$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa File: 7e2438a2-fb94-398c-ba49-230b8452d27d.roa (raw, json) Hash identifier: X9vec/36N2JsqxGDfyHFL4Lgn2oay200bQOgK1d7WXg= Subject key identifier: AD:B8:B4:7A:5D:39:97:31:9D:D8:0B:52:A8:E9:D1:8C:0C:7B:83:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B097F3ED71A185925800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.41.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b0:97:f3:ed:71:a1:85:92:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=c69d3e70-cf73-4d66-836d-554c92ebe6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:a3:9d:c0:26:48:5f:70:3e:2e:b9:98:5e: 6b:50:3f:2a:a5:d1:01:64:2a:7c:fe:3c:4a:fd:09: 3f:3d:f7:e3:a4:b1:8e:8a:d0:9d:b1:51:64:83:03: 56:bc:d8:75:ae:cb:4a:2f:55:00:70:2a:08:31:d5: 59:17:8e:22:1b:f4:a1:7d:2f:40:21:31:13:4f:ba: 5c:70:e0:8a:27:83:d9:a8:30:eb:33:1f:e4:f8:d9: 15:70:f2:70:8c:50:e1:59:5b:af:60:00:d0:ff:52: 52:00:73:e7:02:68:77:d9:2d:e1:b2:09:a3:bb:a6: a2:e2:38:d8:5c:e9:d5:8e:af:cb:1d:a9:74:17:fb: e3:32:43:7e:9b:60:c4:92:af:c3:a1:ee:63:8d:24: a4:10:92:d4:8c:78:36:6b:41:b2:a9:a5:a1:85:f5: 9a:04:4c:cb:e0:36:46:2a:49:df:73:c9:5d:21:51: f1:c4:29:ed:d4:05:69:4e:1a:3e:f1:e4:f5:93:61: 6f:59:5b:46:96:38:b3:40:da:17:59:28:47:c8:41: 6a:70:68:c6:ea:3a:e1:f9:26:3e:17:b9:8b:f4:90: b8:62:2c:bd:88:94:92:7f:88:a9:2c:16:40:62:61: 09:67:89:27:4d:53:2c:d1:1a:e2:f6:ac:68:10:93: 1b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B8:B4:7A:5D:39:97:31:9D:D8:0B:52:A8:E9:D1:8C:0C:7B:83:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7e2438a2-fb94-398c-ba49-230b8452d27d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.41.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e1:fb:69:e4:95:3d:b1:ea:c2:05:bd:22:20:cf:f1:68:86: ed:1a:01:0f:36:22:d0:7c:10:3d:67:cc:4c:54:de:fe:86:49: 9b:61:fd:2c:70:8e:2c:7a:78:48:aa:b3:91:66:68:dd:c0:31: ef:95:d0:04:31:b1:80:2b:c7:e5:99:d1:4d:c4:95:0a:cf:f4: a3:ce:3c:07:7a:66:5e:b2:dd:e1:5d:da:51:f6:e0:59:0f:d7: b3:d9:e8:b6:6e:85:5f:18:ce:2b:b4:c9:12:6f:2f:e2:5f:79: 60:b3:6f:d8:50:3d:3d:d5:6c:ac:e4:54:e2:ac:0b:f9:0f:b6: d3:29:d8:8e:14:94:e2:0a:e3:10:0c:40:18:0c:22:37:71:71: 9e:61:2f:c7:0f:70:0c:d6:3f:b1:5e:0a:60:c6:c5:18:30:65: ab:84:92:d9:de:6c:d2:c6:45:fe:1a:12:29:79:68:98:e1:d5: 07:63:d7:38:4e:8d:89:4d:ec:8d:49:48:53:a2:e4:a2:81:e9: 23:cf:08:b5:49:79:1a:dc:dd:70:39:0a:85:64:3b:a1:4d:ef: f0:1d:2c:64:9a:12:03:31:72:95:58:fd:61:41:44:d8:f9:a8: dd:4b:c1:fd:72:db:ca:08:d3:c8:5e:ba:20:6d:86:4e:cd:0b: c8:1b:01:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbCX8+1xoYWSWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YzY5ZDNlNzAtY2Y3My00ZDY2LTgzNmQtNTU0YzkyZWJlNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUCjncAmSF9wPi65mF5rUD8qpdEBZCp8/jxK /Qk/PffjpLGOitCdsVFkgwNWvNh1rstKL1UAcCoIMdVZF44iG/ShfS9AITETT7pc cOCKJ4PZqDDrMx/k+NkVcPJwjFDhWVuvYADQ/1JSAHPnAmh32S3hsgmju6ai4jjY XOnVjq/LHal0F/vjMkN+m2DEkq/Doe5jjSSkEJLUjHg2a0GyqaWhhfWaBEzL4DZG Kknfc8ldIVHxxCnt1AVpTho+8eT1k2FvWVtGljizQNoXWShHyEFqcGjG6jrh+SY+ F7mL9JC4Yiy9iJSSf4ipLBZAYmEJZ4knTVMs0Rri9qxoEJMbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK24tHpdOZcxndgLUqjp0YwMe4OuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2UyNDM4YTItZmI5NC0z OThjLWJhNDktMjMwYjg0NTJkMjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFykgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbh+2nklT2x6sIFvSIgz/Fohu0aAQ82ItB8ED1nzExU3v6GSZth/Sxw jix6eEiqs5FmaN3AMe+V0AQxsYArx+WZ0U3ElQrP9KPOPAd6Zl6y3eFd2lH24FkP 17PZ6LZuhV8Yziu0yRJvL+JfeWCzb9hQPT3VbKzkVOKsC/kPttMp2I4UlOIK4xAM QBgMIjdxcZ5hL8cPcAzWP7FeCmDGxRgwZauEktnebNLGRf4aEil5aJjh1Qdj1zhO jYlN7I1JSFOi5KKB6SPPCLVJeRrc3XA5CoVkO6FN7/AdLGSaEgMxcpVY/WFBRNj5 qN1Lwf1y28oI08heuiBthk7NC8gbASk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:49:27 2025 by rpki-client