$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa File: 6c31a468-e60d-3d1c-9a08-c18714e05b79.roa (raw, json) Hash identifier: AYahIv9EeoDfX1475fAPfj2DL1gQdpRrR3mwFvT3Psg= Subject key identifier: F4:EB:2E:46:51:A5:CA:C8:6B:4D:47:92:AD:09:9D:65:69:29:B2:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B2DAE46E7C70BE5A0400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.72.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b2:da:e4:6e:7c:70:be:5a:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=29542237-81a7-4778-9a70-973893fb71f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:1c:42:14:71:26:c7:e6:3a:f1:51:ce:a3: ce:46:c4:b0:e8:c0:9d:48:2d:3c:56:d8:83:f7:2e: 6e:d6:7a:42:1b:a8:24:64:7a:1d:a7:f9:30:4a:29: ec:13:02:8c:19:cd:8d:59:62:a5:74:49:2a:03:ba: 95:92:a0:e0:1b:e5:78:5f:b1:d2:5d:31:68:6a:6b: 6d:0e:92:8b:c2:cf:78:c0:76:70:d2:f0:44:94:c0: af:b5:37:7d:41:58:c2:88:90:e6:2f:2d:f3:aa:32: 44:e4:28:9b:e8:1d:eb:f4:60:9f:95:3b:4e:56:d8: 91:7d:79:4f:be:67:88:c4:b4:24:d2:63:77:f0:33: c1:49:34:1e:8e:5b:f4:26:11:1d:cd:a9:a5:af:da: 1c:8b:ea:da:62:49:14:14:91:5d:85:99:30:ac:60: 51:cf:fe:0e:bf:ae:67:7c:9e:0f:57:fc:ca:e6:63: 19:63:ed:8a:65:8d:41:d0:05:4a:07:13:9a:cf:26: 23:a2:96:cd:6d:26:70:8e:66:a3:72:8a:bb:c1:a0: 14:d9:a4:80:66:4b:42:1b:57:1b:9a:51:86:75:53: f2:1e:af:40:3c:fd:0b:e5:d4:39:57:78:ec:9f:0c: b0:5e:4e:f6:d3:e1:e9:b2:19:09:94:83:84:62:fb: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EB:2E:46:51:A5:CA:C8:6B:4D:47:92:AD:09:9D:65:69:29:B2:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c31a468-e60d-3d1c-9a08-c18714e05b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c0:52:21:5f:a5:70:ae:10:a1:5a:af:f1:a6:25:c6:8b:3b: ca:7c:84:2f:f0:d5:2f:6e:fc:a3:23:01:ff:fc:40:3c:8f:b1: 71:b2:21:73:e4:41:3a:31:a6:9e:cf:f5:0f:ea:72:93:5a:f8: f2:dc:cf:28:f0:54:05:e8:bd:2a:fa:9c:ff:b7:4a:90:d5:e3: ba:76:df:9e:b2:37:66:41:af:4a:ef:f1:c7:e8:c3:2a:4a:9b: fa:22:1b:42:ee:dc:7f:81:37:0e:45:b4:dc:f6:da:c6:e9:a0: 6b:14:2b:09:1d:07:80:0d:31:cf:66:36:68:16:6b:3f:dd:0e: b4:76:4a:87:00:34:7a:f0:5f:95:3a:5f:b7:92:45:a8:0e:6b: 35:b6:eb:8e:63:52:0a:c7:1d:58:00:00:1c:de:8f:09:1d:83: 07:16:de:a1:e7:b7:96:d7:11:55:2d:a1:83:b2:91:9c:c8:b8: 4b:23:a6:7a:5f:b8:2d:75:e1:67:37:e6:40:4a:ac:f2:15:19: d5:42:d7:1d:35:cc:e5:88:c3:34:87:e4:0b:7a:35:02:7c:a5: 0f:48:df:93:fd:3c:d2:5f:8a:20:bc:71:01:a1:c1:5e:79:19: 3f:34:2b:03:a6:f7:e3:08:6c:91:d4:4f:89:1c:a0:92:f5:ed: e0:22:c8:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbLa5G58cL5aBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Mjk1NDIyMzctODFhNy00Nzc4LTlhNzAtOTczODkzZmI3MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY4cQhRxJsfmOvFRzqPORsSw6MCdSC08VtiD 9y5u1npCG6gkZHodp/kwSinsEwKMGc2NWWKldEkqA7qVkqDgG+V4X7HSXTFoamtt DpKLws94wHZw0vBElMCvtTd9QVjCiJDmLy3zqjJE5Cib6B3r9GCflTtOVtiRfXlP vmeIxLQk0mN38DPBSTQejlv0JhEdzamlr9oci+raYkkUFJFdhZkwrGBRz/4Ov65n fJ4PV/zK5mMZY+2KZY1B0AVKBxOazyYjopbNbSZwjmajcoq7waAU2aSAZktCG1cb mlGGdVPyHq9APP0L5dQ5V3jsnwywXk720+HpshkJlIOEYvsvmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTrLkZRpcrIa01Hkq0JnWVpKbJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmMzMWE0NjgtZTYwZC0z ZDFjLTlhMDgtYzE4NzE0ZTA1Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0gkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfAUiFfpXCuEKFar/GmJcaLO8p8hC/w1S9u/KMjAf/8QDyPsXGyIXPk QToxpp7P9Q/qcpNa+PLczyjwVAXovSr6nP+3SpDV47p2356yN2ZBr0rv8cfowypK m/oiG0Lu3H+BNw5FtNz22sbpoGsUKwkdB4ANMc9mNmgWaz/dDrR2SocANHrwX5U6 X7eSRagOazW2645jUgrHHVgAABzejwkdgwcW3qHnt5bXEVUtoYOykZzIuEsjpnpf uC114Wc35kBKrPIVGdVC1x01zOWIwzSH5At6NQJ8pQ9I35P9PNJfiiC8cQGhwV55 GT80KwOm9+MIbJHUT4kcoJL17eAiyOw= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:06 2025 by rpki-client