$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a255e25-4d19-39f8-925b-638dfcf57924.roa File: 8a255e25-4d19-39f8-925b-638dfcf57924.roa (raw, json) Hash identifier: 7etCj9rp1cy58CquZlO8T5jJrzZHXQPe+S1B2osjU1Q= Subject key identifier: 51:5A:A9:43:8A:BF:C7:C5:12:BB:01:1E:2E:DC:23:84:6E:F5:6E:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B57C2D1484098CC82040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a255e25-4d19-39f8-925b-638dfcf57924.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16625 IP address blocks: 23.75.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b5:7c:2d:14:84:09:8c:c8:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=f5c3b99c-e477-4681-9f16-936a052817c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:24:b1:db:12:66:f5:26:58:5f:89:a4:fa: 35:f2:50:3e:91:9f:63:8e:a0:0a:fe:f3:5c:ed:c0: 0b:10:50:a1:8b:0b:0d:73:67:81:8f:52:27:b5:73: 16:f2:75:c3:88:aa:95:7a:67:d8:5c:d2:5f:2c:32: f5:4a:fd:9e:74:bc:3a:9d:df:7d:05:46:0c:86:be: 89:18:ca:88:58:0a:c0:11:dd:fd:9c:8e:52:66:2c: ca:66:14:4b:eb:3d:b5:ba:7d:c1:e8:88:ac:0d:aa: 4b:bd:74:47:cd:4b:23:d3:1b:19:6c:bf:cb:db:a8: 1a:af:d7:31:f0:2a:fe:9d:17:14:ac:43:49:34:a7: 09:fa:e9:e9:bd:a1:55:7a:38:67:90:2a:62:4f:0a: c1:8c:98:d6:fd:fd:89:8f:3f:8e:23:a5:9e:57:09: 65:24:54:2b:6f:ac:b5:0c:a8:1e:24:20:9c:3e:7e: 6e:90:fc:b3:1c:58:69:01:bd:a9:85:06:2d:29:b3: 07:e2:b5:a3:36:6c:19:a1:73:1f:97:30:e8:aa:5d: d4:66:31:98:9a:2f:7c:92:b6:e3:7d:36:c5:e6:35: 9d:01:18:d8:95:b6:a5:b9:69:1a:93:b6:e5:d3:b3: 79:92:99:00:b6:d0:72:f6:5b:a4:49:13:02:ad:15: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5A:A9:43:8A:BF:C7:C5:12:BB:01:1E:2E:DC:23:84:6E:F5:6E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a255e25-4d19-39f8-925b-638dfcf57924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.75.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f9:13:2f:03:4e:a2:d1:b3:62:0f:17:97:15:d9:b8:ef:ed: c7:6f:4f:88:d9:be:c5:42:f8:af:d3:b1:61:7c:36:b6:5b:f8: 06:d9:41:06:e4:8f:f4:93:cd:d2:e1:78:20:21:b9:48:55:35: 1a:6f:a0:21:dc:f1:dd:d4:68:b3:8a:da:e8:f2:28:b6:b4:d6: 06:cf:3c:9b:6c:a1:70:e3:99:a6:74:0d:e8:98:88:10:dc:04: 84:c2:b5:c5:68:0d:d4:9d:09:27:0a:25:45:d5:7f:25:e3:91: 0f:85:22:46:ef:de:a0:69:06:f1:b9:b9:89:b8:1f:b5:48:1b: d7:c0:10:aa:19:ae:75:eb:e4:34:32:76:47:f0:d5:c6:62:bd: 8c:71:6d:b0:33:13:1a:e0:64:09:eb:1b:07:e5:68:dd:b1:b8: 1e:37:cc:c4:67:33:a8:77:69:16:1e:b6:d7:c3:e3:f8:66:43: 3d:51:b5:ba:96:4e:b3:b5:4e:a4:ff:94:d7:22:8a:6d:71:46: ed:5b:2c:8f:b3:11:16:a3:09:d0:54:0c:9b:06:49:b3:72:5e: 0a:81:b5:95:ea:19:64:73:d4:e5:a8:1b:fe:f1:6f:13:98:b8: b2:ad:9e:34:36:28:81:7e:7a:09:8f:86:a1:98:f7:75:99:a0: 29:cc:66:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbV8LRSECYzIIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZjVjM2I5OWMtZTQ3Ny00NjgxLTlmMTYtOTM2YTA1MjgxN2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT4ksdsSZvUmWF+JpPo18lA+kZ9jjqAK/vNc 7cALEFChiwsNc2eBj1IntXMW8nXDiKqVemfYXNJfLDL1Sv2edLw6nd99BUYMhr6J GMqIWArAEd39nI5SZizKZhRL6z21un3B6IisDapLvXRHzUsj0xsZbL/L26gar9cx 8Cr+nRcUrENJNKcJ+unpvaFVejhnkCpiTwrBjJjW/f2Jjz+OI6WeVwllJFQrb6y1 DKgeJCCcPn5ukPyzHFhpAb2phQYtKbMH4rWjNmwZoXMflzDoql3UZjGYmi98krbj fTbF5jWdARjYlbaluWkak7bl07N5kpkAttBy9lukSRMCrRVBYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFaqUOKv8fFErsBHi7cI4Ru9W6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGEyNTVlMjUtNGQxOS0z OWY4LTkyNWItNjM4ZGZjZjU3OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0tEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL5Ey8DTqLRs2IPF5cV2bjv7cdvT4jZvsVC+K/TsWF8NrZb+AbZQQbk j/STzdLheCAhuUhVNRpvoCHc8d3UaLOK2ujyKLa01gbPPJtsoXDjmaZ0DeiYiBDc BITCtcVoDdSdCScKJUXVfyXjkQ+FIkbv3qBpBvG5uYm4H7VIG9fAEKoZrnXr5DQy dkfw1cZivYxxbbAzExrgZAnrGwflaN2xuB43zMRnM6h3aRYettfD4/hmQz1RtbqW TrO1TqT/lNciim1xRu1bLI+zERajCdBUDJsGSbNyXgqBtZXqGWRz1OWoG/7xbxOY uLKtnjQ2KIF+egmPhqGY93WZoCnMZgY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:03 2025 by rpki-client