$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa File: 643b4633-a606-3854-b152-66f4818490a3.roa (raw, json) Hash identifier: B9R5kGmninPO+rNPvcNsP4VfhhBuRB5ZYOq2pQ2qlBA= Subject key identifier: A3:65:13:6A:92:AC:07:96:0F:28:DA:96:F2:B2:C4:C6:6D:B5:57:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC1F0742B06B996CAF1C80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 23.32.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1f:07:42:b0:6b:99:6c:af:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=512e06a6-59e2-4edf-a78d-890d74a23ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:43:29:c2:c4:17:cf:a1:eb:31:1f:b3:a5: 1b:64:50:9c:0f:b1:de:0f:eb:51:6b:97:55:14:e9: 4c:1a:81:34:a1:50:a6:84:46:ca:3f:3b:12:a1:38: eb:b5:93:ad:8a:35:81:56:d8:67:4a:cf:9e:2e:f2: c1:28:c3:d9:29:91:6c:4c:0a:00:39:74:84:06:0d: e1:c9:d9:5f:6a:19:44:4b:d1:6c:22:a4:c6:76:e6: 05:44:81:1a:f9:53:a1:22:bd:d4:0c:2d:b8:e1:af: 80:ad:31:46:ad:bb:1d:6f:6a:0d:f8:57:fc:f2:57: 2e:b6:17:36:c2:5f:6e:73:f6:e1:ab:8a:43:47:09: db:36:a2:0e:f5:f1:f5:c0:60:87:0e:e8:22:6d:b4: 42:3f:d3:06:76:44:9d:4b:74:23:65:76:01:05:5a: d7:67:ba:95:07:0d:6d:86:3d:58:cd:39:b2:e0:96: ff:13:ce:3f:06:75:70:1a:88:44:42:0d:9e:dc:f3: 0e:38:d6:e0:dd:7c:3b:f8:1c:de:36:8c:ec:61:15: 3d:27:e7:34:63:49:d9:6e:a5:6d:8b:8b:02:5f:53: d9:8c:54:98:7a:64:61:0d:1e:de:36:fc:db:7c:ee: 7e:b4:0a:a5:29:a2:92:d0:77:97:50:14:2d:3c:aa: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:13:6A:92:AC:07:96:0F:28:DA:96:F2:B2:C4:C6:6D:B5:57:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/643b4633-a606-3854-b152-66f4818490a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:1e:46:bf:58:6a:47:14:48:9d:2a:0c:6e:ba:f7:e8:0b:db: 87:e4:ce:a1:85:92:ed:22:bc:30:5f:ce:ba:fe:39:81:a4:0d: 60:4f:ce:0a:62:eb:fa:7e:3a:f5:10:6d:9b:2f:ba:c0:bb:de: 63:31:08:78:5b:0e:60:70:bc:fc:14:46:0f:08:33:d6:81:68: 8d:1f:6a:1b:2b:e5:cc:94:63:ca:14:62:e2:bb:73:9c:12:a2: a0:ea:b5:20:49:eb:d6:5b:90:19:94:00:8a:d1:ad:32:00:b8: c5:5a:40:e0:37:26:fb:8c:16:b6:72:3b:6f:fa:5f:e4:8d:72: 7f:4c:ec:1a:04:84:64:2c:d7:1d:17:a7:fb:8a:79:b5:c9:87: 45:75:4a:a3:24:39:48:44:58:3a:6d:35:2d:ac:50:a2:f3:c0: d9:6e:08:78:f7:a4:fc:a4:2e:51:d6:2e:6b:04:f9:2a:cf:68: 65:11:57:8b:f7:5f:c5:be:a2:b2:6e:cf:9e:6e:c5:77:b3:14: ad:1d:0c:8d:3b:9c:20:e4:d2:a8:4d:bd:8d:43:47:37:4f:2b: 10:57:6b:53:eb:3b:81:0f:a0:0f:07:65:16:be:66:c9:0c:c0: 0d:57:9a:7a:bb:07:d0:d5:8f:00:51:29:ed:d3:98:5b:d9:4a: 1b:6d:69:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3B8HQrBrmWyvHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NTEyZTA2YTYtNTllMi00ZWRmLWE3OGQtODkwZDc0YTIzZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7ZDKcLEF8+h6zEfs6UbZFCcD7HeD+tRa5dV FOlMGoE0oVCmhEbKPzsSoTjrtZOtijWBVthnSs+eLvLBKMPZKZFsTAoAOXSEBg3h ydlfahlES9FsIqTGduYFRIEa+VOhIr3UDC244a+ArTFGrbsdb2oN+Ff88lcuthc2 wl9uc/bhq4pDRwnbNqIO9fH1wGCHDugibbRCP9MGdkSdS3QjZXYBBVrXZ7qVBw1t hj1YzTmy4Jb/E84/BnVwGohEQg2e3PMOONbg3Xw7+BzeNozsYRU9J+c0Y0nZbqVt i4sCX1PZjFSYemRhDR7eNvzbfO5+tAqlKaKS0HeXUBQtPKrgywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNlE2qSrAeWDyjalvKyxMZttVeCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQzYjQ2MzMtYTYwNi0z ODU0LWIxNTItNjZmNDgxODQ5MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoeRr9YakcUSJ0qDG669+gL24fkzqGFku0ivDBfzrr+OYGkDWBPzgpi 6/p+OvUQbZsvusC73mMxCHhbDmBwvPwURg8IM9aBaI0fahsr5cyUY8oUYuK7c5wS oqDqtSBJ69ZbkBmUAIrRrTIAuMVaQOA3JvuMFrZyO2/6X+SNcn9M7BoEhGQs1x0X p/uKebXJh0V1SqMkOUhEWDptNS2sUKLzwNluCHj3pPykLlHWLmsE+SrPaGURV4v3 X8W+orJuz55uxXezFK0dDI07nCDk0qhNvY1DRzdPKxBXa1PrO4EPoA8HZRa+ZskM wA1Xmnq7B9DVjwBRKe3TmFvZShttaVk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:16:52 2025 by rpki-client