$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac37ae0-485c-34e3-add7-b43c398f09da.roa File: 9ac37ae0-485c-34e3-add7-b43c398f09da.roa (raw, json) Hash identifier: TGQti4e60/C7/bGqNiDshlRZzJVEJW4OiNnZh+1dHo0= Subject key identifier: C9:A7:67:A1:26:04:87:57:39:E1:4E:FD:EE:81:0C:B1:93:B5:BE:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBA10596FED9E985B92212E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac37ae0-485c-34e3-add7-b43c398f09da.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 25019 IP address blocks: 23.61.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:59:6f:ed:9e:98:5b:92:21:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=612a9a4e-e8d8-4c88-92f5-081b2f9dca88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:62:34:9d:2f:1b:f5:d5:1d:ba:b0:ec:88:2f: 49:35:21:8e:c1:f0:18:d8:67:d4:bb:c1:76:1a:13: 64:41:de:d3:dd:f2:d4:02:d3:af:f3:44:32:23:b5: 1e:ff:9f:70:0a:4f:9a:e8:76:f0:eb:51:d5:7c:4e: 22:2e:5d:f3:32:b8:10:e7:bb:89:31:55:b9:10:dc: d3:2b:39:7e:4e:03:c2:25:29:48:a7:aa:60:14:72: 81:52:90:9e:82:ad:3e:50:db:0e:73:db:83:d7:02: e6:63:61:ab:5a:36:df:3b:87:f3:b9:7e:37:f1:ca: 27:fb:3b:75:81:e2:1d:75:33:28:b0:54:ba:8b:b5: 53:d2:48:2c:5f:77:58:b8:d4:36:24:33:2e:89:9d: 2d:db:66:f9:b9:66:25:92:71:c9:de:fe:c9:71:41: 17:6c:37:1f:9e:6c:4b:e7:3e:dd:1b:a0:b5:49:77: 96:01:56:a5:82:05:86:94:4d:a6:75:8c:52:51:34: 5f:69:cb:77:fb:ce:13:74:11:df:fc:90:69:75:7f: 7d:48:4d:ef:22:5a:38:84:26:05:98:b6:57:9b:8c: fa:9f:ed:6b:52:10:09:51:dc:d0:b8:c6:74:a5:f9: 0f:56:cd:02:2d:e7:d5:44:d8:ec:2a:81:af:d9:6c: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:67:A1:26:04:87:57:39:E1:4E:FD:EE:81:0C:B1:93:B5:BE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ac37ae0-485c-34e3-add7-b43c398f09da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.61.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5a:20:c8:c7:48:cd:a8:83:a8:78:e9:e6:a0:18:f0:20:7d: 4e:0b:86:56:4a:4a:5e:98:59:17:cd:3b:79:c6:04:41:85:22: d9:be:3d:8d:45:10:16:57:bc:51:c0:1c:ec:1b:8e:6e:36:f5: 8d:a4:6a:2d:df:0a:ea:ab:78:0a:29:0f:29:6f:36:48:9d:52: 51:7a:0b:32:7b:84:c9:1f:d1:cc:5e:28:68:66:07:2e:81:c8: e0:6c:97:07:34:25:4f:6f:55:30:f2:8f:87:73:b8:80:77:2c: cf:b5:6d:d6:a2:19:c5:26:de:12:45:a6:3e:a2:64:92:f4:78: 2e:8c:01:3e:0e:09:50:d4:38:92:9d:96:62:cf:e4:71:e7:50: bd:19:ae:9c:ad:f4:3b:01:90:55:3e:81:17:c5:c2:cd:a8:30: a6:22:bd:ab:8f:f2:ad:18:7c:b2:63:1d:c6:54:36:84:d9:c6: 2e:77:f5:b5:1b:26:75:7e:0e:be:22:11:9b:c2:02:48:08:b5: 1c:5b:00:06:ba:3b:a1:68:55:7a:e6:85:09:39:70:7e:c6:fd: 56:47:97:55:52:3f:43:49:76:1a:65:f3:32:26:3f:8e:ab:a6: 2c:25:6c:86:76:42:24:7d:7d:ab:06:7b:0f:55:7a:06:1c:56: ea:7f:1c:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EFlv7Z6YW5IhLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NjEyYTlhNGUtZThkOC00Yzg4LTkyZjUtMDgxYjJmOWRjYTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2I0nS8b9dUdurDsiC9JNSGOwfAY2GfUu8F2 GhNkQd7T3fLUAtOv80QyI7Ue/59wCk+a6Hbw61HVfE4iLl3zMrgQ57uJMVW5ENzT Kzl+TgPCJSlIp6pgFHKBUpCegq0+UNsOc9uD1wLmY2GrWjbfO4fzuX438con+zt1 geIddTMosFS6i7VT0kgsX3dYuNQ2JDMuiZ0t22b5uWYlknHJ3v7JcUEXbDcfnmxL 5z7dG6C1SXeWAValggWGlE2mdYxSUTRfact3+84TdBHf/JBpdX99SE3vIlo4hCYF mLZXm4z6n+1rUhAJUdzQuMZ0pfkPVs0CLefVRNjsKoGv2Wz9XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmnZ6EmBIdXOeFO/e6BDLGTtb6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWFjMzdhZTAtNDg1Yy0z NGUzLWFkZDctYjQzYzM5OGYwOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFz1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBaIMjHSM2og6h46eagGPAgfU4LhlZKSl6YWRfNO3nGBEGFItm+PY1F EBZXvFHAHOwbjm429Y2kai3fCuqreAopDylvNkidUlF6CzJ7hMkf0cxeKGhmBy6B yOBslwc0JU9vVTDyj4dzuIB3LM+1bdaiGcUm3hJFpj6iZJL0eC6MAT4OCVDUOJKd lmLP5HHnUL0Zrpyt9DsBkFU+gRfFws2oMKYivauP8q0YfLJjHcZUNoTZxi539bUb JnV+Dr4iEZvCAkgItRxbAAa6O6FoVXrmhQk5cH7G/VZHl1VSP0NJdhpl8zImP46r piwlbIZ2QiR9fasGew9VegYcVup/HOE= -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:36 2025 by rpki-client