$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa File: b1fa73cb-5685-32ce-9338-5981442ff18c.roa (raw, json) Hash identifier: 2F74jCiIcQiFDg+sk432f9CCAw6ztmzc/77JB2q89rY= Subject key identifier: B2:42:2C:5E:4D:DE:CD:94:4F:8C:58:E3:F5:79:22:B3:97:93:09:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BBFA5B3122E2E0427E2F58640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 20940 IP address blocks: 23.72.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:b3:12:2e:2e:04:27:e2:f5:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=86683d09-139c-49ae-ac33-b954d6b3463e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2e:ff:20:8b:83:3f:09:95:1c:b4:ea:4d:1c: 91:cd:43:7c:7c:e1:8b:0d:77:87:58:6b:25:3c:92: ee:a6:3a:ba:aa:bb:ad:dc:e9:8c:4a:45:5a:bc:54: d4:16:b3:d0:50:f8:e5:c1:da:94:2c:81:c6:db:ba: bb:3f:c2:d8:a7:86:3d:ef:e4:9b:65:63:f5:4b:12: 1c:37:73:f6:ad:46:f2:cc:8e:dc:25:40:d3:7f:90: 8c:e0:c4:59:3e:67:9c:c4:65:3f:92:57:85:27:a5: 8b:e1:75:ca:e3:e9:b6:6e:cc:f1:b8:9b:54:e8:47: 20:c0:e1:9d:7e:74:26:a4:24:2b:2b:ce:74:18:36: 11:18:55:d3:9d:ab:44:55:2c:f7:89:4b:9e:ea:55: c8:a1:66:09:3b:35:8b:8f:ff:95:44:e0:6b:e6:eb: fa:f1:d7:92:13:c1:63:ad:40:77:c1:4c:f4:ef:84: 24:96:f1:0b:d2:ce:46:82:82:3c:d0:33:83:da:3a: fb:4b:34:cf:a1:01:8e:fb:0b:7c:00:7e:db:c8:d8: a7:d0:6b:15:8a:f3:7d:e7:38:95:8f:1a:56:31:8b: f0:88:98:28:2c:c6:67:c6:32:41:97:4f:dc:c8:d5: a9:4e:b5:cd:6a:18:35:d2:38:ad:83:a6:10:84:c9: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:42:2C:5E:4D:DE:CD:94:4F:8C:58:E3:F5:79:22:B3:97:93:09:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1fa73cb-5685-32ce-9338-5981442ff18c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.72.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e0:d8:ec:39:6f:bf:92:98:65:59:ae:87:57:6f:ca:40:ff: ff:f8:f4:fd:2f:b5:9d:b9:df:82:30:bd:21:cf:25:25:91:e7: 92:43:13:fd:78:a5:8a:82:88:6c:8f:e1:94:92:d0:58:43:17: 8a:e5:4c:a7:99:b8:c6:1b:55:6b:89:17:67:66:ae:1b:25:07: c4:77:51:bd:bb:ed:31:1a:c0:62:61:11:06:a2:c3:ef:f7:b0: d3:bc:e0:db:ff:98:73:fb:b6:ad:e2:3f:1c:94:30:c5:9e:b1: 01:ed:0e:25:45:97:83:c3:e2:6b:54:23:43:9d:a1:c5:47:bd: 06:30:3d:4d:39:a5:57:18:e3:bc:51:c5:dd:fe:15:fc:97:33: a5:20:b2:1b:6a:fa:aa:a3:73:2b:f5:25:9e:e2:d5:82:b7:79: 43:b9:9f:61:60:a8:98:e1:2f:6c:61:9a:c2:7a:76:42:2b:7f: 23:6f:b1:ca:8a:66:a2:e3:00:80:69:86:48:62:8d:40:6a:19: 6e:c2:59:ba:96:ae:66:1e:4b:6a:d1:a3:90:8a:22:2c:16:d7: 5f:6d:0e:56:ab:39:b0:49:93:2d:b7:c0:bf:d2:0a:14:51:ad: 7b:16:3d:c2:53:01:40:15:62:a0:01:78:75:5d:7f:d6:1c:ec: 58:aa:b8:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pbMSLi4EJ+L1hkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ODY2ODNkMDktMTM5Yy00OWFlLWFjMzMtYjk1NGQ2YjM0NjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky7/IIuDPwmVHLTqTRyRzUN8fOGLDXeHWGsl PJLupjq6qrut3OmMSkVavFTUFrPQUPjlwdqULIHG27q7P8LYp4Y97+SbZWP1SxIc N3P2rUbyzI7cJUDTf5CM4MRZPmecxGU/kleFJ6WL4XXK4+m2bszxuJtU6EcgwOGd fnQmpCQrK850GDYRGFXTnatEVSz3iUue6lXIoWYJOzWLj/+VROBr5uv68deSE8Fj rUB3wUz074QklvEL0s5GgoI80DOD2jr7SzTPoQGO+wt8AH7byNin0GsVivN95ziV jxpWMYvwiJgoLMZnxjJBl0/cyNWpTrXNahg10jitg6YQhMmURwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJCLF5N3s2UT4xY4/V5IrOXkwl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjFmYTczY2ItNTY4NS0z MmNlLTkzMzgtNTk4MTQ0MmZmMThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF0hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrg2Ow5b7+SmGVZrodXb8pA///49P0vtZ2534IwvSHPJSWR55JDE/14 pYqCiGyP4ZSS0FhDF4rlTKeZuMYbVWuJF2dmrhslB8R3Ub277TEawGJhEQaiw+/3 sNO84Nv/mHP7tq3iPxyUMMWesQHtDiVFl4PD4mtUI0OdocVHvQYwPU05pVcY47xR xd3+FfyXM6Ugshtq+qqjcyv1JZ7i1YK3eUO5n2FgqJjhL2xhmsJ6dkIrfyNvscqK ZqLjAIBphkhijUBqGW7CWbqWrmYeS2rRo5CKIiwW119tDlarObBJky23wL/SChRR rXsWPcJTAUAVYqABeHVdf9Yc7FiquCg= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:20 2025 by rpki-client