$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e6b0a08-3c31-30e2-9fa0-4f3cceb6dddd.roa File: 8e6b0a08-3c31-30e2-9fa0-4f3cceb6dddd.roa (raw, json) Hash identifier: rI6kZtYEfSjgcJ2tA/yGfBXqeTu5GRNrsnRGggGGaXE= Subject key identifier: 23:E5:13:0B:BD:74:0C:0E:56:63:8A:E2:07:3A:C3:E1:5A:BB:33:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D3721F441A44C688B1300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e6b0a08-3c31-30e2-9fa0-4f3cceb6dddd.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.64.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:37:21:f4:41:a4:4c:68:8b:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=9c6dd161-9edd-44a1-8d87-18d581b85be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:5a:7f:5e:76:98:b1:75:45:e6:72:b7:00: 84:a7:a2:23:21:06:b2:cc:c4:f6:87:5a:a1:df:47: 07:6a:5e:55:46:90:b5:ef:d4:67:fd:ca:1f:aa:fe: 97:de:60:5d:bb:c3:d6:8f:d8:91:ab:ef:48:92:70: a1:1f:d8:e8:9a:99:48:c3:25:7c:35:37:fd:7e:cf: f2:18:57:d5:c3:ee:7b:6b:47:81:cf:c3:e1:d9:8d: b8:c9:08:64:a6:50:2a:3c:12:71:92:ab:eb:c1:99: bb:ee:9d:a3:c5:d0:9f:2b:5a:4b:a9:cb:5b:9c:01: 2f:89:98:e7:39:b6:06:b1:d4:be:cd:36:7c:22:85: c1:98:20:3f:35:e1:71:55:58:e8:2e:86:3a:1a:77: 22:8d:5c:3e:c4:f3:04:36:99:ad:47:1c:ba:3b:82: b5:97:6d:1b:e9:e9:4f:2d:de:18:9f:99:41:1e:fa: b3:3d:e5:d1:a7:b7:b4:0a:8d:d4:70:40:ee:ed:00: 5b:aa:91:cb:40:08:7b:14:14:03:ef:6e:25:46:86: 9d:7c:3b:8a:18:8f:2d:38:f9:99:d9:63:6d:ed:37: f2:9d:a6:6b:ea:00:b5:eb:97:5d:6e:cc:50:aa:19: f4:18:75:e1:9d:85:15:fa:8e:18:3f:63:7d:af:69: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E5:13:0B:BD:74:0C:0E:56:63:8A:E2:07:3A:C3:E1:5A:BB:33:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e6b0a08-3c31-30e2-9fa0-4f3cceb6dddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.64.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:70:0c:2f:51:d4:00:ae:8b:90:df:45:f5:b4:0a:24:0c:2d: a5:b9:fd:fa:60:be:f9:7a:ee:6d:c9:85:64:71:4a:18:84:9a: 52:13:98:60:a1:cf:ef:05:0e:8a:1e:52:06:ef:0e:c6:ee:f4: ef:5d:a2:4b:34:cb:6c:d0:a8:c9:d9:a0:12:8f:a1:f6:07:8d: b1:b0:01:89:6b:62:d8:fa:a9:7c:ea:b1:52:90:71:b0:f5:85: fa:96:5b:aa:bd:ee:4f:8d:61:8c:69:d1:5c:88:2b:61:01:f6: 5d:23:6c:84:7c:6f:34:a2:45:15:6f:38:c2:7c:af:51:9d:f1: af:73:43:e8:31:ec:8b:10:97:c5:47:47:98:dd:6a:4b:d9:84: b0:c1:ae:9a:e5:9d:9e:9a:de:e6:fb:3b:a5:c7:68:e1:a4:83: ed:12:cf:44:44:7e:b5:05:ea:bd:83:de:52:25:34:56:3a:54: 43:05:3d:4d:98:0e:c5:7e:2c:82:2f:a0:cc:df:4b:b2:cd:fc: e0:9f:32:2c:69:8d:1e:4d:5b:5a:88:fd:bf:b0:3f:79:0e:ac: 42:c2:ed:2e:e5:c8:81:18:e6:96:0b:62:d5:d2:d5:1b:50:f3: 2c:ef:18:68:01:d4:2c:42:70:a4:9f:34:64:0f:83:05:7f:76: 32:35:07:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTch9EGkTGiLEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OWM2ZGQxNjEtOWVkZC00NGExLThkODctMThkNTgxYjg1YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYdaf152mLF1ReZytwCEp6IjIQayzMT2h1qh 30cHal5VRpC179Rn/cofqv6X3mBdu8PWj9iRq+9IknChH9jomplIwyV8NTf9fs/y GFfVw+57a0eBz8Ph2Y24yQhkplAqPBJxkqvrwZm77p2jxdCfK1pLqctbnAEviZjn ObYGsdS+zTZ8IoXBmCA/NeFxVVjoLoY6GncijVw+xPMENpmtRxy6O4K1l20b6elP Ld4Yn5lBHvqzPeXRp7e0Co3UcEDu7QBbqpHLQAh7FBQD724lRoadfDuKGI8tOPmZ 2WNt7TfynaZr6gC165ddbsxQqhn0GHXhnYUV+o4YP2N9r2lAJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPlEwu9dAwOVmOK4gc6w+FauzNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU2YjBhMDgtM2MzMS0z MGUyLTlmYTAtNGYzY2NlYjZkZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0AMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZwDC9R1ACui5DfRfW0CiQMLaW5/fpgvvl67m3JhWRxShiEmlITmGCh z+8FDooeUgbvDsbu9O9doks0y2zQqMnZoBKPofYHjbGwAYlrYtj6qXzqsVKQcbD1 hfqWW6q97k+NYYxp0VyIK2EB9l0jbIR8bzSiRRVvOMJ8r1Gd8a9zQ+gx7IsQl8VH R5jdakvZhLDBrprlnZ6a3ub7O6XHaOGkg+0Sz0REfrUF6r2D3lIlNFY6VEMFPU2Y DsV+LIIvoMzfS7LN/OCfMixpjR5NW1qI/b+wP3kOrELC7S7lyIEY5pYLYtXS1RtQ 8yzvGGgB1CxCcKSfNGQPgwV/djI1B/c= -----END CERTIFICATE-----Generated at Wed Nov 5 02:44:21 2025 by rpki-client