$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7112c104-db43-3390-9015-a6a18c6f0407.roa File: 7112c104-db43-3390-9015-a6a18c6f0407.roa (raw, json) Hash identifier: MN5rbwtFTkAB2URlxGzIpxwFMqbpXUuyp0ASHkDPExY= Subject key identifier: 58:8E:66:60:3B:7D:86:76:35:D1:AD:16:3A:9D:4D:86:44:9B:88:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D7FD790467707F29FD0E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7112c104-db43-3390-9015-a6a18c6f0407.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.0.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:fd:79:04:67:70:7f:29:fd:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d4b8f982-095c-4d31-82a3-65e4165e941c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d8:07:e9:78:8a:ad:17:d8:c8:0e:1c:3a:0f: 02:54:a5:db:e4:24:c0:63:2f:a5:64:89:21:73:cf: 33:72:26:e8:86:9a:68:5e:33:e9:bd:ea:16:7e:35: 92:39:2f:87:27:aa:76:24:b1:0f:c1:d8:4d:0d:4a: d2:32:02:fb:22:0e:8e:f9:3d:cf:3a:48:ad:68:3c: 71:d6:17:41:6a:b4:8f:ea:69:0a:87:69:db:a5:d7: d1:1d:f6:77:c9:28:cb:cf:80:99:3d:d2:53:4d:8a: 0f:67:c5:72:ea:5c:1b:65:bc:55:d3:24:89:07:59: 7a:59:a4:42:6b:c8:3e:10:1a:dc:d6:8a:c4:24:bd: f3:0f:9e:6c:f8:f5:56:ae:48:c3:3b:a4:19:4d:e4: ed:9d:32:83:8c:5a:6b:2e:44:07:67:96:c6:b2:d1: 8c:79:55:a6:d9:7b:ee:50:2c:6f:c0:df:51:16:72: 86:91:d1:9f:5a:3e:3b:86:1a:75:e3:c5:b8:7d:d8: ec:22:da:bb:28:5a:17:2b:a2:a9:1a:d4:67:8c:80: fd:cf:27:c6:84:2a:e0:cc:18:53:db:d2:3a:94:e4: 3e:e7:e3:35:5f:01:5c:35:b6:d9:08:72:5f:83:68: f3:f8:3e:80:7e:71:05:37:9b:1d:5f:7a:d6:8c:36: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8E:66:60:3B:7D:86:76:35:D1:AD:16:3A:9D:4D:86:44:9B:88:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7112c104-db43-3390-9015-a6a18c6f0407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.0.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8d:c3:74:16:a6:32:64:3c:50:0c:84:56:35:5b:dd:8b:94: f0:f3:9a:d4:02:cb:b2:7d:99:17:19:36:77:74:b3:4b:92:ed: 27:bd:c0:74:82:07:5e:64:1a:91:55:d2:ce:85:a4:7d:a0:20: 7d:52:f7:1c:f9:6a:40:53:ee:73:04:fd:68:2c:8c:44:54:68: 88:06:4a:7c:de:45:80:43:f4:3b:a2:71:2f:b7:d9:a7:d7:9e: 8f:a1:09:19:e5:1b:22:08:1c:bf:38:49:4f:67:e0:c4:00:d5: 72:29:ed:ed:54:e7:49:5c:16:8d:1e:49:6e:07:6c:b1:c4:ab: 17:a3:d3:d6:0f:a3:79:93:f3:6f:2f:b7:ac:c0:89:76:a6:b6: 9a:05:db:6e:05:d3:a8:91:da:fc:59:69:d3:4e:ba:e8:be:0e: fd:49:0b:a4:86:69:77:21:e6:39:8b:b9:44:10:aa:ed:7f:31: d2:17:ea:1d:eb:3e:60:4e:e2:d0:1d:6d:2d:6c:99:61:18:e1: 80:8b:dd:e2:21:a4:7a:3d:0e:a6:de:42:d7:f9:ff:44:57:9d: 1d:ce:8c:4c:4e:d2:7d:ff:8f:55:bb:f8:ca:ef:85:a7:1c:46: 76:a0:53:dd:6f:47:50:23:5d:68:3a:57:c7:dc:7e:8f:23:b2: 48:da:21:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1/15BGdwfyn9DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDRiOGY5ODItMDk1Yy00ZDMxLTgyYTMtNjVlNDE2NWU5NDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktgH6XiKrRfYyA4cOg8CVKXb5CTAYy+lZIkh c88zcibohppoXjPpveoWfjWSOS+HJ6p2JLEPwdhNDUrSMgL7Ig6O+T3POkitaDxx 1hdBarSP6mkKh2nbpdfRHfZ3ySjLz4CZPdJTTYoPZ8Vy6lwbZbxV0ySJB1l6WaRC a8g+EBrc1orEJL3zD55s+PVWrkjDO6QZTeTtnTKDjFprLkQHZ5bGstGMeVWm2Xvu UCxvwN9RFnKGkdGfWj47hhp148W4fdjsItq7KFoXK6KpGtRnjID9zyfGhCrgzBhT 29I6lOQ+5+M1XwFcNbbZCHJfg2jz+D6AfnEFN5sdX3rWjDahtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiOZmA7fYZ2NdGtFjqdTYZEm4j7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzExMmMxMDQtZGI0My0z MzkwLTkwMTUtYTZhMThjNmYwNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwCkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGNw3QWpjJkPFAMhFY1W92LlPDzmtQCy7J9mRcZNnd0s0uS7Se9wHSC B15kGpFV0s6FpH2gIH1S9xz5akBT7nME/WgsjERUaIgGSnzeRYBD9DuicS+32afX no+hCRnlGyIIHL84SU9n4MQA1XIp7e1U50lcFo0eSW4HbLHEqxej09YPo3mT828v t6zAiXamtpoF224F06iR2vxZadNOuui+Dv1JC6SGaXch5jmLuUQQqu1/MdIX6h3r PmBO4tAdbS1smWEY4YCL3eIhpHo9DqbeQtf5/0RXnR3OjExO0n3/j1W7+Mrvhacc RnagU91vR1AjXWg6V8fcfo8jskjaIe4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:40:24 2025 by rpki-client