$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e517b08-6a98-3c5f-a9bd-2aa320a4910e.roa File: 9e517b08-6a98-3c5f-a9bd-2aa320a4910e.roa (raw, json) Hash identifier: K2wGtIgMj5WHrp5JRNzkUe/eaBNq18zX1kD0CcKjXaM= Subject key identifier: CB:98:3E:BA:31:DE:CA:B8:97:5F:EC:60:B6:27:CA:5D:09:25:D9:B5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB45D3E91CCE5878AD1654AC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e517b08-6a98-3c5f-a9bd-2aa320a4910e.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.67.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3e:91:cc:e5:87:8a:d1:65:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=1f6cec75-7e96-4ba3-bccb-2fb3ea296bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:9d:75:69:6d:9b:ab:e9:be:c6:30:c5:cb: a8:95:eb:aa:f9:b2:4e:f6:72:a5:a6:fb:33:6d:f5: a7:6b:7e:41:0e:c1:35:8b:d3:92:6a:be:95:5f:30: 42:87:ed:44:63:38:bb:48:7d:e0:76:d7:2c:a1:7f: e1:8a:ef:49:06:3a:47:7e:15:46:d7:95:b1:5d:fc: d5:f9:3a:3c:94:47:2c:84:cc:a0:40:72:7a:00:7d: e6:b8:23:18:7f:ad:cb:b5:0d:3b:cd:71:eb:2f:8c: 7d:a4:b8:cc:dd:73:cd:81:69:77:b1:54:b6:4d:03: 8a:0c:74:01:15:32:e5:28:61:53:21:21:38:b6:3d: 56:92:05:ab:10:09:18:fe:6c:cb:e0:26:16:e9:dd: 6c:a5:2a:8f:eb:e1:51:25:21:76:f7:41:59:2b:46: 7b:c8:56:e8:bd:3e:c8:60:4f:e1:42:36:8a:81:31: 0a:97:ad:e5:6c:eb:61:96:fc:9b:d4:fa:5b:01:1c: 58:13:0a:7a:84:20:c9:f9:2f:72:8f:e9:22:f6:89: 3a:ca:15:40:df:56:f9:87:fd:e3:a3:a5:48:33:bc: cc:80:fe:4f:83:cf:e1:94:fa:92:06:8e:35:f7:7f: 60:52:c6:1f:b1:6e:bf:89:fa:64:bc:66:72:a8:71: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:98:3E:BA:31:DE:CA:B8:97:5F:EC:60:B6:27:CA:5D:09:25:D9:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e517b08-6a98-3c5f-a9bd-2aa320a4910e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.67.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:65:50:b5:ba:51:b6:f6:91:bb:5a:84:9c:3c:84:0d:49:e3: 37:b6:ce:7a:22:7a:46:2c:b9:41:ce:43:63:a6:b2:60:34:9a: d0:88:51:c5:20:e5:e3:4e:41:73:f6:12:1f:19:2c:ac:d9:8e: 39:bb:eb:2d:d2:08:74:3c:e0:13:ef:7f:d5:0a:9f:8a:72:8c: 80:29:60:b4:e8:de:4a:78:8b:c7:92:23:55:36:9b:28:d5:bf: 07:88:46:dd:ce:41:f5:e2:9e:d5:35:84:a2:0f:4e:34:f7:18: 25:91:ba:13:84:00:ea:c0:29:2a:59:8e:71:1e:a5:f7:84:50: 81:15:56:02:d0:e2:45:67:6e:0e:57:82:1a:5f:c0:f7:92:22: 14:d8:09:dc:9a:7a:d7:4a:e2:3a:2f:8d:4e:fa:96:46:b9:6e: 43:c5:f9:fa:4b:80:93:8a:df:12:90:62:b9:29:d8:84:86:38: c1:40:11:9f:6d:c6:99:cd:56:54:be:e7:1d:08:59:a0:01:a8: b9:85:de:7c:70:05:f0:14:bd:74:b9:1b:63:f0:43:fd:3e:d6: 25:91:25:32:5f:d4:ed:ae:b6:5c:4b:c6:8b:e8:a4:2e:ff:70: 5d:45:b0:68:96:13:f8:65:ae:76:0a:b9:24:89:81:42:7d:49: 02:b7:04:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XT6RzOWHitFlSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MWY2Y2VjNzUtN2U5Ni00YmEzLWJjY2ItMmZiM2VhMjk2YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmeddWltm6vpvsYwxcuoleuq+bJO9nKlpvsz bfWna35BDsE1i9OSar6VXzBCh+1EYzi7SH3gdtcsoX/hiu9JBjpHfhVG15WxXfzV +To8lEcshMygQHJ6AH3muCMYf63LtQ07zXHrL4x9pLjM3XPNgWl3sVS2TQOKDHQB FTLlKGFTISE4tj1WkgWrEAkY/mzL4CYW6d1spSqP6+FRJSF290FZK0Z7yFbovT7I YE/hQjaKgTEKl63lbOthlvyb1PpbARxYEwp6hCDJ+S9yj+ki9ok6yhVA31b5h/3j o6VIM7zMgP5Pg8/hlPqSBo41939gUsYfsW6/ifpkvGZyqHEAEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuYProx3sq4l1/sYLYnyl0JJdm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWU1MTdiMDgtNmE5OC0z YzVmLWE5YmQtMmFhMzIwYTQ5MTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0MpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5lULW6Ubb2kbtahJw8hA1J4ze2znoiekYsuUHOQ2OmsmA0mtCIUcUg 5eNOQXP2Eh8ZLKzZjjm76y3SCHQ84BPvf9UKn4pyjIApYLTo3kp4i8eSI1U2myjV vweIRt3OQfXintU1hKIPTjT3GCWRuhOEAOrAKSpZjnEepfeEUIEVVgLQ4kVnbg5X ghpfwPeSIhTYCdyaetdK4jovjU76lka5bkPF+fpLgJOK3xKQYrkp2ISGOMFAEZ9t xpnNVlS+5x0IWaABqLmF3nxwBfAUvXS5G2PwQ/0+1iWRJTJf1O2utlxLxovopC7/ cF1FsGiWE/hlrnYKuSSJgUJ9SQK3BIg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:08 2025 by rpki-client