$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91b69850-f61c-336c-8e7c-b0a09ea656b1.roa File: 91b69850-f61c-336c-8e7c-b0a09ea656b1.roa (raw, json) Hash identifier: 1/8a8TA5TGQDjkVh5HsdWrARkrAttzMFqitiyD/U+fE= Subject key identifier: 67:70:E9:86:A0:61:38:E6:52:DC:2F:0F:DC:C4:DE:9C:7B:A7:EF:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE405047F281FD2F7F728C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91b69850-f61c-336c-8e7c-b0a09ea656b1.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.60.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:50:47:f2:81:fd:2f:7f:72:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5f0baef1-63f1-477f-9ad4-e840eb3a52b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7a:53:ff:b3:fd:de:5e:d5:7f:5c:60:c3:46: d5:7f:f1:ad:7f:4c:83:24:57:1e:55:6c:bc:b4:8f: 07:7a:1f:2a:17:09:cb:e6:1d:d0:77:79:0e:6b:57: 32:f3:45:f0:f1:b0:95:b2:0c:48:be:5e:82:92:6c: fe:94:3d:6d:61:93:ca:bb:d1:f3:9b:f7:b3:b9:0d: dc:23:0d:49:e4:2b:46:6c:16:bf:73:bd:18:a5:b5: 21:4e:ac:eb:80:92:16:b8:fe:fa:f0:33:12:60:03: 4f:9b:a1:92:d0:c6:e8:44:bf:ff:8e:92:4b:1d:9c: f8:a6:ef:ae:bf:93:3a:ab:36:34:2e:ea:4f:84:0f: a2:d1:9c:2e:e5:84:22:15:fd:85:d2:44:01:19:30: b5:6b:6c:08:74:e8:ab:2c:0f:03:34:6d:2c:f9:0a: c5:40:1c:e7:81:63:00:ac:70:bf:04:e9:81:f6:55: 55:5d:84:f5:47:b2:22:5c:71:f8:e2:d1:ba:40:72: 6f:60:eb:bc:36:3b:9e:c1:bb:e7:76:cf:3d:d9:f5: 4f:20:d3:bc:84:2a:ed:2c:cd:c1:0b:3a:47:4f:01: 6e:c7:34:45:41:b1:4a:d6:18:35:f4:7b:c2:1f:8e: 9e:f9:ae:09:3e:a8:86:e0:9e:e0:fd:47:d3:89:26: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:70:E9:86:A0:61:38:E6:52:DC:2F:0F:DC:C4:DE:9C:7B:A7:EF:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91b69850-f61c-336c-8e7c-b0a09ea656b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.60.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d4:e8:ec:a4:58:2f:4b:7a:6e:8a:38:0c:ba:1c:50:94:85: 73:45:2e:46:ea:e2:d7:4c:b0:cb:54:2e:6a:5b:30:8c:5d:60: 54:04:d1:a8:27:87:3b:11:3f:00:57:f1:a3:56:11:ea:a7:f8: 15:ac:8f:3b:a1:f1:0c:27:b3:a8:fd:82:76:79:0e:f8:68:f2: de:d5:fe:b3:1b:cb:40:75:ce:0c:34:b2:83:04:8e:20:47:a1: f5:8c:5e:06:f1:0c:d9:61:90:b2:4c:22:3f:2e:14:64:72:5a: 27:83:04:67:2e:30:b9:cf:5c:b3:14:37:38:38:ce:34:84:c2: 6d:a2:99:06:fa:a6:22:5c:ad:e4:83:b6:dc:04:fa:66:b1:0e: b7:68:67:0d:68:4d:44:d2:59:01:79:a2:f1:b4:c3:74:8b:3d: cd:ca:03:3a:f0:a5:0b:a1:1e:83:98:9b:1a:3e:69:b4:f9:35: 5e:4a:54:ae:e4:6c:01:28:43:c7:a4:5b:aa:c9:bd:20:c4:97: 85:87:c4:fc:d7:90:a1:6b:ee:9e:37:03:9f:ba:31:5e:aa:36: 24:fa:64:dc:20:b7:d3:1a:b3:d0:21:5f:a5:4d:ea:4b:cb:04: 22:7c:87:01:28:c4:cf:55:df:46:90:95:74:ad:01:9b:d5:19: 93:22:e5:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFBH8oH9L39yjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NWYwYmFlZjEtNjNmMS00NzdmLTlhZDQtZTg0MGViM2E1MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3pT/7P93l7Vf1xgw0bVf/Gtf0yDJFceVWy8 tI8Heh8qFwnL5h3Qd3kOa1cy80Xw8bCVsgxIvl6Ckmz+lD1tYZPKu9Hzm/ezuQ3c Iw1J5CtGbBa/c70YpbUhTqzrgJIWuP768DMSYANPm6GS0MboRL//jpJLHZz4pu+u v5M6qzY0LupPhA+i0Zwu5YQiFf2F0kQBGTC1a2wIdOirLA8DNG0s+QrFQBzngWMA rHC/BOmB9lVVXYT1R7IiXHH44tG6QHJvYOu8Njuewbvnds892fVPINO8hCrtLM3B CzpHTwFuxzRFQbFK1hg19HvCH46e+a4JPqiG4J7g/UfTiSZdLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdw6YagYTjmUtwvD9zE3px7p++sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFiNjk4NTAtZjYxYy0z MzZjLThlN2MtYjBhMDllYTY1NmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFzxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDU6OykWC9Lem6KOAy6HFCUhXNFLkbq4tdMsMtULmpbMIxdYFQE0agn hzsRPwBX8aNWEeqn+BWsjzuh8Qwns6j9gnZ5Dvho8t7V/rMby0B1zgw0soMEjiBH ofWMXgbxDNlhkLJMIj8uFGRyWieDBGcuMLnPXLMUNzg4zjSEwm2imQb6piJcreSD ttwE+maxDrdoZw1oTUTSWQF5ovG0w3SLPc3KAzrwpQuhHoOYmxo+abT5NV5KVK7k bAEoQ8ekW6rJvSDEl4WHxPzXkKFr7p43A5+6MV6qNiT6ZNwgt9Mas9AhX6VN6kvL BCJ8hwEoxM9V30aQlXStAZvVGZMi5UU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:53:05 2025 by rpki-client