d:26:27:48: 05:10:b3:20:d7:e4:86:27:39:46:30:9f:24:b6:e8:53:77:01: 1c:f8:f5:a9:5a:72:ec:16:f3:3e:d6:16:0b:24:69:cd:b5:b8: 32:c6:ca:b1:c4:e8:0f:b8:72:9a:27:eb:f5:cb:4e:a7:f5:29: 2b:17:97:00:58:ba:ce:e9:a8:c7:d2:21:90:66:73:26:17:8c: 6b:fb:23:90:27:47:bb:3d:28:1a:17:98:65:78:d8:57:80:ac: 0f:0f:d6:7f:37:0d:a0:1a:96:b3:2f:09:20:8a:7b:b4:c9:68: 56:30:70:a6:d5:e7:ef:20:b6:c6:b4:8d:43:cd:9c:67:6d:09: 36:6c:87:a2:76:9b:a6:48:7f:37:27:e1:42:51:61:aa:48:fe: e7:f3:62:6c:fd:33:77:28:ad:ff:1b:d2:e8:86:2c:23:fc:0a: e3:f6:a8:6e:53:f7:ad:4c:c3:87:9e:95:ff:79:1c:74:00:f8: db:b6:18:0c:1f:85:61:03:5a:fe:93:0c:5c:a1:7e:98:5e:c2: b5:22:13:c3:d8:45:99:30:75:6f:1c:d8:4f:bd:7b:fe:51:b0: a2:0f:72:03:c5:9f:e4:cb:9b:4d:e0:c6:7f:1a:38:1c:f3:c4: 3a:bc:ba:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lRiR4o4+WKQMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTM5NzY1MzAtYWJkMS00NTdmLTk3MGEtMjgzOTQzYTUyZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsLHcmKRPYTMwaLRt4D2Nje4i8v1sHxnqK9f ZFCEEe1FO8aXpPeAB54O8hWvLRrF+qFPiqGXCQE8ojsqC8NNJTWM+ARjZ2Ci4Tzi HJ1OceQzyCtuYfF9WaGkUrnNno+A/LFMCQW/TbqrIvzox2VmGtSdxWBO5Qk8EJxG agxt+OQlP833G7gI3FNWuB1HKDtPjA8tfRFnIyp5qz/6sFUn+JL8t6QM+8+sQyyM Qj+QS6YsVX23fUy+fn6Lc2JeYd6f9fc9P67p0Ma3B2Lewm3j1TzYdslwFMSq8Q02 6rJQI0jtvri1lxzLbtcyXSVmvBHri1hRDRdLcdx1e0gAqIHIuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFlYtHCVgEyfjQmWe5Q8ZXamO0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTNlNWM3MmEtMTk0Yi0z YWUzLWI4OTAtYjY0MGIyODZlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFgrJ/YNVFtxb/8cswCDSYnSAUQsyDX5IYnOUYwnyS26FN3ARz49ala cuwW8z7WFgskac21uDLGyrHE6A+4cpon6/XLTqf1KSsXlwBYus7pqMfSIZBmcyYX jGv7I5AnR7s9KBoXmGV42FeArA8P1n83DaAalrMvCSCKe7TJaFYwcKbV5+8gtsa0 jUPNnGdtCTZsh6J2m6ZIfzcn4UJRYapI/ufzYmz9M3corf8b0uiGLCP8CuP2qG5T 961Mw4eelf95HHQA+Nu2GAwfhWEDWv6TDFyhfphewrUiE8PYRZkwdW8c2E+9e/5R sKIPcgPFn+TLm03gxn8aOBzzxDq8upA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:26 2025 by rpki-client