$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad9acc4b-7844-3a9f-b3ac-b83fa4c840c4.roa File: ad9acc4b-7844-3a9f-b3ac-b83fa4c840c4.roa (raw, json) Hash identifier: 4Q80kqG6Iw1zklvS5zvhB2j8/QDpKxE28fi7BvR5jgY= Subject key identifier: 4A:6E:49:DA:1C:7D:B3:54:42:60:5E:9A:C9:24:00:B4:E1:A0:2A:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBE404AEBEAB3311E3E8C8880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad9acc4b-7844-3a9f-b3ac-b83fa4c840c4.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 20940 IP address blocks: 23.40.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:4a:eb:ea:b3:31:1e:3e:8c:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=4e8f6dae-9de5-4480-9f5a-23436ae5b86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:ac:40:20:54:84:78:18:79:c7:ff:3f:3e: ea:c3:bb:e5:f1:74:24:2f:ba:28:59:ba:cb:1f:1a: 24:17:48:32:f5:77:d0:9d:6a:d9:50:5b:37:ec:d7: 29:1b:4d:b4:47:e7:e5:d8:6f:99:f4:d0:1a:f0:2b: c5:94:87:7c:57:5c:cd:37:97:a0:1d:03:14:bd:ef: ab:d7:8e:33:19:79:b0:69:38:46:cd:05:6a:31:01: 80:aa:20:e9:a5:dc:21:54:e4:3d:a3:5d:5e:13:77: 7e:0e:63:68:40:33:c9:50:2e:28:06:21:e7:97:b9: 88:73:97:fb:32:d4:ce:2c:98:2c:af:4a:dc:a7:34: 35:dd:cf:cc:f7:67:c3:31:17:c4:d8:75:9c:c0:60: 32:73:c3:e4:61:b6:60:be:59:b7:f9:bf:ea:8f:74: ce:ff:ac:33:f4:f2:a5:59:47:4a:7a:c4:fd:ed:22: b0:86:66:e7:42:c9:91:31:a4:0f:6e:c1:28:97:99: 6c:2e:9e:41:77:af:c2:d1:40:24:62:1f:a2:f1:47: 36:18:10:d3:93:6c:6d:37:ce:62:09:85:a8:37:a0: d5:1d:d4:0c:31:a4:ed:d5:ff:02:93:ec:d4:fd:f2: 2b:73:bd:2a:d7:e0:a6:75:61:30:19:b8:54:cb:d0: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6E:49:DA:1C:7D:B3:54:42:60:5E:9A:C9:24:00:B4:E1:A0:2A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad9acc4b-7844-3a9f-b3ac-b83fa4c840c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.40.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:23:4e:b9:db:d1:90:f6:c0:a7:ea:1e:d0:5d:79:16:43:28: 88:71:d6:86:5a:de:d4:af:92:57:0d:a4:e3:dc:6c:9a:4f:f2: 00:82:32:44:e6:a4:2c:8c:35:ee:8d:7f:c5:51:1e:0c:8c:a9: 03:a5:1f:70:e9:81:70:1b:b6:ec:1e:fd:5b:de:b0:4b:d2:b5: 62:b2:42:76:3b:78:61:ea:d5:2f:c5:dc:05:9f:3b:60:54:20: 6f:ac:b7:29:a7:28:fe:57:01:f3:34:32:60:b2:25:36:e6:c9: f6:ed:a3:58:7b:35:c9:bd:55:a6:e2:78:84:ac:d8:be:db:dd: 01:ae:bc:da:dc:f3:bb:91:f3:d6:6f:6d:fb:da:2e:d9:1e:44: df:e8:96:ca:12:64:bb:f2:b4:2b:59:63:8c:60:56:bd:99:f1: 41:d9:8b:2a:81:64:11:78:78:e6:5c:93:8c:dd:c5:0b:cf:b4: 51:ba:ad:e3:2c:85:f5:1e:2d:32:4f:17:76:f6:da:09:d0:7e: 2b:23:23:69:f1:8d:74:4c:ec:d4:2a:4a:62:34:9b:b2:b7:f1: 85:55:aa:2c:d0:56:ca:eb:47:fc:2b:6b:d0:c9:f9:47:56:b6: ca:ca:27:3d:d2:3b:ae:5c:4a:43:6c:e8:2d:85:2f:ef:aa:6f: e3:c5:fe:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QErr6rMxHj6MiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NGU4ZjZkYWUtOWRlNS00NDgwLTlmNWEtMjM0MzZhZTViODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljKsQCBUhHgYecf/Pz7qw7vl8XQkL7ooWbrL HxokF0gy9XfQnWrZUFs37NcpG020R+fl2G+Z9NAa8CvFlId8V1zNN5egHQMUve+r 144zGXmwaThGzQVqMQGAqiDppdwhVOQ9o11eE3d+DmNoQDPJUC4oBiHnl7mIc5f7 MtTOLJgsr0rcpzQ13c/M92fDMRfE2HWcwGAyc8PkYbZgvlm3+b/qj3TO/6wz9PKl WUdKesT97SKwhmbnQsmRMaQPbsEol5lsLp5Bd6/C0UAkYh+i8Uc2GBDTk2xtN85i CYWoN6DVHdQMMaTt1f8Ck+zU/fIrc70q1+CmdWEwGbhUy9CDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpuSdocfbNUQmBemskkALThoCp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWQ5YWNjNGItNzg0NC0z YTlmLWIzYWMtYjgzZmE0Yzg0MGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyjEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIjTrnb0ZD2wKfqHtBdeRZDKIhx1oZa3tSvklcNpOPcbJpP8gCCMkTm pCyMNe6Nf8VRHgyMqQOlH3DpgXAbtuwe/VvesEvStWKyQnY7eGHq1S/F3AWfO2BU IG+stymnKP5XAfM0MmCyJTbmyfbto1h7Ncm9VabieISs2L7b3QGuvNrc87uR89Zv bfvaLtkeRN/olsoSZLvytCtZY4xgVr2Z8UHZiyqBZBF4eOZck4zdxQvPtFG6reMs hfUeLTJPF3b22gnQfisjI2nxjXRM7NQqSmI0m7K38YVVqizQVsrrR/wra9DJ+UdW tsrKJz3SO65cSkNs6C2FL++qb+PF/rQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:04:56 2025 by rpki-client