$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a26ac54-543e-34b4-9191-a98b90095361.roa File: 8a26ac54-543e-34b4-9191-a98b90095361.roa (raw, json) Hash identifier: tSCLCQJhLW+iA6DiwS1/BkE+8Ng9jfySfYsytgcNqPE= Subject key identifier: 62:02:C4:1D:1C:4E:96:04:54:49:17:BA:58:FF:DB:DA:98:70:9D:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB88D4315A5D09D54C9D1F000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a26ac54-543e-34b4-9191-a98b90095361.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 16625 IP address blocks: 23.73.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:43:15:a5:d0:9d:54:c9:d1:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=98324d36-4fb1-484a-b197-5692e263aca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:74:1d:e8:ea:1b:e8:26:b6:f8:05:76:37: 35:e1:f2:02:4a:4c:97:dc:84:27:1a:98:c2:45:29: 07:01:8a:21:19:a5:58:76:a9:38:84:cc:4f:26:bc: 85:f1:29:28:fc:d9:06:6c:ff:61:52:cd:50:2b:3c: 07:2e:6d:97:54:71:a2:82:3f:b3:75:3a:a9:c5:f7: 69:e3:17:04:aa:2b:6c:8f:46:b3:c9:c9:ec:68:24: 5d:7a:4d:f9:80:45:94:67:b6:e1:27:4c:9e:66:c8: 5d:95:76:05:94:ae:a2:6c:f3:33:71:cf:15:fa:c4: ad:f2:ec:5e:c1:c1:91:9e:d5:3e:e6:1d:91:3e:a1: c5:5f:bc:e9:1f:50:6a:5a:da:c1:04:0e:80:37:b3: 20:8f:42:ab:82:93:02:62:1d:83:81:b6:7f:ba:07: 4a:03:a1:32:51:d1:74:87:74:89:aa:08:7b:b8:b2: 20:64:ac:0b:46:b7:74:cf:a5:59:96:c8:f4:89:78: de:f8:d4:9b:01:6c:29:12:9f:7e:8c:b0:95:0e:6c: 02:7c:84:73:2c:32:25:d2:0d:ec:10:a0:ce:be:2b: 9e:66:8f:61:50:eb:9d:98:86:23:76:15:7b:2e:5a: 8c:ee:f6:f6:10:cb:2e:26:ad:7d:38:f3:ab:bf:79: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:02:C4:1D:1C:4E:96:04:54:49:17:BA:58:FF:DB:DA:98:70:9D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a26ac54-543e-34b4-9191-a98b90095361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.73.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:4b:d2:b8:42:79:34:fe:7b:51:f0:25:5a:15:c9:ea:6f:90: 7b:b7:8e:cb:bd:ef:06:4c:f0:21:3e:3c:04:fc:fe:e8:65:c5: 19:d1:a9:f9:b9:1a:25:87:1e:53:90:b4:84:6b:95:0d:0d:bb: 95:b3:5a:95:6e:32:c1:13:fc:a2:46:ac:ee:50:09:87:cb:3c: af:e9:73:52:de:4a:8f:81:7a:92:ef:d4:8c:33:34:98:fa:55: 3b:4c:ee:ec:85:f8:10:13:4f:2e:0a:94:41:98:a7:71:28:ff: 71:2d:1e:3f:96:22:ba:11:4c:8c:59:f9:31:71:2c:13:32:b6: ea:69:69:a2:6f:c2:91:80:ec:cf:02:fe:79:06:65:63:17:94: 86:91:98:80:9b:ab:17:91:7c:5e:7c:d1:81:49:6b:8c:ed:fc: 1e:fe:5b:5f:e1:f9:12:dc:5b:3a:02:c4:71:d4:40:bf:2c:80: e9:a4:d9:b2:6a:94:c4:dc:ed:bf:5c:2d:ca:80:d7:4d:74:d9: 41:2c:b6:78:e2:b2:90:a1:e6:3e:9b:c3:ad:13:66:52:f6:00: 9d:97:8d:7a:2c:25:ac:8a:a0:60:5e:4c:34:6c:a9:e4:44:25: e5:02:36:e9:0d:71:e4:32:49:9d:57:99:0a:68:1a:2e:06:77: 61:a4:27:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUMVpdCdVMnR8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk OTgzMjRkMzYtNGZiMS00ODRhLWIxOTctNTY5MmUyNjNhY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNp0HejqG+gmtvgFdjc14fICSkyX3IQnGpjC RSkHAYohGaVYdqk4hMxPJryF8Sko/NkGbP9hUs1QKzwHLm2XVHGigj+zdTqpxfdp 4xcEqitsj0azycnsaCRdek35gEWUZ7bhJ0yeZshdlXYFlK6ibPMzcc8V+sSt8uxe wcGRntU+5h2RPqHFX7zpH1BqWtrBBA6AN7Mgj0KrgpMCYh2DgbZ/ugdKA6EyUdF0 h3SJqgh7uLIgZKwLRrd0z6VZlsj0iXje+NSbAWwpEp9+jLCVDmwCfIRzLDIl0g3s EKDOviueZo9hUOudmIYjdhV7LlqM7vb2EMsuJq19OPOrv3nRwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGICxB0cTpYEVEkXulj/29qYcJ12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGEyNmFjNTQtNTQzZS0z NGI0LTkxOTEtYTk4YjkwMDk1MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF0kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdL0rhCeTT+e1HwJVoVyepvkHu3jsu97wZM8CE+PAT8/uhlxRnRqfm5 GiWHHlOQtIRrlQ0Nu5WzWpVuMsET/KJGrO5QCYfLPK/pc1LeSo+BepLv1IwzNJj6 VTtM7uyF+BATTy4KlEGYp3Eo/3EtHj+WIroRTIxZ+TFxLBMytuppaaJvwpGA7M8C /nkGZWMXlIaRmICbqxeRfF580YFJa4zt/B7+W1/h+RLcWzoCxHHUQL8sgOmk2bJq lMTc7b9cLcqA10102UEstnjispCh5j6bw60TZlL2AJ2XjXosJayKoGBeTDRsqeRE JeUCNukNceQySZ1XmQpoGi4Gd2GkJ8o= -----END CERTIFICATE-----Generated at Tue Nov 4 21:10:12 2025 by rpki-client