$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e6e5b7-5021-3cca-8682-9dfe6c857fcf.roa File: 87e6e5b7-5021-3cca-8682-9dfe6c857fcf.roa (raw, json) Hash identifier: CBnxnk6YMYgX6Hl8RG7nnxcd+DBEuEQaWsLtUm3kN3Y= Subject key identifier: 84:8B:33:6E:8A:3F:32:50:34:F9:45:B1:F0:24:31:AD:18:00:EE:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D78BB0D6B6452424AF5D70 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e6e5b7-5021-3cca-8682-9dfe6c857fcf.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 33905 IP address blocks: 23.1.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8b:b0:d6:b6:45:24:24:af:5d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=b0a33451-16d9-4857-87dc-83d6b19c7bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:67:16:0a:a5:b9:3b:ee:3f:53:c2:af:2e: 51:d1:39:13:fe:87:fb:ad:0a:a7:5f:c4:a7:26:a7: 54:d7:c6:de:73:28:c4:d8:51:5f:a2:47:8a:01:ff: 47:61:e6:32:d6:af:85:cb:b9:ad:7e:34:b9:c9:1b: 38:eb:87:13:10:cf:04:5b:d1:b8:5f:61:64:03:2a: b6:ba:0e:90:4e:34:92:63:c9:f8:28:4a:4b:22:73: 6e:f0:73:88:c9:aa:78:1e:9d:29:f0:a5:2c:7d:f8: 3f:ea:e4:52:95:62:4f:28:9e:0b:39:91:fc:d0:47: c0:70:b6:87:7b:5c:ce:1d:62:08:e8:59:15:d8:50: db:4e:68:7d:53:93:d3:f1:67:86:d5:c2:da:38:a6: c9:3c:5f:a8:fa:df:ca:1c:f7:c9:01:24:a1:a0:ed: 19:8e:e3:39:5f:b1:0e:15:2a:3e:4c:3b:f6:3e:2e: 26:23:91:9e:35:d0:96:eb:1e:a5:d0:e9:18:6e:c3: c1:37:82:54:e9:32:89:a9:ef:25:87:17:8e:e2:aa: 1c:28:91:1a:21:e3:b6:46:aa:06:30:db:61:86:9b: 7c:9c:7c:06:02:42:03:00:21:df:7d:99:f7:48:2c: d8:4c:df:5d:c0:da:7a:c5:e6:d1:99:51:6b:33:41: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8B:33:6E:8A:3F:32:50:34:F9:45:B1:F0:24:31:AD:18:00:EE:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e6e5b7-5021-3cca-8682-9dfe6c857fcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.1.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4f:22:d0:4e:d9:f0:c3:f2:b6:e3:71:6b:6e:f5:c3:c3:5a: e5:ed:b6:cc:b1:b4:69:6e:44:17:44:11:ef:2e:7e:bc:08:20: 15:30:a4:4d:82:28:8e:68:ae:cf:ef:67:10:50:a5:3a:02:a3: a5:99:65:e1:e5:be:40:fa:51:c2:be:be:aa:98:fb:38:9e:52: 8c:bc:b9:97:d0:ad:29:bf:f7:fb:14:23:5d:80:b0:b9:4e:1a: 78:e5:bb:54:1e:6e:5e:b3:fa:ed:0e:bc:66:41:8f:f6:ed:66: d2:29:dd:3a:d9:ca:e1:b0:26:c9:d5:98:0f:f7:07:2f:ab:b1: de:78:e7:fb:e4:82:66:39:ac:40:d1:b0:3c:43:0a:df:25:ee: 07:0b:fe:ee:62:99:05:cf:36:0c:af:f5:62:e8:0d:99:0d:57: ee:79:9a:39:3e:c8:fc:b3:96:74:da:12:1f:de:d4:c4:23:2a: 67:74:a3:8f:4a:98:af:36:90:ca:7c:d2:88:2b:d0:4f:e9:50: c6:ef:b5:3f:8a:8b:2e:ca:b5:4f:85:fd:07:38:38:cb:d4:56: c2:13:81:6d:28:c3:ce:4c:ce:4e:86:49:c2:39:41:54:be:91: 1b:f7:4e:f9:ed:27:50:1f:5f:72:a9:12:dd:52:f2:25:a2:31: 0f:f7:df:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14uw1rZFJCSvXXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YjBhMzM0NTEtMTZkOS00ODU3LTg3ZGMtODNkNmIxOWM3YmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnBnFgqluTvuP1PCry5R0TkT/of7rQqnX8Sn JqdU18becyjE2FFfokeKAf9HYeYy1q+Fy7mtfjS5yRs464cTEM8EW9G4X2FkAyq2 ug6QTjSSY8n4KEpLInNu8HOIyap4Hp0p8KUsffg/6uRSlWJPKJ4LOZH80EfAcLaH e1zOHWII6FkV2FDbTmh9U5PT8WeG1cLaOKbJPF+o+t/KHPfJASShoO0ZjuM5X7EO FSo+TDv2Pi4mI5GeNdCW6x6l0OkYbsPBN4JU6TKJqe8lhxeO4qocKJEaIeO2RqoG MNthhpt8nHwGAkIDACHffZn3SCzYTN9dwNp6xebRmVFrM0F0SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISLM26KPzJQNPlFsfAkMa0YAO7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODdlNmU1YjctNTAyMS0z Y2NhLTg2ODItOWRmZTZjODU3ZmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwFqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhPItBO2fDD8rbjcWtu9cPDWuXttsyxtGluRBdEEe8ufrwIIBUwpE2C KI5ors/vZxBQpToCo6WZZeHlvkD6UcK+vqqY+zieUoy8uZfQrSm/9/sUI12AsLlO Gnjlu1Qebl6z+u0OvGZBj/btZtIp3TrZyuGwJsnVmA/3By+rsd545/vkgmY5rEDR sDxDCt8l7gcL/u5imQXPNgyv9WLoDZkNV+55mjk+yPyzlnTaEh/e1MQjKmd0o49K mK82kMp80ogr0E/pUMbvtT+Kiy7KtU+F/Qc4OMvUVsITgW0ow85Mzk6GScI5QVS+ kRv3TvntJ1AfX3KpEt1S8iWiMQ/337M= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:06 2025 by rpki-client