$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62f400a9-03ce-3222-b83c-19f4d15f8c33.roa File: 62f400a9-03ce-3222-b83c-19f4d15f8c33.roa (raw, json) Hash identifier: SfoeGx5A8v7LMZjucX7iFMDCUHS++L8LzfBXK8JXoDI= Subject key identifier: 72:E0:01:07:D4:9C:92:07:B8:36:10:9A:4C:84:04:24:D9:CC:AE:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1F0185127637B2627CC02580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62f400a9-03ce-3222-b83c-19f4d15f8c33.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 20940 IP address blocks: 23.48.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:85:12:76:37:b2:62:7c:c0:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=286762fc-8f04-46b4-bd4d-fe6b8f5c68c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ea:b4:76:1b:ca:45:18:07:ae:22:4c:22:08: eb:82:60:0d:88:11:7d:c6:e0:68:2f:a1:5c:2a:7c: 01:85:b3:06:7b:ae:e4:58:4e:55:78:44:fb:df:46: d2:6c:88:e4:1d:3d:7b:f3:ee:23:95:14:64:1a:96: c3:96:fa:e3:38:5d:1e:bd:8f:60:54:87:46:82:93: ed:2a:ea:16:3d:a1:87:db:69:cd:3e:73:fb:d6:64: 06:e2:5e:a6:63:f8:9e:a7:b0:78:c2:dd:a6:ea:09: 54:fa:9a:78:c4:e4:4b:f4:05:47:ee:c0:6c:a2:8d: f2:62:61:7a:59:cb:92:c8:82:a7:86:99:d2:63:24: 7c:c9:d4:7d:5b:ce:68:69:bf:83:46:76:2b:52:28: 3a:79:22:12:0a:76:d0:1a:7e:11:43:fb:0e:ee:c3: 5e:2c:41:c7:23:ff:e1:5e:16:3b:6f:9f:1e:84:4a: 57:f4:d3:17:63:b2:5f:85:8b:a9:95:61:61:f4:55: 9a:5f:3a:2d:32:aa:3b:3d:d5:62:72:03:56:03:83: d5:bd:cd:81:b5:a5:66:ee:70:33:a1:f7:36:ec:7a: f4:24:84:83:51:e6:3b:07:2d:44:5d:9e:b2:56:92: da:51:4f:96:a5:b2:02:4e:63:99:9c:2a:fa:ea:6d: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E0:01:07:D4:9C:92:07:B8:36:10:9A:4C:84:04:24:D9:CC:AE:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/62f400a9-03ce-3222-b83c-19f4d15f8c33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.48.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:be:ac:40:da:69:20:1b:38:82:c1:fc:98:69:e0:f6:86:00: 59:0c:9b:17:e7:82:76:8a:03:ea:3b:71:4a:be:ed:be:fe:c3: e9:50:76:73:26:3b:bd:b5:db:f8:87:8d:1a:09:14:4d:ae:0e: e1:0d:c6:e0:a5:82:f4:e0:9f:38:d6:9f:00:98:44:93:ba:bd: 37:b1:65:1f:2a:ab:0c:a0:47:e0:40:25:3d:32:7d:7f:a8:80: 3c:1c:f2:e9:2d:44:76:85:cc:4f:3b:5f:5d:37:76:73:79:a3: 92:ae:6d:02:2b:ff:bc:ec:77:f8:fd:11:fe:c5:ba:78:ef:2c: 1f:9b:c3:ef:76:50:6c:9c:66:83:70:01:d9:84:c8:cc:05:02: e6:cd:49:85:f6:13:de:32:21:29:20:c3:c0:9f:bb:5d:c0:26: 03:c8:a1:84:fd:2e:65:34:12:c1:4d:40:db:99:8b:79:ba:44: fe:11:45:da:43:0e:9f:42:aa:e2:af:9e:22:6d:51:93:d9:ef: f4:0f:36:f5:66:c5:a0:29:30:c8:76:9e:51:a6:a9:91:c5:64: 74:74:45:c8:20:59:f5:1c:b1:b2:cb:88:13:9e:aa:10:c5:f3: 4e:32:08:86:bc:4f:16:0e:69:6e:8a:b4:2c:75:6c:7e:84:97: 29:dd:11:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAYUSdjeyYnzAJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk Mjg2NzYyZmMtOGYwNC00NmI0LWJkNGQtZmU2YjhmNWM2OGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOq0dhvKRRgHriJMIgjrgmANiBF9xuBoL6Fc KnwBhbMGe67kWE5VeET730bSbIjkHT178+4jlRRkGpbDlvrjOF0evY9gVIdGgpPt KuoWPaGH22nNPnP71mQG4l6mY/iep7B4wt2m6glU+pp4xORL9AVH7sBsoo3yYmF6 WcuSyIKnhpnSYyR8ydR9W85oab+DRnYrUig6eSISCnbQGn4RQ/sO7sNeLEHHI//h XhY7b58ehEpX9NMXY7JfhYuplWFh9FWaXzotMqo7PdVicgNWA4PVvc2BtaVm7nAz ofc27Hr0JISDUeY7By1EXZ6yVpLaUU+WpbICTmOZnCr66m0WlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLgAQfUnJIHuDYQmkyEBCTZzK6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjJmNDAwYTktMDNjZS0z MjIyLWI4M2MtMTlmNGQxNWY4YzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzAXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK+rEDaaSAbOILB/Jhp4PaGAFkMmxfngnaKA+o7cUq+7b7+w+lQdnMm O7212/iHjRoJFE2uDuENxuClgvTgnzjWnwCYRJO6vTexZR8qqwygR+BAJT0yfX+o gDwc8uktRHaFzE87X103dnN5o5KubQIr/7zsd/j9Ef7FunjvLB+bw+92UGycZoNw AdmEyMwFAubNSYX2E94yISkgw8Cfu13AJgPIoYT9LmU0EsFNQNuZi3m6RP4RRdpD Dp9CquKvniJtUZPZ7/QPNvVmxaApMMh2nlGmqZHFZHR0RcggWfUcsbLLiBOeqhDF 804yCIa8TxYOaW6KtCx1bH6ElyndETg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:17 2025 by rpki-client