$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757e6339-8ba5-3cae-8214-3ba3d43be73e.roa File: 757e6339-8ba5-3cae-8214-3ba3d43be73e.roa (raw, json) Hash identifier: Xc+81zQn0rH+F4oLs86k53HM2sADwDivvdygi8Yql7g= Subject key identifier: 68:F3:95:9D:ED:5D:89:4C:93:D5:75:EF:31:84:0B:AB:25:7B:5E:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA0D23F71FDF7B1CF0CC52800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757e6339-8ba5-3cae-8214-3ba3d43be73e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 20940 IP address blocks: 23.1.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:3f:71:fd:f7:b1:cf:0c:c5:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=bd7002a3-2583-497b-8281-f2b318356705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:76:3a:44:9c:19:03:31:b7:11:40:5e:fa:6d: 79:90:41:75:0a:e4:3e:4d:4c:14:c6:b9:75:81:5c: 13:e5:d9:3a:2c:78:2e:91:33:a7:79:11:25:b6:a3: 24:52:ec:ff:a4:cb:4d:57:20:83:6e:2e:8e:38:35: 3a:f9:15:36:94:bb:22:07:5e:13:de:c3:e5:50:0d: ea:c6:6c:34:b1:be:31:49:fd:20:fe:ef:40:8b:4c: fe:ac:3f:6f:3e:f8:03:8d:92:9e:a5:80:20:0a:93: 74:b6:1a:2e:51:e6:e7:db:fd:e2:67:18:bb:6c:bd: fd:2b:80:f9:b4:f3:f7:e5:25:9d:f2:fb:72:3b:59: 3d:2d:a6:92:01:2c:18:ce:3f:48:4d:a8:25:11:f4: f6:c6:2a:7b:a7:57:5a:7b:03:0f:b5:ce:67:6a:17: 9d:9b:a3:19:d7:f9:b2:73:59:f3:b6:f8:6c:e9:4b: b3:43:04:e2:79:e3:fa:0e:81:19:05:71:c9:6f:75: 80:06:36:74:4a:1c:c2:80:db:25:59:8b:a3:be:0e: 1f:2f:16:b5:41:50:08:1d:9b:18:35:38:65:b9:ee: 21:08:5c:6b:7c:a4:c5:3e:a5:7e:92:c2:0b:3f:20: fc:1e:e6:7c:99:f5:46:a7:58:c9:15:0f:2c:67:5b: 9b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F3:95:9D:ED:5D:89:4C:93:D5:75:EF:31:84:0B:AB:25:7B:5E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/757e6339-8ba5-3cae-8214-3ba3d43be73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a8:d3:13:78:52:80:12:78:ce:4d:83:5b:0a:72:81:d6:cb: 2d:02:93:08:89:4d:6f:8d:ab:26:68:22:dd:aa:26:c8:90:20: 3a:49:83:18:29:f0:97:3d:5e:40:3c:d7:b3:91:58:66:b5:b7: 6b:85:1e:7d:3a:dd:67:0d:4d:74:3a:d9:d3:8c:ad:15:d3:9a: 70:16:6f:98:10:0a:9c:38:1b:e6:ec:4a:3f:d8:02:68:12:0a: 58:65:b5:f8:1a:ed:fb:92:30:3c:e2:b6:25:48:62:a6:ab:b4: 9b:b3:9d:45:3c:72:c3:55:48:7a:3c:85:f3:26:f7:90:bf:6c: db:1d:b5:98:5d:4c:0e:62:a2:22:cc:af:c8:b9:e5:9b:a4:4d: 77:52:19:24:c6:87:d0:f6:9c:7c:ad:8c:91:15:2f:f0:f4:a2: e8:aa:aa:85:a3:8a:2a:12:af:08:03:36:07:54:44:0f:3b:00: 63:1d:0c:28:03:eb:1b:e8:48:c2:63:f1:b4:28:f0:b0:14:a6: 48:6a:69:3c:32:44:71:56:a2:aa:23:e2:7b:32:7e:28:7c:a9: 12:42:11:2a:80:ec:77:27:6b:7b:f2:9a:f8:36:34:82:a7:5b: 26:3d:07:af:36:b8:c1:9f:d5:21:7f:51:1c:96:e3:da:bb:f3: 2e:6d:41:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0j9x/fexzwzFKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YmQ3MDAyYTMtMjU4My00OTdiLTgyODEtZjJiMzE4MzU2NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynY6RJwZAzG3EUBe+m15kEF1CuQ+TUwUxrl1 gVwT5dk6LHgukTOneREltqMkUuz/pMtNVyCDbi6OODU6+RU2lLsiB14T3sPlUA3q xmw0sb4xSf0g/u9Ai0z+rD9vPvgDjZKepYAgCpN0thouUebn2/3iZxi7bL39K4D5 tPP35SWd8vtyO1k9LaaSASwYzj9ITaglEfT2xip7p1daewMPtc5nahedm6MZ1/my c1nztvhs6UuzQwTieeP6DoEZBXHJb3WABjZ0ShzCgNslWYujvg4fLxa1QVAIHZsY NThlue4hCFxrfKTFPqV+ksILPyD8HuZ8mfVGp1jJFQ8sZ1ubhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjzlZ3tXYlMk9V17zGEC6sle15eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzU3ZTYzMzktOGJhNS0z Y2FlLTgyMTQtM2JhM2Q0M2JlNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGo0xN4UoASeM5Ng1sKcoHWyy0CkwiJTW+NqyZoIt2qJsiQIDpJgxgp 8Jc9XkA817ORWGa1t2uFHn063WcNTXQ62dOMrRXTmnAWb5gQCpw4G+bsSj/YAmgS Clhltfga7fuSMDzitiVIYqartJuznUU8csNVSHo8hfMm95C/bNsdtZhdTA5ioiLM r8i55ZukTXdSGSTGh9D2nHytjJEVL/D0ouiqqoWjiioSrwgDNgdURA87AGMdDCgD 6xvoSMJj8bQo8LAUpkhqaTwyRHFWoqoj4nsyfih8qRJCESqA7Hcna3vymvg2NIKn WyY9B682uMGf1SF/URyW49q78y5tQQk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:08 2025 by rpki-client