$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa File: 5b3c8670-7242-3511-9bb0-3647ae7e4332.roa (raw, json) Hash identifier: rc2bOQ/pVv0RidjEUt9x+kARMjyllCB0qO3pkxEUmF4= Subject key identifier: 09:EE:E9:AE:09:5A:C8:1B:39:AC:1B:41:CA:DB:C6:E8:9D:48:B4:30 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D3F0654818629CE0BCDD0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.67.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3f:06:54:81:86:29:ce:0b:cd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=7ae46f1d-374f-4160-9e6a-5dc26674bbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:46:5f:94:8a:23:4a:15:06:25:00:6e:6e: 7c:3d:60:f8:70:e1:0f:68:22:0e:33:04:9e:d2:ae: ba:08:26:7c:ed:63:60:de:ad:66:b8:be:20:7d:2d: 9c:01:5b:53:ff:5a:e0:f8:2f:10:4a:d9:8c:c4:00: b0:b4:e6:12:04:03:2e:23:81:7c:27:9c:5a:57:c0: dc:4b:64:9e:af:6c:11:cc:e2:8a:5d:5e:8e:a1:7f: d2:b3:98:07:b7:d2:72:28:84:3f:eb:5c:8d:e6:a2: ef:ee:93:03:66:3d:e5:d4:ba:70:63:5d:e2:7e:0f: e1:ad:05:2e:39:6e:10:42:a8:27:a4:4a:75:a5:0e: a3:bb:38:83:be:60:5f:69:ef:c7:77:9e:ca:b9:bc: ed:02:98:72:12:d5:7f:da:b5:93:5f:44:0e:17:0c: 53:9c:51:5c:e5:c5:4d:5e:db:b9:f9:8b:de:9d:68: be:59:25:df:4b:cc:4f:32:4f:7e:7a:8c:fd:ef:6d: cd:ac:be:69:7e:31:51:43:f2:96:e4:93:7f:93:24: c1:c2:47:56:1c:ff:1b:29:55:e0:80:1a:03:2c:b1: f8:cf:55:2d:a3:e6:91:ec:04:8c:6c:3d:cc:14:d8: 36:3e:12:89:60:eb:73:16:2e:10:e5:31:8b:d4:2b: fb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EE:E9:AE:09:5A:C8:1B:39:AC:1B:41:CA:DB:C6:E8:9D:48:B4:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b3c8670-7242-3511-9bb0-3647ae7e4332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ff:39:cf:f4:78:d3:cf:a5:f5:22:db:33:d8:35:7d:8a:d9: c0:73:e4:09:83:02:14:d5:72:d4:b0:8e:4b:4e:58:d0:2c:d6: d2:1c:34:17:99:d2:c0:8e:53:07:8f:cf:32:cb:af:0c:38:68: 12:f4:29:ef:da:a3:d7:2c:dd:30:6e:0e:23:bd:fe:07:c6:c6: fb:e8:a0:97:01:32:b8:ee:e0:4f:59:2a:6a:dc:35:4f:b3:0e: 05:ef:dc:90:54:5d:88:7e:b6:a0:89:55:4d:f7:cd:43:45:20: f0:93:85:c9:28:df:0b:12:6d:8f:35:0b:a1:25:fe:50:90:e5: 3a:cb:84:ef:d5:e0:5e:af:a1:4e:22:5e:bc:04:0a:e7:df:2a: 0e:65:48:82:c1:ce:aa:72:98:11:84:de:bc:eb:7e:7d:08:63: ac:aa:de:39:37:b4:6a:70:4b:fe:6b:97:39:ca:6b:84:c7:f0: 59:74:81:5e:7e:74:2e:b0:db:00:62:f3:7c:1a:a0:78:40:48: 5a:db:e0:22:d2:91:b8:8b:78:37:d7:46:7e:08:64:20:ad:a5: 4b:26:ca:f8:80:43:47:25:71:c6:7d:6b:13:08:69:14:4b:6b: 91:8c:49:96:c0:31:5a:59:b0:0a:34:08:06:1f:c5:4f:59:a2: e8:9b:32:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XT8GVIGGKc4LzdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk N2FlNDZmMWQtMzc0Zi00MTYwLTllNmEtNWRjMjY2NzRiYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuRGX5SKI0oVBiUAbm58PWD4cOEPaCIOMwSe 0q66CCZ87WNg3q1muL4gfS2cAVtT/1rg+C8QStmMxACwtOYSBAMuI4F8J5xaV8Dc S2Ser2wRzOKKXV6OoX/Ss5gHt9JyKIQ/61yN5qLv7pMDZj3l1LpwY13ifg/hrQUu OW4QQqgnpEp1pQ6juziDvmBfae/Hd57KubztAphyEtV/2rWTX0QOFwxTnFFc5cVN Xtu5+YvenWi+WSXfS8xPMk9+eoz9723NrL5pfjFRQ/KW5JN/kyTBwkdWHP8bKVXg gBoDLLH4z1Uto+aR7ASMbD3MFNg2PhKJYOtzFi4Q5TGL1Cv7BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnu6a4JWsgbOawbQcrbxuidSLQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWIzYzg2NzAtNzI0Mi0z NTExLTliYjAtMzY0N2FlN2U0MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0OZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj/Oc/0eNPPpfUi2zPYNX2K2cBz5AmDAhTVctSwjktOWNAs1tIcNBeZ 0sCOUwePzzLLrww4aBL0Ke/ao9cs3TBuDiO9/gfGxvvooJcBMrju4E9ZKmrcNU+z DgXv3JBUXYh+tqCJVU33zUNFIPCThcko3wsSbY81C6El/lCQ5TrLhO/V4F6voU4i XrwECuffKg5lSILBzqpymBGE3rzrfn0IY6yq3jk3tGpwS/5rlznKa4TH8Fl0gV5+ dC6w2wBi83waoHhASFrb4CLSkbiLeDfXRn4IZCCtpUsmyviAQ0clccZ9axMIaRRL a5GMSZbAMVpZsAo0CAYfxU9ZouibMkQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:23:29 2025 by rpki-client