$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/829d7fa8-5b44-317c-8401-b9fa283117ef.roa File: 829d7fa8-5b44-317c-8401-b9fa283117ef.roa (raw, json) Hash identifier: l8/+x9ouWOR963b0U1bwlTAJSc5NZhkZRMsGfRSr050= Subject key identifier: 9D:48:98:7E:0F:B8:9C:12:F6:6B:70:05:E8:DA:CE:98:54:F2:FB:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB88D57DDD4ED8F0ADF044D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/829d7fa8-5b44-317c-8401-b9fa283117ef.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.10.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:57:dd:d4:ed:8f:0a:df:04:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=e5eec621-6b13-451f-ac1e-5e791c2a114f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:28:78:37:ca:44:73:7f:8f:29:64:69:85:3f: 6b:35:4b:c7:46:02:0a:0f:dc:7e:7e:9d:a0:8a:1a: 4b:03:06:06:ec:0b:0d:ed:49:f2:23:b0:ce:9f:38: be:54:85:82:fd:f1:ef:9b:76:91:ee:77:03:60:3d: 10:51:c0:90:46:b1:94:ed:cd:d9:3d:1c:ff:42:00: 67:97:97:c3:a0:b2:6f:e9:19:6f:ab:29:6b:7f:d2: 8b:f7:36:c5:6c:89:62:17:60:b2:7e:1a:5a:0b:df: bc:68:4e:f4:79:20:c8:ab:80:f1:fd:87:a0:d9:72: ac:e2:7f:43:7e:c7:a9:84:1c:61:d7:52:f6:67:03: 78:aa:22:98:00:59:fa:23:bc:44:52:50:6f:de:95: 71:90:f1:ec:f2:49:d4:6b:42:79:fe:02:20:06:2a: a6:97:e6:d0:fa:ba:c2:cb:ab:a4:52:e5:90:15:5b: b2:06:12:53:96:b7:98:a1:2c:c0:96:e2:67:3b:2f: eb:db:5d:41:04:02:16:5b:c1:bf:d9:f3:fe:a2:67: 78:fc:51:1c:e6:df:8a:a9:41:8f:9d:f4:73:ed:93: c6:51:1e:36:b5:35:54:15:1c:d7:6f:51:25:04:70: f7:dd:58:97:4e:64:12:fc:dd:26:75:32:85:ce:ae: 19:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:48:98:7E:0F:B8:9C:12:F6:6B:70:05:E8:DA:CE:98:54:F2:FB:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/829d7fa8-5b44-317c-8401-b9fa283117ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.10.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a4:5e:6e:7d:ec:36:03:15:27:11:e3:c2:e1:55:e9:47:de: 46:45:1a:0c:c6:94:6f:cd:6b:30:2c:77:cd:a0:b5:ca:e4:dc: 16:f2:c3:5b:a1:30:04:0c:a0:98:7c:e6:29:fe:3e:f1:dd:ae: ef:ab:4b:f8:e4:c0:5d:ef:e7:fd:67:c4:41:40:1e:89:47:ad: b6:96:c1:94:41:27:9d:fe:28:f0:a7:a4:50:68:35:d8:6b:5f: bf:99:d4:e6:0a:7b:15:5a:7c:9e:60:c8:f8:cc:87:96:23:96: 78:6c:93:8f:99:80:5a:a3:b4:3e:55:9d:59:6a:84:12:19:77: 69:5e:4c:4d:46:ac:68:ec:ed:f7:d2:0d:1d:30:5f:25:12:d7: 85:ce:c0:62:90:c4:a4:d6:d1:d0:b2:60:e3:f2:c5:59:ea:53: bd:76:89:9e:71:0b:27:02:e0:c6:44:95:a8:35:eb:83:e5:36: 96:14:40:62:66:de:1d:2a:9a:bb:3b:3e:3f:09:e3:dd:82:67: 71:74:54:4c:7d:d7:5a:c3:9d:13:cb:06:2a:d9:c6:76:25:be: f9:25:53:9c:7d:5c:75:8b:c2:8a:fb:3a:34:ed:eb:1c:8a:13: 2c:40:1c:17:2f:0d:68:71:9c:f9:1a:27:fd:54:bf:49:87:0e: f5:44:ac:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jVfd1O2PCt8ETYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTVlZWM2MjEtNmIxMy00NTFmLWFjMWUtNWU3OTFjMmExMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyh4N8pEc3+PKWRphT9rNUvHRgIKD9x+fp2g ihpLAwYG7AsN7UnyI7DOnzi+VIWC/fHvm3aR7ncDYD0QUcCQRrGU7c3ZPRz/QgBn l5fDoLJv6Rlvqylrf9KL9zbFbIliF2CyfhpaC9+8aE70eSDIq4Dx/Yeg2XKs4n9D fsephBxh11L2ZwN4qiKYAFn6I7xEUlBv3pVxkPHs8knUa0J5/gIgBiqml+bQ+rrC y6ukUuWQFVuyBhJTlreYoSzAluJnOy/r211BBAIWW8G/2fP+omd4/FEc5t+KqUGP nfRz7ZPGUR42tTVUFRzXb1ElBHD33ViXTmQS/N0mdTKFzq4ZaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1ImH4PuJwS9mtwBejazphU8vsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODI5ZDdmYTgtNWI0NC0z MTdjLTg0MDEtYjlmYTI4MzExN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFwoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCkXm597DYDFScR48LhVelH3kZFGgzGlG/NazAsd82gtcrk3Bbyw1uh MAQMoJh85in+PvHdru+rS/jkwF3v5/1nxEFAHolHrbaWwZRBJ53+KPCnpFBoNdhr X7+Z1OYKexVafJ5gyPjMh5Yjlnhsk4+ZgFqjtD5VnVlqhBIZd2leTE1GrGjs7ffS DR0wXyUS14XOwGKQxKTW0dCyYOPyxVnqU712iZ5xCycC4MZElag164PlNpYUQGJm 3h0qmrs7Pj8J492CZ3F0VEx911rDnRPLBirZxnYlvvklU5x9XHWLwor7OjTt6xyK EyxAHBcvDWhxnPkaJ/1Uv0mHDvVErFQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:02:45 2025 by rpki-client