$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f38ae71-6590-32ac-9d92-83ea6e2f38a9.roa File: 5f38ae71-6590-32ac-9d92-83ea6e2f38a9.roa (raw, json) Hash identifier: oHd8wCwW3BKa2KeKqN+kTFNn+N+dF8caQSDaJS7FlBI= Subject key identifier: 02:AE:AB:04:99:07:E0:11:65:00:11:00:23:48:49:7C:21:DC:07:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA6679DA6A3CF0814893FCA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f38ae71-6590-32ac-9d92-83ea6e2f38a9.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.1.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:9d:a6:a3:cf:08:14:89:3f:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=4542030b-acad-4e7a-ac07-835bdca9a622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:77:06:62:c3:58:46:b2:9e:6d:9e:62:f6: ab:b5:ea:76:68:86:ed:fc:8e:70:2e:63:90:38:13: b1:99:10:b5:59:45:4f:3c:b9:d0:be:6f:2e:95:e7: c9:d7:0e:ef:e0:cf:68:57:04:e4:3d:1a:51:6e:c6: 84:c0:a9:f4:55:27:ec:37:db:c9:d1:98:39:28:e0: 35:5d:2d:8a:40:47:af:bd:6c:8f:b8:07:b2:d7:fc: 23:52:9d:d9:3a:88:da:3f:dd:3c:f5:8e:ec:9a:22: a8:b0:a9:90:84:2d:e8:17:1c:31:53:f6:57:34:c0: b9:16:94:45:b3:ce:06:1c:c9:87:5a:90:ab:55:8c: 5f:a8:a1:a7:97:5b:b1:e9:8a:5c:b6:9b:4f:91:7a: 72:82:55:a2:1e:9f:a2:c7:bd:ed:d4:c6:a3:69:93: 44:d0:ba:73:3c:14:ce:4e:0b:47:6f:c2:a5:65:70: 59:7f:29:2f:e1:4b:bd:d5:3a:2c:1c:66:3d:7d:90: 44:87:48:0c:3a:b7:03:46:39:3c:b4:3c:cd:c9:3b: 34:91:d9:ca:1d:e3:79:b7:74:f8:29:c2:bb:53:2e: 25:79:bd:5d:7d:93:20:94:9a:e6:a7:6a:db:16:3c: 0d:9d:00:de:58:04:c3:86:95:24:ef:bb:f1:7f:94: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AE:AB:04:99:07:E0:11:65:00:11:00:23:48:49:7C:21:DC:07:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f38ae71-6590-32ac-9d92-83ea6e2f38a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0e:b6:6b:73:bc:bd:17:c7:c4:ea:84:e5:64:35:af:bc:53: c1:89:71:e5:89:b0:b2:e5:9a:02:d7:0c:9b:de:c3:ae:76:65: ab:7c:fe:0e:d7:2a:bc:29:e2:41:1d:dd:b0:e8:98:1e:c9:eb: 8b:86:27:98:15:f8:fd:91:46:7b:89:cd:79:c1:6f:cb:b9:27: ec:b8:9f:58:1f:c8:ab:cd:13:09:42:2d:25:55:23:86:fd:93: 7d:ae:00:81:41:5f:75:69:6b:cc:95:7e:2e:44:35:d6:bf:77: 95:4b:86:4f:41:08:10:a3:6a:2b:93:b1:96:f3:3c:21:9c:61: a5:dc:19:71:6d:07:29:d4:02:fe:22:c4:47:b8:aa:7a:00:50: b9:de:76:f3:c6:af:13:0c:d8:e9:b3:ba:e9:9c:7e:a7:85:96: 6f:74:fa:97:9a:f6:5a:46:d1:8a:50:fd:d1:2b:0c:9b:6a:22: 9e:54:9c:51:fc:93:f1:f8:31:74:60:1d:93:2e:29:6f:80:af: 1b:55:64:c0:87:37:f8:dd:e4:29:d3:5a:48:08:ed:79:a8:a0: be:62:59:65:59:e6:0b:2c:be:aa:7b:a6:f7:0a:11:74:45:db: b9:13:c9:29:73:43:f3:a5:67:7f:54:2f:8b:8b:46:90:0f:1f: 8d:9a:8e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ52mo88IFIk/ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NDU0MjAzMGItYWNhZC00ZTdhLWFjMDctODM1YmRjYTlhNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE93BmLDWEaynm2eYvartep2aIbt/I5wLmOQ OBOxmRC1WUVPPLnQvm8ulefJ1w7v4M9oVwTkPRpRbsaEwKn0VSfsN9vJ0Zg5KOA1 XS2KQEevvWyPuAey1/wjUp3ZOojaP9089Y7smiKosKmQhC3oFxwxU/ZXNMC5FpRF s84GHMmHWpCrVYxfqKGnl1ux6YpctptPkXpyglWiHp+ix73t1MajaZNE0LpzPBTO TgtHb8KlZXBZfykv4Uu91TosHGY9fZBEh0gMOrcDRjk8tDzNyTs0kdnKHeN5t3T4 KcK7Uy4leb1dfZMglJrmp2rbFjwNnQDeWATDhpUk77vxf5Rt2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKuqwSZB+ARZQARACNISXwh3AfKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYzOGFlNzEtNjU5MC0z MmFjLTlkOTItODNlYTZlMmYzOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkOtmtzvL0Xx8TqhOVkNa+8U8GJceWJsLLlmgLXDJvew652Zat8/g7X Krwp4kEd3bDomB7J64uGJ5gV+P2RRnuJzXnBb8u5J+y4n1gfyKvNEwlCLSVVI4b9 k32uAIFBX3Vpa8yVfi5ENda/d5VLhk9BCBCjaiuTsZbzPCGcYaXcGXFtBynUAv4i xEe4qnoAULnedvPGrxMM2OmzuumcfqeFlm90+pea9lpG0YpQ/dErDJtqIp5UnFH8 k/H4MXRgHZMuKW+ArxtVZMCHN/jd5CnTWkgI7XmooL5iWWVZ5gssvqp7pvcKEXRF 27kTySlzQ/OlZ39UL4uLRpAPH42ajus= -----END CERTIFICATE-----Generated at Tue Nov 4 22:24:04 2025 by rpki-client