$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2828014-bcc2-3906-94bc-9c4be80c7e6d.roa File: b2828014-bcc2-3906-94bc-9c4be80c7e6d.roa (raw, json) Hash identifier: eIrBjYXPIcgdbx2gnwvKPOpJ3yvj32TN+vVh5r41CCs= Subject key identifier: 60:CB:F1:49:9D:1B:DC:31:C8:C4:8C:5A:21:DE:98:14:C8:2C:BD:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB727BA44E3A1DA78EA1F8CC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2828014-bcc2-3906-94bc-9c4be80c7e6d.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 20940 IP address blocks: 23.3.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:ba:44:e3:a1:da:78:ea:1f:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=b3c03c5a-d353-49cf-ae08-50eaacdc5862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:e2:34:1c:3c:df:83:ec:9e:aa:16:65:18: d7:6d:01:f6:0c:47:95:8a:fe:b7:51:b1:49:18:bf: c5:8e:1c:41:2d:4e:18:33:51:88:0a:d5:7d:29:71: 0a:f3:7e:bc:ca:d2:3e:da:c8:33:73:8f:83:c6:d5: 20:da:36:89:df:58:91:42:40:3c:85:18:bb:2e:e2: 4d:4b:7d:22:1b:82:f2:92:fd:4a:13:c9:52:7e:eb: 25:ed:7c:05:4a:e5:df:96:b2:ae:78:4e:c6:de:f1: 9c:70:61:30:51:72:4d:02:1e:2e:5e:23:29:10:14: 6a:c6:c8:f0:72:52:f3:da:f8:7e:fb:77:f5:18:7a: 30:62:3c:8d:86:5f:39:d5:11:a0:6d:3c:f3:62:ad: e9:ec:aa:9e:b9:f9:be:e6:22:bd:a8:9d:df:c3:7e: 1c:6e:84:d4:97:2a:8a:7e:b2:77:ec:a4:b9:a7:24: 2e:64:ba:87:2f:98:ff:cc:10:d8:f1:36:86:fb:c8: a5:0b:3b:b5:74:15:cd:46:20:30:c7:59:a3:d7:95: b2:ac:61:c7:65:02:95:e1:79:7e:9f:da:89:f1:36: 24:78:19:8b:26:51:d5:3f:9e:0c:7e:95:ab:2b:23: dd:fa:3c:53:5f:0b:e0:2b:db:2b:bb:df:c6:20:04: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:CB:F1:49:9D:1B:DC:31:C8:C4:8C:5A:21:DE:98:14:C8:2C:BD:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b2828014-bcc2-3906-94bc-9c4be80c7e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.3.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a6:b5:73:bc:59:6d:94:12:d9:90:64:13:7a:21:8e:5b:23: 77:9c:ba:d7:52:01:dd:a9:66:ac:b4:a2:0c:a1:78:79:26:37: 50:8b:ad:6b:35:f3:41:ac:ba:2c:10:9d:db:4f:b9:49:94:e9: 70:76:25:90:87:93:5f:59:8e:df:f1:0d:ae:df:98:09:ca:4f: a1:83:eb:bd:35:c1:05:05:1d:71:5a:ba:f6:f2:c8:12:6a:18: d5:37:9d:f9:e6:0c:cc:8c:d5:68:da:10:7d:03:4a:cd:2b:e0: 2d:7a:cd:1e:b8:ca:54:50:e6:98:04:e8:75:99:d6:73:6f:dc: eb:a7:58:e9:85:d3:57:62:0e:23:76:9c:77:ec:37:aa:85:0c: 6b:61:b1:56:b4:97:04:d4:c4:52:cf:5c:bf:a8:ce:a7:91:6d: 83:91:d4:68:f8:2f:c5:94:b3:2e:99:8a:ce:ef:5c:42:ea:25: af:36:c6:f3:fa:d6:83:6d:16:84:aa:a7:d9:21:0a:bf:2d:f5: 6f:31:2c:52:38:14:66:8d:9a:96:67:3d:93:49:91:bd:4a:e3: 8d:13:f0:6e:f3:ff:ac:56:29:e8:bd:5f:23:54:f5:ed:bd:20: 5f:33:b4:53:7b:20:63:67:17:f7:4d:51:a2:7c:43:76:64:dc: 08:ed:80:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7pE46HaeOofjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YjNjMDNjNWEtZDM1My00OWNmLWFlMDgtNTBlYWFjZGM1ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXjiNBw834PsnqoWZRjXbQH2DEeViv63UbFJ GL/FjhxBLU4YM1GICtV9KXEK8368ytI+2sgzc4+DxtUg2jaJ31iRQkA8hRi7LuJN S30iG4Lykv1KE8lSfusl7XwFSuXflrKueE7G3vGccGEwUXJNAh4uXiMpEBRqxsjw clLz2vh++3f1GHowYjyNhl851RGgbTzzYq3p7Kqeufm+5iK9qJ3fw34cboTUlyqK frJ37KS5pyQuZLqHL5j/zBDY8TaG+8ilCzu1dBXNRiAwx1mj15WyrGHHZQKV4Xl+ n9qJ8TYkeBmLJlHVP54MfpWrKyPd+jxTXwvgK9sru9/GIARdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDL8UmdG9wxyMSMWiHemBTILL02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI4MjgwMTQtYmNjMi0z OTA2LTk0YmMtOWM0YmU4MGM3ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAimtXO8WW2UEtmQZBN6IY5bI3ecutdSAd2pZqy0ogyheHkmN1CLrWs1 80GsuiwQndtPuUmU6XB2JZCHk19Zjt/xDa7fmAnKT6GD6701wQUFHXFauvbyyBJq GNU3nfnmDMyM1WjaEH0DSs0r4C16zR64ylRQ5pgE6HWZ1nNv3OunWOmF01diDiN2 nHfsN6qFDGthsVa0lwTUxFLPXL+ozqeRbYOR1Gj4L8WUsy6Zis7vXELqJa82xvP6 1oNtFoSqp9khCr8t9W8xLFI4FGaNmpZnPZNJkb1K440T8G7z/6xWKei9XyNU9e29 IF8ztFN7IGNnF/dNUaJ8Q3Zk3AjtgBg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:38 2025 by rpki-client